Problems Again

Remote Saxon · 05-18-2005, 05:42 AM

Hello everyone. Since technology is going down the drain, I'm experiencing new problems.

1. I keep getting this "ads1.revenue.net" ad, I don't know how to get rid of that.
2. My Search Companion file is somehow missing from my computer, so I can't search for anything on my computer, which leads to:
3. Probably not in ya'lls area, but Yahoo Messenger isn't working. When I try to re-install it, it ways "ymsg_~.exe is experiencing problems".

Here's my HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 6:37:54 AM, on 5/18/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\umpfile.exe
C:\WINDOWS\System32\untorts.exe
C:\Program Files\CxtPls\CxtPls.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackTHis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\cfgmgr52.dll
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dll
O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe
O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitegsx32.exe
O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe
O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\mmvpvm.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [r7nX3pl] untorts.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [aw47RfJme] umpfile.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{29DF46C9-A4BC-471F-B55B-362BE2954472}: NameServer = 151.164.17.201 151.164.11.201
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Thanks for the help, to whomever replies to this.

Oh, and why is it that Mozilla Firefox doesn't block popups? Its not blocking anything for me (mostly the ads1.revenue popups)

~ RS

tinag · 05-18-2005, 06:32 AM

Hi, RS. Sorry to see you back under these circumstances, but welcome.

I'm currently reviewing your log under the supervision of an expert analyst. I'll be back with a fix for your problem ASAP, and I ask your patience while it's being composed and checked.

We recommend that you subscribe to this thread so you'll be notified as soon as we post your fix. To do this, at the top of your original post, click Thread Tools and then Subscribe to this thread; on the next page, make sure "Instant notification by email" is selected, then click Add subscription.

Thanks.

tinag · 05-19-2005, 06:26 AM

Hello again.

Before proceeding, please print this page or copy it to Notepad to help you carry out the instructions. If you have questions about any instruction, please ask before performing it.

If you can't download one of the below programs by simply clicking its link, please try right-clicking that link instead. Then click Save Target As.. and save the file to your computer.

In response to your questions, the fix below should take care of (or begin to take care of) problem #1. Can't say anything about questions 2 or 3 yet. (If you go to Start > Search > For Files and Folders.., you get an error message? If it's simply a missing file, it may possibly be as simple as replacing it from your install disk, but that's definitely a question for the XP boards if our fix doesn't solve the problem.)

Now, the fix..

I'm not sure how many of these programs you've kept around, so I'll give you all the download instructions again.

Download and install CleanUp (alternate link).
Download KillBox.
Download Rkfiles.zip and UNZIP the contents to a permanent folder on your desktop.
Download the attachment remv3.zip from this page. Make a folder on the root drive C:\ and unzip the files into it.
Download the Elitebar Removal Tool. Unzip it, but don't run it yet (it won't work until you're in Safe Mode).

Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No.

Go to Start > Run, type services.msc, and click OK. Look for hcijyao. Double-click on it. Click the Stop button, and under Startup type, choose Disabled.

Reboot your system into Safe Mode by repeatedly tapping the F8 key until the menu appears, then selecting Safe Mode.

Run the Elitebar Removal Tool.

Open HijackThis. Click Config > Misc. Tools > Open process manager. If they still exist -- and they might not -- select the following items one at a time and click Kill process for each:

C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\WINDOWS\System32\umpfile.exe
C:\WINDOWS\System32\untorts.exe
C:\Program Files\CxtPls\CxtPls.exe

Click Start > (Settings >) Control Panel > Add/Remove Programs. If the following programs exist -- and they might not -- uninstall them:

AutoUpdate
CxtPls

Open Hijack This and click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any):

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\cfgmgr52.dll
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dll
O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe
O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitegsx32.exe
O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe
O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\mmvpvm.exe
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [r7nX3pl] untorts.exe
O4 - HKCU\..\Run: [aw47RfJme] umpfile.exe
O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe

Please close all other windows, including browsers, then click Fix checked.

If they still exist, delete the following files indicated in RED and folders indicated in BLUE.

C:\WINDOWS\cfgmgr52.dll
C:\WINDOWS\VCMnet11.exe
C:\windows\system32\elitegsx32.exe if there are other "elite*.exe" files, delete those as well
C:\WINDOWS\System32\fkndu.dll
C:\WINDOWS\system32\hcijyao.exe
C:\WINDOWS\System32\mmvpvm.exe
C:\WINDOWS\System32\ps1.exe
C:\WINDOWS\System32\umpfile.exe
C:\WINDOWS\System32\untorts.exe

C:\Program Files\AutoUpdate
C:\Program Files\CxtPls

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click Yes.

Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). This is very important, as the following must be done in Safe Mode!

Double-click rkfiles.bat. It will scan for a while, so please be patient. Wait until the DOS window closes, then open the C:\log.txt it created and rename it log1.txt. This is important: both this tool and the next one use log.txt as the logfile name, so if you don't rename this one, it'll be overwritten when you run the next tool, and you don't want that!

Next, open the folder where you unzipped the remv3.zip files, and double-click the rem.bat file. Let it run. It will delete the files and remove the infection, and then make a log of the files it finds. The log files will be C:\log.txt and bad1.txt.

Reboot back into normal mode.

In your next post, please include a fresh HijackThis log and the contents of both the log.txt and log1.txt (from the rkfiles and rem.bat scans), and let's see how much progress we've made.

Remote Saxon · 05-19-2005, 07:00 PM

Alright, I did everything you asked thus far, and here's what I have:

Logfile of HijackThis v1.99.1
Scan saved at 7:58:14 PM, on 5/19/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{29DF46C9-A4BC-471F-B55B-362BE2954472}: NameServer = 151.164.17.201 151.164.11.201
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Here's the first log:

The batch is run from -- C:\remv3

Files Found.................
----------------------------------------

Files Not deleted.................
----------------------------------------

Merging registry entries
-----------------------------------------------------------------
The Registry Entries Found...
-----------------------------------------------------------------

Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting
-----------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is 20E0-FAEF

Directory of C:\WINDOWS\system32

msi.dll
Finished

And now log1:

The batch is run from -- C:\remv3

Files Found.................
----------------------------------------

Files Not deleted.................
----------------------------------------

Merging registry entries
-----------------------------------------------------------------
The Registry Entries Found...
-----------------------------------------------------------------

Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting
-----------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is 20E0-FAEF

Directory of C:\WINDOWS\system32

msi.dll
Finished

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINDOWS\system32\elitegsx32.exe: FSG!
C:\WINDOWS\system32\eliteuxx32.exe: FSG!
C:\WINDOWS\system32\elitevbs32.exe: FSG!
C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213
C:\WINDOWS\system32\DivX.dll: PEC2

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
C:\WINDOWS\tsc.exe: UPX!
C:\WINDOWS\vsapi32.dll: UPX!t4
Finished
bye

Thanks for the help so far.

~ RS

tinag · 05-20-2005, 08:12 AM

Well, that's a little better.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No.

Go to Start > Run, type services.msc, and click OK. Look for hcijyao. Double-click on it. Click the Stop button (if it's available), and under Startup type, make sure it's still set to Disabled.

Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode.

Open Hijack This. On the main screen, click Open the misc tools. Then click Delete an NT Service. In the box that pops up, paste in:

hcijyao.exe

and click OK. Under Other Stuff in the bottom right-hand corner, click Back to return to the HJT scanning screen.

Now click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any):

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe

Please close all other windows, including browsers, then click Fix checked.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No.

Run Killbox (one of the programs you downloaded in the last fix). You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist:

C:\WINDOWS\system32\elitegsx32.exe
C:\WINDOWS\system32\eliteuxx32.exe
C:\WINDOWS\system32\elitevbs32.exe
C:\WINDOWS\System32\fkndu.dll
C:\WINDOWS\system32\hcijyao.exe

Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). This is very important, as the following must be done in Safe Mode!

Now you need to run rkfiles.bat and rem.bat again. You should probably delete or move the logs you created with these tools last time around so there's no confusion between the old and new ones:

Double-click rkfiles.bat. It will scan for a while, so please be patient. Wait until the DOS window closes, then open the C:\log.txt it created and rename it log1.txt. This is important: both this tool and the next one use log.txt as the logfile name, so if you don't rename this one, it'll be overwritten when you run the next tool, and you don't want that!

Next, open the folder where you unzipped the remv3.zip files, and double-click the rem.bat file. Let it run. It will delete the files and remove the infection, and then make a log of the files it finds. The log files will be C:\log.txt and bad1.txt.

Reboot back to normal mode.

In your next post, please include a fresh HijackThis log and the contents of both the log.txt and log1.txt (from the rkfiles and rem.bat scans).

Remote Saxon · 05-20-2005, 04:38 PM

I did everything you requested, with one major problem: I can't run
services.msc. The file is there, but the computer won't let me run it
for some reason.

All that set aside, here's the new HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 5:34:11 PM, on 5/20/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKLM\..\Run: [fknduc] C:\WINDOWS\System32\fknduc.exe
O4 - HKLM\..\Run: [guarnset] C:\WINDOWS\System32\guarnset.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Here is the rkfiles log:

The batch is run from -- C:\remv3

Files Found.................
----------------------------------------

Files Not deleted.................
----------------------------------------

Merging registry entries
-----------------------------------------------------------------
The Registry Entries Found...
-----------------------------------------------------------------

Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting
-----------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is 20E0-FAEF

Directory of C:\WINDOWS\system32

msi.dll
Finished

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213
C:\WINDOWS\system32\DivX.dll: PEC2

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
C:\WINDOWS\tsc.exe: UPX!
C:\WINDOWS\vsapi32.dll: UPX!t4
Finished
bye

Finally, the remv3 log:

The batch is run from -- C:\remv3

Files Found.................
----------------------------------------

Files Not deleted.................
----------------------------------------

Merging registry entries
-----------------------------------------------------------------
The Registry Entries Found...
-----------------------------------------------------------------

Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting
-----------------------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is 20E0-FAEF

Directory of C:\WINDOWS\system32

msi.dll
Finished

Again, thanks for you help so far. I don't know if services.msc can be
fixed though :(

~ RS

tinag · 05-21-2005, 08:20 AM

And I don't know about services.msc, either. Getting rid of the malware might solve it, or else recopying files from your install disk later might also do it. Along with some of the other issues, that's a question for the XP board after we get rid of the bad guys here.

In any event, the service is not showing up in the HJT log, so that's something.

We're going to take a stab at the two baddies currently showing in your HJT log. But we're also going to use some deeper-scanning tools to see what might be hidden.

Download the following three programs and install/unzip only as instructed -- do not run any of them yet:
1. Download Mwav virus checker -- use link 3.
2. Right-click on http://www.silentrunners.org/Silent%20Runners.vbs, choose Save As.. (or Save Target As..), and save it to your desktop.
3. Download StartDreck. (If you have trouble downloading it, right-click on the link, select Save Target As.. and select a location to save it.) Unzip into its own folder.

Run an online virus scan at Trend Micro or RAV Antivirus. Please select the “autoclean” option if using Trend Micro. If you don't have high-speed Internet access, plan on this taking a while.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click Yes.

Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode.

Open HijackThis and click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any):

O4 - HKLM\..\Run: [fknduc] C:\WINDOWS\System32\fknduc.exe
O4 - HKLM\..\Run: [guarnset] C:\WINDOWS\System32\guarnset.exe

Please close all other windows, including browsers, then click Fix checked.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No.

Run Killbox. You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist:

C:\WINDOWS\System32\fknduc.exe
C:\WINDOWS\System32\guarnset.exe

Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode).

Now we're going to do an mwav scan. Before running this tool, please empty any Quarantine folder in your antivirus programs; if you use Spybot, purge all recovery items in the program.
1. Save the mwav tool to a folder.
2. Double-click the Mwav.exe file. This is a standalone tool and NOT just a virus checker, so it won't install anything.
3. Select all local drives and scan all files. If you see a setting that will allow you to exclude registry settings, please set it so that you don't get registry results. Then press SCAN. NOTE: If you see a prompt that a virus was found and you need to purchase the product to remove the malware, just close the prompt and let the tool continue scanning. We are not going to use this to remove anything, only to ID the bad files.
4. When the scan is completed, it will display anything found in the lower pane.
5. In the Virus Log Information Pane, left-click and highlight all the information in the Lower pane. Then use CTRL and C on your keyboard to copy everything found in the lower pane, open a new Notepad file, and paste it in. Then save the Notepad file.
6. Copy the saved information into your next post.

Reboot into normal mode.

Make sure you disable any programs that may block/disable scripts (like your anti-virus or anti-spyware programs -- if you're going to disable these, then disconnect from the Internet for this step). Double-click Silent Runners to run it. This will take a few minutes, and will create a file called "Startup Programs" followed by your computer name and current date. Open up that file and post all its contents here in your next post.

Now for a StartDreck log. Double-click on it to start the program:
Click Config and Mark All. Then uncheck the following boxes only:
System/Running Process -> List Modules
System/Drivers -> NT Services
System/Drivers -> NT Kernel- and FS-drivers
Click OK.

Click Save and select the location to save the log file (default is the same folder as the application). When it's done, post the log in this thread. These logs can be long, so you may have to stretch across a couple of posts -- that's fine.

So, in your next post, we need to see the logs from mwav, Silent Runners, and StartDreck, and a fresh HJT log (run it last, in normal mode).

Remote Saxon · 05-21-2005, 11:06 AM

Here are the first three logfiles, starting with HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 11:39:39 AM, on 5/21/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{29DF46C9-A4BC-471F-B55B-362BE2954472}: NameServer = 151.164.17.201 151.164.11.201
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Now, the mwav log:

File C:\WINDOWS\System32\rrbnbrc.exe infected by "Trojan-Downloader.Win32.Qoologic.i" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\HLIVEEP.SYS infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdRotator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdDestroyer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdDestroyer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdDestroyer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdDestroyer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\xscan53.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\msxml3r.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\msxml3a.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\xscan53.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{068B0800-718C-11d0-8B1A-00A0C91BC90E}" refers to invalid object ""C:\Program Files\NetMeeting\nmcom.dll"". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{06CE0C3A-8917-11D1-AA78-00C04FC9B202}" refers to invalid object "C:\PROGRA~1\NETMEE~1\rrcm.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{07970B30-A4DA-11D2-B724-00104BC51339}" refers to invalid object "C:\Program Files\NetMeeting\confmrsl.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{079aa557-4a18-424a-8eee-e39f0a8d41b9}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{085C06A0-3CAA-11d0-A00E-00A024A85A2C}" refers to invalid object ""C:\Program Files\NetMeeting\nac.dll"". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686AA-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686AE-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686AF-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686B3-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686B4-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686B8-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686B9-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686BD-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686BE-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686C2-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686C3-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0BA686C7-F7D3-101A-993E-0000C0EF6F5E}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1745EDC4-CDCE-4e20-B91E-312F0C2AD16B}" refers to invalid object "C:\Program Files\MSN\MSNCoreFiles\msnmetal.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{28073C25-7252-4504-B8D6-5E3276C708BB}" refers to invalid object "C:\Program Files\8a4vu79r\8a4vu79r.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2933BF90-7B36-11d2-B20E-00C04F983E60}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2933BF91-7B36-11d2-B20E-00C04F983E60}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2933BF94-7B36-11d2-B20E-00C04F983E60}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2B7E6AA9-C4FA-4951-815B-4AFE39D81453}" refers to invalid object "C:\Program Files\Messenger\msgsc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C}" refers to invalid object "C:\PROGRA~1\AWS\WEATHE~1\MINIBU~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{2F155EE4-C332-11CD-B23C-0000C0058192}" refers to invalid object "C:\WINDOWS\System32\threed32.ocx". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3124c396-fb13-4836-a6ad-1317f1713688}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{373984C9-B845-449B-91E7-45AC83036ADE}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{379E501F-B231-11d1-ADC1-00805FC752D8}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3d813dfe-6c91-4a4e-8f41-04346a841d9c}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3E607AD4-75E5-4328-A849-EFD426D82F4C}" refers to invalid object "C:\WINDOWS\System32\dobh.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{3e784a01-f3ae-4dc0-9354-9526b9370eba}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4419DD31-28A5-11d2-AE08-0080C7337EA1}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{48123bc4-99d9-11d1-a6b3-00c04fd91555}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4C171D40-8277-11D5-AD55-00010333D0AD}" refers to invalid object "C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4dd441ad-526d-4a77-9f1b-9841ed802fb0}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{550dda30-0541-11d2-9ca9-0060b0ec3d39}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{57B4B693-2388-11d3-8E39-0080C7ACC199}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5E05D214-DD15-47cd-B5BC-65FAC825D3D0}" refers to invalid object "C:\Program Files\MSN\MSNCoreFiles\msnmetal.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{68E9290B-DA62-411C-B2E3-587082143AB0}" refers to invalid object "C:\WINDOWS\System32\wldr.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{79858DAE-2BCA-4FC4-B3DA-247DFEB0CB6F}" refers to invalid object "C:\Program Files\Movie Maker\wmmfilt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7A6B6971-0EEE-41A5-9723-9B5C18CD23CE}" refers to invalid object "C:\WINDOWS\System32\mpaa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7DB78C2B-C4EB-4A86-A78D-96C340671808}" refers to invalid object "C:\Program Files\c1cr7thw\c1cr7thw.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7E3FCEA1-31B4-11d2-AE1F-0080C7337EA1}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}" refers to invalid object "fde.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8ED14CC0-7A1F-11d0-92F6-00A0C922E6B2}" refers to invalid object ""C:\Program Files\NetMeeting\nac.dll"". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8F5D3CD1-6A0C-4549-9090-588B00A45DB4}" refers to invalid object "C:\Program Files\6t56oni5\6t56oni5.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9043febf-70a6-4ba6-b02a-b68ab3126579}" refers to invalid object "C:\WINDOWS\System32\ppaka.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{989D1DC0-B162-11d1-B6EC-D27DDCF9A923}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{afb40ffd-b609-40a3-9828-f88bbe11e4e3}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{afba6b42-5692-48ea-8141-dc517dcf0ef1}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{BC001089-B197-4EF0-AD65-FFA28E689DF0}" refers to invalid object "C:\Program Files\kxakzuqs\kxakzuqs.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C2919CFE-F8E9-4F72-A397-0B0D3CCE65BD}" refers to invalid object "C:\WINDOWS\System32\dobh.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CFC399AF-D876-11d0-9C10-00C04FC99C8E}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{d2423620-51a0-11d2-9caf-0060b0ec3d39}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E4B38BE4-87C8-4992-8729-D7D9A8699F9C}" refers to invalid object "C:\WINDOWS\System32\mpaa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ED8C108E-4349-11D2-91A4-00C04F7969E8}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EE4AFF02-793B-4C2F-A964-E25DFB5DE157}" refers to invalid object "C:\WINDOWS\System32\mpaa.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F3A614DC-ABE0-11d2-A441-00C04F795683}" refers to invalid object "C:\Program Files\Messenger\msgsc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F4B02535-12AC-11D1-9282-0000C05264B7}" refers to invalid object "C:\PROGRA~1\BMCENT~1\dtengine.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f19-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f27-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f31-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f32-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f33-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f34-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f35-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f36-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f37-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f39-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f3f-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f40-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f5078f41-c551-11d3-89b9-0000f81fe221}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6B9C580-F60F-479F-886D-A01D09175673}" refers to invalid object "C:\Program Files\Movie Maker\wmmfilt.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6D90F11-9C73-11D3-B32E-00C04F990BB4}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6D90F12-9C73-11D3-B32E-00C04F990BB4}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6D90F14-9C73-11D3-B32E-00C04F990BB4}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F6D90F16-9C73-11D3-B32E-00C04F990BB4}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{fc220ad8-a72a-4ee8-926e-0b7ad152a020}" refers to invalid object "%SystemRoot%\system32\msxml3.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FE48704D-DC92-4F10-91DE-C676E25624CF}" refers to invalid object "C:\Program Files\Movie Maker\wmmfilt.dll". Action Taken: No Action Taken.
Entry "HKCR\AUNBHO.AUN" refers to invalid object "{59F12660-2B92-4554-98F9-87295AD8A0CE}". Action Taken: No Action Taken.
Entry "HKCR\BMan.BManager" refers to invalid object "{C7B44349-9060-4D07-8CAD-80036C755A8D}". Action Taken: No Action Taken.
Entry "HKCR\BMan.cIExplorer" refers to invalid object "{408A9E15-A481-4FD1-9C2E-D03F7FC50BE6}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken.
Entry "HKCR\Context.test" refers to invalid object "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}". Action Taken: No Action Taken.
Entry "HKCR\Context.test.1" refers to invalid object "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}". Action Taken: No Action Taken.
Entry "HKCR\MediaPass.Installer" refers to invalid object "{1E5E0D38-214B-4085-AD2A-D2290E6A2D2C}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPShell.HWEventHandler" refers to invalid object "{9B186A8F-F520-4eeb-B553-118304AC46C5}". Action Taken: No Action Taken.
Entry "HKCR\WMPShell.HWEventHandler.1" refers to invalid object "{9B186A8F-F520-4eeb-B553-118304AC46C5}". Action Taken: No Action Taken.
File C:\WINDOWS\cmiirln.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File C:\WINDOWS\pgntcoiv.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File C:\WINDOWS\System32\cxtpls_loader.exe infected by "Trojan-Downloader.Win32.Apropo.ab" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\dist001.exe infected by "Trojan-Downloader.Win32.VB.eu" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\fkndud.exe tagged as "not-a-virus:AdWare.Adstart.b". Action Taken: No Action Taken.
File C:\WINDOWS\System32\fknduf.exe tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken.
File C:\WINDOWS\System32\GSM3-0511.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\hfauyba.exe infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\hhajefl.vxd infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\hhalecn.exe infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\hhiqygg.dll infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\HookPopup.dll tagged as "not-a-virus:AdWare.DealHelper.ab". Action Taken: No Action Taken.
File C:\WINDOWS\System32\installer_MARKETING18.exe infected by "Trojan-Dropper.Win32.Agent.hl" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\n.dll infected by "Trojan.Win32.StartPage.yq" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\System32\Netkwr.exe tagged as "not-a-virus:AdWare.DealHelper.ab". Action Taken: No Action Taken.
File C:\WINDOWS\System32\PopOops.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\System32\PopOops2.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\System32\SWLAD1.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\System32\SWLAD2.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\!Submit\fknduc.exe tagged as "not-a-virus:AdWare.Adstart.h". Action Taken: No Action Taken.
File C:\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\avalanche.jar-48027380-5cfa0ac8.zip tagged as not-a-virus:JavaClass.FormURLToy. No Action Taken.
File C:\Program Files\HijackThis\backups\backup-20050519-191441-920.dll tagged as "not-a-virus:AdWare.Adstart.i". Action Taken: No Action Taken.
File C:\Program Files\HijackThis\backups\backup-20050520-165812-980.dll tagged as "not-a-virus:AdWare.Adstart.i". Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\38EE0CA6 tagged as "not-a-virus:AdWare.ToolBar.Perez.a". Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\38EE0CA6.exe infected by "Trojan.Win32.StartPage.nk" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\38F236A2.tmp infected by "Trojan-Downloader.Win32.Small.amq" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\5E087CB7.exe infected by "Trojan-Dropper.Win32.Small.mr" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\659A29C4 infected by "Trojan-Dropper.Win32.Small.mr" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\cmiirln.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File C:\WINDOWS\pgntcoiv.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File C:\WINDOWS\system32\Cache\dist006.exe infected by "Trojan-Downloader.Win32.VB.eu" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\Cache\EDow_AS2.exe infected by "Trojan-Dropper.Win32.Agent.hl" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\Cache\EDow_AS2_r.exe infected by "Trojan-Downloader.Win32.QDown.v" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\Cache\install_ID6.exe tagged as "not-a-virus:AdWare.Adstart.i". Action Taken: No Action Taken.
File C:\WINDOWS\system32\Cache\setup.exe infected by "Trojan.Win32.VB.tq" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\cxtpls_loader.exe infected by "Trojan-Downloader.Win32.Apropo.ab" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\dist001.exe infected by "Trojan-Downloader.Win32.VB.eu" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\fkndud.exe tagged as "not-a-virus:AdWare.Adstart.b". Action Taken: No Action Taken.
File C:\WINDOWS\system32\fknduf.exe tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken.
File C:\WINDOWS\system32\GSM3-0511.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hfauyba.exe infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hhajefl.vxd infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hhalecn.exe infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\hhiqygg.dll infected by "Trojan.Win32.Painwin.a" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\HookPopup.dll tagged as "not-a-virus:AdWare.DealHelper.ab". Action Taken: No Action Taken.
File C:\WINDOWS\system32\installer_MARKETING18.exe infected by "Trojan-Dropper.Win32.Agent.hl" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\n.dll infected by "Trojan.Win32.StartPage.yq" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\Netkwr.exe tagged as "not-a-virus:AdWare.DealHelper.ab". Action Taken: No Action Taken.
File C:\WINDOWS\system32\PopOops.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\system32\PopOops2.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\system32\SWLAD1.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.
File C:\WINDOWS\system32\SWLAD2.dll tagged as "not-a-virus:AdWare.VirtualBouncer.g". Action Taken: No Action Taken.

Finally, after editing the file so that you can read it, the Silent Runners log:

"Silent Runners.vbs", revision 36, http://www.silentrunners.org/
Operating System: Windows XP
Output limited to non-default values, except where indicated by "{++}"

Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"H/PC Connection Agent" = ""C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"IgfxTray" = "C:\WINDOWS\System32\igfxtray.exe" ["Intel Corporation"]
"HotKeysCmds" = "C:\WINDOWS\System32\hkcmd.exe" ["Intel Corporation"]
"SunJavaUpdateSched" = "C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe" ["Sun Microsystems, Inc."]
"WorksFUD" = "C:\Program Files\Microsoft Works\wkfud.exe" ["Microsoft® Corporation"]
"Microsoft Works Portfolio" = "C:\Program Files\Microsoft Works\WksSb.exe /AllUsers" ["Microsoft® Corporation"]
"Microsoft Works Update Detection" = "C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" ["Microsoft® Corporation"]
"NAV Agent" = "C:\PROGRA~1\NORTON~1\navapw32.exe" ["Symantec Corporation"]
"SSC_UserPrompt" = "C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" ["Symantec Corporation"]
"AdaptecDirectCD" = ""C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"" ["Roxio"]
"Ulead AutoDetector" = "C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe" ["Ulead Systems, Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Display Panning CPL Extension"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]
"{5E44E225-A408-11CF-B581-008029601108}" = "Adaptec DirectCD Shell Extension"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\Roxio\EASYCD~1\DirectCD\Shellex.dll" ["Roxio"]
"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\Audiodev.dll" [MS]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! igfxcui\DLLName = "igfxsrvc.dll" ["Intel Corporation"]

Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]

Enabled Wallpaper and Active Desktop:
-------------------------------------

Active Desktop is disabled.

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\Owner\My Documents\My Pictures\Bands\Rainbow.bmp"

Startup items in "Owner" & "All Users" startup folders:
-------------------------------------------------------

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office10\OSA.EXE -b -l" [MS]

Enabled Scheduled Tasks:
------------------------

"Norton AntiVirus - Scan my computer" -> launches: "C:\PROGRA~1\NORTON~1\NAVW32.exe /task:C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec\NORTON~1\Tasks\mycomp.sca" ["Symantec Corporation"]
"Symantec NetDetect" -> launches: "C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE" ["Symantec Corporation"]

Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 15
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05

Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}\
"ButtonText" = "Create Mobile Favorite"
"CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft ActiveSync\INETREPL.DLL" [MS]

{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}\
"MenuText" = "Create Mobile Favorite..."
"CLSIDExtension" = "{2EAF5BB0-070F-11D3-9307-00C04FAE2D4F}"
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft ActiveSync\INETREPL.DLL" [MS]

{AC9E2541-2814-11D5-BC6D-00B0D0A1DE45}\
"ButtonText" = "AIM"
"Exec" = "C:\Program Files\AIM\aim.exe" ["America Online, Inc."]

{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}\
"ButtonText" = "Yahoo! Messenger"
"MenuText" = "Yahoo! Messenger"
"Exec" = "C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe" ["Yahoo! Inc."]

Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\System32\wdfmgr.exe" [MS]

----------
This report excludes default entries except where indicated.
To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
----------

~ RS

tinag · 05-22-2005, 11:29 AM

Well, I know I asked for a StartDreck log as well, but mwav has already given us plenty to work with, so I'm going to respond to what you've sent me so far. If you haven't already run StartDreck, you can do that after you do the following -- I'm putting in the instructions at the end of this fix as if that's the case.

Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode.

Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No.

Delete this folder: C:\WINDOWS\system32\Cache

Run Killbox. You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist:

C:\!Submit\fknduc.exe
C:\WINDOWS\cmiirln.exe
C:\WINDOWS\pgntcoiv.exe
C:\WINDOWS\System32\cxtpls_loader.exe
C:\WINDOWS\System32\dist001.exe
C:\WINDOWS\System32\fkndud.exe
C:\WINDOWS\System32\fknduf.exe
C:\WINDOWS\System32\GSM3-0511.exe
C:\WINDOWS\System32\hfauyba.exe
C:\WINDOWS\System32\hhajefl.vxd
C:\WINDOWS\System32\hhalecn.exe
C:\WINDOWS\System32\hhiqygg.dll
C:\WINDOWS\SYSTEM32\HLIVEEP.SYS
C:\WINDOWS\System32\HookPopup.dll
C:\WINDOWS\System32\installer_MARKETING18.exe
C:\WINDOWS\System32\n.dll
C:\WINDOWS\System32\Netkwr.exe
C:\WINDOWS\System32\PopOops.dll
C:\WINDOWS\System32\PopOops2.dll
C:\WINDOWS\System32\rrbnbrc.exe
C:\WINDOWS\System32\SWLAD1.dll
C:\WINDOWS\System32\SWLAD2.dll

Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode).

Now we're going to do a followup mwav scan. Before running this tool, please empty any Quarantine folder in your antivirus programs; if you use Spybot, purge all recovery items in the program.
1. Save the mwav tool to a folder.
2. Double-click the Mwav.exe file. This is a standalone tool and NOT just a virus checker, so it won't install anything.
3. Select all local drives and scan all files. If you see a setting that will allow you to exclude registry settings, please set it so that you don't get registry results. Then press SCAN. NOTE: If you see a prompt that a virus was found and you need to purchase the product to remove the malware, just close the prompt and let the tool continue scanning. We are not going to use this to remove anything, only to ID the bad files.
4. When the scan is completed, it will display anything found in the lower pane.
5. In the Virus Log Information Pane, left-click and highlight all the information in the Lower pane. Then use CTRL and C on your keyboard to copy everything found in the lower pane, open a new Notepad file, and paste it in. Then save the Notepad file.
6. Copy the saved information into your next post.

Reboot into normal mode.

Now for a StartDreck log. Double-click on it to start the program:
Click Config and Mark All. Then uncheck the following boxes only:
System/Running Process -> List Modules
System/Drivers -> NT Services
System/Drivers -> NT Kernel- and FS-drivers
Click OK.

Click Save and select the location to save the log file (default is the same folder as the application). When it's done, post the log in this thread. These logs can be long, so you may have to stretch across a couple of posts -- that's fine.

So, in your next post, we need to see the logs from mwav and StartDreck, and a fresh HJT log (run it last, in normal mode). How's the computer doing at this point?

Remote Saxon · 05-22-2005, 12:27 PM

StartDreck (build 2.1.7 public stable) - 2005-05-22 @ 13:22:39 (GMT -07:00)
Platform: Windows XP (Win NT 5.1.2600 )
Internet Explorer: 6.0.2600.0000
Logged in as Owner at ALEJANDR-O9VFCI

»Registry
»Run Keys
»Current User
»Run
*H/PC Connection Agent="C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
»RunOnce
»Default User
»Run
»RunOnce
»Local Machine
»Run
*IgfxTray=C:\WINDOWS\System32\igfxtray.exe
*HotKeysCmds=C:\WINDOWS\System32\hkcmd.exe
*SunJavaUpdateSched=C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
*WorksFUD=C:\Program Files\Microsoft Works\wkfud.exe
*Microsoft Works Portfolio=C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
*Microsoft Works Update Detection=C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
*NAV Agent=C:\PROGRA~1\NORTON~1\navapw32.exe
*SSC_UserPrompt=C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
*AdaptecDirectCD="C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
*Ulead AutoDetector=C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
+OptionalComponents
+MSFS
*Installed=1
+MAPI
*Installed=1
*NoChange=1
+MAPI
*Installed=1
*NoChange=1
»RunOnce
»RunServices
»RunServicesOnce
»RunOnceEx
»RunServicesOnceEx
»File Associations (CR)
+.bat
*batfile="%1" %*
+.com
*comfile="%1" %*
+.exe
*exefile="%1" %*
+.hta
*htafile=C:\WINDOWS\System32\mshta.exe "%1" %*
+.htm
*htmlfile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
+.html
*htmlfile="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
+.js
*JSFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.jse
*JSEFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.pif
*piffile="%1" %*
+.reg
*regfile=regedit.exe "%1"
+.scr
*scrfile="%1" /S
+.txt
*txtfile=%SystemRoot%\system32\NOTEPAD.EXE %1
+.vbs
*VBSFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.vbe
*VBEFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.wsh
*WSHFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.wsf
*WSFFile=%SystemRoot%\System32\WScript.exe "%1" %*
+.lnk
`lnkfile= [key or value does not exist]
»Active Setup (LM)
+Browser Customizations/>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
*StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
+Themes Setup/{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
*StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
+Microsoft Outlook Express 6/{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
*StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
+NetMeeting 3.01/{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
+Windows Messenger 4.0/{5945c046-1e7d-11d1-bc44-00c04fd912be}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.Install.PerUser
+Microsoft Windows Media Player/{6BF52A52-394A-11d3-B153-00C04F79FAA6}
*StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub
+Address Book 6/{7790769C-0471-11d2-AF11-00C04FA35D02}
*StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
+Windows Desktop Update/{89820200-ECBD-11cf-8B85-00AA005B4340}
*StubPath=regsvr32.exe /s /n /i:U shell32.dll
+Internet Explorer 6/{89820200-ECBD-11cf-8B85-00AA005B4383}
*StubPath=%SystemRoot%\system32\ie4uinit.exe
+Internet Explorer Access/{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
*StubPath=rundll32 iesetup.dll,IEAccessUserInst
»Browser Helper Objects (LM)
»Internet Explorer
»Current User
*Default_Search_URL=http://search.msn.com
*Local Page=C:\WINDOWS\System32\blank.htm
*Search Bar=http://home.microsoft.com/search/lobby/search.asp
*Search Page=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*Start Page=http://www.yahoo.com/
*SearchAssistant=http://www.microsoft.com/isapi/redir.dll?
+SearchUrl
*provider=
»Default User
*Default_Search_URL=http://home.microsoft.com/search/lobby/search.asp
*Search Bar=http://home.microsoft.com/search/lobby/search.asp
*Search Page=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*SearchAssistant=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
»Local Machine
*Default_Page_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
*Default_Search_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
*Local Page=%SystemRoot%\system32\blank.htm
*Start Page=about:blank
*CustomizeSearch=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
*SearchAssistant=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
»ShellServiceObjectDelayLoad (LM)
*PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9}
`InprocServer32=%SystemRoot%\system32\SHELL32.dll
*CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9}
`InprocServer32=%SystemRoot%\system32\SHELL32.dll
*WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED}
`InprocServer32=%SystemRoot%\System32\webcheck.dll
*SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153}
`InprocServer32=C:\WINDOWS\System32\stobject.dll
»Special NT Values
»Current User
*Load=
*Run=
*Programs=com exe bat pif cmd
*SHELL=
»Default User
*Load=
*Run=
*Programs=com exe bat pif cmd
*SHELL=
»Local Machine
*AppInit_DLLs=
*SHELL=Explorer.exe
*Userinit=C:\WINDOWS\system32\userinit.exe,
»Files
»Autostart Folders
»Current User
*C:\Documents and Settings\Owner\Start Menu\Programs\Startup\desktop.ini
»Default User
*\AVPCallback.log
*\boot.ini
*\CONFIG.SYS
*\IO.SYS
*\IO32.IDX
*\LSWMV.INI
*\MSDOS.SYS
*\NTDETECT.COM
*\ntldr
*\pagefile.sys
*\!Submit\cmiirln.exe
*\!Submit\cxtpls_loader.exe
*\!Submit\dist001.exe
*\!Submit\fkndud.exe
*\!Submit\fknduf.exe
*\!Submit\GSM3-0511.exe
*\!Submit\hfauyba.exe
*\!Submit\hhajefl.vxd
*\!Submit\hhalecn.exe
*\!Submit\hhiqygg.dll
*\!Submit\HLIVEEP.SYS
*\!Submit\HookPopup.dll
*\!Submit\installer_MARKETING18.exe
*\!Submit\n.dll
*\!Submit\Netkwr.exe
*\!Submit\pgntcoiv.exe
*\!Submit\PopOops.dll
*\!Submit\PopOops2.dll
*\!Submit\rrbnbrc.exe
*\!Submit\SWLAD1.dll
*\!Submit\SWLAD2.dll
*\remv3\feach.com
*\remv3\FINDSTR.EXE
*\remv3\remv3.bat
*\remv3\ver1.txt
*\remv3\ver2.txt
*\remv3\ver3.txt
*\WINDOWS\$_hpcst$.hpc
*\WINDOWS\0.log
*\WINDOWS\aucfg.ini
*\WINDOWS\AuHCcup1.dll
*\WINDOWS\AuHCcup1.ini
*\WINDOWS\bootstat.dat
*\WINDOWS\BPMNT.dll
*\WINDOWS\COM+.log
*\WINDOWS\comsetup.log
*\WINDOWS\dc.log
*\WINDOWS\delprot.ini
*\WINDOWS\deskbar.ini
*\WINDOWS\desktop.ini
*\WINDOWS\eehnhe.dll
*\WINDOWS\explorer.exe
*\WINDOWS\explorer.scf
*\WINDOWS\FaxSetup.log
*\WINDOWS\GetServer.ini
*\WINDOWS\hcextoutput.dll
*\WINDOWS\hdk3ctnt.dll
*\WINDOWS\hh.exe
*\WINDOWS\hhjoj.dll
*\WINDOWS\iis6.log
*\WINDOWS\imsins.BAK
*\WINDOWS\imsins.log
*\WINDOWS\IsUninst.exe
*\WINDOWS\iun6002.exe
*\WINDOWS\KB842773.log
*\WINDOWS\loadhttp.dll
*\WINDOWS\LPT$VPN.633
*\WINDOWS\LUINSTALL.LOG
*\WINDOWS\maxlink.ini
*\WINDOWS\Microsoft.MIF
*\WINDOWS\ModemLog_GTW V.92 Voicemodem.txt
*\WINDOWS\mozver.dat
*\WINDOWS\msdfmap.ini
*\WINDOWS\msgsocm.log
*\WINDOWS\NOTEPAD.EXE
*\WINDOWS\nsreg.dat
*\WINDOWS\ntbtlog.txt
*\WINDOWS\ntdtcsetup.log
*\WINDOWS\ocgen.log
*\WINDOWS\ocmsn.log
*\WINDOWS\ODBC.INI
*\WINDOWS\ODBCINST.INI
*\WINDOWS\OEWABLog.txt
*\WINDOWS\PATCH.EXE
*\WINDOWS\patchw32.dll
*\WINDOWS\pex.INI
*\WINDOWS\Q319949.log
*\WINDOWS\Q319949Uninst.log
*\WINDOWS\R.COM
*\WINDOWS\REGEDIT.COM
*\WINDOWS\regedit.exe
*\WINDOWS\REGLOCS.OLD
*\WINDOWS\regopt.log
*\WINDOWS\SchedLgU.Txt
*\WINDOWS\SDDINST.INI
*\WINDOWS\sessmgr.setup.log
*\WINDOWS\setupact.log
*\WINDOWS\setupapi.log
*\WINDOWS\setuperr.log
*\WINDOWS\setuplog.txt
*\WINDOWS\Sti_Trace.log
*\WINDOWS\SYMEVENT.LOG
*\WINDOWS\symlink.dat
*\WINDOWS\system.ini
*\WINDOWS\TASKMAN.EXE
*\WINDOWS\TMUPDATE.DLL
*\WINDOWS\tmupdate.ini
*\WINDOWS\tsc.exe
*\WINDOWS\tsc.ini
*\WINDOWS\tsc.ptn
*\WINDOWS\tsoc.log
*\WINDOWS\twain.dll
*\WINDOWS\twain_32.dll
*\WINDOWS\twunk_16.exe
*\WINDOWS\twunk_32.exe
*\WINDOWS\Ulead32.ini
*\WINDOWS\uneng.exe
*\WINDOWS\UNZIP.DLL
*\WINDOWS\vb.ini
*\WINDOWS\vbaddin.ini
*\WINDOWS\vmmreg32.dll
*\WINDOWS\VPTNFILE.633
*\WINDOWS\vsapi32.dll
*\WINDOWS\wiadebug.log
*\WINDOWS\wiaservc.log
*\WINDOWS\win.ini
*\WINDOWS\Windows Update.log
*\WINDOWS\WindowsShell.Manifest
*\WINDOWS\WindowsUpdate.log
*\WINDOWS\winhelp.exe
*\WINDOWS\winhlp32.exe
*\WINDOWS\winnt.bmp
*\WINDOWS\winnt256.bmp
*\WINDOWS\wmsetup.log
*\WINDOWS\wmsetup10.log
*\WINDOWS\WMSysPr9.prx
*\WINDOWS\WMSysPrx.prx
*\WINDOWS\yacs.log
*\WINDOWS\_default.pif
*\Documents and Settings\Administrator\ntuser.dat
*\Documents and Settings\Administrator\ntuser.dat.LOG
*\Documents and Settings\Administrator\ntuser.ini
*\Documents and Settings\Default User\NTUSER.DAT
*\Documents and Settings\LocalService\NTUSER.DAT
*\Documents and Settings\LocalService\ntuser.dat.LOG
*\Documents and Settings\LocalService\ntuser.ini
*\Documents and Settings\NetworkService\NTUSER.DAT
*\Documents and Settings\NetworkService\ntuser.dat.LOG
*\Documents and Settings\NetworkService\ntuser.ini
*\Documents and Settings\Owner\ntuser.dat
*\Documents and Settings\Owner\ntuser.dat.LOG
*\Documents and Settings\Owner\ntuser.ini
*\Program Files\AIM\Admin.ocm
*\Program Files\AIM\aim.exe
*\Program Files\AIM\aim.odl
*\Program Files\AIM\aim95.CNT
*\Program Files\AIM\AIM95.HLP
*\Program Files\AIM\aimalert.gif
*\Program Files\AIM\aimapi.dll
*\Program Files\AIM\aimauto.exe
*\Program Files\AIM\aimax.dll
*\Program Files\AIM\AimCoreSvcs.dll
*\Program Files\AIM\AimRes.dll
*\Program Files\AIM\AimSecondarySvcs.dll
*\Program Files\AIM\aimtalk.dll
*\Program Files\AIM\AIM_xmlp.dll
*\Program Files\AIM\AlertUI.ocm
*\Program Files\AIM\ate32.dll
*\Program Files\AIM\ateima32.dll
*\Program Files\AIM\BL_Games.htm
*\Program Files\AIM\browse.ocm
*\Program Files\AIM\buddyui.ocm
*\Program Files\AIM\ChatUI.ocm
*\Program Files\AIM\chksign.dll
*\Program Files\AIM\CoolBos.dll
*\Program Files\AIM\CoolBucky.dll
*\Program Files\AIM\CoolHttp.dll
*\Program Files\AIM\CoolPeer.dll
*\Program Files\AIM\CoolSecNss.dll
*\Program Files\AIM\CoolSocket.dll
*\Program Files\AIM\CoolSos.dll
*\Program Files\AIM\csh.dll
*\Program Files\AIM\dBenderC.dll
*\Program Files\AIM\dunzip32.dll
*\Program Files\AIM\icbmftvc.lst
*\Program Files\AIM\icbmui.ocm
*\Program Files\AIM\idlemon.dll
*\Program Files\AIM\inetsocket.dll
*\Program Files\AIM\INSTALL.LOG
*\Program Files\AIM\jga0tlk.dll
*\Program Files\AIM\jga1tlk.dll
*\Program Files\AIM\jgattlk.dll
*\Program Files\AIM\jgedtlk.dll
*\Program Files\AIM\jgs2tlk.dll
*\Program Files\AIM\jgs3tlk.dll
*\Program Files\AIM\jgs6tlk.dll
*\Program Files\AIM\jgs7tlk.dll
*\Program Files\AIM\jgsetlk.dll
*\Program Files\AIM\jgtktlk.dll
*\Program Files\AIM\licens32.txt
*\Program Files\AIM\locateui.ocm
*\Program Files\AIM\miscui.ocm
*\Program Files\AIM\netwait.odl
*\Program Files\AIM\nspr4.dll
*\Program Files\AIM\nss3.dll
*\Program Files\AIM\nssckbi.dll
*\Program Files\AIM\NTP.ocm
*\Program Files\AIM\oscarui.dll
*\Program Files\AIM\osclogin.ocm
*\Program Files\AIM\OscMail.ocm
*\Program Files\AIM\oscmain.ocm
*\Program Files\AIM\osconfig.ocm
*\Program Files\AIM\oscore.dll
*\Program Files\AIM\oscres.dll
*\Program Files\AIM\OscSrch.ocm
*\Program Files\AIM\Patcher.dll
*\Program Files\AIM\Patcher.exe
*\Program Files\AIM\plc4.dll
*\Program Files\AIM\plds4.dll
*\Program Files\AIM\popup.ocm
*\Program Files\AIM\ProgressDlg.dll
*\Program Files\AIM\proto.ocm
*\Program Files\AIM\rtvideo.dll
*\Program Files\AIM\rvapps.ocm
*\Program Files\AIM\rvappstm.lst
*\Program Files\AIM\sb.dll
*\Program Files\AIM\SendFile.exe
*\Program Files\AIM\ShareFile.exe
*\Program Files\AIM\smime3.dll
*\Program Files\AIM\softokn3.dll
*\Program Files\AIM\ssl3.dll
*\Program Files\AIM\startup.ocm
*\Program Files\AIM\stats.ocm
*\Program Files\AIM\stockalert.gif
*\Program Files\AIM\testgame.htm
*\Program Files\AIM\ticker.ocm
*\Program Files\AIM\Uninstall AOL Instant Messenger.lnk
*\Program Files\AIM\uninstll.EXE
*\Program Files\AIM\Unwise32.exe
*\Program Files\AIM\unwise32.ini
*\Program Files\AIM\wndutils.dll
*\Program Files\AIM\xmlparse.dll
*\Program Files\AIM\xmltok.dll
*\Program Files\AIM\Xpcs Registry.dat
*\Program Files\AIM\Xpcs.dll
*\Program Files\AIM\Xprt.dll
*\Program Files\AIM\Xptl.dll
*\Program Files\AvantGo Connect\malfile.exe
*\Program Files\AvantGo Connect\malssp.dll
*\Program Files\CleanUp!\CleanUp! Web Site.url
*\Program Files\CleanUp!\CleanUp.cnt
*\Program Files\CleanUp!\Cleanup.exe
*\Program Files\CleanUp!\CleanUp.hlp
*\Program Files\CleanUp!\license.txt
*\Program Files\CleanUp!\readme.txt
*\Program Files\CleanUp!\uninstall.exe
*\Program Files\CleanUp!\uninstall.ini
*\Program Files\DivX\DivXBundleUninstall.exe
*\Program Files\DivX\DivXCodecUninstall.exe
*\Program Files\HijackThis\HijackThis.exe
*\Program Files\HijackThis\hijackthis.log
*\Program Files\Internet Explorer\HMMAPI.DLL
*\Program Files\Internet Explorer\IEXPLORE.EXE
*\Program Files\Microsoft ActiveSync\2BP.DLL
*\Program Files\Microsoft ActiveSync\AAFSTORE.DLL
*\Program Files\Microsoft ActiveSync\AATP.DLL
*\Program Files\Microsoft ActiveSync\ADOFILTR.DLL
*\Program Files\Microsoft ActiveSync\BMP.DLL
*\Program Files\Microsoft ActiveSync\CEAPPMGR.EXE
*\Program Files\Microsoft ActiveSync\CEFSTORE.DLL
*\Program Files\Microsoft ActiveSync\CENETFLT.DLL
*\Program Files\Microsoft ActiveSync\CERICHED.DLL
*\Program Files\Microsoft ActiveSync\CEUNINST.DLL
*\Program Files\Microsoft ActiveSync\DBEXPORT.EXE
*\Program Files\Microsoft ActiveSync\DeIsL1.isu
*\Program Files\Microsoft ActiveSync\DTPTDNS.DLL
*\Program Files\Microsoft ActiveSync\FNT.DLL
*\Program Files\Microsoft ActiveSync\FORMINST.EXE
*\Program Files\Microsoft ActiveSync\INETREPL.DLL
*\Program Files\Microsoft ActiveSync\INKENG.DLL
*\Program Files\Microsoft ActiveSync\INKREG.DLL
*\Program Files\Microsoft ActiveSync\INKRES.DLL
*\Program Files\Microsoft ActiveSync\INKSTORE.DLL
*\Program Files\Microsoft ActiveSync\INKSYNC.DLL
*\Program Files\Microsoft ActiveSync\MAILSYNC.DLL
*\Program Files\Microsoft ActiveSync\MALSAI.DLL
*\Program Files\Microsoft ActiveSync\MINSHELL.DLL
*\Program Files\Microsoft ActiveSync\Mobile Device.lnk
*\Program Files\Microsoft ActiveSync\MSCONV97.DLL
*\Program Files\Microsoft ActiveSync\MSWRD632.CNV
*\Program Files\Microsoft ActiveSync\MSWRD832.CNV
*\Program Files\Microsoft ActiveSync\OFFICE.DLL
*\Program Files\Microsoft ActiveSync\OLREGDLL.DLL
*\Program Files\Microsoft ActiveSync\OUTSTORE.DLL
*\Program Files\Microsoft ActiveSync\PEGCONN.WAV
*\Program Files\Microsoft ActiveSync\PEGCONV.DLL
*\Program Files\Microsoft ActiveSync\PEGDISC.WAV
*\Program Files\Microsoft ActiveSync\PWDCNV.DLL
*\Program Files\Microsoft ActiveSync\PWDREG.DLL
*\Program Files\Microsoft ActiveSync\PWDWW6.DLL
*\Program Files\Microsoft ActiveSync\PWIOFCNV.DLL
*\Program Files\Microsoft ActiveSync\PWIREG.DLL
*\Program Files\Microsoft ActiveSync\PWIWW6.DLL
*\Program Files\Microsoft ActiveSync\PWIWW8.DLL
*\Program Files\Microsoft ActiveSync\PWOFFCNV.DLL
*\Program Files\Microsoft ActiveSync\PXL2XLS.DLL
*\Program Files\Microsoft ActiveSync\PXLCNV.DLL
*\Program Files\Microsoft ActiveSync\PXLFILE.DLL
*\Program Files\Microsoft ActiveSync\READCE.DOC
*\Program Files\Microsoft ActiveSync\README.DOC
*\Program Files\Microsoft ActiveSync\READRAS.DOC
*\Program Files\Microsoft ActiveSync\RICHINK.DLL
*\Program Files\Microsoft ActiveSync\RIRESDLL.DLL
*\Program Files\Microsoft ActiveSync\SCDSTORE.DLL
*\Program Files\Microsoft ActiveSync\TCP2UDP.DLL
*\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
*\Program Files\Microsoft ActiveSync\wcesetup.log
*\Program Files\Microsoft ActiveSync\WCESMGR.EXE
*\Program Files\Microsoft ActiveSync\WCESVIEW.DLL
*\Program Files\Microsoft ActiveSync\XLS2PXL.DLL
*\Program Files\Microsoft Works\abimp.txt
*\Program Files\Microsoft Works\fudsteus.chm
*\Program Files\Microsoft Works\HSAPI.dll
*\Program Files\Microsoft Works\HtmlLite.dll
*\Program Files\Microsoft Works\ListSel.wav
*\Program Files\Microsoft Works\mswitch.wav
*\Program Files\Microsoft Works\Mswksss.hlp
*\Program Files\Microsoft Works\mswkswp.hlp
*\Program Files\Microsoft Works\msworks.exe
*\Program Files\Microsoft Works\Normal.bin
*\Program Files\Microsoft Works\prstmplt.bmp
*\Program Files\Microsoft Works\QTDB.chm
*\Program Files\Microsoft Works\qtnew.chm
*\Program Files\Microsoft Works\qtpf.chm
*\Program Files\Microsoft Works\QTSS.chm
*\Program Files\Microsoft Works\QTWP.chm
*\Program Files\Microsoft Works\ReadMe.txt
*\Program Files\Microsoft Works\rowht.avi
*\Program Files\Microsoft Works\sb.dat
*\Program Files\Microsoft Works\sbcdrop.wav
*\Program Files\Microsoft Works\sbchngsb.wav
*\Program Files\Microsoft Works\sbitmsel.wav
*\Program Files\Microsoft Works\sbmnuopn.wav
*\Program Files\Microsoft Works\sbnewmod.wav
*\Program Files\Microsoft Works\sbodrop.wav
*\Program Files\Microsoft Works\sbsnpwdg.wav
*\Program Files\Microsoft Works\sdm95.dll
*\Program Files\Microsoft Works\sdm95fe.dll
*\Program Files\Microsoft Works\split.avi
*\Program Files\Microsoft Works\ssall.bin
*\Program Files\Microsoft Works\sync.aw
*\Program Files\Microsoft Works\threed.vbx
*\Program Files\Microsoft Works\vbrun300.dll
*\Program Files\Microsoft Works\VSwitch.wav
*\Program Files\Microsoft Works\WkABStub.dll
*\Program Files\Microsoft Works\WkDBExt.dll
*\Program Files\Microsoft Works\wkdbole.dll
*\Program Files\Microsoft Works\wkfud.exe
*\Program Files\Microsoft Works\wkgdcach.exe
*\Program Files\Microsoft Works\wkgdips.dll
*\Program Files\Microsoft Works\wkgs2002.chm
*\Program Files\Microsoft Works\wkhlp4ch.hlp
*\Program Files\Microsoft Works\wkhlpqms.hlp
*\Program Files\Microsoft Works\wkhlptur.qkt
*\Program Files\Microsoft Works\WkImging.dll
*\Program Files\Microsoft Works\WkImgSrv.dll
*\Program Files\Microsoft Works\wklnac.dll
*\Program Files\Microsoft Works\wklnckml.exe
*\Program Files\Microsoft Works\wklnfind.fnd
*\Program Files\Microsoft Works\wklnfrps.dll
*\Program Files\Microsoft Works\WkMerge.dll
*\Program Files\Microsoft Works\Wkmmwdb.dll
*\Program Files\Microsoft Works\wkplmcal.dll
*\Program Files\Microsoft Works\wkplmstp.exe
*\Program Files\Microsoft Works\wkplmwab.dll
*\Program Files\Microsoft Works\wksab.exe
*\Program Files\Microsoft Works\wksabimp.dll
*\Program Files\Microsoft Works\Wksabimp.hlp
*\Program Files\Microsoft Works\wksbdp.dll
*\Program Files\Microsoft Works\WksCal.chm
*\Program Files\Microsoft Works\wksdb.aw
*\Program Files\Microsoft Works\WksDB.chm
*\Program Files\Microsoft Works\wksdb.exe
*\Program Files\Microsoft Works\wksdb.htm
*\Program Files\Microsoft Works\wksgrph.vbx
*\Program Files\Microsoft Works\wkshared.hlp
*\Program Files\Microsoft Works\wkshbsvc.dll
*\Program Files\Microsoft Works\wkslang.dll
*\Program Files\Microsoft Works\wkslnch.aw
*\Program Files\Microsoft Works\WksLnch.chm
*\Program Files\Microsoft Works\Wkslnch.hlp
*\Program Files\Microsoft Works\wkslnch.htm
*\Program Files\Microsoft Works\wkspages.vbx
*\Program Files\Microsoft Works\WksPF.chm
*\Program Files\Microsoft Works\WksPF.HLP
*\Program Files\Microsoft Works\wkssb.exe
*\Program Files\Microsoft Works\wkssfrm.dll
*\Program Files\Microsoft Works\wksshelp.dll
*\Program Files\Microsoft Works\wkssole.dll
*\Program Files\Microsoft Works\wksss.aw
*\Program Files\Microsoft Works\WksSS.chm
*\Program Files\Microsoft Works\wksss.exe
*\Program Files\Microsoft Works\wksss.htm
*\Program Files\Microsoft Works\wkswp.aw
*\Program Files\Microsoft Works\WksWP.chm
*\Program Files\Microsoft Works\WksWP.exe
*\Program Files\Microsoft Works\wkswp.htm
*\Program Files\Microsoft Works\WkThemes.dll
*\Program Files\Microsoft Works\WkWat.dll
*\Program Files\Microsoft Works\WkWbl.dll
*\Program Files\Microsoft Works\wkwce.ini
*\Program Files\Microsoft Works\wkwcearm.cab
*\Program Files\Microsoft Works\wkwcecal.dll
*\Program Files\Microsoft Works\wkwcemp3.cab
*\Program Files\Microsoft Works\wkwcemp4.cab
*\Program Files\Microsoft Works\wkwcesh3.cab
*\Program Files\Microsoft Works\wkwcesh4.cab
*\Program Files\Microsoft Works\wkwcestp.exe
*\Program Files\Microsoft Works\wkwcewab.dll
*\Program Files\Microsoft Works\WkWfx.dll
*\Program Files\Microsoft Works\WkWinUni.dll
*\Program Files\Microsoft Works\wkwpac.dll
*\Program Files\Microsoft Works\wkwpbdr.ibd
*\Program Files\Microsoft Works\wkwpqd.dll
*\Program Files\Microsoft Works\wkwpqrtf.dll
*\Program Files\Microsoft Works\wkwpquil.dll
*\Program Files\Microsoft Works\WkWteSup.dll
*\Program Files\Microsoft Works\wkwzaddr.dll
*\Program Files\Microsoft Works\wkwzadtx.dat
*\Program Files\Microsoft Works\wkwzlay.dll
*\Program Files\Microsoft Works\wkwzlh.dll
*\Program Files\Microsoft Works\wkwzmrg.dll
*\Program Files\Microsoft Works\wkwzsmpl.dll
*\Program Files\Microsoft Works\wkwzThm.dll
*\Program Files\Microsoft Works\wkwztmpl.dll
*\Program Files\Microsoft Works\wkwzwiz.dll
*\Program Files\Microsoft Works\workssvc.dll
*\Program Files\Microsoft Works\WSBico.ico
*\Program Files\Microsoft Works\zoom.avi
*\Program Files\Norton AntiVirus\ABOUTPLG.DLL
*\Program Files\Norton AntiVirus\Activity.log
*\Program Files\Norton AntiVirus\APNTFAST.REG
*\Program Files\Norton AntiVirus\APNTNORM.REG
*\Program Files\Norton AntiVirus\APNTPOFF.REG
*\Program Files\Norton AntiVirus\APNTPON.REG
*\Program Files\Norton AntiVirus\APWCMDNT.DLL
*\Program Files\Norton AntiVirus\APWUTIL.DLL
*\Program Files\Norton AntiVirus\BOOTWARN.EXE
*\Program Files\Norton AntiVirus\centhelp.cnt
*\Program Files\Norton AntiVirus\centhelp.GID
*\Program Files\Norton AntiVirus\CfgWiz.dat
*\Program Files\Norton AntiVirus\CFGWIZ.DLL
*\Program Files\Norton AntiVirus\CFGWIZ.EXE
*\Program Files\Norton AntiVirus\COUNTRY.DAT
*\Program Files\Norton AntiVirus\DEC2.DLL
*\Program Files\Norton AntiVirus\DEC2AMG.DLL
*\Program Files\Norton AntiVirus\DEC2ARJ.DLL
*\Program Files\Norton AntiVirus\DEC2CAB.DLL
*\Program Files\Norton AntiVirus\DEC2EXE.DLL
*\Program Files\Norton AntiVirus\DEC2GZIP.DLL
*\Program Files\Norton AntiVirus\DEC2HQX.DLL
*\Program Files\Norton AntiVirus\DEC2ID.DLL
*\Program Files\Norton AntiVirus\DEC2LHA.DLL
*\Program Files\Norton AntiVirus\DEC2LZ.DLL
*\Program Files\Norton AntiVirus\DEC2MIME.DLL
*\Program Files\Norton AntiVirus\DEC2RTF.DLL
*\Program Files\Norton AntiVirus\DEC2SS.DLL
*\Program Files\Norton AntiVirus\DEC2TAR.DLL
*\Program Files\Norton AntiVirus\Dec2Text.dll
*\Program Files\Norton AntiVirus\DEC2TNEF.DLL
*\Program Files\Norton AntiVirus\DEC2UUE.DLL
*\Program Files\Norton AntiVirus\DEC2ZIP.DLL
*\Program Files\Norton AntiVirus\DECSDK.DLL
*\Program Files\Norton AntiVirus\DEFALERT.DLL
*\Program Files\Norton AntiVirus\defloc.dat
*\Program Files\Norton AntiVirus\end_user.txt
*\Program Files\Norton AntiVirus\exclude.dat
*\Program Files\Norton AntiVirus\exclude.def
*\Program Files\Norton AntiVirus\EXCLUDEL.DAT
*\Program Files\Norton AntiVirus\EXCLUDEL.def
*\Program Files\Norton AntiVirus\FILTER.DAT
*\Program Files\Norton AntiVirus\FSLINK.DLL
*\Program Files\Norton AntiVirus\N32CALL.DLL
*\Program Files\Norton AntiVirus\N32EXCLU.DLL
*\Program Files\Norton AntiVirus\N32Userl.dll
*\Program Files\Norton AntiVirus\N32VLIST.DLL
*\Program Files\Norton AntiVirus\NAVACTLG.DLL
*\Program Files\Norton AntiVirus\NAVAP.CAT
*\Program Files\Norton AntiVirus\NAVAP.INF
*\Program Files\Norton AntiVirus\NAVAP32.DLL
*\Program Files\Norton AntiVirus\NAVAPI32.DLL
*\Program Files\Norton AntiVirus\NAVAPSCR.DLL
*\Program Files\Norton AntiVirus\NAVAPSVC.EXE
*\Program Files\Norton AntiVirus\NAVAPW32.EXE
*\Program Files\Norton AntiVirus\NAVCOMUI.DLL
*\Program Files\Norton AntiVirus\NAVDEFS.DLL
*\Program Files\Norton AntiVirus\NAVDX.OVL
*\Program Files\Norton AntiVirus\NAVLNCH.DLL
*\Program Files\Norton AntiVirus\NAVLUCBK.DLL
*\Program Files\Norton AntiVirus\NAVOPTS.BAK
*\Program Files\Norton AntiVirus\navopts.dat
*\Program Files\Norton AntiVirus\navopts.def
*\Program Files\Norton AntiVirus\NAVOPTS.DLL
*\Program Files\Norton AntiVirus\NAVPROXY.DLL
*\Program Files\Norton AntiVirus\NAVSCAN.DLL
*\Program Files\Norton AntiVirus\navsess.tpl
*\Program Files\Norton AntiVirus\navsess.txt
*\Program Files\Norton AntiVirus\NAVSHEXT.DLL
*\Program Files\Norton AntiVirus\NAVSTATS.DLL
*\Program Files\Norton AntiVirus\NAVSTUB.EXE
*\Program Files\Norton AntiVirus\NAVTASKS.DLL
*\Program Files\Norton AntiVirus\NAVTSKWZ.DLL
*\Program Files\Norton AntiVirus\NAVUI.DLL
*\Program Files\Norton AntiVirus\navui.nsi
*\Program Files\Norton AntiVirus\NAVW32.CNT
*\Program Files\Norton AntiVirus\NAVW32.EXE
*\Program Files\Norton AntiVirus\navw32.gid
*\Program Files\Norton AntiVirus\navw32.hlp
*\Program Files\Norton AntiVirus\NAVWBWND.DLL
*\Program Files\Norton AntiVirus\NAVWNT.EXE
*\Program Files\Norton AntiVirus\NETBREXT.DLL
*\Program Files\Norton AntiVirus\OFFICEAV.DLL
*\Program Files\Norton AntiVirus\PATCH32I.DLL
*\Program Files\Norton AntiVirus\QCONRES.DLL
*\Program Files\Norton AntiVirus\QCONSOLE.EXE
*\Program Files\Norton AntiVirus\qconsole.hlp
*\Program Files\Norton AntiVirus\QSERVER.EXE
*\Program Files\Norton AntiVirus\QUAR32.DLL
*\Program Files\Norton AntiVirus\QuarOpts.dat
*\Program Files\Norton AntiVirus\README.TXT
*\Program Files\Norton AntiVirus\S32ALOGO.DLL
*\Program Files\Norton AntiVirus\S32INTEG.DLL
*\Program Files\Norton AntiVirus\S32NAVO.DLL
*\Program Files\Norton AntiVirus\scancfg.dat
*\Program Files\Norton AntiVirus\SCANDLVR.DLL
*\Program Files\Norton AntiVirus\SCANDRES.DLL
*\Program Files\Norton AntiVirus\scanmgr.dll
*\Program Files\Norton AntiVirus\SCRIPTUI.DLL
*\Program Files\Norton AntiVirus\SDFLT32I.DLL
*\Program Files\Norton AntiVirus\SDPCK32I.DLL
*\Program Files\Norton AntiVirus\SDSND32I.DLL
*\Program Files\Norton AntiVirus\SDSOK32I.DLL
*\Program Files\Norton AntiVirus\SDSTP32I.DLL
*\Program Files\Norton AntiVirus\SFSTR32I.DLL
*\Program Files\Norton AntiVirus\SMSTR32I.DLL
*\Program Files\Norton AntiVirus\SUPPORT.cnt
*\Program Files\Norton AntiVirus\Support.hlp
*\Program Files\Norton AntiVirus\SYMNAVO.DLL
*\Program Files\Norton AntiVirus\V32SCAN.DLL
*\Program Files\Norton AntiVirus\VERSION.DAT
*\Program Files\Outlook Express\msimn.exe
*\Program Files\Outlook Express\msoe.dll
*\Program Files\Outlook Express\msoeres.dll
*\Program Files\Outlook Express\oeimport.dll
*\Program Files\Outlook Express\oemig50.exe
*\Program Files\Outlook Express\oemiglib.dll
*\Program Files\Outlook Express\setup50.exe
*\Program Files\Outlook Express\wab.exe
*\Program Files\Outlook Express\wabfind.dll
*\Program Files\Outlook Express\wabimp.dll
*\Program Files\Outlook Express\wabmig.exe
*\Program Files\Soulseek\attrstrings.cfg
*\Program Files\Soulseek\autoaway.cfg
*\Program Files\Soulseek\BlackBox.dll
*\Program Files\Soulseek\chatrooms.cfg
*\Program Files\Soulseek\chatui.cfg
*\Program Files\Soulseek\DbgHelp.Dll
*\Program Files\Soulseek\dlbans.cfg
*\Program Files\Soulseek\extensions.cfg
*\Program Files\Soulseek\hotlist.cfg
*\Program Files\Soulseek\ignores.cfg
*\Program Files\Soulseek\login.cfg
*\Program Files\Soulseek\message.wav
*\Program Files\Soulseek\pchat.cfg
*\Program Files\Soulseek\port.cfg
*\Program Files\Soulseek\Psapi.Dll
*\Program Files\Soulseek\queue.cfg
*\Program Files\Soulseek\queue2.cfg
*\Program Files\Soulseek\rcmnd.cfg
*\Program Files\Soulseek\save.cfg
*\Program Files\Soulseek\search.cfg
*\Program Files\Soulseek\shared.cfg
*\Program Files\Soulseek\slsk.exe
*\Program Files\Soulseek\ticker.cfg
*\Program Files\Soulseek\transfersview.cfg
*\Program Files\Soulseek\ui.cfg
*\Program Files\Soulseek\uninstall.exe
*\Program Files\Soulseek\userinfo.cfg
*\Program Files\Soulseek\usernotes.cfg
*\Program Files\Soulseek\wishlist.cfg
*\Program Files\Symantec\S32EVNT1.DLL
*\Program Files\Symantec\SYMEVENT.CAT
*\Program Files\Symantec\SYMEVENT.INF
*\Program Files\Symantec\SYMEVENT.SYS
*\Program Files\Symantec\SYMEVNT1.DLL
*\Program Files\Visioneer\INSTALL.LOG
*\Program Files\Visioneer\UNWISE.EXE
*\Program Files\Windows Media Player\custsat.dll
*\Program Files\Windows Media Player\dlimport.exe
*\Program Files\Windows Media Player\eula.txt
*\Program Files\Windows Media Player\migrate.exe
*\Program Files\Windows Media Player\mplayer2.exe
*\Program Files\Windows Media Player\mpvis.dll
*\Program Files\Windows Media Player\msoobci.dll
*\Program Files\Windows Media Player\npdrmv2.dll
*\Program Files\Windows Media Player\npdrmv2.zip
*\Program Files\Windows Media Player\npds.zip
*\Program Files\Windows Media Player\npdsplay.dll
*\Program Files\Windows Media Player\npwmsdrm.dll
*\Program Files\Windows Media Player\setup_wm.exe
*\Program Files\Windows Media Player\wmlaunch.exe
*\Program Files\Windows Media Player\wmpband.dll
*\Program Files\Windows Media Player\wmpenc.exe
*\Program Files\Windows Media Player\wmplayer.exe
*\Program Files\Windows Media Player\wmpvis.dll
*\Program Files\Windows NT\dialer.exe
*\Program Files\Windows NT\htrn_jis.dll
*\Program Files\Windows NT\hypertrm.exe
*\RECYCLER\S-1-5-21-448539723-2077806209-839522115-1003\desktop.ini
*\RECYCLER\S-1-5-21-448539723-2077806209-839522115-1003\INFO2
*\RECYCLER\S-1-5-21-448539723-2077806209-839522115-500\desktop.ini
*\RECYCLER\S-1-5-21-448539723-2077806209-839522115-500\INFO2
*\WINDOWS\AppPatch\AcGenral.dll
*\WINDOWS\AppPatch\AcLayers.dll
*\WINDOWS\AppPatch\AcLua.dll
*\WINDOWS\AppPatch\AcSpecfc.dll
*\WINDOWS\AppPatch\AcVerfyr.dll
*\WINDOWS\AppPatch\AcXtrnal.dll
*\WINDOWS\AppPatch\apphelp.sdb
*\WINDOWS\AppPatch\drvmain.sdb
*\WINDOWS\AppPatch\msimain.sdb
*\WINDOWS\AppPatch\sysmain.sdb
*\WINDOWS\assembly\Desktop.ini
*\WINDOWS\AU_Backup\AuBackup.ini
*\WINDOWS\bsx32\ASI2.bsx
*\WINDOWS\bsx32\ASI50.bsx
*\WINDOWS\bsx32\ASICLRE.bsx
*\WINDOWS\bsx32\ASICLV.bsx
*\WINDOWS\bsx32\ASIEPRE.bsx
*\WINDOWS\bsx32\ASIEZ.bsx
*\WINDOWS\bsx32\ASIMBC.bsx
*\WINDOWS\bsx32\ASISSRE.bsx
*\WINDOWS\bsx32\EECH1.bsx
*\WINDOWS\bsx32\TMPC.bsx
*\WINDOWS\bsx32\TMPMTV.bsx
*\WINDOWS\cfgmgr52\ASI2.bsx
*\WINDOWS\cfgmgr52\ASI50.bsx
*\WINDOWS\cfgmgr52\ASICLRE.bsx
*\WINDOWS\cfgmgr52\ASICLV.bsx
*\WINDOWS\cfgmgr52\ASIEPRE.bsx
*\WINDOWS\cfgmgr52\ASIEZ.bsx
*\WINDOWS\cfgmgr52\ASIMBC.bsx
*\WINDOWS\cfgmgr52\ASIRCPRE.bsx
*\WINDOWS\cfgmgr52\ASISS2RE.bsx
*\WINDOWS\cfgmgr52\ASISSRE.bsx
*\WINDOWS\cfgmgr52\bspace.html
*\WINDOWS\cfgmgr52\EECH1.bsx
*\WINDOWS\cfgmgr52\SPZ3.bsx
*\WINDOWS\cfgmgr52\TMPC.bsx
*\WINDOWS\cfgmgr52\TMPD.bsx
*\WINDOWS\cfgmgr52\TMPE.bsx
*\WINDOWS\cfgmgr52\TMPF.bsx
*\WINDOWS\cfgmgr52\TMPFAM.bsx
*\WINDOWS\cfgmgr52\TMPFI.bsx
*\WINDOWS\cfgmgr52\TMPFIN.bsx
*\WINDOWS\cfgmgr52\TMPG.bsx
*\WINDOWS\cfgmgr52\TMPH.bsx
*\WINDOWS\cfgmgr52\TMPHL.bsx
*\WINDOWS\cfgmgr52\TMPJ.bsx
*\WINDOWS\cfgmgr52\TMPM.bsx
*\WINDOWS\cfgmgr52\TMPMTV.bsx
*\WINDOWS\cfgmgr52\TMPN.bsx
*\WINDOWS\cfgmgr52\TMPR.bsx
*\WINDOWS\cfgmgr52\TMPS.bsx
*\WINDOWS\cfgmgr52\TMPSHOP.bsx
*\WINDOWS\cfgmgr52\TMPSP.bsx
*\WINDOWS\cfgmgr52\TMPW.bsx
*\WINDOWS\cfgmgr52\WEBS1.bsx
*\WINDOWS\cfgmgr52\WEBS2.bsx
*\WINDOWS\cfgmgr52\ZNETGP.bsx
*\WINDOWS\Cursors\3dgarro.cur
*\WINDOWS\Cursors\3dgmove.cur
*\WINDOWS\Cursors\3dgnesw.cur
*\WINDOWS\Cursors\3dgno.cur
*\WINDOWS\Cursors\3dgns.cur
*\WINDOWS\Cursors\3dgnwse.cur
*\WINDOWS\Cursors\3dgwe.cur
*\WINDOWS\Cursors\3dsmove.cur
*\WINDOWS\Cursors\3dsns.cur
*\WINDOWS\Cursors\3dsnwse.cur
*\WINDOWS\Cursors\3dwarro.cur
*\WINDOWS\Cursors\3dwmove.cur
*\WINDOWS\Cursors\3dwnesw.cur
*\WINDOWS\Cursors\3dwno.cur
*\WINDOWS\Cursors\3dwns.cur
*\WINDOWS\Cursors\3dwnwse.cur
*\WINDOWS\Cursors\3dwwe.cur
*\WINDOWS\Cursors\appstar2.ani
*\WINDOWS\Cursors\appstar3.ani
*\WINDOWS\Cursors\appstart.ani
*\WINDOWS\Cursors\arrow_i.cur
*\WINDOWS\Cursors\arrow_il.cur
*\WINDOWS\Cursors\arrow_im.cur
*\WINDOWS\Cursors\arrow_l.cur
*\WINDOWS\Cursors\arrow_m.cur
*\WINDOWS\Cursors\arrow_r.cur
*\WINDOWS\Cursors\arrow_rl.cur
*\WINDOWS\Cursors\arrow_rm.cur
*\WINDOWS\Cursors\beam_i.cur
*\WINDOWS\Cursors\beam_il.cur
*\WINDOWS\Cursors\beam_im.cur
*\WINDOWS\Cursors\beam_l.cur
*\WINDOWS\Cursors\beam_m.cur
*\WINDOWS\Cursors\beam_r.cur
*\WINDOWS\Cursors\beam_rl.cur
*\WINDOWS\Cursors\beam_rm.cur
*\WINDOWS\Cursors\busy_i.cur
*\WINDOWS\Cursors\busy_il.cur
*\WINDOWS\Cursors\busy_im.cur
*\WINDOWS\Cursors\busy_l.cur
*\WINDOWS\Cursors\busy_m.cur
*\WINDOWS\Cursors\busy_r.cur
*\WINDOWS\Cursors\busy_rl.cur
*\WINDOWS\Cursors\busy_rm.cur
*\WINDOWS\Cursors\cross.cur
*\WINDOWS\Cursors\cross_i.cur
*\WINDOWS\Cursors\cross_il.cur
*\WINDOWS\Cursors\cross_im.cur
*\WINDOWS\Cursors\cross_l.cur
*\WINDOWS\Cursors\cross_m.cur
*\WINDOWS\Cursors\cross_r.cur
*\WINDOWS\Cursors\cross_rl.cur
*\WINDOWS\Cursors\cross_rm.cur
*\WINDOWS\Cursors\fillitup.ani
*\WINDOWS\Cursors\hand.ani
*\WINDOWS\Cursors\handapst.ani
*\WINDOWS\Cursors\handnesw.ani
*\WINDOWS\Cursors\handno.ani
*\WINDOWS\Cursors\handns.ani
*\WINDOWS\Cursors\handnwse.ani
*\WINDOWS\Cursors\handwait.ani
*\WINDOWS\Cursors\handwe.ani
*\WINDOWS\Cursors\harrow.cur
*\WINDOWS\Cursors\hcross.cur
*\WINDOWS\Cursors\help_i.cur
*\WINDOWS\Cursors\help_il.cur
*\WINDOWS\Cursors\help_im.cur
*\WINDOWS\Cursors\help_l.cur
*\WINDOWS\Cursors\help_m.cur
*\WINDOWS\Cursors\help_r.cur
*\WINDOWS\Cursors\help_rl.cur
*\WINDOWS\Cursors\help_rm.cur
*\WINDOWS\Cursors\hourgla2.ani
*\WINDOWS\Cursors\hourgla3.ani
*\WINDOWS\Cursors\hourglas.ani
*\WINDOWS\Cursors\lappstrt.cur
*\WINDOWS\Cursors\larrow.cur
*\WINDOWS\Cursors\lcross.cur
*\WINDOWS\Cursors\libeam.cur
*\WINDOWS\Cursors\lmove.cur
*\WINDOWS\Cursors\lnesw.cur
*\WINDOWS\Cursors\lnodrop.cur
*\WINDOWS\Cursors\lns.cur
*\WINDOWS\Cursors\lnwse.cur
*\WINDOWS\Cursors\lwait.cur
*\WINDOWS\Cursors\lwe.cur
*\WINDOWS\Cursors\move_i.cur
*\WINDOWS\Cursors\move_il.cur
*\WINDOWS\Cursors\move_im.cur
*\WINDOWS\Cursors\move_l.cur
*\WINDOWS\Cursors\move_m.cur
*\WINDOWS\Cursors\move_r.cur
*\WINDOWS\Cursors\move_rl.cur
*\WINDOWS\Cursors\move_rm.cur
*\WINDOWS\Cursors\no_i.cur
*\WINDOWS\Cursors\no_il.cur
*\WINDOWS\Cursors\no_im.cur
*\WINDOWS\Cursors\no_l.cur
*\WINDOWS\Cursors\no_m.cur
*\WINDOWS\Cursors\no_r.cur
*\WINDOWS\Cursors\no_rl.cur
*\WINDOWS\Cursors\no_rm.cur
*\WINDOWS\Cursors\piano.ani
*\WINDOWS\Cursors\rainbow.ani
*\WINDOWS\Cursors\raindrop.ani
*\WINDOWS\Cursors\size1_i.cur
*\WINDOWS\Cursors\size1_il.cur
*\WINDOWS\Cursors\size1_im.cur
*\WINDOWS\Cursors\size1_l.cur
*\WINDOWS\Cursors\size1_m.cur
*\WINDOWS\Cursors\size1_r.cur
*\WINDOWS\Cursors\size1_rl.cur
*\WINDOWS\Cursors\size1_rm.cur
*\WINDOWS\Cursors\size2_i.cur
*\WINDOWS\Cursors\size2_il.cur
*\WINDOWS\Cursors\size2_im.cur
*\WINDOWS\Cursors\size2_l.cur
*\WINDOWS\Cursors\size2_m.cur
*\WINDOWS\Cursors\size2_r.cur
*\WINDOWS\Cursors\size2_rl.cur
*\WINDOWS\Cursors\size2_rm.cur
*\WINDOWS\Cursors\size3_i.cur
*\WINDOWS\Cursors\size3_il.cur
*\WINDOWS\Cursors\size3_im.cur
*\WINDOWS\Cursors\size3_l.cur
*\WINDOWS\Cursors\size3_m.cur
*\WINDOWS\Cursors\size3_r.cur
*\WINDOWS\Cursors\size3_rl.cur
*\WINDOWS\Cursors\size3_rm.cur
*\WINDOWS\Cursors\size4_i.cur
*\WINDOWS\Cursors\size4_il.cur
*\WINDOWS\Cursors\size4_im.cur
*\WINDOWS\Cursors\size4_l.cur
*\WINDOWS\Cursors\size4_m.cur
*\WINDOWS\Cursors\size4_r.cur
*\WINDOWS\Cursors\size4_rl.cur
*\WINDOWS\Cursors\size4_rm.cur
*\WINDOWS\Cursors\sizenesw.ani
*\WINDOWS\Cursors\sizens.ani
*\WINDOWS\Cursors\sizenwse.ani
*\WINDOWS\Cursors\sizewe.ani
*\WINDOWS\Cursors\stopwtch.ani
*\WINDOWS\Cursors\up_i.cur
*\WINDOWS\Cursors\up_il.cur
*\WINDOWS\Cursors\up_im.cur
*\WINDOWS\Cursors\up_l.cur
*\WINDOWS\Cursors\up_m.cur
*\WINDOWS\Cursors\up_r.cur
*\WINDOWS\Cursors\up_rl.cur
*\WINDOWS\Cursors\up_rm.cur
*\WINDOWS\Cursors\vanisher.ani
*\WINDOWS\Cursors\wagtail.ani
*\WINDOWS\Cursors\wait_i.cur
*\WINDOWS\Cursors\wait_il.cur
*\WINDOWS\Cursors\wait_im.cur
*\WINDOWS\Cursors\wait_l.cur
*\WINDOWS\Cursors\wait_m.cur
*\WINDOWS\Cursors\wait_r.cur
*\WINDOWS\Cursors\wait_rl.cur
*\WINDOWS\Cursors\wait_rm.cur
*\WINDOWS\Debug\NetSetup.LOG
*\WINDOWS\Debug\oakley.log
*\WINDOWS\Debug\oakley.log.sav
*\WINDOWS\Debug\PASSWD.LOG
*\WINDOWS\Debug\TSCDebug.log
*\WINDOWS\Downloaded Program Files\desktop.ini
*\WINDOWS\Downloaded Program Files\erma.inf
*\WINDOWS\Downloaded Program Files\jinstall-1_5_0_01.inf
*\WINDOWS\Downloaded Program Files\popcaploader.dll
*\WINDOWS\Downloaded Program Files\popcaploader.inf
*\WINDOWS\Downloaded Program Files\swflash.inf
*\WINDOWS\Downloaded Program Files\wuweb.inf
*\WINDOWS\Fonts\8514fix.fon
*\WINDOWS\Fonts\8514fixe.fon
*\WINDOWS\Fonts\8514fixg.fon
*\WINDOWS\Fonts\8514fixr.fon
*\WINDOWS\Fonts\8514fixt.fon
*\WINDOWS\Fonts\8514oem.fon
*\WINDOWS\Fonts\8514oeme.fon
*\WINDOWS\Fonts\8514oemg.fon
*\WINDOWS\Fonts\8514oemr.fon
*\WINDOWS\Fonts\8514oemt.fon
*\WINDOWS\Fonts\8514sys.fon
*\WINDOWS\Fonts\8514syse.fon
*\WINDOWS\Fonts\8514sysg.fon
*\WINDOWS\Fonts\8514sysr.fon
*\WINDOWS\Fonts\8514syst.fon
*\WINDOWS\Fonts\85775.fon
*\WINDOWS\Fonts\85855.fon
*\WINDOWS\Fonts\85f1257.fon
*\WINDOWS\Fonts\85s1257.fon
*\WINDOWS\Fonts\abaddon.TTF
*\WINDOWS\Fonts\ANTQUAB.TTF
*\WINDOWS\Fonts\ANTQUABI.TTF
*\WINDOWS\Fonts\ANTQUAI.TTF
*\WINDOWS\Fonts\app775.fon
*\WINDOWS\Fonts\app850.fon
*\WINDOWS\Fonts\app852.fon
*\WINDOWS\Fonts\app855.fon
*\WINDOWS\Fonts\app857.fon
*\WINDOWS\Fonts\app866.fon
*\WINDOWS\Fonts\ARBLI___.TTF
*\WINDOWS\Fonts\arial.ttf
*\WINDOWS\Fonts\arialbd.ttf
*\WINDOWS\Fonts\arialbi.ttf
*\WINDOWS\Fonts\ariali.ttf
*\WINDOWS\Fonts\ARIALN.TTF
*\WINDOWS\Fonts\ARIALNB.TTF
*\WINDOWS\Fonts\ARIALNBI.TTF
*\WINDOWS\Fonts\ARIALNI.TTF
*\WINDOWS\Fonts\ariblk.ttf
*\WINDOWS\Fonts\BKANT.TTF
*\WINDOWS\Fonts\BOOKOS.TTF
*\WINDOWS\Fonts\BOOKOSB.TTF
*\WINDOWS\Fonts\BOOKOSBI.TTF
*\WINDOWS\Fonts\BOOKOSI.TTF
*\WINDOWS\Fonts\BradhITC.TTF
*\WINDOWS\Fonts\cga40737.fon
*\WINDOWS\Fonts\cga40850.fon
*\WINDOWS\Fonts\cga40852.fon
*\WINDOWS\Fonts\cga40857.fon
*\WINDOWS\Fonts\cga40866.fon
*\WINDOWS\Fonts\cga40869.fon
*\WINDOWS\Fonts\cga40woa.fon
*\WINDOWS\Fonts\cga80737.fon
*\WINDOWS\Fonts\cga80850.fon
*\WINDOWS\Fonts\cga80852.fon
*\WINDOWS\Fonts\cga80857.fon
*\WINDOWS\Fonts\cga80866.fon
*\WINDOWS\Fonts\cga80869.fon
*\WINDOWS\Fonts\cga80woa.fon
*\WINDOWS\Fonts\comic.ttf
*\WINDOWS\Fonts\comicbd.ttf
*\WINDOWS\Fonts\Coprgtb.TTF
*\WINDOWS\Fonts\Coprgtl.TTF
*\WINDOWS\Fonts\coue1257.fon
*\WINDOWS\Fonts\couf1257.fon
*\WINDOWS\Fonts\cour.ttf
*\WINDOWS\Fonts\courbd.ttf
*\WINDOWS\Fonts\courbi.ttf
*\WINDOWS\Fonts\coure.fon
*\WINDOWS\Fonts\couree.fon
*\WINDOWS\Fonts\coureg.fon
*\WINDOWS\Fonts\courer.fon
*\WINDOWS\Fonts\couret.fon
*\WINDOWS\Fonts\courf.fon
*\WINDOWS\Fonts\courfe.fon
*\WINDOWS\Fonts\courfg.fon
*\WINDOWS\Fonts\courfr.fon
*\WINDOWS\Fonts\courft.fon
*\WINDOWS\Fonts\couri.ttf
*\WINDOWS\Fonts\Curlz___.TTF
*\WINDOWS\Fonts\desktop.ini
*\WINDOWS\Fonts\dos737.fon
*\WINDOWS\Fonts\dosapp.fon
*\WINDOWS\Fonts\ega40737.fon
*\WINDOWS\Fonts\ega40850.fon
*\WINDOWS\Fonts\ega40852.fon
*\WINDOWS\Fonts\ega40857.fon
*\WINDOWS\Fonts\ega40866.fon
*\WINDOWS\Fonts\ega40869.fon
*\WINDOWS\Fonts\ega40woa.fon
*\WINDOWS\Fonts\ega80737.fon
*\WINDOWS\Fonts\ega80850.fon
*\WINDOWS\Fonts\ega80852.fon
*\WINDOWS\Fonts\ega80857.fon
*\WINDOWS\Fonts\ega80866.fon
*\WINDOWS\Fonts\ega80869.fon
*\WINDOWS\Fonts\ega80woa.fon
*\WINDOWS\Fonts\Engr.TTF
*\WINDOWS\Fonts\Engrb.TTF
*\WINDOWS\Fonts\Erasdemi.TTF
*\WINDOWS\Fonts\Eraslght.TTF
*\WINDOWS\Fonts\estre.ttf
*\WINDOWS\Fonts\Eurosti.TTF
*\WINDOWS\Fonts\Eurostib.TTF
*\WINDOWS\Fonts\Felixti.TTF
*\WINDOWS\Fonts\Frabk.TTF
*\WINDOWS\Fonts\Frabkit.TTF
*\WINDOWS\Fonts\Fradm.TTF
*\WINDOWS\Fonts\Fradmcn.TTF
*\WINDOWS\Fonts\Fradmit.TTF
*\WINDOWS\Fonts\Frahv.TTF
*\WINDOWS\Fonts\Frahvit.TTF
*\WINDOWS\Fonts\framd.ttf
*\WINDOWS\Fonts\FRAMDCN.TTF
*\WINDOWS\Fonts\framdit.ttf
*\WINDOWS\Fonts\Frscript.TTF
*\WINDOWS\Fonts\GARA.TTF
*\WINDOWS\Fonts\GARABD.TTF
*\WINDOWS\Fonts\GARAIT.TTF
*\WINDOWS\Fonts\gautami.ttf
*\WINDOWS\Fonts\georgia.ttf
*\WINDOWS\Fonts\georgiab.ttf
*\WINDOWS\Fonts\georgiai.ttf
*\WINDOWS\Fonts\georgiaz.ttf
*\WINDOWS\Fonts\GOTHIC.TTF
*\WINDOWS\Fonts\GOTHICB.TTF
*\WINDOWS\Fonts\GOTHICBI.TTF
*\WINDOWS\Fonts\GOTHICI.TTF
*\WINDOWS\Fonts\impact.ttf
*\WINDOWS\Fonts\ITCBlkad.TTF
*\WINDOWS\Fonts\ITCEdscr.TTF
*\WINDOWS\Fonts\ITCKrist.TTF
*\WINDOWS\Fonts\latha.ttf
*\WINDOWS\Fonts\Lsans.TTF
*\WINDOWS\Fonts\Lsansd.TTF
*\WINDOWS\Fonts\Lsansdi.TTF
*\WINDOWS\Fonts\Lsansi.TTF
*\WINDOWS\Fonts\lsansuni.ttf
*\WINDOWS\Fonts\lucon.ttf
*\WINDOWS\Fonts\l_10646.ttf
*\WINDOWS\Fonts\mangal.ttf
*\WINDOWS\Fonts\marlett.ttf
*\WINDOWS\Fonts\matisse_.ttf
*\WINDOWS\Fonts\micross.ttf
*\WINDOWS\Fonts\Mistral.TTF
*\WINDOWS\Fonts\modern.fon
*\WINDOWS\Fonts\MTCORSVA.TTF
*\WINDOWS\Fonts\mvboli.ttf
*\WINDOWS\Fonts\OLDENGLT.TTF
*\WINDOWS\Fonts\pala.ttf
*\WINDOWS\Fonts\palab.ttf
*\WINDOWS\Fonts\palabi.ttf
*\WINDOWS\Fonts\palai.ttf
*\WINDOWS\Fonts\Papyrus.TTF
*\WINDOWS\Fonts\Perbi___.TTF
*\WINDOWS\Fonts\Perb____.TTF
*\WINDOWS\Fonts\Peri____.TTF
*\WINDOWS\Fonts\Per_____.TTF
*\WINDOWS\Fonts\raavi.ttf
*\WINDOWS\Fonts\Rockeb.TTF
*\WINDOWS\Fonts\roman.fon
*\WINDOWS\Fonts\script.fon
*\WINDOWS\Fonts\sere1257.fon
*\WINDOWS\Fonts\serf1257.fon
*\WINDOWS\Fonts\serife.fon
*\WINDOWS\Fonts\serifee.fon
*\WINDOWS\Fonts\serifeg.fon
*\WINDOWS\Fonts\serifer.fon
*\WINDOWS\Fonts\serifet.fon
*\WINDOWS\Fonts\seriff.fon
*\WINDOWS\Fonts\seriffe.fon
*\WINDOWS\Fonts\seriffg.fon
*\WINDOWS\Fonts\seriffr.fon
*\WINDOWS\Fonts\serifft.fon
*\WINDOWS\Fonts\shruti.ttf
*\WINDOWS\Fonts\smae1257.fon
*\WINDOWS\Fonts\smaf1257.fon
*\WINDOWS\Fonts\smalle.fon
*\WINDOWS\Fonts\smallee.fon
*\WINDOWS\Fonts\smalleg.fon
*\WINDOWS\Fonts\smaller.fon
*\WINDOWS\Fonts\smallet.fon
*\WINDOWS\Fonts\smallf.fon
*\WINDOWS\Fonts\smallfe.fon
*\WINDOWS\Fonts\smallfg.fon
*\WINDOWS\Fonts\smallfr.fon
*\WINDOWS\Fonts\smallft.fon
*\WINDOWS\Fonts\ssee1257.fon
*\WINDOWS\Fonts\ssef1257.fon
*\WINDOWS\Fonts\sserife.fon
*\WINDOWS\Fonts\sserifee.fon
*\WINDOWS\Fonts\sserifeg.fon
*\WINDOWS\Fonts\sserifer.fon
*\WINDOWS\Fonts\sserifet.fon
*\WINDOWS\Fonts\sseriff.fon
*\WINDOWS\Fonts\sseriffe.fon
*\WINDOWS\Fonts\sseriffg.fon
*\WINDOWS\Fonts\sseriffr.fon
*\WINDOWS\Fonts\sserifft.fon
*\WINDOWS\Fonts\sylfaen.ttf
*\WINDOWS\Fonts\symbol.ttf
*\WINDOWS\Fonts\symbole.fon
*\WINDOWS\Fonts\tahoma.ttf
*\WINDOWS\Fonts\tahomabd.ttf
*\WINDOWS\Fonts\TempsITC.TTF
*\WINDOWS\Fonts\times.ttf
*\WINDOWS\Fonts\timesbd.ttf
*\WINDOWS\Fonts\timesbi.ttf
*\WINDOWS\Fonts\timesi.ttf
*\WINDOWS\Fonts\trebuc.ttf
*\WINDOWS\Fonts\trebucbd.ttf
*\WINDOWS\Fonts\trebucbi.ttf
*\WINDOWS\Fonts\trebucit.ttf
*\WINDOWS\Fonts\tunga.ttf
*\WINDOWS\Fonts\verdana.ttf
*\WINDOWS\Fonts\verdanab.ttf
*\WINDOWS\Fonts\verdanai.ttf
*\WINDOWS\Fonts\verdanaz.ttf
*\WINDOWS\Fonts\vga737.fon
*\WINDOWS\Fonts\vga775.fon
*\WINDOWS\Fonts\vga850.fon
*\WINDOWS\Fonts\vga852.fon
*\WINDOWS\Fonts\vga855.fon
*\WINDOWS\Fonts\vga857.fon
*\WINDOWS\Fonts\vga860.fon
*\WINDOWS\Fonts\vga863.fon
*\WINDOWS\Fonts\vga865.fon
*\WINDOWS\Fonts\vga866.fon
*\WINDOWS\Fonts\vga869.fon
*\WINDOWS\Fonts\vgaf1257.fon
*\WINDOWS\Fonts\vgafix.fon
*\WINDOWS\Fonts\vgafixe.fon
*\WINDOWS\Fonts\vgafixg.fon
*\WINDOWS\Fonts\vgafixr.fon
*\WINDOWS\Fonts\vgafixt.fon
*\WINDOWS\Fonts\vgaoem.fon
*\WINDOWS\Fonts\vgas1257.fon
*\WINDOWS\Fonts\vgasys.fon
*\WINDOWS\Fonts\vgasyse.fon
*\WINDOWS\Fonts\vgasysg.fon
*\WINDOWS\Fonts\vgasysr.fon
*\WINDOWS\Fonts\vgasyst.fon
*\WINDOWS\Fonts\Vivaldii.TTF
*\WINDOWS\Fonts\webdings.ttf
*\WINDOWS\Fonts\wingding.ttf
*\WINDOWS\Fonts\WINGDNG2.TTF
*\WINDOWS\Fonts\WINGDNG3.TTF
*\WINDOWS\Fonts\wst_czec.fon
*\WINDOWS\Fonts\wst_engl.fon
*\WINDOWS\Fonts\wst_fren.fon
*\WINDOWS\Fonts\wst_germ.fon
*\WINDOWS\Fonts\wst_ital.fon
*\WINDOWS\Fonts\wst_span.fon
*\WINDOWS\Fonts\wst_swed.fon
*\WINDOWS\Help\access.chm
*\WINDOWS\Help\access.hlp
*\WINDOWS\Help\accessib.chm
*\WINDOWS\Help\acc_dis.chm
*\WINDOWS\Help\aclui.hlp
*\WINDOWS\Help\addremov.chm
*\WINDOWS\Help\ade.hlp
*\WINDOWS\Help\admtools.chm
*\WINDOWS\Help\adprop.hlp
*\WINDOWS\Help\agt040c.GID
*\WINDOWS\Help\atm.chm
*\WINDOWS\Help\audiocdc.hlp
*\WINDOWS\Help\bckg.chm
*\WINDOWS\Help\blurbs.chm
*\WINDOWS\Help\bnts.dll
*\WINDOWS\Help\bootcons.chm
*\WINDOWS\Help\brief.chm
*\WINDOWS\Help\calc.chm
*\WINDOWS\Help\calc.hlp
*\WINDOWS\Help\camera.chm
*\WINDOWS\Help\camera.hlp
*\WINDOWS\Help\cdmedia.chm
*\WINDOWS\Help\cdmedia.hlp
*\WINDOWS\Help\certmgr.chm
*\WINDOWS\Help\certmgr.hlp
*\WINDOWS\Help\charmap.chm
*\WINDOWS\Help\charmap.hlp
*\WINDOWS\Help\chkr.chm
*\WINDOWS\Help\chnscsvr.hlp
*\WINDOWS\Help\chooser.hlp
*\WINDOWS\Help\ciadmin.htm
*\WINDOWS\Help\ciquery.htm
*\WINDOWS\Help\clipbrd.chm
*\WINDOWS\Help\clipbrd.hlp
*\WINDOWS\Help\cmconcepts.chm
*\WINDOWS\Help\colormgt.chm
*\WINDOWS\Help\comexp.chm
*\WINDOWS\Help\comexp.hlp
*\WINDOWS\Help\common.chm
*\WINDOWS\Help\compfldr.chm
*\WINDOWS\Help\compmgmt.chm
*\WINDOWS\Help\compstui.hlp
*\WINDOWS\Help\conf.chm
*\WINDOWS\Help\conf.cnt
*\WINDOWS\Help\conf.hlp
*\WINDOWS\Help\connect.cnt
*\WINDOWS\Help\connect.hlp
*\WINDOWS\Help\cpanel.chm
*\WINDOWS\Help\cpanel.chq
*\WINDOWS\Help\cscui.hlp
*\WINDOWS\Help\cyycoins.chm
*\WINDOWS\Help\cyzcoins.chm
*\WINDOWS\Help\datetime.chm
*\WINDOWS\Help\ddeshare.chm
*\WINDOWS\Help\ddeshare.hlp
*\WINDOWS\Help\defrag.chm
*\WINDOWS\Help\defrag.hlp
*\WINDOWS\Help\devmgr.chm
*\WINDOWS\Help\devmgr.hlp
*\WINDOWS\Help\dfs.hlp
*\WINDOWS\Help\diagboot.chm
*\WINDOWS\Help\dialer.chm
*\WINDOWS\Help\dialer.hlp
*\WINDOWS\Help\digiras.chm
*\WINDOWS\Help\dijoy.hlp
*\WINDOWS\Help\diskmgmt.chm
*\WINDOWS\Help\diskmgmt.hlp
*\WINDOWS\Help\display.chm
*\WINDOWS\Help\display.hlp
*\WINDOWS\Help\dkconcepts.chm
*\WINDOWS\Help\drvvfp.chm
*\WINDOWS\Help\drwtsn32.chm
*\WINDOWS\Help\drwtsn32.hlp
*\WINDOWS\Help\dsclient.hlp
*\WINDOWS\Help\dskquoui.chm
*\WINDOWS\Help\dskquoui.hlp
*\WINDOWS\Help\dxdiag.chm
*\WINDOWS\Help\els.chm
*\WINDOWS\Help\els.hlp
*\WINDOWS\Help\eudcedit.chm
*\WINDOWS\Help\eudcedit.hlp
*\WINDOWS\Help\evconcepts.chm
*\WINDOWS\Help\evntwin.hlp
*\WINDOWS\Help\filefold.chm
*\WINDOWS\Help\filefold.hlp
*\WINDOWS\Help\filemgmt.hlp
*\WINDOWS\Help\file_srv.chm
*\WINDOWS\Help\find.chm
*\WINDOWS\Help\folderop.chm
*\WINDOWS\Help\fonts.chm
*\WINDOWS\Help\fonts.hlp
*\WINDOWS\Help\freecell.chm
*\WINDOWS\Help\freecell.hlp
*\WINDOWS\Help\fxsclnt.chm
*\WINDOWS\Help\fxsclnt.hlp
*\WINDOWS\Help\fxscover.chm
*\WINDOWS\Help\fxsshare.chm
*\WINDOWS\Help\Glossary.chm
*\WINDOWS\Help\halftone.hlp
*\WINDOWS\Help\hardware.chm
*\WINDOWS\Help\howto.chm
*\WINDOWS\Help\hrtz.chm
*\WINDOWS\Help\hs.chm
*\WINDOWS\Help\hschelp.chm
*\WINDOWS\Help\hypertrm.chm
*\WINDOWS\Help\hypertrm.hlp
*\WINDOWS\Help\icwdial.chm
*\WINDOWS\Help\ident.hlp
*\WINDOWS\Help\ieeula.chm
*\WINDOWS\Help\ieos.chm
*\WINDOWS\Help\ieshared.chm
*\WINDOWS\Help\iesupp.chm
*\WINDOWS\Help\iewebhlp.chm
*\WINDOWS\Help\iexplore.chm
*\WINDOWS\Help\iexplore.hlp
*\WINDOWS\Help\imgprev.chm
*\WINDOWS\Help\infrared.chm
*\WINDOWS\Help\infrared.hlp
*\WINDOWS\Help\input.chm
*\WINDOWS\Help\input.hlp
*\WINDOWS\Help\ipsecconcepts.chm
*\WINDOWS\Help\ipsecsnp.chm
*\WINDOWS\Help\ipsecsnp.hlp
*\WINDOWS\Help\Ipv6.chm
*\WINDOWS\Help\is.chm
*\WINDOWS\Help\isconcepts.chm
*\WINDOWS\Help\ixhelp.hlp
*\WINDOWS\Help\ixqlang.htm
*\WINDOWS\Help\joy.chm
*\WINDOWS\Help\keyb.chm
*\WINDOWS\Help\keyshort.chm
*\WINDOWS\Help\lang.chm
*\WINDOWS\Help\langbar.chm
*\WINDOWS\Help\license.chm
*\WINDOWS\Help\magnify.chm
*\WINDOWS\Help\magnify.hlp
*\WINDOWS\Help\mail.chm
*\WINDOWS\Help\MALSHF.CNT
*\WINDOWS\Help\MALSHF.HLP
*\WINDOWS\Help\MBLLNK.HLP
*\WINDOWS\Help\mfcuix.hlp
*\WINDOWS\Help\migwiz.htm
*\WINDOWS\Help\migwiz2.htm
*\WINDOWS\Help\misc.chm
*\WINDOWS\Help\mls_trb.chm
*\WINDOWS\Help\mmc.chm
*\WINDOWS\Help\mmc_dlg.hlp
*\WINDOWS\Help\mobsync.chm
*\WINDOWS\Help\mobsync.hlp
*\WINDOWS\Help\mode.chm
*\WINDOWS\Help\modem.hlp
*\WINDOWS\Help\mouse.chm
*\WINDOWS\Help\mouse.hlp
*\WINDOWS\Help\mpconcepts.chm
*\WINDOWS\Help\mplayer2.cnt
*\WINDOWS\Help\mplayer2.hlp
*\WINDOWS\Help\mpnetwrk.hlp
*\WINDOWS\Help\msconfig.chm
*\WINDOWS\Help\msdasc.chm
*\WINDOWS\Help\mshearts.chm
*\WINDOWS\Help\mshearts.cnt
*\WINDOWS\Help\mshearts.hlp
*\WINDOWS\Help\msinfo32.chm
*\WINDOWS\Help\msnauth.cnt
*\WINDOWS\Help\msnauth.hlp
*\WINDOWS\Help\msoe.chm
*\WINDOWS\Help\msoe.hlp
*\WINDOWS\Help\msoeacct.hlp
*\WINDOWS\Help\msorcl32.chm
*\WINDOWS\Help\mspaint.chm
*\WINDOWS\Help\mspaint.hlp
*\WINDOWS\Help\mstask.chm
*\WINDOWS\Help\mstask.hlp
*\WINDOWS\Help\mstsc.chm
*\WINDOWS\Help\netcfg.chm
*\WINDOWS\Help\netcfg.hlp
*\WINDOWS\Help\network.chm
*\WINDOWS\Help\newfeat1.chm
*\WINDOWS\Help\newfeat1.hlp
*\WINDOWS\Help\newfeat2.chm
*\WINDOWS\Help\newfeat2.hlp
*\WINDOWS\Help\newfeat3.chm
*\WINDOWS\Help\newfeat3.hlp
*\WINDOWS\Help\newfeat4.chm
*\WINDOWS\Help\newfeat4.hlp
*\WINDOWS\Help\newfeat5.chm
*\WINDOWS\Help\newfeat5.hlp
*\WINDOWS\Help\nmchat.chm
*\WINDOWS\Help\nmwhiteb.chm
*\WINDOWS\Help\nocontnt.cnt
*\WINDOWS\Help\nofts.chm
*\WINDOWS\Help\notepad.chm
*\WINDOWS\Help\notepad.hlp
*\WINDOWS\Help\ntart.chm
*\WINDOWS\Help\ntchowto.chm
*\WINDOWS\Help\ntcmds.chm
*\WINDOWS\Help\ntdef.chm
*\WINDOWS\Help\nthelp.chm
*\WINDOWS\Help\ntshared.chm
*\WINDOWS\Help\ntshrui.hlp
*\WINDOWS\Help\nusrmgr.chm
*\WINDOWS\Help\nwdoc.chm
*\WINDOWS\Help\objsel.hlp
*\WINDOWS\Help\odbcinst.chm
*\WINDOWS\Help\odbcjet.chm
*\WINDOWS\Help\oe_msgr.chm
*\WINDOWS\Help\omc.chm
*\WINDOWS\Help\osk.chm
*\WINDOWS\Help\osk.hlp
*\WINDOWS\Help\packager.chm
*\WINDOWS\Help\password.chm
*\WINDOWS\Help\PEG.CNT
*\WINDOWS\Help\peg.GID
*\WINDOWS\Help\PEG.HLP
*\WINDOWS\Help\phowto.chm
*\WINDOWS\Help\pinball.chm
*\WINDOWS\Help\pinball.hlp
*\WINDOWS\Help\plyr_err.chm
*\WINDOWS\Help\printing.chm
*\WINDOWS\Help\progman.cnt
*\WINDOWS\Help\progman.hlp
*\WINDOWS\Help\pwrmn.chm
*\WINDOWS\Help\pwrmn.hlp
*\WINDOWS\Help\qosconcepts.chm
*\WINDOWS\Help\ratings.chm
*\WINDOWS\Help\ratings.cnt
*\WINDOWS\Help\ratings.hlp
*\WINDOWS\Help\reader.chm
*\WINDOWS\Help\reader.hlp
*\WINDOWS\Help\recycle.chm
*\WINDOWS\Help\regedit.chm
*\WINDOWS\Help\regedit.hlp
*\WINDOWS\Help\regopt.chm
*\WINDOWS\Help\remasst.chm
*\WINDOWS\Help\rsm.chm
*\WINDOWS\Help\rsm.hlp
*\WINDOWS\Help\rsmconcepts.chm
*\WINDOWS\Help\rvse.chm
*\WINDOWS\Help\sapicpl.hlp
*\WINDOWS\Help\scarddlg.hlp
*\WINDOWS\Help\secauth.hlp
*\WINDOWS\Help\sendcmsg.chm
*\WINDOWS\Help\sendcmsg.hlp
*\WINDOWS\Help\sfmmgr.hlp
*\WINDOWS\Help\shell.hlp
*\WINDOWS\Help\shvl.chm
*\WINDOWS\Help\signin.hlp
*\WINDOWS\Help\sigverif.hlp
*\WINDOWS\Help\smlogcfg.chm
*\WINDOWS\Help\sndvol32.chm
*\WINDOWS\Help\sndvol32.hlp
*\WINDOWS\Help\sniffpol.dll
*\WINDOWS\Help\snmpconcepts.chm
*\WINDOWS\Help\snmpsnap.hlp
*\WINDOWS\Help\sol.chm
*\WINDOWS\Help\sol.hlp
*\WINDOWS\Help\soundrec.chm
*\WINDOWS\Help\soundrec.hlp
*\WINDOWS\Help\sounds.chm
*\WINDOWS\Help\speech.chm
*\WINDOWS\Help\spider.chm
*\WINDOWS\Help\spider.hlp
*\WINDOWS\Help\splash.chm
*\WINDOWS\Help\sr_ui.chm
*\WINDOWS\Help\sstub.dll
*\WINDOWS\Help\supp_ed.chm
*\WINDOWS\Help\sysdm.chm
*\WINDOWS\Help\sysdm.hlp
*\WINDOWS\Help\sysmon.chm
*\WINDOWS\Help\sysmon.hlp
*\WINDOWS\Help\sysprop.chm
*\WINDOWS\Help\sysrestore.chm
*\WINDOWS\Help\sysrestore.hlp
*\WINDOWS\Help\sys_srv.chm
*\WINDOWS\Help\tapi.chm
*\WINDOWS\Help\tapi.hlp
*\WINDOWS\Help\taskbar.chm
*\WINDOWS\Help\taskmgr.chm
*\WINDOWS\Help\taskmgr.hlp
*\WINDOWS\Help\tcpip.chm
*\WINDOWS\Help\tcpmon.hlp
*\WINDOWS\Help\telnet.chm
*\WINDOWS\Help\telnet.hlp
*\WINDOWS\Help\timesrv.chm
*\WINDOWS\Help\tshoot.chm
*\WINDOWS\Help\tshoot.dll
*\WINDOWS\Help\twain.cnt
*\WINDOWS\Help\twain.hlp
*\WINDOWS\Help\update.cnt
*\WINDOWS\Help\useract.chm
*\WINDOWS\Help\utilmgr.chm
*\WINDOWS\Help\utilmgr.hlp
*\WINDOWS\Help\verifier.hlp
*\WINDOWS\Help\wab.chm
*\WINDOWS\Help\wab.hlp
*\WINDOWS\Help\wbemtest.chm
*\WINDOWS\Help\webpub.chm
*\WINDOWS\Help\whatsnew.chm
*\WINDOWS\Help\winchat.chm
*\WINDOWS\Help\winchat.hlp
*\WINDOWS\Help\windows.chm
*\WINDOWS\Help\windows.chq
*\WINDOWS\Help\windows.cnt
*\WINDOWS\Help\windows.hlp
*\WINDOWS\Help\winhlp32.cnt
*\WINDOWS\Help\winhlp32.hlp
*\WINDOWS\Help\wininstl.chm
*\WINDOWS\Help\winmine.chm
*\WINDOWS\Help\winmine.hlp
*\WINDOWS\Help\win_dos.chm
*\WINDOWS\Help\wmp10.chm
*\WINDOWS\Help\wmperr10.chm
*\WINDOWS\Help\wmplayer.chm
*\WINDOWS\Help\wordpad.chm
*\WINDOWS\Help\wordpad.hlp
*\WINDOWS\Help\wpa.chm
*\WINDOWS\Help\wscript.chm
*\WINDOWS\Help\wscript.hlp
*\WINDOWS\Help\wshconcepts.chm
*\WINDOWS\ime\mscandui.dll
*\WINDOWS\ime\SOFTKBD.DLL
*\WINDOWS\ime\SPTIP.dll
*\WINDOWS\inf\1394.inf
*\WINDOWS\inf\1394.PNF
*\WINDOWS\inf\1394vdbg.inf
*\WINDOWS\inf\1394vdbg.PNF
*\WINDOWS\inf\3dfxvs2k.inf
*\WINDOWS\inf\3dfxvs2k.PNF
*\WINDOWS\inf\61883.inf
*\WINDOWS\inf\61883.PNF
*\WINDOWS\inf\accessor.inf
*\WINDOWS\inf\accessor.PNF
*\WINDOWS\inf\acerscan.inf
*\WINDOWS\inf\acerscan.PNF
*\WINDOWS\inf\acpi.inf
*\WINDOWS\inf\acpi.PNF
*\WINDOWS\inf\adm_mult.inf
*\WINDOWS\inf\adm_mult.PNF
*\WINDOWS\inf\adm_port.inf
*\WINDOWS\inf\adm_port.PNF
*\WINDOWS\inf\agtinst.inf
*\WINDOWS\inf\agtinst.PNF
*\WINDOWS\inf\apcompat.inf
*\WINDOWS\inf\apcompat.PNF
*\WINDOWS\inf\appmig.inf
*\WINDOWS\inf\appmig.PNF
*\WINDOWS\inf\apps.inf
*\WINDOWS\inf\apps.PNF
*\WINDOWS\inf\asynceqn.inf
*\WINDOWS\inf\asynceqn.PNF
*\WINDOWS\inf\atiintaa.inf
*\WINDOWS\inf\atiintaa.PNF
*\WINDOWS\inf\atim128.inf
*\WINDOWS\inf\atim128.PNF
*\WINDOWS\inf\atimpab.inf
*\WINDOWS\inf\atimpab.PNF
*\WINDOWS\inf\atiradn1.inf
*\WINDOWS\inf\atiradn1.PNF
*\WINDOWS\inf\atirage3.inf
*\WINDOWS\inf\atirage3.PNF
*\WINDOWS\inf\atividin.inf
*\WINDOWS\inf\atividin.PNF
*\WINDOWS\inf\au.inf
*\WINDOWS\inf\au.PNF
*\WINDOWS\inf\avc.inf
*\WINDOWS\inf\avc.PNF
*\WINDOWS\inf\avmisdn.inf
*\WINDOWS\inf\avmisdn.PNF
*\WINDOWS\inf\axant5.inf
*\WINDOWS\inf\axant5.PNF
*\WINDOWS\inf\banner.inf
*\WINDOWS\inf\banner.PNF
*\WINDOWS\inf\banshee.inf
*\WINDOWS\inf\banshee.PNF
*\WINDOWS\inf\battery.inf
*\WINDOWS\inf\battery.PNF
*\WINDOWS\inf\bda.inf
*\WINDOWS\inf\bda.PNF
*\WINDOWS\inf\biosinfo.inf
*\WINDOWS\inf\biosinfo.PNF
*\WINDOWS\inf\branches.inf
*\WINDOWS\inf\branches.PNF
*\WINDOWS\inf\brmfcmdm.inf
*\WINDOWS\inf\brmfcmdm.PNF
*\WINDOWS\inf\brmfcmf.inf
*\WINDOWS\inf\brmfcmf.PNF
*\WINDOWS\inf\brmfcsto.inf
*\WINDOWS\inf\brmfcsto.PNF
*\WINDOWS\inf\brmfcumd.inf
*\WINDOWS\inf\brmfcumd.PNF
*\WINDOWS\inf\brmfcwia.inf
*\WINDOWS\inf\brmfcwia.PNF
*\WINDOWS\inf\brmfport.inf
*\WINDOWS\inf\brmfport.PNF
*\WINDOWS\inf\camdsh20.inf
*\WINDOWS\inf\camdsh20.PNF
*\WINDOWS\inf\camvid20.inf
*\WINDOWS\inf\camvid20.PNF
*\WINDOWS\inf\camvid30.inf
*\WINDOWS\inf\camvid30.PNF
*\WINDOWS\inf\ccdecode.inf
*\WINDOWS\inf\ccdecode.PNF
*\WINDOWS\inf\cdrom.inf
*\WINDOWS\inf\cdrom.PNF
*\WINDOWS\inf\certclas.inf
*\WINDOWS\inf\certclas.PNF
*\WINDOWS\inf\codecs10.inf
*\WINDOWS\inf\codecs10.PNF
*\WINDOWS\inf\communic.inf
*\WINDOWS\inf\communic.PNF
*\WINDOWS\inf\comnt5.inf
*\WINDOWS\inf\comnt5.PNF
*\WINDOWS\inf\corelist.inf
*\WINDOWS\inf\corelist.PNF
*\WINDOWS\inf\cpu.inf
*\WINDOWS\inf\cpu.PNF
*\WINDOWS\inf\ctmaport.inf
*\WINDOWS\inf\ctmaport.PNF
*\WINDOWS\inf\cyclad-z.inf
*\WINDOWS\inf\cyclad-z.PNF
*\WINDOWS\inf\cyclom-y.inf
*\WINDOWS\inf\cyclom-y.PNF
*\WINDOWS\inf\cyyport.inf
*\WINDOWS\inf\cyyport.PNF
*\WINDOWS\inf\cyzport.inf
*\WINDOWS\inf\cyzport.PNF
*\WINDOWS\inf\defltwk.inf
*\WINDOWS\inf\defltwk.PNF
*\WINDOWS\inf\devxprop.inf
*\WINDOWS\inf\devxprop.PNF
*\WINDOWS\inf\dfrg.inf
*\WINDOWS\inf\dfrg.PNF
*\WINDOWS\inf\dgaport.inf
*\WINDOWS\inf\dgaport.PNF
*\WINDOWS\inf\dgasync.inf
*\WINDOWS\inf\dgasync.PNF
*\WINDOWS\inf\digiasyn.inf
*\WINDOWS\inf\digiasyn.PNF
*\WINDOWS\inf\digiisdn.inf
*\WINDOWS\inf\digiisdn.PNF
*\WINDOWS\inf\digimps.inf
*\WINDOWS\inf\digimps.PNF
*\WINDOWS\inf\digirp.inf
*\WINDOWS\inf\digirp.PNF
*\WINDOWS\inf\digirprt.inf
*\WINDOWS\inf\digirprt.PNF
*\WINDOWS\inf\dimaps.inf
*\WINDOWS\inf\dimaps.PNF
*\WINDOWS\inf\disk.inf
*\WINDOWS\inf\disk.PNF
*\WINDOWS\inf\display.inf
*\WINDOWS\inf\display.PNF
*\WINDOWS\inf\divac.inf
*\WINDOWS\inf\divac.PNF
*\WINDOWS\inf\divasrv.inf
*\WINDOWS\inf\divasrv.PNF
*\WINDOWS\inf\dlmax.PNF
*\WINDOWS\inf\dot4.inf
*\WINDOWS\inf\dot4.PNF
*\WINDOWS\inf\dot4prt.inf
*\WINDOWS\inf\dot4prt.PNF
*\WINDOWS\inf\DRM10.inf
*\WINDOWS\inf\DRM10.PNF
*\WINDOWS\inf\drvindex.inf
*\WINDOWS\inf\drvindex.PNF
*\WINDOWS\inf\dshowext.inf
*\WINDOWS\inf\dshowext.PNF
*\WINDOWS\inf\dtcnt5.inf
*\WINDOWS\inf\dtcnt5.PNF
*\WINDOWS\inf\dvd.inf
*\WINDOWS\inf\dvd.PNF
*\WINDOWS\inf\dwup.inf
*\WINDOWS\inf\dwup.PNF
*\WINDOWS\inf\enum1394.inf
*\WINDOWS\inf\enum1394.PNF
*\WINDOWS\inf\epcfw2k.inf
*\WINDOWS\inf\epcfw2k.PNF
*\WINDOWS\inf\epsnmfp.inf
*\WINDOWS\inf\epsnmfp.PNF
*\WINDOWS\inf\epsnscan.inf
*\WINDOWS\inf\epsnscan.PNF
*\WINDOWS\inf\epstw2k.inf
*\WINDOWS\inf\epstw2k.PNF
*\WINDOWS\inf\eqnport.inf
*\WINDOWS\inf\eqnport.PNF
*\WINDOWS\inf\Erma.inf
*\WINDOWS\inf\Erma.PNF
*\WINDOWS\inf\fdc.inf
*\WINDOWS\inf\fdc.PNF
*\WINDOWS\inf\fjtscan.inf
*\WINDOWS\inf\fjtscan.PNF
*\WINDOWS\inf\flash.inf
*\WINDOWS\inf\flash.PNF
*\WINDOWS\inf\flpydisk.inf
*\WINDOWS\inf\flpydisk.PNF
*\WINDOWS\inf\font.inf
*\WINDOWS\inf\font.PNF
*\WINDOWS\inf\fp40ext.inf
*\WINDOWS\inf\fp40ext.PNF
*\WINDOWS\inf\fsvga.inf
*\WINDOWS\inf\fsvga.PNF
*\WINDOWS\inf\fsvgaadd.inf
*\WINDOWS\inf\fsvgaadd.PNF
*\WINDOWS\inf\fsvgadel.inf
*\WINDOWS\inf\fsvgadel.PNF
*\WINDOWS\inf\fxsocm.inf
*\WINDOWS\inf\fxsocm.PNF
*\WINDOWS\inf\g200.inf
*\WINDOWS\inf\g200.PNF
*\WINDOWS\inf\g400.inf
*\WINDOWS\inf\g400.PNF
*\WINDOWS\inf\gameport.inf
*\WINDOWS\inf\gameport.PNF
*\WINDOWS\inf\games.inf
*\WINDOWS\inf\games.PNF
*\WINDOWS\inf\genprint.inf
*\WINDOWS\inf\genprint.PNF
*\WINDOWS\inf\hal.inf
*\WINDOWS\inf\hal.PNF
*\WINDOWS\inf\hidserv.inf
*\WINDOWS\inf\hidserv.PNF
*\WINDOWS\inf\hpdigwia.inf
*\WINDOWS\inf\hpdigwia.PNF
*\WINDOWS\inf\hpojscan.inf
*\WINDOWS\inf\hpojscan.PNF
*\WINDOWS\inf\hpscan.inf
*\WINDOWS\inf\hpscan.PNF
*\WINDOWS\inf\i740nt5.inf
*\WINDOWS\inf\i740nt5.PNF
*\WINDOWS\inf\i81xnt5.inf
*\WINDOWS\inf\i81xnt5.PNF
*\WINDOWS\inf\i81xwfp0.inf
*\WINDOWS\inf\i81xwfp0.PNF
*\WINDOWS\inf\i81xwfp1.inf
*\WINDOWS\inf\i81xwfp1.PNF
*\WINDOWS\inf\i81xwfp2.inf
*\WINDOWS\inf\i81xwfp2.PNF
*\WINDOWS\inf\i81xwfp3.inf
*\WINDOWS\inf\i81xwfp3.PNF
*\WINDOWS\inf\i81xwfp4.inf
*\WINDOWS\inf\i81xwfp4.PNF
*\WINDOWS\inf\i81xwtv0.inf
*\WINDOWS\inf\i81xwtv0.PNF
*\WINDOWS\inf\i81xwtv1.inf
*\WINDOWS\inf\i81xwtv1.PNF
*\WINDOWS\inf\i81xwtv2.inf
*\WINDOWS\inf\i81xwtv2.PNF
*\WINDOWS\inf\i81xwtv3.inf
*\WINDOWS\inf\i81xwtv3.PNF
*\WINDOWS\inf\i81xwtv4.inf
*\WINDOWS\inf\i81xwtv4.PNF
*\WINDOWS\inf\ibmvcap.inf
*\WINDOWS\inf\ibmvcap.PNF
*\WINDOWS\inf\icam3.inf
*\WINDOWS\inf\icam3.PNF
*\WINDOWS\inf\icam4usb.inf
*\WINDOWS\inf\icam4usb.PNF
*\WINDOWS\inf\icam5usb.inf
*\WINDOWS\inf\icam5usb.PNF
*\WINDOWS\inf\icminst.inf
*\WINDOWS\inf\icminst.PNF
*\WINDOWS\inf\icwnt5.inf
*\WINDOWS\inf\icwnt5.PNF
*\WINDOWS\inf\ie.inf
*\WINDOWS\inf\ie.PNF
*\WINDOWS\inf\ieaccess.inf
*\WINDOWS\inf\ieaccess.PNF
*\WINDOWS\inf\iereset.inf
*\WINDOWS\inf\iereset.PNF
*\WINDOWS\inf\igames.inf
*\WINDOWS\inf\igames.PNF
*\WINDOWS\inf\iis.inf
*\WINDOWS\inf\iis.PNF
*\WINDOWS\inf\image.inf
*\WINDOWS\inf\image.PNF
*\WINDOWS\inf\ims.inf
*\WINDOWS\inf\ims.PNF
*\WINDOWS\inf\INFCACHE.1
*\WINDOWS\inf\input.inf
*\WINDOWS\inf\input.PNF
*\WINDOWS\inf\intl.inf
*\WINDOWS\inf\intl.PNF
*\WINDOWS\inf\irdaalif.inf
*\WINDOWS\inf\irdaalif.PNF
*\WINDOWS\inf\irdasmc.inf
*\WINDOWS\inf\irdasmc.PNF
*\WINDOWS\inf\irmk7w2k.inf
*\WINDOWS\inf\irmk7w2k.PNF
*\WINDOWS\inf\irnsc.inf
*\WINDOWS\inf\irnsc.PNF
*\WINDOWS\inf\irstusb.inf
*\WINDOWS\inf\irstusb.PNF
*\WINDOWS\inf\irtos4mo.inf
*\WINDOWS\inf\irtos4mo.PNF
*\WINDOWS\inf\kdk2x0.inf
*\WINDOWS\inf\kdk2x0.PNF
*\WINDOWS\inf\kdkscan.inf
*\WINDOWS\inf\kdkscan.PNF
*\WINDOWS\inf\keyboard.inf
*\WINDOWS\inf\keyboard.PNF
*\WINDOWS\inf\kodak.inf
*\WINDOWS\inf\kodak.PNF
*\WINDOWS\inf\ks.inf
*\WINDOWS\inf\ks.PNF
*\WINDOWS\inf\kscaptur.inf
*\WINDOWS\inf\kscaptur.PNF
*\WINDOWS\inf\ksfilter.inf
*\WINDOWS\inf\ksfilter.PNF
*\WINDOWS\inf\layout.inf
*\WINDOWS\inf\LAYOUT.PNF
*\WINDOWS\inf\legcydrv.inf
*\WINDOWS\inf\legcydrv.PNF
*\WINDOWS\inf\lwngmadi.inf
*\WINDOWS\inf\lwngmadi.PNF
*\WINDOWS\inf\lwusbhid.inf
*\WINDOWS\inf\lwusbhid.PNF
*\WINDOWS\inf\machine.inf
*\WINDOWS\inf\machine.PNF
*\WINDOWS\inf\malunin.inf
*\WINDOWS\inf\malunin.PNF
*\WINDOWS\inf\mchgr.inf
*\WINDOWS\inf\mchgr.PNF
*\WINDOWS\inf\mdac.inf
*\WINDOWS\inf\mdac.PNF
*\WINDOWS\inf\mdm3com.inf
*\WINDOWS\inf\mdm3com.PNF
*\WINDOWS\inf\mdm3cpcm.inf
*\WINDOWS\inf\mdm3cpcm.PNF
*\WINDOWS\inf\mdm3mini.inf
*\WINDOWS\inf\mdm3mini.PNF
*\WINDOWS\inf\mdm5674a.inf
*\WINDOWS\inf\mdm5674a.PNF
*\WINDOWS\inf\mdm656n5.inf
*\WINDOWS\inf\mdm656n5.PNF
*\WINDOWS\inf\mdmadc.inf
*\WINDOWS\inf\mdmadc.PNF
*\WINDOWS\inf\mdmairte.inf
*\WINDOWS\inf\mdmairte.PNF
*\WINDOWS\inf\mdmaiwa.inf
*\WINDOWS\inf\mdmaiwa.PNF
*\WINDOWS\inf\mdmaiwa3.inf
*\WINDOWS\inf\mdmaiwa3.PNF
*\WINDOWS\inf\mdmaiwa4.inf
*\WINDOWS\inf\mdmaiwa4.PNF
*\WINDOWS\inf\mdmaiwa5.inf
*\WINDOWS\inf\mdmaiwa5.PNF
*\WINDOWS\inf\mdmaiwat.inf
*\WINDOWS\inf\mdmaiwat.PNF
*\WINDOWS\inf\mdmar1.inf
*\WINDOWS\inf\mdmar1.PNF
*\WINDOWS\inf\mdmarch.inf
*\WINDOWS\inf\mdmarch.PNF
*\WINDOWS\inf\mdmarn.inf
*\WINDOWS\inf\mdmarn.PNF
*\WINDOWS\inf\mdmati.inf
*\WINDOWS\inf\mdmati.PNF
*\WINDOWS\inf\mdmatm2k.inf
*\WINDOWS\inf\mdmatm2k.PNF
*\WINDOWS\inf\mdmatt.inf
*\WINDOWS\inf\mdmatt.PNF
*\WINDOWS\inf\mdmaus.inf
*\WINDOWS\inf\mdmaus.PNF
*\WINDOWS\inf\mdmbcmsm.inf
*\WINDOWS\inf\mdmbcmsm.PNF
*\WINDOWS\inf\mdmboca.inf
*\WINDOWS\inf\mdmboca.PNF
*\WINDOWS\inf\mdmbsb.inf
*\WINDOWS\inf\mdmbsb.PNF
*\WINDOWS\inf\mdmbug3.inf
*\WINDOWS\inf\mdmbug3.PNF
*\WINDOWS\inf\mdmbw561.INF
*\WINDOWS\inf\mdmbw561.PNF
*\WINDOWS\inf\mdmc26a.INF
*\WINDOWS\inf\mdmc26a.PNF
*\WINDOWS\inf\mdmcdp.inf
*\WINDOWS\inf\mdmcdp.PNF
*\WINDOWS\inf\mdmchipv.inf
*\WINDOWS\inf\mdmchipv.PNF
*\WINDOWS\inf\mdmcm28.inf
*\WINDOWS\inf\mdmcm28.PNF
*\WINDOWS\inf\mdmcodex.inf
*\WINDOWS\inf\mdmcodex.PNF
*\WINDOWS\inf\mdmcom1.inf
*\WINDOWS\inf\mdmcom1.PNF
*\WINDOWS\inf\mdmcommu.inf
*\WINDOWS\inf\mdmcommu.PNF
*\WINDOWS\inf\mdmcomp.inf
*\WINDOWS\inf\mdmcomp.PNF
*\WINDOWS\inf\mdmcpq.inf
*\WINDOWS\inf\mdmcpq.PNF
*\WINDOWS\inf\mdmcpq2.inf
*\WINDOWS\inf\mdmcpq2.PNF
*\WINDOWS\inf\mdmcpv.inf
*\WINDOWS\inf\mdmcpv.PNF
*\WINDOWS\inf\mdmcrtix.inf
*\WINDOWS\inf\mdmcrtix.PNF
*\WINDOWS\inf\mdmcxsft.inf
*\WINDOWS\inf\mdmcxsft.PNF
*\WINDOWS\inf\mdmdcm5.inf
*\WINDOWS\inf\mdmdcm5.PNF
*\WINDOWS\inf\mdmdcm6.inf
*\WINDOWS\inf\mdmdcm6.PNF
*\WINDOWS\inf\mdmdf56F.inf
*\WINDOWS\inf\mdmdf56F.PNF
*\WINDOWS\inf\mdmdgden.inf
*\WINDOWS\inf\mdmdgden.PNF
*\WINDOWS\inf\mdmdgitn.inf
*\WINDOWS\inf\mdmdgitn.PNF
*\WINDOWS\inf\mdmdigi.inf
*\WINDOWS\inf\mdmdigi.PNF
*\WINDOWS\inf\mdmdp2.inf
*\WINDOWS\inf\mdmdp2.PNF
*\WINDOWS\inf\mdmdsi.inf
*\WINDOWS\inf\mdmdsi.PNF
*\WINDOWS\inf\mdmdyna.inf
*\WINDOWS\inf\mdmdyna.PNF
*\WINDOWS\inf\mdmeiger.inf
*\WINDOWS\inf\mdmeiger.PNF
*\WINDOWS\inf\mdmelsa.inf
*\WINDOWS\inf\mdmelsa.PNF
*\WINDOWS\inf\mdmeric.inf
*\WINDOWS\inf\mdmeric.PNF
*\WINDOWS\inf\mdmeric2.inf
*\WINDOWS\inf\mdmeric2.PNF
*\WINDOWS\inf\mdmess.inf
*\WINDOWS\inf\mdmess.PNF
*\WINDOWS\inf\mdmetech.inf
*\WINDOWS\inf\mdmetech.PNF
*\WINDOWS\inf\mdmexp.inf
*\WINDOWS\inf\mdmexp.PNF
*\WINDOWS\inf\mdmfj2.inf
*\WINDOWS\inf\mdmfj2.PNF
*\WINDOWS\inf\mdmgatew.inf
*\WINDOWS\inf\mdmgatew.PNF
*\WINDOWS\inf\mdmgcs.inf
*\WINDOWS\inf\mdmgcs.PNF
*\WINDOWS\inf\mdmgen.inf
*\WINDOWS\inf\mdmgen.PNF
*\WINDOWS\inf\mdmgl001.inf
*\WINDOWS\inf\mdmgl001.PNF
*\WINDOWS\inf\mdmgl002.inf
*\WINDOWS\inf\mdmgl002.PNF
*\WINDOWS\inf\mdmgl003.inf
*\WINDOWS\inf\mdmgl003.PNF
*\WINDOWS\inf\mdmgl004.inf
*\WINDOWS\inf\mdmgl004.PNF
*\WINDOWS\inf\mdmgl005.inf
*\WINDOWS\inf\mdmgl005.PNF
*\WINDOWS\inf\mdmgl006.inf
*\WINDOWS\inf\mdmgl006.PNF
*\WINDOWS\inf\mdmgl007.inf
*\WINDOWS\inf\mdmgl007.PNF
*\WINDOWS\inf\mdmgl008.inf
*\WINDOWS\inf\mdmgl008.PNF
*\WINDOWS\inf\mdmgl009.inf
*\WINDOWS\inf\mdmgl009.PNF
*\WINDOWS\inf\mdmgl010.inf
*\WINDOWS\inf\mdmgl010.PNF
*\WINDOWS\inf\mdmgsm.inf
*\WINDOWS\inf\mdmgsm.PNF
*\WINDOWS\inf\mdmhaeu.inf
*\WINDOWS\inf\mdmhaeu.PNF
*\WINDOWS\inf\mdmhandy.inf
*\WINDOWS\inf\mdmhandy.PNF
*\WINDOWS\inf\mdmhay2.inf
*\WINDOWS\inf\mdmhay2.PNF
*\WINDOWS\inf\mdmhayes.inf
*\WINDOWS\inf\mdmhayes.PNF
*\WINDOWS\inf\mdminfot.inf
*\WINDOWS\inf\mdminfot.PNF
*\WINDOWS\inf\mdmintel.inf
*\WINDOWS\inf\mdmintel.PNF
*\WINDOWS\inf\mdmiodat.inf
*\WINDOWS\inf\mdmiodat.PNF
*\WINDOWS\inf\mdmirmdm.inf
*\WINDOWS\inf\mdmirmdm.PNF
*\WINDOWS\inf\mdmisdn.inf
*\WINDOWS\inf\mdmisdn.PNF
*\WINDOWS\inf\MDMJF56E.INF
*\WINDOWS\inf\MDMJF56E.PNF
*\WINDOWS\inf\mdmke.inf
*\WINDOWS\inf\mdmke.PNF
*\WINDOWS\inf\mdmkortx.inf
*\WINDOWS\inf\mdmkortx.PNF
*\WINDOWS\inf\mdmlasat.inf
*\WINDOWS\inf\mdmlasat.PNF
*\WINDOWS\inf\mdmlasno.inf
*\WINDOWS\inf\mdmlasno.PNF
*\WINDOWS\inf\mdmlt3.inf
*\WINDOWS\inf\mdmlt3.PNF
*\WINDOWS\inf\mdmltleo.inf
*\WINDOWS\inf\mdmltleo.PNF
*\WINDOWS\inf\mdmltsft.inf
*\WINDOWS\inf\mdmltsft.PNF
*\WINDOWS\inf\mdmlucnt.inf
*\WINDOWS\inf\mdmlucnt.PNF
*\WINDOWS\inf\mdmmc288.inf
*\WINDOWS\inf\mdmmc288.PNF
*\WINDOWS\inf\mdmmcd.inf
*\WINDOWS\inf\mdmmcd.PNF
*\WINDOWS\inf\mdmmcom.inf
*\WINDOWS\inf\mdmmcom.PNF
*\WINDOWS\inf\mdmmct.inf
*\WINDOWS\inf\mdmmct.PNF
*\WINDOWS\inf\mdmmega.inf
*\WINDOWS\inf\mdmmega.PNF
*\WINDOWS\inf\mdmmetri.inf
*\WINDOWS\inf\mdmmetri.PNF
*\WINDOWS\inf\mdmmhrtz.inf
*\WINDOWS\inf\mdmmhrtz.PNF
*\WINDOWS\inf\mdmmhza.inf
*\WINDOWS\inf\mdmmhza.PNF
*\WINDOWS\inf\mdmmhzel.inf
*\WINDOWS\inf\mdmmhzel.PNF
*\WINDOWS\inf\mdmmhzk1.inf
*\WINDOWS\inf\mdmmhzk1.PNF
*\WINDOWS\inf\mdmminij.inf
*\WINDOWS\inf\mdmminij.PNF
*\WINDOWS\inf\mdmmod.inf
*\WINDOWS\inf\mdmmod.PNF
*\WINDOWS\inf\mdmmoto.inf
*\WINDOWS\inf\mdmmoto.PNF
*\WINDOWS\inf\mdmmoto1.inf
*\WINDOWS\inf\mdmmoto1.PNF
*\WINDOWS\inf\mdmmotou.inf
*\WINDOWS\inf\mdmmotou.PNF
*\WINDOWS\inf\mdmmts.inf
*\WINDOWS\inf\mdmmts.PNF
*\WINDOWS\inf\mdmneuhs.inf
*\WINDOWS\inf\mdmneuhs.PNF
*\WINDOWS\inf\Mdmnis1u.inf
*\WINDOWS\inf\Mdmnis1u.PNF
*\WINDOWS\inf\Mdmnis2u.inf
*\WINDOWS\inf\Mdmnis2u.PNF
*\WINDOWS\inf\Mdmnis3t.inf
*\WINDOWS\inf\Mdmnis3t.PNF
*\WINDOWS\inf\Mdmnis5t.inf
*\WINDOWS\inf\Mdmnis5t.PNF
*\WINDOWS\inf\mdmnokia.inf
*\WINDOWS\inf\mdmnokia.PNF
*\WINDOWS\inf\mdmnova.inf
*\WINDOWS\inf\mdmnova.PNF
*\WINDOWS\inf\mdmntt1.INF
*\WINDOWS\inf\mdmntt1.PNF
*\WINDOWS\inf\mdmnttd2.inf
*\WINDOWS\inf\mdmnttd2.PNF
*\WINDOWS\inf\mdmnttd6.inf
*\WINDOWS\inf\mdmnttd6.PNF
*\WINDOWS\inf\mdmnttme.INF
*\WINDOWS\inf\mdmnttme.PNF
*\WINDOWS\inf\mdmnttp.inf
*\WINDOWS\inf\mdmnttp.PNF
*\WINDOWS\inf\mdmnttp2.inf
*\WINDOWS\inf\mdmnttp2.PNF
*\WINDOWS\inf\mdmnttte.inf
*\WINDOWS\inf\mdmnttte.PNF
*\WINDOWS\inf\mdmolic.inf
*\WINDOWS\inf\mdmolic.PNF
*\WINDOWS\inf\mdmomrn3.inf
*\WINDOWS\inf\mdmomrn3.PNF
*\WINDOWS\inf\mdmoptn.inf
*\WINDOWS\inf\mdmoptn.PNF
*\WINDOWS\inf\mdmosi.inf
*\WINDOWS\inf\mdmosi.PNF
*\WINDOWS\inf\mdmosice.inf
*\WINDOWS\inf\mdmosice.PNF
*\WINDOWS\inf\mdmpace.inf
*\WINDOWS\inf\mdmpace.PNF
*\WINDOWS\inf\mdmpbit.inf
*\WINDOWS\inf\mdmpbit.PNF
*\WINDOWS\inf\mdmpctel.inf
*\WINDOWS\inf\mdmpctel.PNF
*\WINDOWS\inf\mdmpenr.inf
*\WINDOWS\inf\mdmpenr.PNF
*\WINDOWS\inf\mdmpin.inf
*\WINDOWS\inf\mdmpin.PNF
*\WINDOWS\inf\mdmpn1.inf
*\WINDOWS\inf\mdmpn1.PNF
*\WINDOWS\inf\mdmpp.inf
*\WINDOWS\inf\mdmpp.PNF
*\WINDOWS\inf\mdmpsion.inf
*\WINDOWS\inf\mdmpsion.PNF
*\WINDOWS\inf\mdmracal.inf
*\WINDOWS\inf\mdmracal.PNF
*\WINDOWS\inf\mdmrisa.inf
*\WINDOWS\inf\mdmrisa.PNF
*\WINDOWS\inf\mdmrock.inf
*\WINDOWS\inf\mdmrock.PNF
*\WINDOWS\inf\mdmrock3.inf
*\WINDOWS\inf\mdmrock3.PNF
*\WINDOWS\inf\mdmrock4.inf
*\WINDOWS\inf\mdmrock4.PNF
*\WINDOWS\inf\mdmrock5.inf
*\WINDOWS\inf\mdmrock5.PNF
*\WINDOWS\inf\mdmrpci.inf
*\WINDOWS\inf\mdmrpci.PNF
*\WINDOWS\inf\mdmrpciw.inf
*\WINDOWS\inf\mdmrpciw.PNF
*\WINDOWS\inf\mdmsetup.inf
*\WINDOWS\inf\mdmsetup.PNF
*\WINDOWS\inf\mdmsgsml.inf
*\WINDOWS\inf\mdmsgsml.PNF
*\WINDOWS\inf\mdmsgsmu.inf
*\WINDOWS\inf\mdmsgsmu.PNF
*\WINDOWS\inf\mdmsier.inf
*\WINDOWS\inf\mdmsier.PNF
*\WINDOWS\inf\mdmsii64.INF
*\WINDOWS\inf\mdmsii64.PNF
*\WINDOWS\inf\mdmsiil6.INF
*\WINDOWS\inf\mdmsiil6.PNF
*\WINDOWS\inf\mdmsmart.inf
*\WINDOWS\inf\mdmsmart.PNF
*\WINDOWS\inf\mdmsonyu.inf
*\WINDOWS\inf\mdmsonyu.PNF
*\WINDOWS\inf\mdmspq28.inf
*\WINDOWS\inf\mdmspq28.PNF
*\WINDOWS\inf\mdmsun1.inf
*\WINDOWS\inf\mdmsun1.PNF
*\WINDOWS\inf\mdmsun2.inf
*\WINDOWS\inf\mdmsun2.PNF
*\WINDOWS\inf\mdmsupr3.inf
*\WINDOWS\inf\mdmsupr3.PNF
*\WINDOWS\inf\mdmsupra.inf
*\WINDOWS\inf\mdmsupra.PNF
*\WINDOWS\inf\mdmsuprv.inf
*\WINDOWS\inf\mdmsuprv.PNF
*\WINDOWS\inf\mdmtdk.inf
*\WINDOWS\inf\mdmtdk.PNF
*\WINDOWS\inf\mdmtdkj2.inf
*\WINDOWS\inf\mdmtdkj2.PNF
*\WINDOWS\inf\mdmtdkj3.inf
*\WINDOWS\inf\mdmtdkj3.PNF
*\WINDOWS\inf\mdmtdkj4.inf
*\WINDOWS\inf\mdmtdkj4.PNF
*\WINDOWS\inf\mdmtdkj5.inf
*\WINDOWS\inf\mdmtdkj5.PNF
*\WINDOWS\inf\mdmtdkj6.inf
*\WINDOWS\inf\mdmtdkj6.PNF
*\WINDOWS\inf\mdmtdkj7.inf
*\WINDOWS\inf\mdmtdkj7.PNF
*\WINDOWS\inf\mdmtexas.inf
*\WINDOWS\inf\mdmtexas.PNF
*\WINDOWS\inf\mdmti.inf
*\WINDOWS\inf\mdmti.PNF
*\WINDOWS\inf\mdmtosh.inf
*\WINDOWS\inf\mdmtosh.PNF
*\WINDOWS\inf\mdmtron.inf
*\WINDOWS\inf\mdmtron.PNF
*\WINDOWS\inf\mdmusrf.inf
*\WINDOWS\inf\mdmusrf.PNF
*\WINDOWS\inf\mdmusrg.inf
*\WINDOWS\inf\mdmusrg.PNF
*\WINDOWS\inf\mdmusrgl.inf
*\WINDOWS\inf\mdmusrgl.PNF
*\WINDOWS\inf\mdmusrk1.inf
*\WINDOWS\inf\mdmusrk1.PNF
*\WINDOWS\inf\mdmusrsp.inf
*\WINDOWS\inf\mdmusrsp.PNF
*\WINDOWS\inf\mdmvdot.inf
*\WINDOWS\inf\mdmvdot.PNF
*\WINDOWS\inf\mdmvv.inf
*\WINDOWS\inf\mdmvv.PNF
*\WINDOWS\inf\mdmwhql0.inf
*\WINDOWS\inf\mdmwhql0.PNF
*\WINDOWS\inf\mdmx5560.inf
*\WINDOWS\inf\mdmx5560.PNF
*\WINDOWS\inf\mdmxircc.inf
*\WINDOWS\inf\mdmxircc.PNF
*\WINDOWS\inf\mdmxirmp.inf
*\WINDOWS\inf\mdmxirmp.PNF
*\WINDOWS\inf\mdmzoom.inf
*\WINDOWS\inf\mdmzoom.PNF
*\WINDOWS\inf\mdmzyp.inf
*\WINDOWS\inf\mdmzyp.PNF
*\WINDOWS\inf\mdmzyxel.inf
*\WINDOWS\inf\mdmzyxel.PNF
*\WINDOWS\inf\mdmzyxlg.inf
*\WINDOWS\inf\mdmzyxlg.PNF
*\WINDOWS\inf\memcard.inf
*\WINDOWS\inf\memcard.PNF
*\WINDOWS\inf\memstpci.inf
*\WINDOWS\inf\memstpci.PNF
*\WINDOWS\inf\mf.inf
*\WINDOWS\inf\mf.PNF
*\WINDOWS\inf\mfcem28.inf
*\WINDOWS\inf\mfcem28.PNF
*\WINDOWS\inf\mfcem33.inf
*\WINDOWS\inf\mfcem33.PNF
*\WINDOWS\inf\mfcem56.inf
*\WINDOWS\inf\mfcem56.PNF
*\WINDOWS\inf\mff56n5.inf
*\WINDOWS\inf\mff56n5.PNF
*\WINDOWS\inf\mflm.inf
*\WINDOWS\inf\mflm.PNF
*\WINDOWS\inf\mflm56.inf
*\WINDOWS\inf\mflm56.PNF
*\WINDOWS\inf\mfmhzn5.inf
*\WINDOWS\inf\mfmhzn5.PNF
*\WINDOWS\inf\mfosi5.inf
*\WINDOWS\inf\mfosi5.PNF
*\WINDOWS\inf\mfsocket.inf
*\WINDOWS\inf\mfsocket.PNF
*\WINDOWS\inf\mfsupra.inf
*\WINDOWS\inf\mfsupra.PNF
*\WINDOWS\inf\mfx56nf.inf
*\WINDOWS\inf\mfx56nf.PNF
*\WINDOWS\inf\mgau.inf
*\WINDOWS\inf\mgau.PNF
*\WINDOWS\inf\minioc.inf
*\WINDOWS\inf\minioc.PNF
*\WINDOWS\inf\mmopt.inf
*\WINDOWS\inf\mmopt.PNF
*\WINDOWS\inf\modemcsa.inf
*\WINDOWS\inf\modemcsa.PNF
*\WINDOWS\inf\monitor.inf
*\WINDOWS\inf\monitor.PNF
*\WINDOWS\inf\monitor2.inf
*\WINDOWS\inf\monitor2.PNF
*\WINDOWS\inf\monitor3.inf
*\WINDOWS\inf\monitor3.PNF
*\WINDOWS\inf\monitor4.inf
*\WINDOWS\inf\monitor4.PNF
*\WINDOWS\inf\monitor5.inf
*\WINDOWS\inf\monitor5.PNF
*\WINDOWS\inf\monitor6.inf
*\WINDOWS\inf\monitor6.PNF
*\WINDOWS\inf\monitor7.inf
*\WINDOWS\inf\monitor7.PNF
*\WINDOWS\inf\monitor8.inf
*\WINDOWS\inf\monitor8.PNF
*\WINDOWS\inf\moviemk.inf
*\WINDOWS\inf\moviemk.PNF
*\WINDOWS\inf\MPCD10.inf
*\WINDOWS\inf\MPCD10.PNF
*\WINDOWS\inf\mpe.inf
*\WINDOWS\inf\mpe.PNF
*\WINDOWS\inf\mplayer2.bak
*\WINDOWS\inf\mplayer2.inf
*\WINDOWS\inf\mplayer2.PNF
*\WINDOWS\inf\MPPRE10.inf
*\WINDOWS\inf\MPPRE10.PNF
*\WINDOWS\inf\mpsstln.inf
*\WINDOWS\inf\mpsstln.PNF
*\WINDOWS\inf\MPSTUB10.inf
*\WINDOWS\inf\MPSTUB10.PNF
*\WINDOWS\inf\mscpqpa1.inf
*\WINDOWS\inf\mscpqpa1.PNF
*\WINDOWS\inf\msdv.inf
*\WINDOWS\inf\msdv.PNF
*\WINDOWS\inf\mshdc.inf
*\WINDOWS\inf\mshdc.PNF
*\WINDOWS\inf\msinfo32.inf
*\WINDOWS\inf\msinfo32.PNF
*\WINDOWS\inf\msmouse.inf
*\WINDOWS\inf\msmouse.PNF
*\WINDOWS\inf\msmscsi.inf
*\WINDOWS\inf\msmscsi.PNF
*\WINDOWS\inf\msmsgs.inf
*\WINDOWS\inf\msmsgs.PNF
*\WINDOWS\inf\msmusb.inf
*\WINDOWS\inf\msmusb.PNF
*\WINDOWS\inf\msnetmtg.inf
*\WINDOWS\inf\msnetmtg.PNF
*\WINDOWS\inf\msnike.inf
*\WINDOWS\inf\msnike.PNF
*\WINDOWS\inf\msnmsn.inf
*\WINDOWS\inf\msnmsn.PNF
*\WINDOWS\inf\msoe50.inf
*\WINDOWS\inf\msoe50.PNF
*\WINDOWS\inf\msports.inf
*\WINDOWS\inf\msports.PNF
*\WINDOWS\inf\msrio.inf
*\WINDOWS\inf\msrio.PNF
*\WINDOWS\inf\msrio8.inf
*\WINDOWS\inf\msrio8.PNF
*\WINDOWS\inf\mstape.inf
*\WINDOWS\inf\mstape.PNF
*\WINDOWS\inf\mstask.inf
*\WINDOWS\inf\mstask.PNF
*\WINDOWS\inf\mtxvideo.inf
*\WINDOWS\inf\mtxvideo.PNF
*\WINDOWS\inf\multimed.inf
*\WINDOWS\inf\multimed.PNF
*\WINDOWS\inf\multiprt.inf
*\WINDOWS\inf\multiprt.PNF
*\WINDOWS\inf\mvskey.PNF
*\WINDOWS\inf\mwavmdm1.inf
*\WINDOWS\inf\mwavmdm1.PNF
*\WINDOWS\inf\mwmbatam.inf
*\WINDOWS\inf\mwmbatam.PNF
*\WINDOWS\inf\mwremove.inf
*\WINDOWS\inf\mwremove.PNF
*\WINDOWS\inf\mwtpdsp.inf
*\WINDOWS\inf\mwtpdsp.PNF
*\WINDOWS\inf\mxboard.inf
*\WINDOWS\inf\mxboard.PNF
*\WINDOWS\inf\mxport.inf
*\WINDOWS\inf\mxport.PNF
*\WINDOWS\inf\mymusic.inf
*\WINDOWS\inf\mymusic.PNF
*\WINDOWS\inf\nabtsfec.inf
*\WINDOWS\inf\nabtsfec.PNF
*\WINDOWS\inf\ndisip.inf
*\WINDOWS\inf\ndisip.PNF
*\WINDOWS\inf\ndisuio.inf
*\WINDOWS\inf\ndisuio.PNF
*\WINDOWS\inf\neo20xx.inf
*\WINDOWS\inf\neo20xx.PNF
*\WINDOWS\inf\net10.inf
*\WINDOWS\inf\net10.PNF
*\WINDOWS\inf\net1394.inf
*\WINDOWS\inf\net1394.PNF
*\WINDOWS\inf\net21x4.inf
*\WINDOWS\inf\net21x4.PNF
*\WINDOWS\inf\net3c556.inf
*\WINDOWS\inf\net3c556.PNF
*\WINDOWS\inf\net3c589.inf
*\WINDOWS\inf\net3c589.PNF
*\WINDOWS\inf\net3c985.inf
*\WINDOWS\inf\net3c985.PNF
*\WINDOWS\inf\net3sr.inf
*\WINDOWS\inf\net3sr.PNF
*\WINDOWS\inf\net5515n.inf
*\WINDOWS\inf\net5515n.PNF
*\WINDOWS\inf\net557.inf
*\WINDOWS\inf\net557.PNF
*\WINDOWS\inf\net559ib.inf
*\WINDOWS\inf\net559ib.PNF
*\WINDOWS\inf\net575nt.inf
*\WINDOWS\inf\net575nt.PNF
*\WINDOWS\inf\net650d.inf
*\WINDOWS\inf\net650d.PNF
*\WINDOWS\inf\net656c5.inf
*\WINDOWS\inf\net656c5.PNF
*\WINDOWS\inf\net656n5.inf
*\WINDOWS\inf\net656n5.PNF
*\WINDOWS\inf\net713.inf
*\WINDOWS\inf\net713.PNF
*\WINDOWS\inf\net83820.inf
*\WINDOWS\inf\net83820.PNF
*\WINDOWS\inf\net8511.inf
*\WINDOWS\inf\net8511.PNF
*\WINDOWS\inf\netac300.inf
*\WINDOWS\inf\netac300.PNF
*\WINDOWS\inf\netali.inf
*\WINDOWS\inf\netali.PNF
*\WINDOWS\inf\netambi.inf
*\WINDOWS\inf\netambi.PNF
*\WINDOWS\inf\netamd.inf
*\WINDOWS\inf\netamd.PNF
*\WINDOWS\inf\netamd2.inf
*\WINDOWS\inf\netamd2.PNF
*\WINDOWS\inf\netamdhl.inf
*\WINDOWS\inf\netamdhl.PNF
*\WINDOWS\inf\netan983.inf
*\WINDOWS\inf\netan983.PNF
*\WINDOWS\inf\netana.inf
*\WINDOWS\inf\netana.PNF
*\WINDOWS\inf\netasp2k.inf
*\WINDOWS\inf\netasp2k.PNF
*\WINDOWS\inf\netauni.inf
*\WINDOWS\inf\netauni.PNF
*\WINDOWS\inf\netb57xp.inf
*\WINDOWS\inf\netb57xp.PNF
*\WINDOWS\inf\netbcm4e.inf
*\WINDOWS\inf\netbcm4e.PNF
*\WINDOWS\inf\netbcm4p.inf
*\WINDOWS\inf\netbcm4p.PNF
*\WINDOWS\inf\netbcm4u.inf
*\WINDOWS\inf\netbcm4u.PNF
*\WINDOWS\inf\netbrdgm.inf
*\WINDOWS\inf\netbrdgm.PNF
*\WINDOWS\inf\netbrdgs.inf
*\WINDOWS\inf\netbrdgs.PNF
*\WINDOWS\inf\netbrzw.inf
*\WINDOWS\inf\netbrzw.PNF
*\WINDOWS\inf\netcb102.inf
*\WINDOWS\inf\netcb102.PNF
*\WINDOWS\inf\netcb325.inf
*\WINDOWS\inf\netcb325.PNF
*\WINDOWS\inf\netcbe.inf
*\WINDOWS\inf\netcbe.PNF
*\WINDOWS\inf\netce2.inf
*\WINDOWS\inf\netce2.PNF
*\WINDOWS\inf\netce3.inf
*\WINDOWS\inf\netce3.PNF
*\WINDOWS\inf\netcem28.inf
*\WINDOWS\inf\netcem28.PNF
*\WINDOWS\inf\netcem33.inf
*\WINDOWS\inf\netcem33.PNF
*\WINDOWS\inf\netcem56.inf
*\WINDOWS\inf\netcem56.PNF
*\WINDOWS\inf\netcicap.inf
*\WINDOWS\inf\netcicap.PNF
*\WINDOWS\inf\netcis.inf
*\WINDOWS\inf\netcis.PNF
*\WINDOWS\inf\netclass.inf
*\WINDOWS\inf\netclass.PNF
*\WINDOWS\inf\netcpqc.inf
*\WINDOWS\inf\netcpqc.PNF
*\WINDOWS\inf\netcpqg.inf
*\WINDOWS\inf\netcpqg.PNF
*\WINDOWS\inf\netcpqi.inf
*\WINDOWS\inf\netcpqi.PNF
*\WINDOWS\inf\netcpqmt.inf
*\WINDOWS\inf\netcpqmt.PNF
*\WINDOWS\inf\netctmrk.inf
*\WINDOWS\inf\netctmrk.PNF
*\WINDOWS\inf\netdav.inf
*\WINDOWS\inf\netdav.PNF
*\WINDOWS\inf\netdefxa.inf
*\WINDOWS\inf\netdefxa.PNF
*\WINDOWS\inf\netdf650.inf
*\WINDOWS\inf\netdf650.PNF
*\WINDOWS\inf\netdgdxb.inf
*\WINDOWS\inf\netdgdxb.PNF
*\WINDOWS\inf\netdlh5x.inf
*\WINDOWS\inf\netdlh5x.PNF
*\WINDOWS\inf\netdm.inf
*\WINDOWS\inf\netdm.PNF
*\WINDOWS\inf\nete1000.inf
*\WINDOWS\inf\nete1000.PNF
*\WINDOWS\inf\nete100i.inf
*\WINDOWS\inf\nete100i.PNF
*\WINDOWS\inf\netejxmp.inf
*\WINDOWS\inf\netejxmp.PNF
*\WINDOWS\inf\netel515.inf
*\WINDOWS\inf\netel515.PNF
*\WINDOWS\inf\netel574.inf
*\WINDOWS\inf\netel574.PNF
*\WINDOWS\inf\netel5x9.inf
*\WINDOWS\inf\netel5x9.PNF
*\WINDOWS\inf\netel90a.inf
*\WINDOWS\inf\netel90a.PNF
*\WINDOWS\inf\netel90b.inf
*\WINDOWS\inf\netel90b.PNF
*\WINDOWS\inf\netel980.inf
*\WINDOWS\inf\netel980.PNF
*\WINDOWS\inf\netel99x.inf
*\WINDOWS\inf\netel99x.PNF
*\WINDOWS\inf\netepicn.inf
*\WINDOWS\inf\netepicn.PNF
*\WINDOWS\inf\netepro.inf
*\WINDOWS\inf\netepro.PNF
*\WINDOWS\inf\netepvcm.inf
*\WINDOWS\inf\netepvcm.PNF
*\WINDOWS\inf\netepvcp.inf
*\WINDOWS\inf\netepvcp.PNF
*\WINDOWS\inf\netex10.inf
*\WINDOWS\inf\netex10.PNF
*\WINDOWS\inf\netf56n5.inf
*\WINDOWS\inf\netf56n5.PNF
*\WINDOWS\inf\netfa312.inf
*\WINDOWS\inf\netfa312.PNF
*\WINDOWS\inf\netfa410.inf
*\WINDOWS\inf\netfa410.PNF
*\WINDOWS\inf\netfjvi.inf
*\WINDOWS\inf\netfjvi.PNF
*\WINDOWS\inf\netfjvj.inf
*\WINDOWS\inf\netfjvj.PNF
*\WINDOWS\inf\netfore.inf
*\WINDOWS\inf\netfore.PNF
*\WINDOWS\inf\netforeh.inf
*\WINDOWS\inf\netforeh.PNF
*\WINDOWS\inf\netgpc.inf
*\WINDOWS\inf\netgpc.PNF
*\WINDOWS\inf\netias.inf
*\WINDOWS\inf\netias.PNF
*\WINDOWS\inf\netibm.inf
*\WINDOWS\inf\netibm.PNF
*\WINDOWS\inf\netibm2.inf
*\WINDOWS\inf\netibm2.PNF
*\WINDOWS\inf\netip6.inf
*\WINDOWS\inf\netip6.PNF
*\WINDOWS\inf\netiprip.inf
*\WINDOWS\inf\netiprip.PNF
*\WINDOWS\inf\netirda.inf
*\WINDOWS\inf\netirda.PNF
*\WINDOWS\inf\netirsir.inf
*\WINDOWS\inf\netirsir.PNF
*\WINDOWS\inf\netklsi.inf
*\WINDOWS\inf\netklsi.PNF
*\WINDOWS\inf\netktc.inf
*\WINDOWS\inf\netktc.PNF
*\WINDOWS\inf\netlanem.inf
*\WINDOWS\inf\netlanem.PNF
*\WINDOWS\inf\netlanep.inf
*\WINDOWS\inf\netlanep.PNF
*\WINDOWS\inf\netlm.inf
*\WINDOWS\inf\netlm.PNF
*\WINDOWS\inf\netlm56.inf
*\WINDOWS\inf\netlm56.PNF
*\WINDOWS\inf\netlnev2.inf
*\WINDOWS\inf\netlnev2.PNF
*\WINDOWS\inf\netloop.inf
*\WINDOWS\inf\netloop.PNF
*\WINDOWS\inf\netlpd.inf
*\WINDOWS\inf\netlpd.PNF
*\WINDOWS\inf\netmadge.inf
*\WINDOWS\inf\netmadge.PNF
*\WINDOWS\inf\netmhzn5.inf
*\WINDOWS\inf\netmhzn5.PNF
*\WINDOWS\inf\netmscli.inf
*\WINDOWS\inf\netmscli.PNF
*\WINDOWS\inf\netnb.inf
*\WINDOWS\inf\netnb.PNF
*\WINDOWS\inf\netnf3.inf
*\WINDOWS\inf\netnf3.PNF
*\WINDOWS\inf\netngr.inf
*\WINDOWS\inf\netngr.PNF
*\WINDOWS\inf\netnm.inf
*\WINDOWS\inf\netnm.PNF
*\WINDOWS\inf\netnovel.inf
*\WINDOWS\inf\netnovel.PNF
*\WINDOWS\inf\netnwlnk.inf
*\WINDOWS\inf\netnwlnk.PNF
*\WINDOWS\inf\netoc.inf
*\WINDOWS\inf\netoc.PNF
*\WINDOWS\inf\netosi2c.inf
*\WINDOWS\inf\netosi2c.PNF
*\WINDOWS\inf\netosi5.inf
*\WINDOWS\inf\netosi5.PNF
*\WINDOWS\inf\netpc100.inf
*\WINDOWS\inf\netpc100.PNF
*\WINDOWS\inf\netpnic.inf
*\WINDOWS\inf\netpnic.PNF
*\WINDOWS\inf\netpsa.inf
*\WINDOWS\inf\netpsa.PNF
*\WINDOWS\inf\netpschd.inf
*\WINDOWS\inf\netpschd.PNF
*\WINDOWS\inf\netpwr2.inf
*\WINDOWS\inf\netpwr2.PNF
*\WINDOWS\inf\netrasa.inf
*\WINDOWS\inf\netrasa.PNF
*\WINDOWS\inf\netrass.inf
*\WINDOWS\inf\netrass.PNF
*\WINDOWS\inf\netrast.inf
*\WINDOWS\inf\netrast.PNF
*\WINDOWS\inf\netrlw2k.inf
*\WINDOWS\inf\netrlw2k.PNF
*\WINDOWS\inf\netrsvp.inf
*\WINDOWS\inf\netrsvp.PNF
*\WINDOWS\inf\netrtpnt.inf
*\WINDOWS\inf\netrtpnt.PNF
*\WINDOWS\inf\netrtsnt.inf
*\WINDOWS\inf\netrtsnt.PNF
*\WINDOWS\inf\netrwan.inf
*\WINDOWS\inf\netrwan.PNF
*\WINDOWS\inf\netsap.inf
*\WINDOWS\inf\netsap.PNF
*\WINDOWS\inf\netserv.inf
*\WINDOWS\inf\netserv.PNF
*\WINDOWS\inf\netsis.inf
*\WINDOWS\inf\netsis.PNF
*\WINDOWS\inf\netsk98.inf
*\WINDOWS\inf\netsk98.PNF
*\WINDOWS\inf\netsk_fp.inf
*\WINDOWS\inf\netsk_fp.PNF
*\WINDOWS\inf\netsla30.inf
*\WINDOWS\inf\netsla30.PNF
*\WINDOWS\inf\netsmc.inf
*\WINDOWS\inf\netsmc.PNF
*\WINDOWS\inf\netsnip.inf
*\WINDOWS\inf\netsnip.PNF
*\WINDOWS\inf\netsnmp.inf
*\WINDOWS\inf\netsnmp.PNF
*\WINDOWS\inf\nettb155.inf
*\WINDOWS\inf\nettb155.PNF
*\WINDOWS\inf\nettcpip.inf
*\WINDOWS\inf\nettcpip.PNF
*\WINDOWS\inf\nettdkb.inf
*\WINDOWS\inf\nettdkb.PNF
*\WINDOWS\inf\nettiger.inf
*\WINDOWS\inf\nettiger.PNF
*\WINDOWS\inf\nettpro.inf
*\WINDOWS\inf\nettpro.PNF
*\WINDOWS\inf\nettpsmp.inf
*\WINDOWS\inf\nettpsmp.PNF
*\WINDOWS\inf\netupnp.inf
*\WINDOWS\inf\netupnp.PNF
*\WINDOWS\inf\netupnph.inf
*\WINDOWS\inf\netupnph.PNF
*\WINDOWS\inf\netvt86.inf
*\WINDOWS\inf\netvt86.PNF
*\WINDOWS\inf\netw840.inf
*\WINDOWS\inf\netw840.PNF
*\WINDOWS\inf\netw926.inf
*\WINDOWS\inf\netw926.PNF
*\WINDOWS\inf\netw940.inf
*\WINDOWS\inf\netw940.PNF
*\WINDOWS\inf\netwlan.inf
*\WINDOWS\inf\netwlan.PNF
*\WINDOWS\inf\netwlan2.inf
*\WINDOWS\inf\netwlan2.PNF
*\WINDOWS\inf\netwv48.inf
*\WINDOWS\inf\netwv48.PNF
*\WINDOWS\inf\netwzc.inf
*\WINDOWS\inf\netwzc.PNF
*\WINDOWS\inf\netx500.inf
*\WINDOWS\inf\netx500.PNF
*\WINDOWS\inf\netx56n5.inf
*\WINDOWS\inf\netx56n5.PNF
*\WINDOWS\inf\netxcpq.inf
*\WINDOWS\inf\netxcpq.PNF
*\WINDOWS\inf\ntapm.inf
*\WINDOWS\inf\ntapm.PNF
*\WINDOWS\inf\ntgrip.inf
*\WINDOWS\inf\ntgrip.PNF
*\WINDOWS\inf\ntprint.inf
*\WINDOWS\inf\ntprint.PNF
*\WINDOWS\inf\nv3.inf
*\WINDOWS\inf\nv3.PNF
*\WINDOWS\inf\nv4.inf
*\WINDOWS\inf\nv4.PNF
*\WINDOWS\inf\oem0.inf
*\WINDOWS\inf\oem0.PNF
*\WINDOWS\inf\oem1.inf
*\WINDOWS\inf\oem1.PNF
*\WINDOWS\inf\oem10.inf
*\WINDOWS\inf\oem10.PNF
*\WINDOWS\inf\oem11.inf
*\WINDOWS\inf\oem11.PNF
*\WINDOWS\inf\oem12.inf
*\WINDOWS\inf\oem12.PNF
*\WINDOWS\inf\oem13.inf
*\WINDOWS\inf\oem13.PNF
*\WINDOWS\inf\oem14.inf
*\WINDOWS\inf\oem14.PNF
*\WINDOWS\inf\oem15.inf
*\WINDOWS\inf\oem15.PNF
*\WINDOWS\inf\oem16.inf
*\WINDOWS\inf\oem16.PNF
*\WINDOWS\inf\oem17.inf
*\WINDOWS\inf\oem17.PNF
*\WINDOWS\inf\oem18.inf
*\WINDOWS\inf\oem18.PNF
*\WINDOWS\inf\oem19.inf
*\WINDOWS\inf\oem19.PNF
*\WINDOWS\inf\oem2.inf
*\WINDOWS\inf\oem2.PNF
*\WINDOWS\inf\oem20.inf
*\WINDOWS\inf\oem20.PNF
*\WINDOWS\inf\oem21.inf
*\WINDOWS\inf\oem21.PNF
*\WINDOWS\inf\oem22.inf
*\WINDOWS\inf\oem3.inf
*\WINDOWS\inf\oem3.PNF
*\WINDOWS\inf\oem4.inf
*\WINDOWS\inf\oem4.PNF
*\WINDOWS\inf\oem5.inf
*\WINDOWS\inf\oem5.PNF
*\WINDOWS\inf\oem6.inf
*\WINDOWS\inf\oem6.PNF
*\WINDOWS\inf\oem7.inf
*\WINDOWS\inf\oem7.PNF
*\WINDOWS\inf\oem8.inf
*\WINDOWS\inf\oem8.PNF
*\WINDOWS\inf\oem9.inf
*\WINDOWS\inf\oem9.PNF
*\WINDOWS\inf\oobe.inf
*\WINDOWS\inf\oobe.PNF
*\WINDOWS\inf\optional.inf
*\WINDOWS\inf\optional.PNF
*\WINDOWS\inf\ovcam.inf
*\WINDOWS\inf\ovcam.PNF
*\WINDOWS\inf\ovcomp.inf
*\WINDOWS\inf\ovcomp.PNF
*\WINDOWS\inf\ovsound.inf
*\WINDOWS\inf\ovsound.PNF
*\WINDOWS\inf\pchealth.inf
*\WINDOWS\inf\pchealth.PNF
*\WINDOWS\inf\pcmcia.inf
*\WINDOWS\inf\pcmcia.PNF
*\WINDOWS\inf\perm2.inf
*\WINDOWS\inf\perm2.PNF
*\WINDOWS\inf\perm3.inf
*\WINDOWS\inf\perm3.PNF
*\WINDOWS\inf\phdsext.inf
*\WINDOWS\inf\phdsext.PNF
*\WINDOWS\inf\phil1vid.inf
*\WINDOWS\inf\phil1vid.PNF
*\WINDOWS\inf\phil2vid.inf
*\WINDOWS\inf\phil2vid.PNF
*\WINDOWS\inf\phildec.inf
*\WINDOWS\inf\phildec.PNF
*\WINDOWS\inf\philtune.inf
*\WINDOWS\inf\philtune.PNF
*\WINDOWS\inf\pinball.inf
*\WINDOWS\inf\pinball.PNF
*\WINDOWS\inf\pmxmcro.inf
*\WINDOWS\inf\pmxmcro.PNF
*\WINDOWS\inf\pnpscsi.inf
*\WINDOWS\inf\pnpscsi.PNF
*\WINDOWS\inf\ppa.inf
*\WINDOWS\inf\ppa.PNF
*\WINDOWS\inf\ppa3.inf
*\WINDOWS\inf\ppa3.PNF
*\WINDOWS\inf\printupg.inf
*\WINDOWS\inf\printupg.PNF
*\WINDOWS\inf\prtupg9x.inf
*\WINDOWS\inf\prtupg9x.PNF
*\WINDOWS\inf\ptpusb.inf
*\WINDOWS\inf\ptpusb.PNF
*\WINDOWS\inf\Pynix.PNF
*\WINDOWS\inf\qmgr.inf
*\WINDOWS\inf\qmgr.PNF
*\WINDOWS\inf\ricoh.inf
*\WINDOWS\inf\ricoh.PNF
*\WINDOWS\inf\rootau.inf
*\WINDOWS\inf\rootau.PNF
*\WINDOWS\inf\s3nb.inf
*\WINDOWS\inf\s3nb.PNF
*\WINDOWS\inf\s3sav3d.inf
*\WINDOWS\inf\s3sav3d.PNF
*\WINDOWS\inf\s3sav4.inf
*\WINDOWS\inf\s3sav4.PNF
*\WINDOWS\inf\s3savmx.inf
*\WINDOWS\inf\s3savmx.PNF
*\WINDOWS\inf\s3trio3d.inf
*\WINDOWS\inf\s3trio3d.PNF
*\WINDOWS\inf\sapi5.inf
*\WINDOWS\inf\sapi5.PNF
*\WINDOWS\inf\sbp2.inf
*\WINDOWS\inf\sbp2.PNF
*\WINDOWS\inf\sceregvl.inf
*\WINDOWS\inf\sceregvl.PNF
*\WINDOWS\inf\scsi.inf
*\WINDOWS\inf\scsi.PNF
*\WINDOWS\inf\scsidev.inf
*\WINDOWS\inf\scsidev.PNF
*\WINDOWS\inf\sdwndr2k.inf
*\WINDOWS\inf\sdwndr2k.PNF
*\WINDOWS\inf\secdrv.inf
*\WINDOWS\inf\secdrv.PNF
*\WINDOWS\inf\secrecs.inf
*\WINDOWS\inf\secrecs.PNF
*\WINDOWS\inf\setupqry.inf
*\WINDOWS\inf\setupqry.PNF
*\WINDOWS\inf\sgiu.inf
*\WINDOWS\inf\sgiu.PNF
*\WINDOWS\inf\shell.inf
*\WINDOWS\inf\shell.PNF
*\WINDOWS\inf\shl_img.inf
*\WINDOWS\inf\shl_img.PNF
*\WINDOWS\inf\sis300i.inf
*\WINDOWS\inf\sis300i.PNF
*\WINDOWS\inf\sis6306.inf
*\WINDOWS\inf\sis6306.PNF
*\WINDOWS\inf\sisgr.inf
*\WINDOWS\inf\sisgr.PNF
*\WINDOWS\inf\sisv6326.inf
*\WINDOWS\inf\sisv6326.PNF
*\WINDOWS\inf\skins.inf
*\WINDOWS\inf\skins.PNF
*\WINDOWS\inf\slip.inf
*\WINDOWS\inf\slip.PNF
*\WINDOWS\inf\smartcrd.inf
*\WINDOWS\inf\smartcrd.PNF
*\WINDOWS\inf\smi.inf
*\WINDOWS\inf\smi.PNF
*\WINDOWS\inf\sonypvu1.inf
*\WINDOWS\inf\sonypvu1.PNF
*\WINDOWS\inf\spx.inf
*\WINDOWS\inf\spx.PNF
*\WINDOWS\inf\spxports.inf
*\WINDOWS\inf\spxports.PNF
*\WINDOWS\inf\sr.inf
*\WINDOWS\inf\sr.PNF
*\WINDOWS\inf\srchasst.inf
*\WINDOWS\inf\srchasst.PNF
*\WINDOWS\inf\srusbusd.inf
*\WINDOWS\inf\srusbusd.PNF
*\WINDOWS\inf\stalport.inf
*\WINDOWS\inf\stalport.PNF
*\WINDOWS\inf\sti.inf
*\WINDOWS\inf\sti.PNF
*\WINDOWS\inf\stillcam.inf
*\WINDOWS\inf\stillcam.PNF
*\WINDOWS\inf\streamip.inf
*\WINDOWS\inf\streamip.PNF
*\WINDOWS\inf\svcpack.inf
*\WINDOWS\inf\SVCPACK.PNF
*\WINDOWS\inf\swflash.inf
*\WINDOWS\inf\swflash.PNF
*\WINDOWS\inf\swnt.inf
*\WINDOWS\inf\swnt.PNF
*\WINDOWS\inf\syscomp.inf
*\WINDOWS\inf\syscomp.PNF
*\WINDOWS\inf\sysoc.inf
*\WINDOWS\inf\SYSOC.PNF
*\WINDOWS\inf\syssetup.inf
*\WINDOWS\inf\syssetup.PNF
*\WINDOWS\inf\tape.inf
*\WINDOWS\inf\tape.PNF
*\WINDOWS\inf\tgiu.inf
*\WINDOWS\inf\tgiu.PNF
*\WINDOWS\inf\trid3d.inf
*\WINDOWS\inf\trid3d.PNF
*\WINDOWS\inf\tridkb.inf
*\WINDOWS\inf\tridkb.PNF
*\WINDOWS\inf\tridxp.inf
*\WINDOWS\inf\tridxp.PNF
*\WINDOWS\inf\tsbvcap.inf
*\WINDOWS\inf\tsbvcap.PNF
*\WINDOWS\inf\tshoot.inf
*\WINDOWS\inf\tshoot.PNF
*\WINDOWS\inf\tsoc.inf
*\WINDOWS\inf\tsoc.PNF
*\WINDOWS\inf\umax.inf
*\WINDOWS\inf\umax.PNF
*\WINDOWS\inf\umaxpp.inf
*\WINDOWS\inf\umaxpp.PNF
*\WINDOWS\inf\unknown.inf
*\WINDOWS\inf\unknown.PNF
*\WINDOWS\inf\unregmp2.exe
*\WINDOWS\inf\usb.inf
*\WINDOWS\inf\usb.PNF
*\WINDOWS\inf\usbport.inf
*\WINDOWS\inf\usbport.PNF
*\WINDOWS\inf\usbprint.inf
*\WINDOWS\inf\usbprint.PNF
*\WINDOWS\inf\usbstor.inf
*\WINDOWS\inf\usbstor.PNF
*\WINDOWS\inf\vgx.inf
*\WINDOWS\inf\vgx.PNF
*\WINDOWS\inf\viafir2k.inf
*\WINDOWS\inf\viafir2k.PNF
*\WINDOWS\inf\volsnap.inf
*\WINDOWS\inf\volsnap.PNF
*\WINDOWS\inf\volume.inf
*\WINDOWS\inf\volume.PNF
*\WINDOWS\inf\wab50.inf
*\WINDOWS\inf\wab50.PNF
*\WINDOWS\inf\wave.inf
*\WINDOWS\inf\wave.PNF
*\WINDOWS\inf\wbemoc.inf
*\WINDOWS\inf\wbemoc.PNF
*\WINDOWS\inf\wbemsnmp.inf
*\WINDOWS\inf\wbemsnmp.PNF
*\WINDOWS\inf\wbfirdma.inf
*\WINDOWS\inf\wbfirdma.PNF
*\WINDOWS\inf\wceusbsh.inf
*\WINDOWS\inf\wceusbsh.PNF
*\WINDOWS\inf\wdma10k1.inf
*\WINDOWS\inf\wdma10k1.PNF
*\WINDOWS\inf\wdmaudio.inf
*\WINDOWS\inf\wdmaudio.PNF
*\WINDOWS\inf\wdma_ali.inf
*\WINDOWS\inf\wdma_ali.PNF
*\WINDOWS\inf\wdma_aur.inf
*\WINDOWS\inf\wdma_aur.PNF
*\WINDOWS\inf\wdma_avc.inf
*\WINDOWS\inf\wdma_avc.PNF
*\WINDOWS\inf\wdma_azt.inf
*\WINDOWS\inf\wdma_azt.PNF
*\WINDOWS\inf\wdma_csc.inf
*\WINDOWS\inf\wdma_csc.PNF
*\WINDOWS\inf\wdma_csf.inf
*\WINDOWS\inf\wdma_csf.PNF
*\WINDOWS\inf\wdma_ctl.inf
*\WINDOWS\inf\wdma_ctl.PNF
*\WINDOWS\inf\wdma_cwr.inf
*\WINDOWS\inf\wdma_cwr.PNF
*\WINDOWS\inf\wdma_ens.inf
*\WINDOWS\inf\wdma_ens.PNF
*\WINDOWS\inf\wdma_es2.inf
*\WINDOWS\inf\wdma_es2.PNF
*\WINDOWS\inf\wdma_es3.inf
*\WINDOWS\inf\wdma_es3.PNF
*\WINDOWS\inf\wdma_ess.inf
*\WINDOWS\inf\wdma_ess.PNF
*\WINDOWS\inf\wdma_int.inf
*\WINDOWS\inf\wdma_int.PNF
*\WINDOWS\inf\wdma_m2e.inf
*\WINDOWS\inf\wdma_m2e.PNF
*\WINDOWS\inf\wdma_ne2.inf
*\WINDOWS\inf\wdma_ne2.PNF
*\WINDOWS\inf\wdma_neo.inf
*\WINDOWS\inf\wdma_neo.PNF
*\WINDOWS\inf\wdma_rip.inf
*\WINDOWS\inf\wdma_rip.PNF
*\WINDOWS\inf\wdma_sis.inf
*\WINDOWS\inf\wdma_sis.PNF
*\WINDOWS\inf\wdma_usb.inf
*\WINDOWS\inf\wdma_usb.PNF
*\WINDOWS\inf\wdma_via.inf
*\WINDOWS\inf\wdma_via.PNF
*\WINDOWS\inf\wdma_ym2.inf
*\WINDOWS\inf\wdma_ym2.PNF
*\WINDOWS\inf\wdma_ymh.inf
*\WINDOWS\inf\wdma_ymh.PNF
*\WINDOWS\inf\wdmjoy.inf
*\WINDOWS\inf\wdmjoy.PNF
*\WINDOWS\inf\wmad.inf
*\WINDOWS\inf\wmad.PNF
*\WINDOWS\inf\WMDM10.inf
*\WINDOWS\inf\WMDM10.PNF
*\WINDOWS\inf\WMFSDK10.inf
*\WINDOWS\inf\WMFSDK10.PNF
*\WINDOWS\inf\wmp.inf
*\WINDOWS\inf\wmp.PNF
*\WINDOWS\inf\WMP10.inf
*\WINDOWS\inf\WMP10.PNF
*\WINDOWS\inf\wmplayer.adm
*\WINDOWS\inf\WMSET10.inf
*\WINDOWS\inf\WMSET10.PNF
*\WINDOWS\inf\wmsetsdk.inf
*\WINDOWS\inf\wmsetsdk.PNF
*\WINDOWS\inf\wmtour.inf
*\WINDOWS\inf\wmtour.PNF
*\WINDOWS\inf\wmv9vcm.inf
*\WINDOWS\inf\wmv9vcm.PNF
*\WINDOWS\inf\wordpad.inf
*\WINDOWS\inf\wordpad.PNF
*\WINDOWS\inf\wpd10.inf
*\WINDOWS\inf\WPD10.PNF
*\WINDOWS\inf\wpdmtp.inf
*\WINDOWS\inf\wpdmtp.PNF
*\WINDOWS\inf\wsh.inf
*\WINDOWS\inf\wsh.PNF
*\WINDOWS\inf\wstcodec.inf
*\WINDOWS\inf\wstcodec.PNF
*\WINDOWS\inf\wuau.adm
*\WINDOWS\inf\xscan_xp.inf
*\WINDOWS\inf\xscan_xp.PNF

Remote Saxon · 05-22-2005, 12:29 PM

*\WINDOWS\Installer\1176b8.msi
*\WINDOWS\Installer\11b0308.msi
*\WINDOWS\Installer\1bca8.msi
*\WINDOWS\Installer\24c3c2.msi
*\WINDOWS\Installer\24c3c6.msi
*\WINDOWS\Installer\24c3cc.msi
*\WINDOWS\Installer\24c3cd.msi
*\WINDOWS\Installer\4606b6.msi
*\WINDOWS\Installer\47e094.msi
*\WINDOWS\Installer\62222.msi
*\WINDOWS\Installer\6b2eab.msi
*\WINDOWS\Installer\cd78b.msi
*\WINDOWS\LastGood\farmmext.ini
*\WINDOWS\LastGood\FCEIFLH.ini
*\WINDOWS\LastGood\kwv2.dat
*\WINDOWS\LastGood\wininit.ini
*\WINDOWS\Media\chord.wav
*\WINDOWS\Media\ding.wav
*\WINDOWS\Media\notify.wav
*\WINDOWS\Media\recycle.wav
*\WINDOWS\Media\start.wav
*\WINDOWS\Media\tada.wav
*\WINDOWS\Media\Windows XP Critical Stop.wav
*\WINDOWS\Media\Windows XP Default.wav
*\WINDOWS\Media\Windows XP Ding.wav
*\WINDOWS\Media\Windows XP Error.wav
*\WINDOWS\Media\Windows XP Exclamation.wav
*\WINDOWS\Media\Windows XP Hardware Fail.wav
*\WINDOWS\Media\Windows XP Hardware Insert.wav
*\WINDOWS\Media\Windows XP Hardware Remove.wav
*\WINDOWS\Media\Windows XP Logoff Sound.wav
*\WINDOWS\Media\Windows XP Logon Sound.wav
*\WINDOWS\Media\Windows XP Minimize.wav
*\WINDOWS\Media\Windows XP Notify.wav
*\WINDOWS\Media\Windows XP Print complete.wav
*\WINDOWS\Media\Windows XP Recycle.wav
*\WINDOWS\Media\Windows XP Restore.wav
*\WINDOWS\Media\Windows XP Ringin.wav
*\WINDOWS\Media\Windows XP Shutdown.wav
*\WINDOWS\Media\Windows XP Start.wav
*\WINDOWS\Media\Windows XP Startup.wav
*\WINDOWS\Minidump\Mini050805-01.dmp
*\WINDOWS\Minidump\Mini051705-01.dmp
*\WINDOWS\Minidump\Mini051905-01.dmp
*\WINDOWS\msagent\agentanm.dll
*\WINDOWS\msagent\agentctl.dll
*\WINDOWS\msagent\agentdp2.dll
*\WINDOWS\msagent\agentdpv.dll
*\WINDOWS\msagent\agentmpx.dll
*\WINDOWS\msagent\agentpsh.dll
*\WINDOWS\msagent\agentsr.dll
*\WINDOWS\msagent\agentsvr.exe
*\WINDOWS\msagent\agtctl15.tlb
*\WINDOWS\msagent\agtintl.dll
*\WINDOWS\msagent\mslwvtts.dll
*\WINDOWS\Offline Web Pages\desktop.ini
*\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf
*\WINDOWS\Prefetch\AIM.EXE-061FD532.pf
*\WINDOWS\Prefetch\AUPDATE.EXE-2253CB60.pf
*\WINDOWS\Prefetch\CLEANMGR.EXE-1F86EA8E.pf
*\WINDOWS\Prefetch\CREATECD50.EXE-08EF798E.pf
*\WINDOWS\Prefetch\CREATR50.EXE-00C7BDE9.pf
*\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf
*\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf
*\WINDOWS\Prefetch\DRWTSN32.EXE-2B4B52AC.pf
*\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf
*\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf
*\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
*\WINDOWS\Prefetch\HIJACKTHIS.EXE-2AF68D7A.pf
*\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf
*\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
*\WINDOWS\Prefetch\IGFXTRAY.EXE-3391579A.pf
*\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf
*\WINDOWS\Prefetch\JUSCHED.EXE-138B1657.pf
*\WINDOWS\Prefetch\Layout.ini
*\WINDOWS\Prefetch\LOGON.SCR-151EFAEA.pf
*\WINDOWS\Prefetch\LUALL.EXE-30AC8E48.pf
*\WINDOWS\Prefetch\LUCOMS~1.EXE-02DB5950.pf
*\WINDOWS\Prefetch\NAVAPW32.EXE-14F0BD2A.pf
*\WINDOWS\Prefetch\NAVW32.EXE-24F56911.pf
*\WINDOWS\Prefetch\NDETECT.EXE-16E64095.pf
*\WINDOWS\Prefetch\NMAIN.EXE-2BA406E0.pf
*\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf
*\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf
*\WINDOWS\Prefetch\OSA.EXE-2CD63980.pf
*\WINDOWS\Prefetch\QSERVER.EXE-22A02121.pf
*\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf
*\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf
*\WINDOWS\Prefetch\RUNDLL32.EXE-1720EF1C.pf
*\WINDOWS\Prefetch\RUNDLL32.EXE-1C320F03.pf
*\WINDOWS\Prefetch\RUNDLL32.EXE-42C4EDF2.pf
*\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf
*\WINDOWS\Prefetch\SBSERV.EXE-32089713.pf
*\WINDOWS\Prefetch\SETUP_WM.EXE-3135CBD6.pf
*\WINDOWS\Prefetch\SLSK.EXE-249BEE7E.pf
*\WINDOWS\Prefetch\STARTDRECK.EXE-26189B51.pf
*\WINDOWS\Prefetch\SYMWSC.EXE-321AAE19.pf
*\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf
*\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
*\WINDOWS\Prefetch\USRPRMPT.EXE-2F2D32EA.pf
*\WINDOWS\Prefetch\WDFMGR.EXE-2CF4013B.pf
*\WINDOWS\Prefetch\WINWORD.EXE-29F5CB89.pf
*\WINDOWS\Prefetch\WKFUD.EXE-03C88000.pf
*\WINDOWS\Prefetch\WKSSB.EXE-01DCAEEA.pf
*\WINDOWS\Prefetch\WKUFIND.EXE-36AC9039.pf
*\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf
*\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEF9C.pf
*\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA1.pf
*\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA2.pf
*\WINDOWS\Prefetch\WMPLAYER.EXE-18DDEFA4.pf
*\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf
*\WINDOWS\Prefetch\YPAGER.EXE-31587640.pf
*\WINDOWS\Prefetch\YSERVER.EXE-21015EB1.pf
*\WINDOWS\Prefetch\YUPDATER.EXE-3946FDDF.pf
*\WINDOWS\Registration\R00000000000f.clb
*\WINDOWS\Registration\R000000000013.clb
*\WINDOWS\Registration\R000000000014.clb
*\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BE7A5375-C91B-484D-A632-90A57C2A175A}.crmlog
*\WINDOWS\Repair\autoexec.nt
*\WINDOWS\Repair\config.nt
*\WINDOWS\Repair\default
*\WINDOWS\Repair\ntuser.dat
*\WINDOWS\Repair\sam
*\WINDOWS\Repair\secsetup.inf
*\WINDOWS\Repair\security
*\WINDOWS\Repair\setup.log
*\WINDOWS\Repair\software
*\WINDOWS\Repair\system
*\WINDOWS\report\20050517.log
*\WINDOWS\ShellNew\PWRPNT10.POT
*\WINDOWS\ShellNew\WINWORD8.DOC
*\WINDOWS\SoftwareDistribution\ReportingEvents.log
*\WINDOWS\srchasst\msgr3en.dll
*\WINDOWS\srchasst\nls302en.lex
*\WINDOWS\srchasst\srchctls.dll
*\WINDOWS\srchasst\srchui.dll
*\WINDOWS\system\AVICAP.DLL
*\WINDOWS\system\AVIFILE.DLL
*\WINDOWS\system\COMMDLG.DLL
*\WINDOWS\system\KEYBOARD.DRV
*\WINDOWS\system\LZEXPAND.DLL
*\WINDOWS\system\MCIAVI.DRV
*\WINDOWS\system\MCISEQ.DRV
*\WINDOWS\system\MCIWAVE.DRV
*\WINDOWS\system\MMSYSTEM.DLL
*\WINDOWS\system\MMTASK.TSK
*\WINDOWS\system\MOUSE.DRV
*\WINDOWS\system\MSVIDEO.DLL
*\WINDOWS\system\OLECLI.DLL
*\WINDOWS\system\OLESVR.DLL
*\WINDOWS\system\QBUninstaller.exe
*\WINDOWS\system\setup.inf
*\WINDOWS\system\SHELL.DLL
*\WINDOWS\system\SOUND.DRV
*\WINDOWS\system\stdole.tlb
*\WINDOWS\system\SYSTEM.DRV
*\WINDOWS\system\TAPI.DLL
*\WINDOWS\system\TIMER.DRV
*\WINDOWS\system\VER.DLL
*\WINDOWS\system\VGA.DRV
*\WINDOWS\system\WFWNET.DRV
*\WINDOWS\system\WINSPOOL.DRV
*\WINDOWS\system32\$winnt$.inf
*\WINDOWS\system32\12520437.cpx
*\WINDOWS\system32\12520850.cpx
*\WINDOWS\system32\6to4svc.dll
*\WINDOWS\system32\a3d.dll
*\WINDOWS\system32\aaaamon.dll
*\WINDOWS\system32\access.cpl
*\WINDOWS\system32\acctres.dll
*\WINDOWS\system32\accwiz.exe
*\WINDOWS\system32\acelpdec.ax
*\WINDOWS\system32\acledit.dll
*\WINDOWS\system32\aclui.dll
*\WINDOWS\system32\activeds.dll
*\WINDOWS\system32\activeds.tlb
*\WINDOWS\system32\actmovie.exe
*\WINDOWS\system32\actxprxy.dll
*\WINDOWS\system32\admparse.dll
*\WINDOWS\system32\adptif.dll
*\WINDOWS\system32\adsldp.dll
*\WINDOWS\system32\adsldpc.dll
*\WINDOWS\system32\adsmsext.dll
*\WINDOWS\system32\adsnt.dll
*\WINDOWS\system32\advapi32.dll
*\WINDOWS\system32\advpack.dll
*\WINDOWS\system32\ahui.exe
*\WINDOWS\system32\alg.exe
*\WINDOWS\system32\alrsvc.dll
*\WINDOWS\system32\amcompat.tlb
*\WINDOWS\system32\amstream.dll
*\WINDOWS\system32\ansi.sys
*\WINDOWS\system32\apcups.dll
*\WINDOWS\system32\append.exe
*\WINDOWS\system32\apphelp.dll
*\WINDOWS\system32\appwiz.cpl
*\WINDOWS\system32\arp.exe
*\WINDOWS\system32\asctrls.ocx
*\WINDOWS\system32\asferror.dll
*\WINDOWS\system32\asfsipc.dll
*\WINDOWS\system32\asycfilt.dll
*\WINDOWS\system32\at.exe
*\WINDOWS\system32\ATHPRXY.DLL
*\WINDOWS\system32\atkctrs.dll
*\WINDOWS\system32\atl.dll
*\WINDOWS\system32\atl71.dll
*\WINDOWS\system32\atmadm.exe
*\WINDOWS\system32\atmfd.dll
*\WINDOWS\system32\atmlib.dll
*\WINDOWS\system32\atmpvcno.dll
*\WINDOWS\system32\atrace.dll
*\WINDOWS\system32\attrib.exe
*\WINDOWS\system32\Audiodev.dll
*\WINDOWS\system32\audiosrv.dll
*\WINDOWS\system32\authz.dll
*\WINDOWS\system32\autochk.exe
*\WINDOWS\system32\autoconv.exe
*\WINDOWS\system32\autodisc.dll
*\WINDOWS\system32\autoexec.nt
*\WINDOWS\system32\autofmt.exe
*\WINDOWS\system32\autolfn.exe
*\WINDOWS\system32\avicap.dll
*\WINDOWS\system32\avicap32.dll
*\WINDOWS\system32\avifil32.dll
*\WINDOWS\system32\avifile.dll
*\WINDOWS\system32\avmeter.dll
*\WINDOWS\system32\avtapi.dll
*\WINDOWS\system32\avwav.dll
*\WINDOWS\system32\AXAUTCTL.OCX
*\WINDOWS\system32\AXCTRL32.OCX
*\WINDOWS\system32\basesrv.dll
*\WINDOWS\system32\batmeter.dll
*\WINDOWS\system32\batt.dll
*\WINDOWS\system32\bidispl.dll
*\WINDOWS\system32\bios1.rom
*\WINDOWS\system32\bios4.rom
*\WINDOWS\system32\bitsprx2.dll
*\WINDOWS\system32\bitsprx3.dll
*\WINDOWS\system32\blackbox.dll
*\WINDOWS\system32\bootok.exe
*\WINDOWS\system32\bootvid.dll
*\WINDOWS\system32\bootvrfy.exe
*\WINDOWS\system32\bopomofo.uce
*\WINDOWS\system32\browselc.dll
*\WINDOWS\system32\browser.dll
*\WINDOWS\system32\browseui.dll
*\WINDOWS\system32\browsewm.dll
*\WINDOWS\system32\cabinet.dll
*\WINDOWS\system32\cabview.dll
*\WINDOWS\system32\cacls.exe
*\WINDOWS\system32\calc.exe
*\WINDOWS\system32\camocx.dll
*\WINDOWS\system32\capesnpn.dll
*\WINDOWS\system32\capicom.dll
*\WINDOWS\system32\cards.dll
*\WINDOWS\system32\catsrv.dll
*\WINDOWS\system32\catsrvps.dll
*\WINDOWS\system32\catsrvut.dll
*\WINDOWS\system32\ccfgnt.dll
*\WINDOWS\system32\ccrpftv6.ocx
*\WINDOWS\system32\CDDBControlRoxio.dll
*\WINDOWS\system32\CDDBUIRoxio.dll
*\WINDOWS\system32\cdfview.dll
*\WINDOWS\system32\cdm.dll
*\WINDOWS\system32\cdmodem.dll
*\WINDOWS\system32\cdosys.dll
*\WINDOWS\system32\cdplayer.exe.manifest
*\WINDOWS\system32\cdral.dll
*\WINDOWS\system32\cdrtc.dll
*\WINDOWS\system32\certcli.dll
*\WINDOWS\system32\certmgr.dll
*\WINDOWS\system32\certmgr.msc
*\WINDOWS\system32\CEUTIL.DLL
*\WINDOWS\system32\cewmdm.dll
*\WINDOWS\system32\cfgbkend.dll
*\WINDOWS\system32\cfgmgr32.dll
*\WINDOWS\system32\charmap.exe
*\WINDOWS\system32\chcp.com
*\WINDOWS\system32\chkdsk.exe
*\WINDOWS\system32\chkntfs.exe
*\WINDOWS\system32\ciadmin.dll
*\WINDOWS\system32\ciadv.msc
*\WINDOWS\system32\cic.dll
*\WINDOWS\system32\cidaemon.exe
*\WINDOWS\system32\ciodm.dll
*\WINDOWS\system32\cisvc.exe
*\WINDOWS\system32\ckcnv.exe
*\WINDOWS\system32\clb.dll
*\WINDOWS\system32\clbcatex.dll
*\WINDOWS\system32\clbcatq.dll
*\WINDOWS\system32\cleanmgr.exe
*\WINDOWS\system32\cliconf.chm
*\WINDOWS\system32\cliconfg.dll
*\WINDOWS\system32\cliconfg.exe
*\WINDOWS\system32\cliconfg.rll
*\WINDOWS\system32\clipbrd.exe
*\WINDOWS\system32\clipsrv.exe
*\WINDOWS\system32\clusapi.dll
*\WINDOWS\system32\cmcfg32.dll
*\WINDOWS\system32\cmd.exe
*\WINDOWS\system32\cmdial32.dll
*\WINDOWS\system32\cmdl32.exe
*\WINDOWS\system32\cmmgr32.hlp
*\WINDOWS\system32\cmmon32.exe
*\WINDOWS\system32\cmos.ram
*\WINDOWS\system32\cmpbk32.dll
*\WINDOWS\system32\cmprops.dll
*\WINDOWS\system32\cmstp.exe
*\WINDOWS\system32\cmutil.dll
*\WINDOWS\system32\cnbjmon.dll
*\WINDOWS\system32\cnetcfg.dll
*\WINDOWS\system32\cnvfat.dll
*\WINDOWS\system32\colbact.dll
*\WINDOWS\system32\comaddin.dll
*\WINDOWS\system32\comcat.dll
*\WINDOWS\system32\comct232.ocx
*\WINDOWS\system32\comctl32.dll
*\WINDOWS\system32\comctl32.ocx
*\WINDOWS\system32\Comdlg32.dep
*\WINDOWS\system32\comdlg32.dll
*\WINDOWS\system32\COMDLG32.OCX
*\WINDOWS\system32\comm.drv
*\WINDOWS\system32\command.com
*\WINDOWS\system32\commdlg.dll
*\WINDOWS\system32\comp.exe
*\WINDOWS\system32\compact.exe
*\WINDOWS\system32\compatUI.dll
*\WINDOWS\system32\compmgmt.msc
*\WINDOWS\system32\compobj.dll
*\WINDOWS\system32\compstui.dll
*\WINDOWS\system32\comrepl.dll
*\WINDOWS\system32\comres.dll
*\WINDOWS\system32\comsnap.dll
*\WINDOWS\system32\comsvcs.dll
*\WINDOWS\system32\comuid.dll
*\WINDOWS\system32\CONFIG.NT
*\WINDOWS\system32\confmsp.dll
*\WINDOWS\system32\console.dll
*\WINDOWS\system32\control.exe
*\WINDOWS\system32\convert.exe
*\WINDOWS\system32\corpol.dll
*\WINDOWS\system32\country.sys
*\WINDOWS\system32\creditcard32123123123asdsa1.ico
*\WINDOWS\system32\credui.dll
*\WINDOWS\system32\crtdll.dll
*\WINDOWS\system32\crypt32.dll
*\WINDOWS\system32\cryptdlg.dll
*\WINDOWS\system32\cryptdll.dll
*\WINDOWS\system32\cryptext.dll
*\WINDOWS\system32\cryptnet.dll
*\WINDOWS\system32\cryptsvc.dll
*\WINDOWS\system32\cryptui.dll
*\WINDOWS\system32\cscdll.dll
*\WINDOWS\system32\cscript.exe
*\WINDOWS\system32\cscui.dll
*\WINDOWS\system32\csrsrv.dll
*\WINDOWS\system32\csrss.exe
*\WINDOWS\system32\csseqchk.dll
*\WINDOWS\system32\ctfmon.exe
*\WINDOWS\system32\ctl3d32.dll
*\WINDOWS\system32\ctl3dv2.dll
*\WINDOWS\system32\ctype.nls
*\WINDOWS\system32\c_037.nls
*\WINDOWS\system32\c_10000.nls
*\WINDOWS\system32\c_10006.nls
*\WINDOWS\system32\c_10007.nls
*\WINDOWS\system32\c_10010.nls
*\WINDOWS\system32\c_10017.nls
*\WINDOWS\system32\c_10029.nls
*\WINDOWS\system32\c_10079.nls
*\WINDOWS\system32\c_10081.nls
*\WINDOWS\system32\c_10082.nls
*\WINDOWS\system32\c_1026.nls
*\WINDOWS\system32\c_1250.nls
*\WINDOWS\system32\c_1251.nls
*\WINDOWS\system32\c_1252.nls
*\WINDOWS\system32\c_1253.nls
*\WINDOWS\system32\c_1254.nls
*\WINDOWS\system32\c_1255.nls
*\WINDOWS\system32\c_1256.nls
*\WINDOWS\system32\c_1257.nls
*\WINDOWS\system32\c_1258.nls
*\WINDOWS\system32\c_20127.nls
*\WINDOWS\system32\c_20261.nls
*\WINDOWS\system32\c_20866.nls
*\WINDOWS\system32\c_20905.nls
*\WINDOWS\system32\c_21866.nls
*\WINDOWS\system32\c_28591.nls
*\WINDOWS\system32\c_28592.nls
*\WINDOWS\system32\c_28593.nls
*\WINDOWS\system32\C_28594.NLS
*\WINDOWS\system32\C_28595.NLS
*\WINDOWS\system32\C_28597.NLS
*\WINDOWS\system32\c_28598.nls
*\WINDOWS\system32\c_28599.nls
*\WINDOWS\system32\c_28605.nls
*\WINDOWS\system32\c_437.nls
*\WINDOWS\system32\c_500.nls
*\WINDOWS\system32\c_737.nls
*\WINDOWS\system32\c_775.nls
*\WINDOWS\system32\c_850.nls
*\WINDOWS\system32\c_852.nls
*\WINDOWS\system32\c_855.nls
*\WINDOWS\system32\c_857.nls
*\WINDOWS\system32\c_860.nls
*\WINDOWS\system32\c_861.nls
*\WINDOWS\system32\c_863.nls
*\WINDOWS\system32\c_865.nls
*\WINDOWS\system32\c_866.nls
*\WINDOWS\system32\c_869.nls
*\WINDOWS\system32\c_874.nls
*\WINDOWS\system32\c_875.nls
*\WINDOWS\system32\c_932.nls
*\WINDOWS\system32\c_936.nls
*\WINDOWS\system32\c_949.nls
*\WINDOWS\system32\c_950.nls
*\WINDOWS\system32\d3d8.dll
*\WINDOWS\system32\d3d8thk.dll
*\WINDOWS\system32\d3dim.dll
*\WINDOWS\system32\d3dim700.dll
*\WINDOWS\system32\d3dpmesh.dll
*\WINDOWS\system32\d3dramp.dll
*\WINDOWS\system32\d3drm.dll
*\WINDOWS\system32\d3dxof.dll
*\WINDOWS\system32\danim.dll
*\WINDOWS\system32\data.~
*\WINDOWS\system32\dataclen.dll
*\WINDOWS\system32\datime.dll
*\WINDOWS\system32\davclnt.dll
*\WINDOWS\system32\daxctle.ocx
*\WINDOWS\system32\dbgeng.dll
*\WINDOWS\system32\dbghelp.dll
*\WINDOWS\system32\dbmsadsn.dll
*\WINDOWS\system32\dbmsrpcn.dll
*\WINDOWS\system32\dbmsvinn.dLL
*\WINDOWS\system32\dbnetlib.dll
*\WINDOWS\system32\dbnmpntw.dll
*\WINDOWS\system32\Dcache.bin
*\WINDOWS\system32\dciman32.dll
*\WINDOWS\system32\dcomcnfg.exe
*\WINDOWS\system32\ddeml.dll
*\WINDOWS\system32\ddeshare.exe
*\WINDOWS\system32\ddraw.dll
*\WINDOWS\system32\ddrawex.dll
*\WINDOWS\system32\debug.exe
*\WINDOWS\system32\defrag.exe
*\WINDOWS\system32\desk.cpl
*\WINDOWS\system32\deskadp.dll
*\WINDOWS\system32\deskmon.dll
*\WINDOWS\system32\deskperf.dll
*\WINDOWS\system32\desktop.ini
*\WINDOWS\system32\devenum.dll
*\WINDOWS\system32\devmgmt.msc
*\WINDOWS\system32\devmgr.dll
*\WINDOWS\system32\DevMngr.vxd
*\WINDOWS\system32\dfrg.msc
*\WINDOWS\system32\dfrgfat.exe
*\WINDOWS\system32\dfrgntfs.exe
*\WINDOWS\system32\dfrgres.dll
*\WINDOWS\system32\dfrgsnap.dll
*\WINDOWS\system32\dfrgui.dll
*\WINDOWS\system32\dfsshlex.dll
*\WINDOWS\system32\dgnet.dll
*\WINDOWS\system32\dgrpsetu.dll
*\WINDOWS\system32\dgsetup.dll
*\WINDOWS\system32\dhcpcsvc.dll
*\WINDOWS\system32\dhcpmon.dll
*\WINDOWS\system32\dhcpsapi.dll
*\WINDOWS\system32\diactfrm.dll
*\WINDOWS\system32\diantz.exe
*\WINDOWS\system32\digest.dll
*\WINDOWS\system32\dimap.dll
*\WINDOWS\system32\dinput.dll
*\WINDOWS\system32\dinput8.dll
*\WINDOWS\system32\diskcomp.com
*\WINDOWS\system32\diskcopy.com
*\WINDOWS\system32\diskcopy.dll
*\WINDOWS\system32\diskmgmt.msc
*\WINDOWS\system32\diskpart.exe
*\WINDOWS\system32\diskperf.exe
*\WINDOWS\system32\dispex.dll
*\WINDOWS\system32\DivX.dll
*\WINDOWS\system32\divxdec.ax
*\WINDOWS\system32\divxdec_0407.dll
*\WINDOWS\system32\divxdec_040c.dll
*\WINDOWS\system32\divxdec_0411.dll
*\WINDOWS\system32\divx_xx07.dll
*\WINDOWS\system32\divx_xx0c.dll
*\WINDOWS\system32\divx_xx11.dll
*\WINDOWS\system32\dllhost.exe
*\WINDOWS\system32\dllhst3g.exe
*\WINDOWS\system32\dmadmin.exe
*\WINDOWS\system32\dmband.dll
*\WINDOWS\system32\dmcompos.dll
*\WINDOWS\system32\dmconfig.dll
*\WINDOWS\system32\dmdlgs.dll
*\WINDOWS\system32\dmdskmgr.dll
*\WINDOWS\system32\dmdskres.dll
*\WINDOWS\system32\dmime.dll
*\WINDOWS\system32\dmintf.dll
*\WINDOWS\system32\dmloader.dll
*\WINDOWS\system32\dmocx.dll
*\WINDOWS\system32\dmremote.exe
*\WINDOWS\system32\dmscript.dll
*\WINDOWS\system32\dmserver.dll
*\WINDOWS\system32\dmstyle.dll
*\WINDOWS\system32\dmsynth.dll
*\WINDOWS\system32\dmusic.dll
*\WINDOWS\system32\dmutil.dll
*\WINDOWS\system32\dmview.ocx
*\WINDOWS\system32\dnsapi.dll
*\WINDOWS\system32\dnsrslvr.dll
*\WINDOWS\system32\docprop.dll
*\WINDOWS\system32\docprop2.dll
*\WINDOWS\system32\doskey.exe
*\WINDOWS\system32\dosx.exe
*\WINDOWS\system32\dpcdll.dll
*\WINDOWS\system32\dplay.dll
*\WINDOWS\system32\dplaysvr.exe
*\WINDOWS\system32\dplayx.dll
*\WINDOWS\system32\dpmodemx.dll
*\WINDOWS\system32\dpnaddr.dll
*\WINDOWS\system32\dpnet.dll
*\WINDOWS\system32\dpnhpast.dll
*\WINDOWS\system32\dpnhupnp.dll
*\WINDOWS\system32\dpnlobby.dll
*\WINDOWS\system32\dpnmodem.dll
*\WINDOWS\system32\dpnsvr.exe
*\WINDOWS\system32\dpnwsock.dll
*\WINDOWS\system32\dpserial.dll
*\WINDOWS\system32\dpu10.dll
*\WINDOWS\system32\dpuGUI10.dll
*\WINDOWS\system32\dpus10.dll
*\WINDOWS\system32\dpv10.dll
*\WINDOWS\system32\dpvacm.dll
*\WINDOWS\system32\dpvoice.dll
*\WINDOWS\system32\dpvsetup.exe
*\WINDOWS\system32\dpvvox.dll
*\WINDOWS\system32\dpwsock.dll
*\WINDOWS\system32\dpwsockx.dll
*\WINDOWS\system32\drmclien.dll
*\WINDOWS\system32\drmstor.dll
*\WINDOWS\system32\drmv2clt.dll
*\WINDOWS\system32\drprov.dll
*\WINDOWS\system32\drwatson.exe
*\WINDOWS\system32\drwtsn32.exe
*\WINDOWS\system32\ds16gt.dLL
*\WINDOWS\system32\ds32gt.dll
*\WINDOWS\system32\dsauth.dll
*\WINDOWS\system32\dsdmo.dll
*\WINDOWS\system32\dsdmoprp.dll
*\WINDOWS\system32\dskquota.dll
*\WINDOWS\system32\dskquoui.dll
*\WINDOWS\system32\dsound.dll
*\WINDOWS\system32\dsound.vxd
*\WINDOWS\system32\dsound3d.dll
*\WINDOWS\system32\dsprop.dll
*\WINDOWS\system32\dsquery.dll
*\WINDOWS\system32\dssec.dat
*\WINDOWS\system32\dssec.dll
*\WINDOWS\system32\dssenh.dll
*\WINDOWS\system32\dsuiext.dll
*\WINDOWS\system32\dswave.dll
*\WINDOWS\system32\dumprep.exe
*\WINDOWS\system32\duser.dll
*\WINDOWS\system32\dvdplay.exe
*\WINDOWS\system32\dvdupgrd.exe
*\WINDOWS\system32\dwwin.exe
*\WINDOWS\system32\dx7vb.dll
*\WINDOWS\system32\dx8vb.dll
*\WINDOWS\system32\dxdiag.exe
*\WINDOWS\system32\dxmasf.dll
*\WINDOWS\system32\dxmrtp.dll
*\WINDOWS\system32\dxtmsft.dll
*\WINDOWS\system32\dxtrans.dll
*\WINDOWS\system32\edit.com
*\WINDOWS\system32\edit.hlp
*\WINDOWS\system32\edlin.exe
*\WINDOWS\system32\ega.cpi
*\WINDOWS\system32\els.dll
*\WINDOWS\system32\emptyregdb.dat
*\WINDOWS\system32\EqnClass.Dll
*\WINDOWS\system32\ersvc.dll
*\WINDOWS\system32\es.dll
*\WINDOWS\system32\esent.dll
*\WINDOWS\system32\esent97.dll
*\WINDOWS\system32\esentprf.dll
*\WINDOWS\system32\esentprf.hxx
*\WINDOWS\system32\esentprf.ini
*\WINDOWS\system32\esentutl.exe
*\WINDOWS\system32\eudcedit.exe
*\WINDOWS\system32\eventcls.dll
*\WINDOWS\system32\eventlog.dll
*\WINDOWS\system32\eventvwr.exe
*\WINDOWS\system32\eventvwr.msc
*\WINDOWS\system32\exe2bin.exe
*\WINDOWS\system32\expand.exe
*\WINDOWS\system32\expsrv.dll
*\WINDOWS\system32\extrac32.exe
*\WINDOWS\system32\exts.dll
*\WINDOWS\system32\fastopen.exe
*\WINDOWS\system32\faultrep.dll
*\WINDOWS\system32\fc.exe
*\WINDOWS\system32\feclient.dll
*\WINDOWS\system32\filemgmt.dll
*\WINDOWS\system32\find.exe
*\WINDOWS\system32\findstr.exe
*\WINDOWS\system32\finger.exe
*\WINDOWS\system32\fixmapi.exe
*\WINDOWS\system32\fkndua.xml
*\WINDOWS\system32\fkndub.xml
*\WINDOWS\system32\fkndue.xml
*\WINDOWS\system32\fldrclnr.dll
*\WINDOWS\system32\FM20.DLL
*\WINDOWS\system32\FM20ENU.DLL
*\WINDOWS\system32\fmifs.dll
*\WINDOWS\system32\FNTCACHE.DAT
*\WINDOWS\system32\fontext.dll
*\WINDOWS\system32\fontsub.dll
*\WINDOWS\system32\fontview.exe
*\WINDOWS\system32\forcedos.exe
*\WINDOWS\system32\format.com
*\WINDOWS\system32\FPXIG.DLL
*\WINDOWS\system32\framebuf.dll
*\WINDOWS\system32\freecell.exe
*\WINDOWS\system32\fsmgmt.msc
*\WINDOWS\system32\fsusd.dll
*\WINDOWS\system32\fsutil.exe
*\WINDOWS\system32\ftp.exe
*\WINDOWS\system32\ftsrch.dll
*\WINDOWS\system32\g711codc.ax
*\WINDOWS\system32\gb2312.uce
*\WINDOWS\system32\GCCollection.dll
*\WINDOWS\system32\gcdef.dll
*\WINDOWS\system32\gcmd5query.dll
*\WINDOWS\system32\gcTypLibA.tlb
*\WINDOWS\system32\gcUnCompress.dll
*\WINDOWS\system32\gdi.exe
*\WINDOWS\system32\gdi32.dll
*\WINDOWS\system32\GEAR32PD.DLL
*\WINDOWS\system32\geo.nls
*\WINDOWS\system32\getuname.dll
*\WINDOWS\system32\glmf32.dll
*\WINDOWS\system32\glu32.dll
*\WINDOWS\system32\gpkcsp.dll
*\WINDOWS\system32\gpkrsrc.dll
*\WINDOWS\system32\graftabl.com
*\WINDOWS\system32\graphics.com
*\WINDOWS\system32\graphics.pro
*\WINDOWS\system32\grpconv.exe
*\WINDOWS\system32\GWMDM030.dll
*\WINDOWS\system32\h323.tsp
*\WINDOWS\system32\h323log.txt
*\WINDOWS\system32\h323msp.dll
*\WINDOWS\system32\hal.dll
*\WINDOWS\system32\hashlib.dll
*\WINDOWS\system32\hccutils.dll
*\WINDOWS\system32\hcijyao.dat
*\WINDOWS\system32\hdwwiz.cpl
*\WINDOWS\system32\help.exe
*\WINDOWS\system32\hhctrl.ocx
*\WINDOWS\system32\hhsetup.dll
*\WINDOWS\system32\hid.dll
*\WINDOWS\system32\hidphone.tsp
*\WINDOWS\system32\himem.sys
*\WINDOWS\system32\hiwinnager.dat
*\WINDOWS\system32\hkcmd.exe
*\WINDOWS\system32\hlink.dll
*\WINDOWS\system32\hlp95en.dll
*\WINDOWS\system32\hnetcfg.dll
*\WINDOWS\system32\hnetmon.dll
*\WINDOWS\system32\hnetwiz.dll
*\WINDOWS\system32\homepage.inf
*\WINDOWS\system32\hostname.exe
*\WINDOWS\system32\hotplug.dll
*\WINDOWS\system32\hticons.dll
*\WINDOWS\system32\htui.dll
*\WINDOWS\system32\hypertrm.dll
*\WINDOWS\system32\iac25_32.ax
*\WINDOWS\system32\iAlmCoIn_0_pv1102.dll
*\WINDOWS\system32\ialmdd5.dll
*\WINDOWS\system32\ialmdev5.dll
*\WINDOWS\system32\ialmdnt5.dll
*\WINDOWS\system32\ialmgdev.dll
*\WINDOWS\system32\ialmgicd.dll
*\WINDOWS\system32\ialmrem.dll
*\WINDOWS\system32\ialmrnt5.dll
*\WINDOWS\system32\iasacct.dll
*\WINDOWS\system32\iasads.dll
*\WINDOWS\system32\iashlpr.dll
*\WINDOWS\system32\iasnap.dll
*\WINDOWS\system32\iaspolcy.dll
*\WINDOWS\system32\iasrad.dll
*\WINDOWS\system32\iasrecst.dll
*\WINDOWS\system32\iassam.dll
*\WINDOWS\system32\iassdo.dll
*\WINDOWS\system32\iassvcs.dll
*\WINDOWS\system32\icaapi.dll
*\WINDOWS\system32\iccvid.dll
*\WINDOWS\system32\icfgnt5.dll
*\WINDOWS\system32\icm32.dll
*\WINDOWS\system32\icmp.dll
*\WINDOWS\system32\icmui.dll
*\WINDOWS\system32\icwdial.dll
*\WINDOWS\system32\icwphbk.dll
*\WINDOWS\system32\ideograf.uce
*\WINDOWS\system32\idq.dll
*\WINDOWS\system32\ie4uinit.exe
*\WINDOWS\system32\ieakeng.dll
*\WINDOWS\system32\ieaksie.dll
*\WINDOWS\system32\ieakui.dll
*\WINDOWS\system32\iedkcs32.dll
*\WINDOWS\system32\iepeers.dll
*\WINDOWS\system32\iernonce.dll
*\WINDOWS\system32\iesetup.dll
*\WINDOWS\system32\ieuinit.inf
*\WINDOWS\system32\iexpress.exe
*\WINDOWS\system32\ifmon.dll
*\WINDOWS\system32\ifsutil.dll
*\WINDOWS\system32\IGFPX32P.DLL
*\WINDOWS\system32\igfxcfg.exe
*\WINDOWS\system32\igfxcpl.cpl
*\WINDOWS\system32\igfxdev.dll
*\WINDOWS\system32\igfxdgps.dll
*\WINDOWS\system32\igfxdiag.exe
*\WINDOWS\system32\igfxdo.dll
*\WINDOWS\system32\igfxeud.dll
*\WINDOWS\system32\igfxhara.lhp
*\WINDOWS\system32\igfxharb.lhp
*\WINDOWS\system32\igfxhchs.lhp
*\WINDOWS\system32\igfxhcht.lhp
*\WINDOWS\system32\igfxhcsy.lhp
*\WINDOWS\system32\igfxhdan.lhp
*\WINDOWS\system32\igfxhdeu.lhp
*\WINDOWS\system32\igfxhell.lhp
*\WINDOWS\system32\igfxheng.lhp
*\WINDOWS\system32\igfxhenu.lhp
*\WINDOWS\system32\igfxhesp.lhp
*\WINDOWS\system32\igfxhfin.lhp
*\WINDOWS\system32\igfxhfra.lhp
*\WINDOWS\system32\igfxhfrc.lhp
*\WINDOWS\system32\igfxhheb.lhp
*\WINDOWS\system32\igfxhhun.lhp
*\WINDOWS\system32\igfxhita.lhp
*\WINDOWS\system32\igfxhjpn.lhp
*\WINDOWS\system32\igfxhk.dll
*\WINDOWS\system32\igfxhkor.lhp
*\WINDOWS\system32\igfxhnld.lhp
*\WINDOWS\system32\igfxhnor.lhp
*\WINDOWS\system32\igfxhplk.lhp
*\WINDOWS\system32\igfxhptb.lhp
*\WINDOWS\system32\igfxhptg.lhp
*\WINDOWS\system32\igfxhrus.lhp
*\WINDOWS\system32\igfxhsve.lhp
*\WINDOWS\system32\igfxhtha.lhp
*\WINDOWS\system32\igfxhtrk.lhp
*\WINDOWS\system32\igfxpph.dll
*\WINDOWS\system32\igfxrara.lrc
*\WINDOWS\system32\igfxrarb.lrc
*\WINDOWS\system32\igfxrchs.lrc
*\WINDOWS\system32\igfxrcht.lrc
*\WINDOWS\system32\igfxrcsy.lrc
*\WINDOWS\system32\igfxrdan.lrc
*\WINDOWS\system32\igfxrdeu.lrc
*\WINDOWS\system32\igfxrell.lrc
*\WINDOWS\system32\igfxreng.lrc
*\WINDOWS\system32\igfxrenu.lrc
*\WINDOWS\system32\igfxres.dll
*\WINDOWS\system32\igfxresp.lrc
*\WINDOWS\system32\igfxress.dll
*\WINDOWS\system32\igfxrfin.lrc
*\WINDOWS\system32\igfxrfra.lrc
*\WINDOWS\system32\igfxrfrc.lrc
*\WINDOWS\system32\igfxrheb.lrc
*\WINDOWS\system32\igfxrhun.lrc
*\WINDOWS\system32\igfxrita.lrc
*\WINDOWS\system32\igfxrjpn.lrc
*\WINDOWS\system32\igfxrkor.lrc
*\WINDOWS\system32\igfxrnld.lrc
*\WINDOWS\system32\igfxrnor.lrc
*\WINDOWS\system32\igfxrplk.lrc
*\WINDOWS\system32\igfxrptb.lrc
*\WINDOWS\system32\igfxrptg.lrc
*\WINDOWS\system32\igfxrrus.lrc
*\WINDOWS\system32\igfxrsve.lrc
*\WINDOWS\system32\igfxrtha.lrc
*\WINDOWS\system32\igfxrtrk.lrc
*\WINDOWS\system32\igfxsrvc.dll
*\WINDOWS\system32\igfxtray.exe
*\WINDOWS\system32\IGLZW32S.DLL
*\WINDOWS\system32\igmpagnt.dll
*\WINDOWS\system32\ils.dll
*\WINDOWS\system32\imaadp32.acm
*\WINDOWS\system32\imagehlp.dll
*\WINDOWS\system32\imapi.exe
*\WINDOWS\system32\imeshare.dll
*\WINDOWS\system32\imgutil.dll
*\WINDOWS\system32\imm32.dll
*\WINDOWS\system32\inetcfg.dll
*\WINDOWS\system32\inetcomm.dll
*\WINDOWS\system32\inetcpl.cpl
*\WINDOWS\system32\inetcplc.dll
*\WINDOWS\system32\inetmib1.dll
*\WINDOWS\system32\inetpp.dll
*\WINDOWS\system32\inetppui.dll
*\WINDOWS\system32\inetres.dll
*\WINDOWS\system32\INETWH32.dll
*\WINDOWS\system32\infosoft.dll
*\WINDOWS\system32\initpki.dll
*\WINDOWS\system32\INLOADER.DLL
*\WINDOWS\system32\input.dll
*\WINDOWS\system32\inseng.dll
*\WINDOWS\system32\instcat.sql
*\WINDOWS\system32\intl.cpl
*\WINDOWS\system32\iologmsg.dll
*\WINDOWS\system32\ipconf.tsp
*\WINDOWS\system32\ipconfig.exe
*\WINDOWS\system32\iphlpapi.dll
*\WINDOWS\system32\ipmontr.dll
*\WINDOWS\system32\ipnathlp.dll
*\WINDOWS\system32\ippromon.dll
*\WINDOWS\system32\iprop.dll
*\WINDOWS\system32\iprtprio.dll
*\WINDOWS\system32\iprtrmgr.dll
*\WINDOWS\system32\ipsec6.exe
*\WINDOWS\system32\ipsecsnp.dll
*\WINDOWS\system32\ipsecsvc.dll
*\WINDOWS\system32\ipsmsnap.dll
*\WINDOWS\system32\ipv6.exe
*\WINDOWS\system32\ipv6mon.dll
*\WINDOWS\system32\ipxmontr.dll
*\WINDOWS\system32\ipxpromn.dll
*\WINDOWS\system32\ipxrip.dll
*\WINDOWS\system32\ipxroute.exe
*\WINDOWS\system32\ipxrtmgr.dll
*\WINDOWS\system32\ipxsap.dll
*\WINDOWS\system32\ipxwan.dll
*\WINDOWS\system32\ir32_32.dll
*\WINDOWS\system32\ir41_32.ax
*\WINDOWS\system32\ir41_qc.dll
*\WINDOWS\system32\ir41_qcx.dll
*\WINDOWS\system32\ir50_32.dll
*\WINDOWS\system32\ir50_qc.dll
*\WINDOWS\system32\ir50_qcx.dll
*\WINDOWS\system32\irclass.dll
*\WINDOWS\system32\isign32.dll
*\WINDOWS\system32\isrdbg32.dll
*\WINDOWS\system32\itircl.dll
*\WINDOWS\system32\itss.dll
*\WINDOWS\system32\iuctl.dll
*\WINDOWS\system32\iuengine.dll
*\WINDOWS\system32\ivfsrc.ax
*\WINDOWS\system32\ixsso.dll
*\WINDOWS\system32\iyuv_32.dll
*\WINDOWS\system32\java.exe
*\WINDOWS\system32\javaw.exe
*\WINDOWS\system32\javaws.exe
*\WINDOWS\system32\jdd.dll
*\WINDOWS\system32\jet500.dll
*\WINDOWS\system32\jgaw400.dll
*\WINDOWS\system32\jgdw400.dll
*\WINDOWS\system32\jgmd400.dll
*\WINDOWS\system32\jgpl400.dll
*\WINDOWS\system32\jgsd400.dll
*\WINDOWS\system32\jgsh400.dll
*\WINDOWS\system32\jobexec.dll
*\WINDOWS\system32\joy.cpl
*\WINDOWS\system32\JPEGACC.DLL
*\WINDOWS\system32\JPEGCODE.DLL
*\WINDOWS\system32\jpicpl32.cpl
*\WINDOWS\system32\jscript.dll
*\WINDOWS\system32\jsproxy.dll
*\WINDOWS\system32\kanji_1.uce
*\WINDOWS\system32\kanji_2.uce
*\WINDOWS\system32\kb16.com
*\WINDOWS\system32\kbd101b.dll
*\WINDOWS\system32\kbd101c.dll
*\WINDOWS\system32\kbd103.dll
*\WINDOWS\system32\kbd106.dll
*\WINDOWS\system32\KBDAL.DLL
*\WINDOWS\system32\kbdaze.dll
*\WINDOWS\system32\kbdazel.dll
*\WINDOWS\system32\kbdbe.dll
*\WINDOWS\system32\kbdbene.dll
*\WINDOWS\system32\kbdblr.dll
*\WINDOWS\system32\kbdbr.dll
*\WINDOWS\system32\kbdbu.dll
*\WINDOWS\system32\kbdca.dll
*\WINDOWS\system32\kbdcan.dll
*\WINDOWS\system32\kbdcr.dll
*\WINDOWS\system32\kbdcz.dll
*\WINDOWS\system32\kbdcz1.dll
*\WINDOWS\system32\kbdcz2.dll
*\WINDOWS\system32\kbdda.dll
*\WINDOWS\system32\kbddv.dll
*\WINDOWS\system32\kbdes.dll
*\WINDOWS\system32\kbdest.dll
*\WINDOWS\system32\kbdfc.dll
*\WINDOWS\system32\kbdfi.dll
*\WINDOWS\system32\kbdfo.dll
*\WINDOWS\system32\kbdfr.dll
*\WINDOWS\system32\kbdgae.dll
*\WINDOWS\system32\kbdgkl.dll
*\WINDOWS\system32\kbdgr.dll
*\WINDOWS\system32\kbdgr1.dll
*\WINDOWS\system32\kbdhe.dll
*\WINDOWS\system32\kbdhe220.dll
*\WINDOWS\system32\kbdhe319.dll
*\WINDOWS\system32\kbdhela2.dll
*\WINDOWS\system32\kbdhela3.dll
*\WINDOWS\system32\kbdhept.dll
*\WINDOWS\system32\kbdhu.dll
*\WINDOWS\system32\kbdhu1.dll
*\WINDOWS\system32\kbdic.dll
*\WINDOWS\system32\kbdir.dll
*\WINDOWS\system32\kbdit.dll
*\WINDOWS\system32\kbdit142.dll
*\WINDOWS\system32\kbdjpn.dll
*\WINDOWS\system32\kbdkaz.dll
*\WINDOWS\system32\kbdkor.dll
*\WINDOWS\system32\kbdkyr.dll
*\WINDOWS\system32\kbdla.dll
*\WINDOWS\system32\kbdlt.dll
*\WINDOWS\system32\kbdlt1.dll
*\WINDOWS\system32\kbdlv.dll
*\WINDOWS\system32\kbdlv1.dll
*\WINDOWS\system32\kbdmac.dll
*\WINDOWS\system32\kbdmon.dll
*\WINDOWS\system32\kbdne.dll
*\WINDOWS\system32\kbdnec.dll
*\WINDOWS\system32\kbdno.dll
*\WINDOWS\system32\kbdpl.dll
*\WINDOWS\system32\kbdpl1.dll
*\WINDOWS\system32\kbdpo.dll
*\WINDOWS\system32\kbdro.dll
*\WINDOWS\system32\kbdru.dll
*\WINDOWS\system32\kbdru1.dll
*\WINDOWS\system32\kbdsf.dll
*\WINDOWS\system32\kbdsg.dll
*\WINDOWS\system32\kbdsl.dll
*\WINDOWS\system32\kbdsl1.dll
*\WINDOWS\system32\kbdsp.dll
*\WINDOWS\system32\kbdsw.dll
*\WINDOWS\system32\kbdtat.dll
*\WINDOWS\system32\kbdtuf.dll
*\WINDOWS\system32\kbdtuq.dll
*\WINDOWS\system32\kbduk.dll
*\WINDOWS\system32\kbdur.dll
*\WINDOWS\system32\kbdus.dll
*\WINDOWS\system32\kbdusl.dll
*\WINDOWS\system32\kbdusr.dll
*\WINDOWS\system32\kbdusx.dll
*\WINDOWS\system32\kbduzb.dll
*\WINDOWS\system32\kbdycc.dll
*\WINDOWS\system32\kbdycl.dll
*\WINDOWS\system32\kd1394.dll
*\WINDOWS\system32\kdcom.dll
*\WINDOWS\system32\kerberos.dll
*\WINDOWS\system32\kernel32.dll
*\WINDOWS\system32\key.~
*\WINDOWS\system32\key01.sys
*\WINDOWS\system32\keyboard.drv
*\WINDOWS\system32\keyboard.sys
*\WINDOWS\system32\keymgr.dll
*\WINDOWS\system32\kmddsp.tsp
*\WINDOWS\system32\korean.uce
*\WINDOWS\system32\krnl386.exe
*\WINDOWS\system32\ksproxy.ax
*\WINDOWS\system32\ksuser.dll
*\WINDOWS\system32\l3codeca.acm
*\WINDOWS\system32\l3codecp.acm
*\WINDOWS\system32\l3codecx.acm
*\WINDOWS\system32\l3codecx.ax
*\WINDOWS\system32\label.exe
*\WINDOWS\system32\langwrbk.dll
*\WINDOWS\system32\lanman.drv
*\WINDOWS\system32\laprxy.dll
*\WINDOWS\system32\lfbmp11n.dll
*\WINDOWS\system32\LFCMP11n.DLL
*\WINDOWS\system32\lfeps11n.dll
*\WINDOWS\system32\lffax11n.dll
*\WINDOWS\system32\lfgif11n.dll
*\WINDOWS\system32\lfpcd11n.dll
*\WINDOWS\system32\lfpcx11n.dll
*\WINDOWS\system32\Lfpng11n.dll
*\WINDOWS\system32\lfpsd11n.dll
*\WINDOWS\system32\lftga11n.dll
*\WINDOWS\system32\lftif11n.dll
*\WINDOWS\system32\lfwmf11n.dll
*\WINDOWS\system32\licdll.dll
*\WINDOWS\system32\licmgr10.dll
*\WINDOWS\system32\licwmi.dll
*\WINDOWS\system32\lights.exe
*\WINDOWS\system32\linkinfo.dll
*\WINDOWS\system32\lmhsvc.dll
*\WINDOWS\system32\lmrt.dll
*\WINDOWS\system32\lnkstub.exe
*\WINDOWS\system32\loadfix.com
*\WINDOWS\system32\loadperf.dll
*\WINDOWS\system32\locale.nls
*\WINDOWS\system32\localsec.dll
*\WINDOWS\system32\localspl.dll
*\WINDOWS\system32\localui.dll
*\WINDOWS\system32\locator.exe
*\WINDOWS\system32\lodctr.exe
*\WINDOWS\system32\log.~
*\WINDOWS\system32\logagent.exe
*\WINDOWS\system32\loghours.dll
*\WINDOWS\system32\logoff.exe
*\WINDOWS\system32\logon.scr
*\WINDOWS\system32\logonui.exe
*\WINDOWS\system32\logonui.exe.manifest
*\WINDOWS\system32\lpk.dll
*\WINDOWS\system32\lpq.exe
*\WINDOWS\system32\lpr.exe
*\WINDOWS\system32\lprhelp.dll
*\WINDOWS\system32\lprmonui.dll
*\WINDOWS\system32\lsasrv.dll
*\WINDOWS\system32\lsass.exe
*\WINDOWS\system32\LTDIS11n.dll
*\WINDOWS\system32\ltfil11n.DLL
*\WINDOWS\system32\ltimg11n.dll
*\WINDOWS\system32\ltkrn11n.dll
*\WINDOWS\system32\Ltwvc11n.dll
*\WINDOWS\system32\lusrmgr.msc
*\WINDOWS\system32\lz32.dll
*\WINDOWS\system32\lzexpand.dll
*\WINDOWS\system32\l_except.nls
*\WINDOWS\system32\l_intl.nls
*\WINDOWS\system32\magnify.exe
*\WINDOWS\system32\mag_hook.dll
*\WINDOWS\system32\makecab.exe
*\WINDOWS\system32\MALSLIB.DLL
*\WINDOWS\system32\mapi32.dll
*\WINDOWS\system32\mapistub.dll
*\WINDOWS\system32\MBLLNK.CPL
*\WINDOWS\system32\mcastmib.dll
*\WINDOWS\system32\mcd32.dll
*\WINDOWS\system32\mcdsrv32.dll
*\WINDOWS\system32\mchgrcoi.dll
*\WINDOWS\system32\Mci32.ocx
*\WINDOWS\system32\mciavi.drv
*\WINDOWS\system32\mciavi32.dll
*\WINDOWS\system32\mcicda.dll
*\WINDOWS\system32\mciole16.dll
*\WINDOWS\system32\mciole32.dll
*\WINDOWS\system32\mciqtz32.dll
*\WINDOWS\system32\mciseq.dll
*\WINDOWS\system32\mciseq.drv
*\WINDOWS\system32\mciwave.dll
*\WINDOWS\system32\mciwave.drv
*\WINDOWS\system32\mdhcp.dll
*\WINDOWS\system32\mdminst.dll
*\WINDOWS\system32\mdwmdmsp.dll
*\WINDOWS\system32\mem.exe
*\WINDOWS\system32\mf3216.dll
*\WINDOWS\system32\mfc40.dll
*\WINDOWS\system32\mfc40u.dll
*\WINDOWS\system32\mfc42.dll
*\WINDOWS\system32\MFC42ENU.DLL
*\WINDOWS\system32\mfc42u.dll
*\WINDOWS\system32\MFC71.dll
*\WINDOWS\system32\mfcans32.dll
*\WINDOWS\system32\mfcsubs.dll
*\WINDOWS\system32\mfcuia32.dll
*\WINDOWS\system32\mgmtapi.dll
*\WINDOWS\system32\mib.bin
*\WINDOWS\system32\midimap.dll
*\WINDOWS\system32\miglibnt.dll
*\WINDOWS\system32\migpwd.exe
*\WINDOWS\system32\mimefilt.dll
*\WINDOWS\system32\mindex.dll
*\WINDOWS\system32\mlang.dat
*\WINDOWS\system32\mlang.dll
*\WINDOWS\system32\mll_hp.dll
*\WINDOWS\system32\mll_mtf.dll
*\WINDOWS\system32\mll_qic.dll
*\WINDOWS\system32\mmc.exe
*\WINDOWS\system32\mmcbase.dll
*\WINDOWS\system32\mmcndmgr.dll
*\WINDOWS\system32\mmcshext.dll
*\WINDOWS\system32\mmdriver.inf
*\WINDOWS\system32\mmdrv.dll
*\WINDOWS\system32\mmfutil.dll
*\WINDOWS\system32\mmsys.cpl
*\WINDOWS\system32\mmsystem.dll
*\WINDOWS\system32\mmtask.tsk
*\WINDOWS\system32\mmutilse.dll
*\WINDOWS\system32\mnmdd.dll
*\WINDOWS\system32\mnmsrvc.exe
*\WINDOWS\system32\MOBILEV.ACM
*\WINDOWS\system32\mobsync.dll
*\WINDOWS\system32\mobsync.exe
*\WINDOWS\system32\mode.com
*\WINDOWS\system32\modemui.dll
*\WINDOWS\system32\modex.dll
*\WINDOWS\system32\more.com
*\WINDOWS\system32\moricons.dll
*\WINDOWS\system32\mountvol.exe
*\WINDOWS\system32\mouse.drv
*\WINDOWS\system32\mpg2splt.ax
*\WINDOWS\system32\mpg4dmod.dll
*\WINDOWS\system32\mpg4ds32.ax
*\WINDOWS\system32\mplay32.exe
*\WINDOWS\system32\mpnotify.exe
*\WINDOWS\system32\mpr.dll
*\WINDOWS\system32\mprapi.dll
*\WINDOWS\system32\mprddm.dll
*\WINDOWS\system32\mprdim.dll
*\WINDOWS\system32\mprmsg.dll
*\WINDOWS\system32\mprui.dll
*\WINDOWS\system32\mrinfo.exe
*\WINDOWS\system32\msaatext.dll
*\WINDOWS\system32\msacm.dll
*\WINDOWS\system32\msacm32.dll
*\WINDOWS\system32\msacm32.drv
*\WINDOWS\system32\msadds32.ax
*\WINDOWS\system32\msadp32.acm
*\WINDOWS\system32\msafd.dll
*\WINDOWS\system32\msapsspc.dll
*\WINDOWS\system32\msasn1.dll
*\WINDOWS\system32\msaud32.acm
*\WINDOWS\system32\msaudite.dll
*\WINDOWS\system32\mscat32.dll
*\WINDOWS\system32\mscdexnt.exe
*\WINDOWS\system32\mscms.dll
*\WINDOWS\system32\mscomct2.ocx
*\WINDOWS\system32\Mscomctl.dep
*\WINDOWS\system32\mscomctl.ocx
*\WINDOWS\system32\msconf.dll
*\WINDOWS\system32\mscoree.dll
*\WINDOWS\system32\mscorier.dll
*\WINDOWS\system32\mscories.dll
*\WINDOWS\system32\mscpx32r.dLL
*\WINDOWS\system32\mscpxl32.dLL
*\WINDOWS\system32\MSCTF.dll
*\WINDOWS\system32\MSCTFP.dll
*\WINDOWS\system32\msdart.dll
*\WINDOWS\system32\msdatsrc.tlb
*\WINDOWS\system32\msdmo.dll
*\WINDOWS\system32\msdtc.exe
*\WINDOWS\system32\msdtclog.dll
*\WINDOWS\system32\msdtcprf.h
*\WINDOWS\system32\msdtcprf.ini
*\WINDOWS\system32\msdtcprx.dll
*\WINDOWS\system32\msdtctm.dll
*\WINDOWS\system32\msdtcuiu.dll
*\WINDOWS\system32\msdvdopt.dll
*\WINDOWS\system32\msdxm.ocx
*\WINDOWS\system32\msdxmlc.dll
*\WINDOWS\system32\msencode.dll
*\WINDOWS\system32\msexch40.dll
*\WINDOWS\system32\msexcl40.dll
*\WINDOWS\system32\msg.exe
*\WINDOWS\system32\msg711.acm
*\WINDOWS\system32\msg723.acm
*\WINDOWS\system32\msgina.dll
*\WINDOWS\system32\msgsm32.acm
*\WINDOWS\system32\MSGSTRPC.DLL
*\WINDOWS\system32\msgsvc.dll
*\WINDOWS\system32\msh261.drv
*\WINDOWS\system32\msh263.drv
*\WINDOWS\system32\mshearts.exe
*\WINDOWS\system32\mshta.exe
*\WINDOWS\system32\mshtml.dll
*\WINDOWS\system32\mshtml.tlb
*\WINDOWS\system32\mshtmled.dll
*\WINDOWS\system32\mshtmler.dll
*\WINDOWS\system32\msi.dll
*\WINDOWS\system32\msident.dll
*\WINDOWS\system32\msidle.dll
*\WINDOWS\system32\msidntld.dll
*\WINDOWS\system32\msieftp.dll
*\WINDOWS\system32\msiexec.exe
*\WINDOWS\system32\msihnd.dll
*\WINDOWS\system32\msimg32.dll
*\WINDOWS\system32\msimsg.dll
*\WINDOWS\system32\MSIMTF.dll
*\WINDOWS\system32\Msinet.ocx
*\WINDOWS\system32\msisam11.dll
*\WINDOWS\system32\msisip.dll
*\WINDOWS\system32\msjet40.dll
*\WINDOWS\system32\msjetoledb40.dll
*\WINDOWS\system32\msjint40.dll
*\WINDOWS\system32\msjter40.dll
*\WINDOWS\system32\msjtes40.dll
*\WINDOWS\system32\mslbui.dll
*\WINDOWS\system32\msls2.dll
*\WINDOWS\system32\msls31.dll
*\WINDOWS\system32\msltus40.dll
*\WINDOWS\system32\msmask32.ocx
*\WINDOWS\system32\msnetobj.dll
*\WINDOWS\system32\msnsspc.dll
*\WINDOWS\system32\msobjs.dll
*\WINDOWS\system32\msoeacct.dll
*\WINDOWS\system32\msoert2.dll
*\WINDOWS\system32\msorc32r.dll
*\WINDOWS\system32\msorcl32.dll
*\WINDOWS\system32\mspaint.exe
*\WINDOWS\system32\mspatcha.dll
*\WINDOWS\system32\mspbde40.dll
*\WINDOWS\system32\MsPMSNSv.dll
*\WINDOWS\system32\MsPMSP.dll
*\WINDOWS\system32\mspmspsv.dll
*\WINDOWS\system32\msports.dll
*\WINDOWS\system32\msprivs.dll
*\WINDOWS\system32\msr2c.dll
*\WINDOWS\system32\msr2cenu.dll
*\WINDOWS\system32\msratelc.dll
*\WINDOWS\system32\msrating.dll
*\WINDOWS\system32\msrclr40.dll
*\WINDOWS\system32\msrd2x40.dll
*\WINDOWS\system32\msrd3x40.dll
*\WINDOWS\system32\MSRDO20.DLL
*\WINDOWS\system32\msrecr40.dll
*\WINDOWS\system32\msrepl40.dll
*\WINDOWS\system32\msrle32.dll
*\WINDOWS\system32\msscds32.ax
*\WINDOWS\system32\MSSCP.dll
*\WINDOWS\system32\msscript.ocx
*\WINDOWS\system32\mssign32.dll
*\WINDOWS\system32\mssip32.dll
*\WINDOWS\system32\MSSTDFMT.DLL
*\WINDOWS\system32\msstkprp.dll
*\WINDOWS\system32\msswch.dll
*\WINDOWS\system32\msswchx.exe
*\WINDOWS\system32\mstask.dll
*\WINDOWS\system32\mstext40.dll
*\WINDOWS\system32\mstime.dll
*\WINDOWS\system32\mstinit.exe
*\WINDOWS\system32\mstlsapi.dll
*\WINDOWS\system32\mstsc.exe
*\WINDOWS\system32\mstscax.dll
*\WINDOWS\system32\mstvca.dll
*\WINDOWS\system32\mstvgs.dll
*\WINDOWS\system32\msuni11.dll
*\WINDOWS\system32\msutb.dll
*\WINDOWS\system32\msv1_0.dll
*\WINDOWS\system32\msvbvm50.dll
*\WINDOWS\system32\MSVBVM60.DLL
*\WINDOWS\system32\msvcirt.dll
*\WINDOWS\system32\msvcp50.dll
*\WINDOWS\system32\msvcp60.dll
*\WINDOWS\system32\msvcp71.dll
*\WINDOWS\system32\msvcr71.dll
*\WINDOWS\system32\msvcrt.dll
*\WINDOWS\system32\msvcrt20.dll
*\WINDOWS\system32\msvcrt40.dll
*\WINDOWS\system32\msvfw32.dll
*\WINDOWS\system32\msvidc32.dll
*\WINDOWS\system32\msvidctl.dll
*\WINDOWS\system32\msvideo.dll
*\WINDOWS\system32\msw3prt.dll
*\WINDOWS\system32\mswdat10.dll
*\WINDOWS\system32\mswebdvd.dll
*\WINDOWS\system32\MSWMDM.dll
*\WINDOWS\system32\mswsock.dll
*\WINDOWS\system32\mswstr10.dll
*\WINDOWS\system32\msxbde40.dll
*\WINDOWS\system32\msxml.dll
*\WINDOWS\system32\msxml2.dll
*\WINDOWS\system32\msxml2r.dll
*\WINDOWS\system32\msxml3.inf
*\WINDOWS\system32\msxmlr.dll
*\WINDOWS\system32\msyuv.dll
*\WINDOWS\system32\mtxclu.dll
*\WINDOWS\system32\mtxdm.dll
*\WINDOWS\system32\mtxex.dll
*\WINDOWS\system32\mtxlegih.dll
*\WINDOWS\system32\mtxoci.dll
*\WINDOWS\system32\mycomput.dll
*\WINDOWS\system32\mydocs.dll
*\WINDOWS\system32\narrator.exe
*\WINDOWS\system32\narrhook.dll
*\WINDOWS\system32\nbtstat.exe
*\WINDOWS\system32\ncobjapi.dll
*\WINDOWS\system32\ncpa.cpl
*\WINDOWS\system32\ncpa.cpl.manifest
*\WINDOWS\system32\ncxpnt.dll
*\WINDOWS\system32\nddeapi.dll
*\WINDOWS\system32\nddeapir.exe
*\WINDOWS\system32\nddenb32.dll
*\WINDOWS\system32\ndptsp.tsp
*\WINDOWS\system32\net.exe
*\WINDOWS\system32\net.hlp
*\WINDOWS\system32\net1.exe
*\WINDOWS\system32\netapi.dll
*\WINDOWS\system32\netapi32.dll
*\WINDOWS\system32\netcfgx.dll
*\WINDOWS\system32\netdde.exe
*\WINDOWS\system32\netevent.dll
*\WINDOWS\system32\netfxperf.dll
*\WINDOWS\system32\neth.dll
*\WINDOWS\system32\netid.dll
*\WINDOWS\system32\netlogon.dll
*\WINDOWS\system32\netman.dll
*\WINDOWS\system32\netmsg.dll
*\WINDOWS\system32\netplwiz.dll
*\WINDOWS\system32\netrap.dll
*\WINDOWS\system32\netsetup.exe
*\WINDOWS\system32\netsh.exe
*\WINDOWS\system32\netshell.dll
*\WINDOWS\system32\netstat.exe
*\WINDOWS\system32\netui0.dll
*\WINDOWS\system32\netui1.dll
*\WINDOWS\system32\netui2.dll
*\WINDOWS\system32\newdev.dll
*\WINDOWS\system32\nlhtml.dll
*\WINDOWS\system32\nlsfunc.exe
*\WINDOWS\system32\nmevtmsg.dll
*\WINDOWS\system32\nmmkcert.dll
*\WINDOWS\system32\noise.chs
*\WINDOWS\system32\noise.cht
*\WINDOWS\system32\noise.dat
*\WINDOWS\system32\noise.deu
*\WINDOWS\system32\noise.eng
*\WINDOWS\system32\noise.enu
*\WINDOWS\system32\noise.esn
*\WINDOWS\system32\noise.fra
*\WINDOWS\system32\noise.ita
*\WINDOWS\system32\noise.nld
*\WINDOWS\system32\noise.sve
*\WINDOWS\system32\noise.tha
*\WINDOWS\system32\notepad.exe
*\WINDOWS\system32\npptools.dll
*\WINDOWS\system32\npwmsdrm.dll
*\WINDOWS\system32\nscompat.tlb
*\WINDOWS\system32\nsl71.dll
*\WINDOWS\system32\nslookup.exe
*\WINDOWS\system32\ntdll.dll
*\WINDOWS\system32\ntdos.sys
*\WINDOWS\system32\ntdos404.sys
*\WINDOWS\system32\ntdos411.sys
*\WINDOWS\system32\ntdos412.sys
*\WINDOWS\system32\ntdos804.sys
*\WINDOWS\system32\ntdsapi.dll
*\WINDOWS\system32\ntimage.gif
*\WINDOWS\system32\ntio.sys
*\WINDOWS\system32\ntio404.sys
*\WINDOWS\system32\ntio411.sys
*\WINDOWS\system32\ntio412.sys
*\WINDOWS\system32\ntio804.sys
*\WINDOWS\system32\ntkrnlpa.exe
*\WINDOWS\system32\ntlanman.dll
*\WINDOWS\system32\ntlanui.dll
*\WINDOWS\system32\ntlanui2.dll
*\WINDOWS\system32\ntlsapi.dll
*\WINDOWS\system32\ntmarta.dll
*\WINDOWS\system32\ntmsapi.dll
*\WINDOWS\system32\ntmsdba.dll
*\WINDOWS\system32\ntmsevt.dll
*\WINDOWS\system32\ntmsmgr.dll
*\WINDOWS\system32\ntmsmgr.msc
*\WINDOWS\system32\ntmsoprq.msc
*\WINDOWS\system32\ntmssvc.dll
*\WINDOWS\system32\ntoskrnl.exe
*\WINDOWS\system32\ntprint.dll
*\WINDOWS\system32\ntsd.exe
*\WINDOWS\system32\ntsdexts.dll
*\WINDOWS\system32\ntshrui.dll
*\WINDOWS\system32\NTSVC.ocx
*\WINDOWS\system32\ntvdm.exe
*\WINDOWS\system32\ntvdmd.dll
*\WINDOWS\system32\nusrmgr.cpl
*\WINDOWS\system32\nwc.cpl.manifest
*\WINDOWS\system32\nwprovau.dll
*\WINDOWS\system32\oakley.dll
*\WINDOWS\system32\objsel.dll
*\WINDOWS\system32\occache.dll
*\WINDOWS\system32\ochlp30e.dll
*\WINDOWS\system32\ocmanage.dll
*\WINDOWS\system32\odbc16gt.dll
*\WINDOWS\system32\odbc32.dll
*\WINDOWS\system32\odbc32gt.dll
*\WINDOWS\system32\odbcad32.exe
*\WINDOWS\system32\odbcbcp.dll
*\WINDOWS\system32\odbcconf.dll
*\WINDOWS\system32\odbcconf.exe
*\WINDOWS\system32\odbcconf.rsp
*\WINDOWS\system32\odbccp32.cpl
*\WINDOWS\system32\odbccp32.dll
*\WINDOWS\system32\odbccr32.dll
*\WINDOWS\system32\odbccu32.dll
*\WINDOWS\system32\odbcint.dll
*\WINDOWS\system32\odbcji32.dll
*\WINDOWS\system32\odbcjt32.dll
*\WINDOWS\system32\odbcp32r.dll
*\WINDOWS\system32\odbctrac.dll
*\WINDOWS\system32\oddbse32.dll
*\WINDOWS\system32\odexl32.dll
*\WINDOWS\system32\odfox32.dll
*\WINDOWS\system32\odpdx32.dll
*\WINDOWS\system32\odtext32.dll
*\WINDOWS\system32\oembios.bin
*\WINDOWS\system32\oembios.dat
*\WINDOWS\system32\oembios.sig
*\WINDOWS\system32\oeminfo.ini
*\WINDOWS\system32\offfilt.dll
*\WINDOWS\system32\ole2.dll
*\WINDOWS\system32\ole2disp.dll
*\WINDOWS\system32\ole2nls.dll
*\WINDOWS\system32\ole32.dll
*\WINDOWS\system32\oleacc.dll
*\WINDOWS\system32\oleaccrc.dll
*\WINDOWS\system32\oleaut32.dll
*\WINDOWS\system32\olecli.dll
*\WINDOWS\system32\olecli32.dll
*\WINDOWS\system32\olecnv32.dll
*\WINDOWS\system32\oledlg.dll
*\WINDOWS\system32\olelib.tlb
*\WINDOWS\system32\olelib2.tlb
*\WINDOWS\system32\oleprn.dll
*\WINDOWS\system32\olepro32.dll
*\WINDOWS\system32\olesvr.dll
*\WINDOWS\system32\olesvr32.dll
*\WINDOWS\system32\olethk32.dll
*\WINDOWS\system32\opengl32.dll
*\WINDOWS\system32\osk.exe
*\WINDOWS\system32\osuninst.dll
*\WINDOWS\system32\osuninst.exe
*\WINDOWS\system32\pacifisy.dll
*\WINDOWS\system32\packager.exe
*\WINDOWS\system32\paiwinn.dat
*\WINDOWS\system32\panmap.dll
*\WINDOWS\system32\paqsp.dll
*\WINDOWS\system32\pathping.exe
*\WINDOWS\system32\pautoenr.dll
*\WINDOWS\system32\PCDLIB32.DLL
*\WINDOWS\system32\pcl.sep
*\WINDOWS\system32\pdh.dll
*\WINDOWS\system32\pentnt.exe
*\WINDOWS\system32\perfc009.dat
*\WINDOWS\system32\perfci.h
*\WINDOWS\system32\perfci.ini
*\WINDOWS\system32\perfctrs.dll
*\WINDOWS\system32\perfd009.dat
*\WINDOWS\system32\perfdisk.dll
*\WINDOWS\system32\perffilt.h
*\WINDOWS\system32\perffilt.ini
*\WINDOWS\system32\perfh009.dat
*\WINDOWS\system32\perfi009.dat
*\WINDOWS\system32\perfmon.exe
*\WINDOWS\system32\perfmon.msc
*\WINDOWS\system32\perfnet.dll
*\WINDOWS\system32\perfos.dll
*\WINDOWS\system32\perfproc.dll
*\WINDOWS\system32\PerfStringBackup.INI
*\WINDOWS\system32\perfts.dll
*\WINDOWS\system32\perfwci.h
*\WINDOWS\system32\perfwci.ini
*\WINDOWS\system32\photowiz.dll
*\WINDOWS\system32\pid.dll
*\WINDOWS\system32\pidgen.dll
*\WINDOWS\system32\pifmgr.dll
*\WINDOWS\system32\ping.exe
*\WINDOWS\system32\ping6.exe
*\WINDOWS\system32\pjlmon.dll
*\WINDOWS\system32\plugin.ocx
*\WINDOWS\system32\plustab.dll
*\WINDOWS\system32\PMAILEXT.DLL
*\WINDOWS\system32\pmspl.dll
*\WINDOWS\system32\pngfilt.dll
*\WINDOWS\system32\polstore.dll
*\WINDOWS\system32\powercfg.cpl
*\WINDOWS\system32\powrprof.dll
*\WINDOWS\system32\PPCLOAD.DLL
*\WINDOWS\system32\PPVEXP.DLL
*\WINDOWS\system32\prflbmsg.dll
*\WINDOWS\system32\print.exe
*\WINDOWS\system32\printui.dll
*\WINDOWS\system32\proctexe.ocx
*\WINDOWS\system32\prodspec.ini
*\WINDOWS\system32\profmap.dll
*\WINDOWS\system32\progman.exe
*\WINDOWS\system32\proquota.exe
*\WINDOWS\system32\psapi.dll
*\WINDOWS\system32\psbase.dll
*\WINDOWS\system32\pschdcnt.h
*\WINDOWS\system32\pschdprf.dll
*\WINDOWS\system32\pschdprf.ini
*\WINDOWS\system32\pscript.sep
*\WINDOWS\system32\PSIKey.dll
*\WINDOWS\system32\psnppagn.dll
*\WINDOWS\system32\pstorec.dll
*\WINDOWS\system32\pstorsvc.dll
*\WINDOWS\system32\Pubole32.dll
*\WINDOWS\system32\pubprn.vbs
*\WINDOWS\system32\qappsrv.exe
*\WINDOWS\system32\qasf.dll
*\WINDOWS\system32\qcap.dll
*\WINDOWS\system32\qdv.dll
*\WINDOWS\system32\qdvd.dll
*\WINDOWS\system32\qedit.dll
*\WINDOWS\system32\qedwipes.dll
*\WINDOWS\system32\qmgr.dll
*\WINDOWS\system32\qmgrprxy.dll
*\WINDOWS\system32\qosname.dll
*\WINDOWS\system32\qprocess.exe
*\WINDOWS\system32\qt-mt331.dll
*\WINDOWS\system32\quartz.dll
*\WINDOWS\system32\query.dll
*\WINDOWS\system32\qwinsta.exe
*\WINDOWS\system32\racpldlg.dll
*\WINDOWS\system32\RAPI.DLL
*\WINDOWS\system32\rasadhlp.dll
*\WINDOWS\system32\rasapi32.dll
*\WINDOWS\system32\rasauto.dll
*\WINDOWS\system32\rasautou.exe
*\WINDOWS\system32\raschap.dll
*\WINDOWS\system32\rasctrnm.h
*\WINDOWS\system32\rasctrs.dll
*\WINDOWS\system32\rasctrs.ini
*\WINDOWS\system32\rasdial.exe
*\WINDOWS\system32\rasdlg.dll
*\WINDOWS\system32\rasman.dll
*\WINDOWS\system32\rasmans.dll
*\WINDOWS\system32\rasmontr.dll
*\WINDOWS\system32\rasmxs.dll
*\WINDOWS\system32\rasphone.exe
*\WINDOWS\system32\rasppp.dll
*\WINDOWS\system32\rasrad.dll
*\WINDOWS\system32\rassapi.dll
*\WINDOWS\system32\rasser.dll
*\WINDOWS\system32\rastapi.dll
*\WINDOWS\system32\rastls.dll
*\WINDOWS\system32\rcbdyctl.dll
*\WINDOWS\system32\rcimlby.exe
*\WINDOWS\system32\rcp.exe
*\WINDOWS\system32\rdchost.dll
*\WINDOWS\system32\RDOCURS.DLL
*\WINDOWS\system32\rdpcfgex.dll
*\WINDOWS\system32\rdpclip.exe
*\WINDOWS\system32\rdpdd.dll
*\WINDOWS\system32\rdpsnd.dll
*\WINDOWS\system32\rdpwsx.dll
*\WINDOWS\system32\rdsaddin.exe
*\WINDOWS\system32\rdshost.exe
*\WINDOWS\system32\recover.exe
*\WINDOWS\system32\redir.exe
*\WINDOWS\system32\reg.exe
*\WINDOWS\system32\regapi.dll
*\WINDOWS\system32\regedt32.exe
*\WINDOWS\system32\regini.exe
*\WINDOWS\system32\regsvc.dll
*\WINDOWS\system32\regsvr32.exe
*\WINDOWS\system32\regwiz.exe
*\WINDOWS\system32\regwizc.dll
*\WINDOWS\system32\remotepg.dll
*\WINDOWS\system32\remotesp.tsp
*\WINDOWS\system32\rend.dll
*\WINDOWS\system32\replace.exe
*\WINDOWS\system32\reset.exe
*\WINDOWS\system32\resutils.dll
*\WINDOWS\system32\rexec.exe
*\WINDOWS\system32\riched20.dll
*\WINDOWS\system32\riched32.dll
*\WINDOWS\system32\RICHTX32.OCX
*\WINDOWS\system32\rnr20.dll
*\WINDOWS\system32\Roboex32.dll
*\WINDOWS\system32\route.exe
*\WINDOWS\system32\routemon.exe
*\WINDOWS\system32\routetab.dll
*\WINDOWS\system32\rpcns4.dll
*\WINDOWS\system32\rpcrt4.dll
*\WINDOWS\system32\rpcss.dll
*\WINDOWS\system32\rsaci.rat
*\WINDOWS\system32\rsaenh.dll
*\WINDOWS\system32\rsh.exe
*\WINDOWS\system32\rshx32.dll
*\WINDOWS\system32\rsm.exe
*\WINDOWS\system32\rsmps.dll
*\WINDOWS\system32\rsmsink.exe
*\WINDOWS\system32\rsmui.exe
*\WINDOWS\system32\rsvp.exe
*\WINDOWS\system32\rsvp.ini
*\WINDOWS\system32\rsvpcnts.h
*\WINDOWS\system32\rsvpmsg.dll
*\WINDOWS\system32\rsvpperf.dll
*\WINDOWS\system32\rsvpsp.dll
*\WINDOWS\system32\rtcdll.dll
*\WINDOWS\system32\rtcshare.exe
*\WINDOWS\system32\rtipxmib.dll
*\WINDOWS\system32\rtm.dll
*\WINDOWS\system32\rtutils.dll
*\WINDOWS\system32\runas.exe
*\WINDOWS\system32\rundll32.exe
*\WINDOWS\system32\rwinsta.exe
*\WINDOWS\system32\S32EVNT1.DLL
*\WINDOWS\system32\safrcdlg.dll
*\WINDOWS\system32\safrdm.dll
*\WINDOWS\system32\safrslv.dll
*\WINDOWS\system32\saie_gdf.dat
*\WINDOWS\system32\samlib.dll
*\WINDOWS\system32\samsrv.dll
*\WINDOWS\system32\sapi.cpl.manifest
*\WINDOWS\system32\savedump.exe
*\WINDOWS\system32\sc.exe
*\WINDOWS\system32\scarddlg.dll
*\WINDOWS\system32\scardssp.dll
*\WINDOWS\system32\scardsvr.exe
*\WINDOWS\system32\sccbase.dll
*\WINDOWS\system32\sccsccp.dll
*\WINDOWS\system32\scecli.dll
*\WINDOWS\system32\scesrv.dll
*\WINDOWS\system32\schannel.dll
*\WINDOWS\system32\schedsvc.dll
*\WINDOWS\system32\sclgntfy.dll
*\WINDOWS\system32\SCP32.DLL
*\WINDOWS\system32\scredir.dll
*\WINDOWS\system32\scripto.dll
*\WINDOWS\system32\scrnsave.scr
*\WINDOWS\system32\scrobj.dll
*\WINDOWS\system32\scrrun.dll
*\WINDOWS\system32\sdbinst.exe
*\WINDOWS\system32\sdpblb.dll
*\WINDOWS\system32\seclogon.dll
*\WINDOWS\system32\secur32.dll
*\WINDOWS\system32\security.dll
*\WINDOWS\system32\sendcmsg.dll
*\WINDOWS\system32\sendmail.dll
*\WINDOWS\system32\sens.dll
*\WINDOWS\system32\sensapi.dll
*\WINDOWS\system32\senscfg.dll
*\WINDOWS\system32\serialui.dll
*\WINDOWS\system32\servdeps.dll
*\WINDOWS\system32\services.exe
*\WINDOWS\system32\services.msc
*\WINDOWS\system32\serwvdrv.dll
*\WINDOWS\system32\sessmgr.exe
*\WINDOWS\system32\sethc.exe
*\WINDOWS\system32\setup.bmp
*\WINDOWS\system32\setup.exe
*\WINDOWS\system32\setupapi.dll
*\WINDOWS\system32\setupdll.dll
*\WINDOWS\system32\setver.exe
*\WINDOWS\system32\sfc.dll
*\WINDOWS\system32\sfc.exe
*\WINDOWS\system32\sfcfiles.dll
*\WINDOWS\system32\sfc_os.dll
*\WINDOWS\system32\sfmapi.dll
*\WINDOWS\system32\shadow.exe
*\WINDOWS\system32\share.exe
*\WINDOWS\system32\shdoclc.dll
*\WINDOWS\system32\shdocvw.dll
*\WINDOWS\system32\shell.dll
*\WINDOWS\system32\shell32.dll
*\WINDOWS\system32\shellstyle.dll
*\WINDOWS\system32\shfolder.dll
*\WINDOWS\system32\shgina.dll
*\WINDOWS\system32\shiftjis.uce
*\WINDOWS\system32\shimeng.dll
*\WINDOWS\system32\shimgvw.dll
*\WINDOWS\system32\shlwapi.dll
*\WINDOWS\system32\shmedia.dll
*\WINDOWS\system32\shmgrate.exe
*\WINDOWS\system32\shpshftr.dll
*\WINDOWS\system32\shrpubw.exe
*\WINDOWS\system32\shscrap.dll
*\WINDOWS\system32\shsvcs.dll
*\WINDOWS\system32\shutdown.exe
*\WINDOWS\system32\sigtab.dll
*\WINDOWS\system32\sigverif.exe
*\WINDOWS\system32\simpdata.tlb
*\WINDOWS\system32\sisbkup.dll
*\WINDOWS\system32\skdll.dll
*\WINDOWS\system32\skeys.exe
*\WINDOWS\system32\slayerxp.dll
*\WINDOWS\system32\slbcsp.dll
*\WINDOWS\system32\slbiop.dll
*\WINDOWS\system32\slbrccsp.dll
*\WINDOWS\system32\sl_anet.acm
*\WINDOWS\system32\SmartUI2.ocx
*\WINDOWS\system32\smlogcfg.dll
*\WINDOWS\system32\smlogsvc.exe
*\WINDOWS\system32\smss.exe
*\WINDOWS\system32\sndrec32.exe
*\WINDOWS\system32\sndvol32.exe
*\WINDOWS\system32\snmpapi.dll
*\WINDOWS\system32\snmpsnap.dll
*\WINDOWS\system32\softpub.dll
*\WINDOWS\system32\sol.exe
*\WINDOWS\system32\sort.exe
*\WINDOWS\system32\sortkey.nls
*\WINDOWS\system32\sorttbls.nls
*\WINDOWS\system32\sound.drv
*\WINDOWS\system32\spider.exe
*\WINDOWS\system32\spmsg.dll
*\WINDOWS\system32\spnike.dll
*\WINDOWS\system32\spoolss.dll
*\WINDOWS\system32\spoolsv.exe
*\WINDOWS\system32\sprestrt.exe
*\WINDOWS\system32\sprio600.dll
*\WINDOWS\system32\sprio800.dll
*\WINDOWS\system32\spxcoins.dll
*\WINDOWS\system32\sqlsodbc.chm
*\WINDOWS\system32\sqlsrv32.dll
*\WINDOWS\system32\sqlsrv32.rll
*\WINDOWS\system32\sqlunirl.dll
*\WINDOWS\system32\sqlwid.dll
*\WINDOWS\system32\sqlwoa.dll
*\WINDOWS\system32\srclient.dll
*\WINDOWS\system32\srrstr.dll
*\WINDOWS\system32\srsvc.dll
*\WINDOWS\system32\srvsvc.dll
*\WINDOWS\system32\ss3dfo.scr
*\WINDOWS\system32\ssbezier.scr
*\WINDOWS\system32\ssdpapi.dll
*\WINDOWS\system32\ssdpsrv.dll
*\WINDOWS\system32\ssflwbox.scr
*\WINDOWS\system32\ssmarque.scr
*\WINDOWS\system32\ssmypics.scr
*\WINDOWS\system32\ssmyst.scr
*\WINDOWS\system32\sspipes.scr
*\WINDOWS\system32\ssstars.scr
*\WINDOWS\system32\sstext3d.scr
*\WINDOWS\system32\stclient.dll
*\WINDOWS\system32\stdole2.tlb
*\WINDOWS\system32\stdole32.tlb
*\WINDOWS\system32\sti.dll
*\WINDOWS\system32\stimon.exe
*\WINDOWS\system32\sti_ci.dll
*\WINDOWS\system32\stobject.dll
*\WINDOWS\system32\storage.dll
*\WINDOWS\system32\storprop.dll
*\WINDOWS\system32\streamci.dll
*\WINDOWS\system32\strmdll.dll
*\WINDOWS\system32\subrange.uce
*\WINDOWS\system32\subst.exe
*\WINDOWS\system32\svchost.exe
*\WINDOWS\system32\svcpack.dll
*\WINDOWS\system32\swprv.dll
*\WINDOWS\system32\sxs.dll
*\WINDOWS\system32\SYMEVNT1.DLL
*\WINDOWS\system32\SymNeti.dll
*\WINDOWS\system32\SymRedir.dll
*\WINDOWS\system32\SymStore.dll
*\WINDOWS\system32\syncapp.exe
*\WINDOWS\system32\synceng.dll
*\WINDOWS\system32\syncui.dll
*\WINDOWS\system32\sysdm.cpl
*\WINDOWS\system32\sysedit.exe
*\WINDOWS\system32\sysinv.dll
*\WINDOWS\system32\syskey.exe
*\WINDOWS\system32\sysmon.ocx
*\WINDOWS\system32\sysnet.exe
*\WINDOWS\system32\sysocmgr.exe
*\WINDOWS\system32\sysprint.sep
*\WINDOWS\system32\sysprtj.sep
*\WINDOWS\system32\syssetup.dll
*\WINDOWS\system32\system.drv
*\WINDOWS\system32\systray.exe
*\WINDOWS\system32\T.COM
*\WINDOWS\system32\t2embed.dll
*\WINDOWS\system32\TabCtl32.ocx
*\WINDOWS\system32\tapi.dll
*\WINDOWS\system32\tapi3.dll
*\WINDOWS\system32\tapi32.dll
*\WINDOWS\system32\tapiperf.dll
*\WINDOWS\system32\tapisrv.dll
*\WINDOWS\system32\tapiui.dll
*\WINDOWS\system32\taskman.exe
*\WINDOWS\system32\TASKMGR.COM
*\WINDOWS\system32\taskmgr.exe
*\WINDOWS\system32\tcmsetup.exe
*\WINDOWS\system32\tcpmib.dll
*\WINDOWS\system32\tcpmon.dll
*\WINDOWS\system32\tcpmon.ini
*\WINDOWS\system32\tcpmonui.dll
*\WINDOWS\system32\tcpsvcs.exe
*\WINDOWS\system32\tdc.ocx
*\WINDOWS\system32\telephon.cpl
*\WINDOWS\system32\telnet.exe
*\WINDOWS\system32\termmgr.dll
*\WINDOWS\system32\termsrv.dll
*\WINDOWS\system32\tftp.exe
*\WINDOWS\system32\themeui.dll
*\WINDOWS\system32\timedate.cpl
*\WINDOWS\system32\timer.drv
*\WINDOWS\system32\toolhelp.dll
*\WINDOWS\system32\tracert.exe
*\WINDOWS\system32\tracert6.exe
*\WINDOWS\system32\traffic.dll
*\WINDOWS\system32\tree.com
*\WINDOWS\system32\trkwks.dll
*\WINDOWS\system32\tsappcmp.dll
*\WINDOWS\system32\tsbyuv.dll
*\WINDOWS\system32\tscfgwmi.dll
*\WINDOWS\system32\tscon.exe
*\WINDOWS\system32\tscupgrd.exe
*\WINDOWS\system32\tsd32.dll
*\WINDOWS\system32\tsddd.dll
*\WINDOWS\system32\tsdiscon.exe
*\WINDOWS\system32\tskill.exe
*\WINDOWS\system32\tslabels.h
*\WINDOWS\system32\tslabels.ini
*\WINDOWS\system32\tsshutdn.exe
*\WINDOWS\system32\Twain.dll
*\WINDOWS\system32\Twain_32.dll
*\WINDOWS\system32\Twunk_16.exe
*\WINDOWS\system32\Twunk_32.exe
*\WINDOWS\system32\txflog.dll
*\WINDOWS\system32\typelib.dll
*\WINDOWS\system32\udhisapi.dll
*\WINDOWS\system32\ufat.dll
*\WINDOWS\system32\UICOM.DLL
*\WINDOWS\system32\Ulead Photo Explorer 8.scr
*\WINDOWS\system32\UleadPhotoExplorer8_Res.dll
*\WINDOWS\system32\ulib.dll
*\WINDOWS\system32\umandlg.dll
*\WINDOWS\system32\umdmxfrm.dll
*\WINDOWS\system32\umpnpmgr.dll
*\WINDOWS\system32\unicode.nls
*\WINDOWS\system32\unicows.dll
*\WINDOWS\system32\unimdm.tsp
*\WINDOWS\system32\unimdmat.dll
*\WINDOWS\system32\uniplat.dll
*\WINDOWS\system32\unlodctr.exe
*\WINDOWS\system32\untfs.dll
*\WINDOWS\system32\unzdll.dll
*\WINDOWS\system32\upnp.dll
*\WINDOWS\system32\upnpcont.exe
*\WINDOWS\system32\upnphost.dll
*\WINDOWS\system32\upnpui.dll
*\WINDOWS\system32\ups.exe
*\WINDOWS\system32\ureg.dll
*\WINDOWS\system32\url.dll
*\WINDOWS\system32\urlmon.dll
*\WINDOWS\system32\usbmon.dll
*\WINDOWS\system32\usbui.dll
*\WINDOWS\system32\user.exe
*\WINDOWS\system32\user32.dll
*\WINDOWS\system32\userenv.dll
*\WINDOWS\system32\userinit.exe
*\WINDOWS\system32\usp10.dll
*\WINDOWS\system32\usrcntra.dll
*\WINDOWS\system32\usrcoina.dll
*\WINDOWS\system32\usrdpa.dll
*\WINDOWS\system32\usrdtea.dll
*\WINDOWS\system32\usrfaxa.dll
*\WINDOWS\system32\usrlbva.dll
*\WINDOWS\system32\usrlogon.cmd
*\WINDOWS\system32\usrmlnka.exe
*\WINDOWS\system32\usrprbda.exe
*\WINDOWS\system32\usrrtosa.dll
*\WINDOWS\system32\usrsdpia.dll
*\WINDOWS\system32\usrshuta.exe
*\WINDOWS\system32\usrsvpia.dll
*\WINDOWS\system32\usrv42a.dll
*\WINDOWS\system32\usrv80a.dll
*\WINDOWS\system32\usrvoica.dll
*\WINDOWS\system32\usrvpa.dll
*\WINDOWS\system32\utildll.dll
*\WINDOWS\system32\utilman.exe
*\WINDOWS\system32\uwdf.exe
*\WINDOWS\system32\uxtheme.dll
*\WINDOWS\system32\v7vga.rom
*\WINDOWS\system32\VB40032.DLL
*\WINDOWS\system32\VBAEN32.OLB
*\WINDOWS\system32\VBAEND32.OLB
*\WINDOWS\system32\vbajet32.dll
*\WINDOWS\system32\VBAME.DLL
*\WINDOWS\system32\vbar332.dll
*\WINDOWS\system32\vbisurf.ax
*\WINDOWS\system32\vbscript.dll
*\WINDOWS\system32\vcdex.dll
*\WINDOWS\system32\vdmdbg.dll
*\WINDOWS\system32\vdmredir.dll
*\WINDOWS\system32\VEN2232.OLB
*\WINDOWS\system32\ver.dll
*\WINDOWS\system32\verifier.dll
*\WINDOWS\system32\verifier.exe
*\WINDOWS\system32\version.dll
*\WINDOWS\system32\vfpodbc.dll
*\WINDOWS\system32\vga.dll
*\WINDOWS\system32\vga.drv
*\WINDOWS\system32\vga256.dll
*\WINDOWS\system32\vga64k.dll
*\WINDOWS\system32\vh.dat
*\WINDOWS\system32\View Channels.scf
*\WINDOWS\system32\vjoy.dll
*\WINDOWS\system32\vp.dat
*\WINDOWS\system32\VSFLEX3.OCX
*\WINDOWS\system32\vssadmin.exe
*\WINDOWS\system32\vssapi.dll
*\WINDOWS\system32\vssvc.exe
*\WINDOWS\system32\vss_ps.dll
*\WINDOWS\system32\w32time.dll
*\WINDOWS\system32\w32tm.exe
*\WINDOWS\system32\w32topl.dll
*\WINDOWS\system32\watchdog.sys
*\WINDOWS\system32\wavemsp.dll
*\WINDOWS\system32\wbcache.deu
*\WINDOWS\system32\wbcache.enu
*\WINDOWS\system32\wbcache.esn
*\WINDOWS\system32\wbcache.fra
*\WINDOWS\system32\wbcache.ita
*\WINDOWS\system32\wbcache.nld
*\WINDOWS\system32\wbcache.sve
*\WINDOWS\system32\wbdbase.deu
*\WINDOWS\system32\wbdbase.enu
*\WINDOWS\system32\wbdbase.esn
*\WINDOWS\system32\wbdbase.fra
*\WINDOWS\system32\wbdbase.ita
*\WINDOWS\system32\wbdbase.nld
*\WINDOWS\system32\wbdbase.sve
*\WINDOWS\system32\wdfapi.dll
*\WINDOWS\system32\wdfmgr.exe
*\WINDOWS\system32\wdigest.dll
*\WINDOWS\system32\wdl.trm
*\WINDOWS\system32\wdmaud.drv
*\WINDOWS\system32\webcheck.dll
*\WINDOWS\system32\webclnt.dll
*\WINDOWS\system32\webfldrs.msi
*\WINDOWS\system32\webhits.dll
*\WINDOWS\system32\webvw.dll
*\WINDOWS\system32\WELSOF32.DLL
*\WINDOWS\system32\wextract.exe
*\WINDOWS\system32\wfwnet.drv
*\WINDOWS\system32\wiaacmgr.exe
*\WINDOWS\system32\wiadefui.dll
*\WINDOWS\system32\wiadss.dll
*\WINDOWS\system32\wiascr.dll
*\WINDOWS\system32\wiaservc.dll
*\WINDOWS\system32\wiasf.ax
*\WINDOWS\system32\wiashext.dll
*\WINDOWS\system32\wiavideo.dll
*\WINDOWS\system32\wiavusd.dll
*\WINDOWS\system32\wifeman.dll
*\WINDOWS\system32\win.com
*\WINDOWS\system32\win32k.sys
*\WINDOWS\system32\win32spl.dll
*\WINDOWS\system32\win87em.dll
*\WINDOWS\system32\winchat.exe
*\WINDOWS\system32\WindowsLogon.manifest
*\WINDOWS\system32\winfax.dll
*\WINDOWS\system32\winhelp.hlp
*\WINDOWS\system32\winhlp32.exe
*\WINDOWS\system32\winhttp.dll
*\WINDOWS\system32\wininet.dll
*\WINDOWS\system32\winipsec.dll
*\WINDOWS\system32\winlogon.exe
*\WINDOWS\system32\winmine.exe
*\WINDOWS\system32\winmm.dll
*\WINDOWS\system32\winmsd.exe
*\WINDOWS\system32\winnls.dll
*\WINDOWS\system32\winntbbu.dll
*\WINDOWS\system32\winoldap.mod
*\WINDOWS\system32\winrnr.dll
*\WINDOWS\system32\winscard.dll
*\WINDOWS\system32\winsock.dll
*\WINDOWS\system32\winspool.drv
*\WINDOWS\system32\winspool.exe
*\WINDOWS\system32\winsrv.dll
*\WINDOWS\system32\winsta.dll
*\WINDOWS\system32\winstrm.dll
*\WINDOWS\system32\wintrust.dll
*\WINDOWS\system32\winupdt.008
*\WINDOWS\system32\winupdt.bin
*\WINDOWS\system32\winver.exe
*\WINDOWS\system32\wkssvc.dll
*\WINDOWS\system32\wldap32.dll
*\WINDOWS\system32\wlnotify.dll
*\WINDOWS\system32\wmadmod.dll
*\WINDOWS\system32\wmadmoe.dll
*\WINDOWS\system32\wmasf.dll
*\WINDOWS\system32\WMDMLOG.dll
*\WINDOWS\system32\WMDMPS.dll
*\WINDOWS\system32\WMDRMdev.dll
*\WINDOWS\system32\WMDRMNet.dll
*\WINDOWS\system32\wmerrenu.dll
*\WINDOWS\system32\wmerror.dll
*\WINDOWS\system32\wmi.dll
*\WINDOWS\system32\wmidx.dll
*\WINDOWS\system32\wmidx.ocx
*\WINDOWS\system32\wmimgmt.msc
*\WINDOWS\system32\wmiprop.dll
*\WINDOWS\system32\wmnetmgr.dll
*\WINDOWS\system32\wmp.dll
*\WINDOWS\system32\wmp.ocx
*\WINDOWS\system32\wmpasf.dll
*\WINDOWS\system32\wmpcd.dll
*\WINDOWS\system32\wmpcore.dll
*\WINDOWS\system32\wmpdxm.dll
*\WINDOWS\system32\wmpencen.dll
*\WINDOWS\system32\wmploc.dll
*\WINDOWS\system32\wmpscheme.xml
*\WINDOWS\system32\wmpshell.dll
*\WINDOWS\system32\wmpsrcwp.dll
*\WINDOWS\system32\wmpstub.exe
*\WINDOWS\system32\wmpui.dll
*\WINDOWS\system32\wmsdmod.dll
*\WINDOWS\system32\wmsdmoe.dll
*\WINDOWS\system32\wmsdmoe2.dll
*\WINDOWS\system32\wmspdmod.dll
*\WINDOWS\system32\wmspdmoe.dll
*\WINDOWS\system32\wmstream.dll
*\WINDOWS\system32\wmv8dmod.dll
*\WINDOWS\system32\wmv8ds32.ax
*\WINDOWS\system32\wmv9vcm.dll
*\WINDOWS\system32\wmvadvd.dll
*\WINDOWS\system32\WMVADVE.DLL
*\WINDOWS\system32\wmvcore.dll
*\WINDOWS\system32\wmvdmod.dll
*\WINDOWS\system32\wmvdmoe.dll
*\WINDOWS\system32\wmvdmoe2.dll
*\WINDOWS\system32\wmvds32.ax
*\WINDOWS\system32\wow32.dll
*\WINDOWS\system32\wowdeb.exe
*\WINDOWS\system32\wowexec.exe
*\WINDOWS\system32\wowfax.dll
*\WINDOWS\system32\wowfaxui.dll
*\WINDOWS\system32\wpa.dbl
*\WINDOWS\system32\wpabaln.exe
*\WINDOWS\system32\wpdconns.dll
*\WINDOWS\system32\wpdmtp.dll
*\WINDOWS\system32\wpdmtpdr.dll
*\WINDOWS\system32\wpdmtpus.dll
*\WINDOWS\system32\wpdsp.dll
*\WINDOWS\system32\wpdtrace.dll
*\WINDOWS\system32\wpd_ci.dll
*\WINDOWS\system32\wpnpinst.exe
*\WINDOWS\system32\write.exe
*\WINDOWS\system32\ws2help.dll
*\WINDOWS\system32\ws2_32.dll
*\WINDOWS\system32\wscript.exe
*\WINDOWS\system32\wshatm.dll
*\WINDOWS\system32\wshcon.dll
*\WINDOWS\system32\wshext.dll
*\WINDOWS\system32\wship6.dll
*\WINDOWS\system32\wshisn.dll
*\WINDOWS\system32\wshnetbs.dll
*\WINDOWS\system32\wshom.ocx
*\WINDOWS\system32\WshRm.dll
*\WINDOWS\system32\wshtcpip.dll
*\WINDOWS\system32\wsnmp32.dll
*\WINDOWS\system32\wsock32.dll
*\WINDOWS\system32\wstdecod.dll
*\WINDOWS\system32\wtsapi32.dll
*\WINDOWS\system32\wuapi.dll
*\WINDOWS\system32\wuauclt.exe
*\WINDOWS\system32\wuauclt1.exe
*\WINDOWS\system32\wuaucpl.cpl
*\WINDOWS\system32\wuaucpl.cpl.manifest
*\WINDOWS\system32\wuaueng.dll
*\WINDOWS\system32\wuaueng1.dll
*\WINDOWS\system32\wuauserv.dll
*\WINDOWS\system32\wucltui.dll
*\WINDOWS\system32\wupdinfo.dll
*\WINDOWS\system32\wupdmgr.exe
*\WINDOWS\system32\wups.dll
*\WINDOWS\system32\wuv3is.dll
*\WINDOWS\system32\wuweb.dll
*\WINDOWS\system32\wzcdlg.dll
*\WINDOWS\system32\wzcsapi.dll
*\WINDOWS\system32\wzcsvc.dll
*\WINDOWS\system32\xactsrv.dll
*\WINDOWS\system32\XceedCry.dll
*\WINDOWS\system32\XceedZip.dll
*\WINDOWS\system32\xcopy.exe
*\WINDOWS\system32\xenroll.dll
*\WINDOWS\system32\xolehlp.dll
*\WINDOWS\system32\xpob2res.dll
*\WINDOWS\system32\zipfldr.dll
*\WINDOWS\system32\zlib.dll
*\WINDOWS\Tasks\desktop.ini
*\WINDOWS\Tasks\Norton AntiVirus - Scan my computer.job
*\WINDOWS\Tasks\SA.DAT
*\WINDOWS\Tasks\Symantec NetDetect.job
*\WINDOWS\twain_32\wiatwain.ds
*\WINDOWS\Web\bullet.gif
*\WINDOWS\Web\deskmovr.htt
*\WINDOWS\Web\exclam.gif
*\WINDOWS\Web\related.htm
*\WINDOWS\Web\safemode.htt
*\WINDOWS\Web\tip.htm
*\WINDOWS\Web\tips.gif

Remote Saxon · 05-22-2005, 12:32 PM

*\Documents and Settings\Administrator\Application Data\desktop.ini
*\Documents and Settings\Administrator\Local Settings\desktop.ini
*\Documents and Settings\Administrator\SendTo\Compressed (zipped) Folder.ZFSendToTarget
*\Documents and Settings\Administrator\SendTo\Desktop (create shortcut).DeskLink
*\Documents and Settings\Administrator\SendTo\desktop.ini
*\Documents and Settings\Administrator\SendTo\Mail Recipient.MAPIMail
*\Documents and Settings\Administrator\Start Menu\desktop.ini
*\Documents and Settings\Administrator\Templates\amipro.sam
*\Documents and Settings\Administrator\Templates\excel.xls
*\Documents and Settings\Administrator\Templates\excel4.xls
*\Documents and Settings\Administrator\Templates\lotus.wk4
*\Documents and Settings\Administrator\Templates\powerpnt.ppt
*\Documents and Settings\Administrator\Templates\presenta.shw
*\Documents and Settings\Administrator\Templates\quattro.wb2
*\Documents and Settings\Administrator\Templates\sndrec.wav
*\Documents and Settings\Administrator\Templates\winword.doc
*\Documents and Settings\Administrator\Templates\winword2.doc
*\Documents and Settings\Administrator\Templates\wordpfct.wpd
*\Documents and Settings\Administrator\Templates\wordpfct.wpg
*\Documents and Settings\All Users\Application Data\desktop.ini
*\Documents and Settings\All Users\Desktop\Ad-Aware SE Personal.lnk
*\Documents and Settings\All Users\Desktop\AOL Instant Messenger.lnk
*\Documents and Settings\All Users\Desktop\Easy CD Creator 5 Basic.lnk
*\Documents and Settings\All Users\Desktop\Norton AntiVirus 2002.lnk
*\Documents and Settings\All Users\Desktop\Ulead Photo Explorer 8.0 SE Basic.lnk
*\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
*\Documents and Settings\All Users\Documents\desktop.ini
*\Documents and Settings\All Users\DRM\drmstore.hds
*\Documents and Settings\All Users\DRM\DRMv1.bak
*\Documents and Settings\All Users\DRM\DRMv1.key
*\Documents and Settings\All Users\DRM\DRMv15.bak
*\Documents and Settings\All Users\DRM\DRMv15.lic
*\Documents and Settings\All Users\DRM\DRMv18.bak
*\Documents and Settings\All Users\DRM\DRMv18.lic
*\Documents and Settings\All Users\DRM\drmv2.lic
*\Documents and Settings\All Users\DRM\drmv2.sst
*\Documents and Settings\All Users\DRM\migration.log
*\Documents and Settings\All Users\DRM\pdrm.dat
*\Documents and Settings\All Users\DRM\v2ks.bla
*\Documents and Settings\All Users\DRM\v2ks.bla.bak
*\Documents and Settings\All Users\DRM\v2ks.sec
*\Documents and Settings\All Users\DRM\v2ks.sec.bak
*\Documents and Settings\All Users\Favorites\Yahoo! Mail.url
*\Documents and Settings\All Users\Favorites\Yahoo!.url
*\Documents and Settings\All Users\Start Menu\desktop.ini
*\Documents and Settings\All Users\Start Menu\New Office Document.lnk
*\Documents and Settings\All Users\Start Menu\Open Office Document.lnk
*\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk
*\Documents and Settings\All Users\Start Menu\Windows Update.lnk
*\Documents and Settings\All Users\Start Menu\Yahoo! Messenger.lnk
*\Documents and Settings\Default User\Application Data\desktop.ini
*\Documents and Settings\Default User\Local Settings\desktop.ini
*\Documents and Settings\Default User\SendTo\Compressed (zipped) Folder.ZFSendToTarget
*\Documents and Settings\Default User\SendTo\Desktop (create shortcut).DeskLink
*\Documents and Settings\Default User\SendTo\desktop.ini
*\Documents and Settings\Default User\SendTo\Mail Recipient.MAPIMail
*\Documents and Settings\Default User\Start Menu\desktop.ini
*\Documents and Settings\Default User\Templates\amipro.sam
*\Documents and Settings\Default User\Templates\excel.xls
*\Documents and Settings\Default User\Templates\excel4.xls
*\Documents and Settings\Default User\Templates\lotus.wk4
*\Documents and Settings\Default User\Templates\powerpnt.ppt
*\Documents and Settings\Default User\Templates\presenta.shw
*\Documents and Settings\Default User\Templates\quattro.wb2
*\Documents and Settings\Default User\Templates\sndrec.wav
*\Documents and Settings\Default User\Templates\winword.doc
*\Documents and Settings\Default User\Templates\winword2.doc
*\Documents and Settings\Default User\Templates\wordpfct.wpd
*\Documents and Settings\Default User\Templates\wordpfct.wpg
*\Documents and Settings\LocalService\Cookies\index.dat
*\Documents and Settings\LocalService\Local Settings\desktop.ini
*\Documents and Settings\NetworkService\Local Settings\desktop.ini
*\Documents and Settings\Owner\Application Data\desktop.ini
*\Documents and Settings\Owner\Application Data\GDIPFONTCACHEV1.DAT
*\Documents and Settings\Owner\Application Data\Sskknwrd.dll
*\Documents and Settings\Owner\Application Data\Sskuknwrd.dll
*\Documents and Settings\Owner\Cookies\index.dat
*\Documents and Settings\Owner\Desktop\Albums on CD.txt
*\Documents and Settings\Owner\Desktop\KillBox.exe
*\Documents and Settings\Owner\Desktop\mwav.exe
*\Documents and Settings\Owner\Desktop\Silent Runners.vbs
*\Documents and Settings\Owner\Desktop\Soulseek.lnk
*\Documents and Settings\Owner\Desktop\tx.txt
*\Documents and Settings\Owner\Favorites\BLABBERMOUTH.url
*\Documents and Settings\Owner\Favorites\Crime Library.url
*\Documents and Settings\Owner\Favorites\Desktop.ini
*\Documents and Settings\Owner\Favorites\Encyclopaedia Metallum.url
*\Documents and Settings\Owner\Favorites\**** Online.url
*\Documents and Settings\Owner\Favorites\GSA - Home.url
*\Documents and Settings\Owner\Favorites\Rush Radio - Listen to RUSH 24-7.url
*\Documents and Settings\Owner\Favorites\Tech Support Forum - powered by vBulletin.url
*\Documents and Settings\Owner\Local Settings\desktop.ini
*\Documents and Settings\Owner\My Documents\April 15.doc
*\Documents and Settings\Owner\My Documents\books.txt
*\Documents and Settings\Owner\My Documents\desktop.ini
*\Documents and Settings\Owner\My Documents\Sites.txt
*\Documents and Settings\Owner\My Documents\Thumbs.db
*\Documents and Settings\Owner\Recent\20050517.lnk
*\Documents and Settings\Owner\Recent\4.lnk
*\Documents and Settings\Owner\Recent\backup.lnk
*\Documents and Settings\Owner\Recent\report.lnk
*\Documents and Settings\Owner\Recent\tx.lnk
*\Documents and Settings\Owner\Recent\WINDOWS.lnk
*\Documents and Settings\Owner\Recent\wmsetup.lnk
*\Documents and Settings\Owner\SendTo\AIM Buddy.lnk
*\Documents and Settings\Owner\SendTo\AIM Share.lnk
*\Documents and Settings\Owner\SendTo\Compressed (zipped) Folder.ZFSendToTarget
*\Documents and Settings\Owner\SendTo\Desktop (create shortcut).DeskLink
*\Documents and Settings\Owner\SendTo\desktop.ini
*\Documents and Settings\Owner\SendTo\DirectCD Drive (D).lnk
*\Documents and Settings\Owner\SendTo\Mail Recipient.MAPIMail
*\Documents and Settings\Owner\SendTo\My Documents.mydocs
*\Documents and Settings\Owner\Start Menu\desktop.ini
*\Documents and Settings\Owner\Templates\amipro.sam
*\Documents and Settings\Owner\Templates\excel.xls
*\Documents and Settings\Owner\Templates\excel4.xls
*\Documents and Settings\Owner\Templates\lotus.wk4
*\Documents and Settings\Owner\Templates\powerpnt.ppt
*\Documents and Settings\Owner\Templates\presenta.shw
*\Documents and Settings\Owner\Templates\quattro.wb2
*\Documents and Settings\Owner\Templates\sndrec.wav
*\Documents and Settings\Owner\Templates\winword.doc
*\Documents and Settings\Owner\Templates\winword2.doc
*\Documents and Settings\Owner\Templates\wordpfct.wpd
*\Documents and Settings\Owner\Templates\wordpfct.wpg
*\Documents and Settings\Owner\UserData\index.dat
*\Program Files\AIM\Resources\Standard.arf
*\Program Files\AIM\sounds\dooropen.wav
*\Program Files\AIM\sounds\doorslam.wav
*\Program Files\AIM\sounds\imrcv.wav
*\Program Files\AIM\sounds\imsend.wav
*\Program Files\AIM\sounds\ring.wav
*\Program Files\AIM\sounds\talkbeg.wav
*\Program Files\AIM\sounds\talkend.wav
*\Program Files\AIM\Sysfiles\AIMBarInstall.exe
*\Program Files\AIM\Sysfiles\AIMWDInstall.exe
*\Program Files\AIM\Sysfiles\AIMWDUninstall.exe
*\Program Files\AIM\Sysfiles\AolOnDesktop.exe
*\Program Files\AIM\Sysfiles\imagehlp.dll
*\Program Files\AIM\Sysfiles\msvcr71.dll
*\Program Files\AIM\Sysfiles\viewpoint.exe
*\Program Files\AIM\Sysfiles\WxBug.EXE
*\Program Files\AvantGo Connect\AvantGo\agmal.dll
*\Program Files\AvantGo Connect\AvantGo\agproxy.dll
*\Program Files\AvantGo Connect\AvantGo\agsubs.exe
*\Program Files\BroadJump\Client Foundation\AppProperties.dll
*\Program Files\BroadJump\Client Foundation\BasicDiscoveryService.dll
*\Program Files\BroadJump\Client Foundation\BasicLoaderService.dll
*\Program Files\BroadJump\Client Foundation\BJAgentRegistration.dll
*\Program Files\BroadJump\Client Foundation\BJComBase.dll
*\Program Files\BroadJump\Client Foundation\BJComBase_IBJBasicStream.ini
*\Program Files\BroadJump\Client Foundation\BJComBase_IBJFileSpec.ini
*\Program Files\BroadJump\Client Foundation\BJComBase_IBJString.ini
*\Program Files\BroadJump\Client Foundation\BJComBase_IBJStringList.ini
*\Program Files\BroadJump\Client Foundation\BJComBogoPatch.dll
*\Program Files\BroadJump\Client Foundation\BJComBogoPatch_IBJBogoPatch.ini
*\Program Files\BroadJump\Client Foundation\BJComFileTransfer.dll
*\Program Files\BroadJump\Client Foundation\BJComFileTransfer_IBJFileTransfer.ini
*\Program Files\BroadJump\Client Foundation\BJComRT.dll
*\Program Files\BroadJump\Client Foundation\BJComSPMManager.dll
*\Program Files\BroadJump\Client Foundation\BJComSPMManager_IBJSPMManager.ini
*\Program Files\BroadJump\Client Foundation\BJComSRCManager.dll
*\Program Files\BroadJump\Client Foundation\BJComSRCManager_IBJSRCManager.ini
*\Program Files\BroadJump\Client Foundation\BJComVTBlade.dll
*\Program Files\BroadJump\Client Foundation\BJComVTBlade_IBJVTBlade.ini
*\Program Files\BroadJump\Client Foundation\BJFoundationRegistration.dll
*\Program Files\BroadJump\Client Foundation\BogoPatchApp.exe
*\Program Files\BroadJump\Client Foundation\CFD.exe
*\Program Files\BroadJump\Client Foundation\ConnectivityWatcher.dll
*\Program Files\BroadJump\Client Foundation\DirectoryService.dll
*\Program Files\BroadJump\Client Foundation\IBJAgentRegistration.ini
*\Program Files\BroadJump\Client Foundation\IBJAppProperties.ini
*\Program Files\BroadJump\Client Foundation\IBJConnectivityWatcher.ini
*\Program Files\BroadJump\Client Foundation\IBJDiscoveryService.ini
*\Program Files\BroadJump\Client Foundation\IBJFoundationRegistration.ini
*\Program Files\BroadJump\Client Foundation\IBJProfileEnum.ini
*\Program Files\BroadJump\Client Foundation\IBJProfileManager.ini
*\Program Files\BroadJump\Client Foundation\IBJTimerManager.ini
*\Program Files\BroadJump\Client Foundation\libeay32.dll
*\Program Files\BroadJump\Client Foundation\ProfileManager.dll
*\Program Files\BroadJump\Client Foundation\RmvBJCFD.dll
*\Program Files\BroadJump\Client Foundation\ssleay32.dll
*\Program Files\BroadJump\Client Foundation\TimerManager.dll
*\Program Files\BroadJump\Client Foundation\Uninst.isu
*\Program Files\BroadJump\Client Foundation\xerces-c.dll
*\Program Files\Common Files\Designer\MSADDNDR.DLL
*\Program Files\Common Files\Services\Thumbs.db
*\Program Files\Common Files\Symantec Shared\ccWebWnd.dll
*\Program Files\Common Files\Symantec Shared\Default.rul
*\Program Files\Common Files\Symantec Shared\DefUpdateCheck.dll
*\Program Files\Common Files\Symantec Shared\IraLsClt.dll
*\Program Files\Common Files\Symantec Shared\NIMClick.wav
*\Program Files\Common Files\Symantec Shared\NIMOver.wav
*\Program Files\Common Files\Symantec Shared\NMain.exe
*\Program Files\Common Files\Symantec Shared\Sevinst.exe
*\Program Files\Common Files\Symantec Shared\SNDInst.exe
*\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
*\Program Files\Common Files\Symantec Shared\SNDunin.dll
*\Program Files\Common Files\Symantec Shared\Validate.dat
*\Program Files\Common Files\System\directdb.dll
*\Program Files\Common Files\System\wab32.dll
*\Program Files\Common Files\System\wab32res.dll
*\Program Files\Common Files\tempdecomp\adloldcontrol.xml
*\Program Files\DIGITREX\DSC3000 Drivers\camd.dll
*\Program Files\DIGITREX\DSC3000 Drivers\CoachUsb.sys
*\Program Files\DIGITREX\DSC3000 Drivers\CoachVc.sys
*\Program Files\DIGITREX\DSC3000 Drivers\CoachWia.dll
*\Program Files\DIGITREX\DSC3000 Drivers\covcc.cat
*\Program Files\DIGITREX\DSC3000 Drivers\CoVcc.inf
*\Program Files\DIGITREX\DSC3000 Drivers\cowia.cat
*\Program Files\DIGITREX\DSC3000 Drivers\CoWia.inf
*\Program Files\DIGITREX\DSC3000 Drivers\GdiPlus.dll
*\Program Files\DIGITREX\DSC3000 Drivers\JPEGCODE.DLL
*\Program Files\DIGITREX\DSC3000 Drivers\JpegCode.inf
*\Program Files\DIGITREX\DSC3000 Drivers\Oemsetup.ini
*\Program Files\DIGITREX\DSC3000 Drivers\remove.exe
*\Program Files\DIGITREX\DSC3000 Drivers\RunOemInf.exe
*\Program Files\DivX\AutoUpdate\AutoUpdate-1.0.xml
*\Program Files\DivX\AutoUpdate\AutoUpdate.ico
*\Program Files\DivX\DivX\bgregister.exe
*\Program Files\DivX\DivX\config.exe
*\Program Files\DivX\DivX\README.txt
*\Program Files\Gateway\SRCD\biosid.exe
*\Program Files\Gateway\SRCD\Biosinfo.exe
*\Program Files\Gateway\SRCD\BIOSINFO.TMP
*\Program Files\Gateway\SRCD\Brcdset.es
*\Program Files\Gateway\SRCD\brcdset.exe
*\Program Files\Gateway\SRCD\brcdset.ini
*\Program Files\Gateway\SRCD\connect.htm
*\Program Files\Gateway\SRCD\connect.isp
*\Program Files\Gateway\SRCD\GWDL.exe
*\Program Files\Gateway\SRCD\gwdl.ini
*\Program Files\Gateway\SRCD\Iscflash.sys
*\Program Files\Gateway\SRCD\language.ini
*\Program Files\Gateway\SRCD\restart.dll
*\Program Files\Gateway\SRCD\SCRIPTIT.EXE
*\Program Files\Gateway\SRCD\Win32ui.es
*\Program Files\Gateway\SRCD\Win32UI.exe
*\Program Files\Gateway\SRCD\Win32UI.ico
*\Program Files\Gateway\SRCD\Win32UI.ini
*\Program Files\HijackThis\backups\backup-20050518-170947-279
*\Program Files\HijackThis\backups\backup-20050518-170947-279.dll
*\Program Files\HijackThis\backups\backup-20050518-170947-279.inf
*\Program Files\HijackThis\backups\backup-20050518-171532-382
*\Program Files\HijackThis\backups\backup-20050518-174951-885
*\Program Files\HijackThis\backups\backup-20050519-191441-157
*\Program Files\HijackThis\backups\backup-20050519-191441-253
*\Program Files\HijackThis\backups\backup-20050519-191441-356
*\Program Files\HijackThis\backups\backup-20050519-191441-463
*\Program Files\HijackThis\backups\backup-20050519-191441-509
*\Program Files\HijackThis\backups\backup-20050519-191441-567
*\Program Files\HijackThis\backups\backup-20050519-191441-704
*\Program Files\HijackThis\backups\backup-20050519-191441-772
*\Program Files\HijackThis\backups\backup-20050519-191441-890
*\Program Files\HijackThis\backups\backup-20050519-191441-920
*\Program Files\HijackThis\backups\backup-20050519-191441-920.dll
*\Program Files\HijackThis\backups\backup-20050519-191441-953
*\Program Files\HijackThis\backups\backup-20050519-191441-953.dll
*\Program Files\HijackThis\backups\backup-20050519-192900-243
*\Program Files\HijackThis\backups\backup-20050520-165812-572
*\Program Files\HijackThis\backups\backup-20050520-165812-626
*\Program Files\HijackThis\backups\backup-20050520-165812-980
*\Program Files\HijackThis\backups\backup-20050520-165812-980.dll
*\Program Files\HijackThis\backups\backup-20050521-101418-598
*\Program Files\HijackThis\backups\backup-20050521-101418-880
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\data1.cab
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\data1.hdr
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\layout.bin
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\setup.boot
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\setup.exe
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\setup.ilg
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\setup.ini
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\setup.inx
*\Program Files\InstallShield Installation Information\{0A9741D4-AAD3-40E5-B451-5882D92EA037}\_setup.dll
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\data1.cab
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\data1.hdr
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\layout.bin
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.boot
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.exe
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.ilg
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.ini
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\setup.inx
*\Program Files\InstallShield Installation Information\{D271DAE0-8D68-4C97-8356-A126D48A1D8C}\_setup.dll
*\Program Files\Internet Explorer\Connection Wizard\icwconn.dll
*\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe
*\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe
*\Program Files\Internet Explorer\Connection Wizard\icwdl.dll
*\Program Files\Internet Explorer\Connection Wizard\icwhelp.dll
*\Program Files\Internet Explorer\Connection Wizard\icwip.dun
*\Program Files\Internet Explorer\Connection Wizard\icwres.dll
*\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe
*\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe
*\Program Files\Internet Explorer\Connection Wizard\icwutil.dll
*\Program Files\Internet Explorer\Connection Wizard\icwx25a.dun
*\Program Files\Internet Explorer\Connection Wizard\icwx25b.dun
*\Program Files\Internet Explorer\Connection Wizard\icwx25c.dun
*\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe
*\Program Files\Internet Explorer\Connection Wizard\isignup.exe
*\Program Files\Internet Explorer\Connection Wizard\msicw.isp
*\Program Files\Internet Explorer\Connection Wizard\msn.isp
*\Program Files\Internet Explorer\Connection Wizard\phone.icw
*\Program Files\Internet Explorer\Connection Wizard\phone.ver
*\Program Files\Internet Explorer\Connection Wizard\state.icw
*\Program Files\Internet Explorer\Connection Wizard\support.icw
*\Program Files\Internet Explorer\Connection Wizard\trialoc.dll
*\Program Files\Internet Explorer\SIGNUP\INSTALL.INS
*\Program Files\Java\jre1.5.0_01\CHANGES
*\Program Files\Java\jre1.5.0_01\COPYRIGHT
*\Program Files\Java\jre1.5.0_01\LICENSE
*\Program Files\Java\jre1.5.0_01\PATCH.ERR
*\Program Files\Java\jre1.5.0_01\README.txt
*\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
*\Program Files\Lavasoft\Ad-Aware SE Personal\alert.wav
*\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref
*\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref.old
*\Program Files\Lavasoft\Ad-Aware SE Personal\unregaaw.exe
*\Program Files\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE
*\Program Files\Microsoft ActiveSync\drivers\WCEUSBSH.CAT
*\Program Files\Microsoft ActiveSync\drivers\WCEUSBSH.INF
*\Program Files\Microsoft ActiveSync\drivers\WCEUSBSH.SYS
*\Program Files\Microsoft Office\Office10\AW.DLL
*\Program Files\Microsoft Office\Office10\BIDI32.DLL
*\Program Files\Microsoft Office\Office10\BLNMGR.DLL
*\Program Files\Microsoft Office\Office10\BLNMGRPS.DLL
*\Program Files\Microsoft Office\Office10\CLIPPIT.ACG
*\Program Files\Microsoft Office\Office10\CLIPPIT.ACS
*\Program Files\Microsoft Office\Office10\DOT.ACG
*\Program Files\Microsoft Office\Office10\F1.ACG
*\Program Files\Microsoft Office\Office10\FPCUTL.DLL
*\Program Files\Microsoft Office\Office10\FPDTC.DLL
*\Program Files\Microsoft Office\Office10\GRAPH.EXE
*\Program Files\Microsoft Office\Office10\HLP95EN.DLL
*\Program Files\Microsoft Office\Office10\INTLBAND.HTM
*\Program Files\Microsoft Office\Office10\INTLDATE.DLL
*\Program Files\Microsoft Office\Office10\LOGO.ACG
*\Program Files\Microsoft Office\Office10\MCANSI.DLL
*\Program Files\Microsoft Office\Office10\MCDLC.EXE
*\Program Files\Microsoft Office\Office10\MCDLCAN.DLL
*\Program Files\Microsoft Office\Office10\MCPS.DLL
*\Program Files\Microsoft Office\Office10\MNATURE.ACG
*\Program Files\Microsoft Office\Office10\MSN.ICO
*\Program Files\Microsoft Office\Office10\MSOAUTH.DLL
*\Program Files\Microsoft Office\Office10\MSOHEV.DLL
*\Program Files\Microsoft Office\Office10\MSOHTMED.EXE
*\Program Files\Microsoft Office\Office10\MSOSTYLE.DLL
*\Program Files\Microsoft Office\Office10\MSOWC.DLL
*\Program Files\Microsoft Office\Office10\MSOWCF.DLL
*\Program Files\Microsoft Office\Office10\MSOWCW.DLL
*\Program Files\Microsoft Office\Office10\MSPPT.OLB
*\Program Files\Microsoft Office\Office10\MSTORDB.EXE
*\Program Files\Microsoft Office\Office10\MSTORE.EXE
*\Program Files\Microsoft Office\Office10\MSTORES.DLL
*\Program Files\Microsoft Office\Office10\MSWORD.OLB
*\Program Files\Microsoft Office\Office10\MULTIMGR.DLL
*\Program Files\Microsoft Office\Office10\MULTIQ.DLL
*\Program Files\Microsoft Office\Office10\OEMEULA.TXT
*\Program Files\Microsoft Office\Office10\OFFCAT.ACG
*\Program Files\Microsoft Office\Office10\OPW10USR.INI
*\Program Files\Microsoft Office\Office10\OSA.EXE
*\Program Files\Microsoft Office\Office10\OWSCLT.DLL
*\Program Files\Microsoft Office\Office10\OWSSUPP.DLL
*\Program Files\Microsoft Office\Office10\PDIGRAPH.DLL
*\Program Files\Microsoft Office\Office10\POWERPNT.EXE
*\Program Files\Microsoft Office\Office10\POWERPOI.PIP
*\Program Files\Microsoft Office\Office10\PROFLWIZ.EXE
*\Program Files\Microsoft Office\Office10\PROFLWIZ.HLP
*\Program Files\Microsoft Office\Office10\REFEDIT.DLL
*\Program Files\Microsoft Office\Office10\RESETO10.OPS
*\Program Files\Microsoft Office\Office10\ROCKY.ACG
*\Program Files\Microsoft Office\Office10\SAEXT.DLL
*\Program Files\Microsoft Office\Office10\SEQCHK10.DLL
*\Program Files\Microsoft Office\Office10\THDIC.LEX
*\Program Files\Microsoft Office\Office10\TRIGRAM.LEX
*\Program Files\Microsoft Office\Office10\UCSCRIBE.DLL
*\Program Files\Microsoft Office\Office10\WAVTOASF.EXE
*\Program Files\Microsoft Office\Office10\WDBIMP.DLL
*\Program Files\Microsoft Office\Office10\WEBPAGE.DLL
*\Program Files\Microsoft Office\Office10\WEBPAGE.WIZ
*\Program Files\Microsoft Office\Office10\WINWORD.EXE
*\Program Files\Microsoft Office\Office10\WORD.PIP
*\Program Files\Microsoft Office\Office10\WORDMAIL.PIP
*\Program Files\Microsoft Office\Office10\WWPAB.CNV
*\Program Files\Microsoft Works\1033\WkAbiLng.dll
*\Program Files\Microsoft Works\1033\wkgl60.dll
*\Program Files\Microsoft Works\1033\WkImgLng.dll
*\Program Files\Microsoft Works\1033\WkLnLng.dll
*\Program Files\Microsoft Works\1033\WkSbLng.dll
*\Program Files\Microsoft Works\1033\WkShbLng.dll
*\Program Files\Microsoft Works\1033\WkSSLng.dll
*\Program Files\Microsoft Works\1033\WkThmBib.fmt
*\Program Files\Microsoft Works\1033\WkThmBro.fmt
*\Program Files\Microsoft Works\1033\WkThmCer.fmt
*\Program Files\Microsoft Works\1033\WkThmCov.fmt
*\Program Files\Microsoft Works\1033\WkThmCvr.fmt
*\Program Files\Microsoft Works\1033\WkThmEvf.fmt
*\Program Files\Microsoft Works\1033\WkThmFax.fmt
*\Program Files\Microsoft Works\1033\WkThmFly.fmt
*\Program Files\Microsoft Works\1033\WkThmGcl.fmt
*\Program Files\Microsoft Works\1033\WkThmGen.fmt
*\Program Files\Microsoft Works\1033\WkThmGlt.fmt
*\Program Files\Microsoft Works\1033\WkThmGro.fmt
*\Program Files\Microsoft Works\1033\WkThmIns.fmt
*\Program Files\Microsoft Works\1033\WkThmInt.fmt
*\Program Files\Microsoft Works\1033\WkThmJou.fmt
*\Program Files\Microsoft Works\1033\WkThmLet.fmt
*\Program Files\Microsoft Works\1033\WkThmLgw.fmt
*\Program Files\Microsoft Works\1033\WkThmLng.dll
*\Program Files\Microsoft Works\1033\WkThmMen.fmt
*\Program Files\Microsoft Works\1033\WkThmNew.fmt
*\Program Files\Microsoft Works\1033\WkThmNot.fmt
*\Program Files\Microsoft Works\1033\WkThmPtp.fmt
*\Program Files\Microsoft Works\1033\WkThmRes.fmt
*\Program Files\Microsoft Works\1033\WkThmSch.fmt
*\Program Files\Microsoft Works\1033\WkThmSta.fmt
*\Program Files\Microsoft Works\1033\WkThmTrj.fmt
*\Program Files\Microsoft Works\1033\WkthmWed.fmt
*\Program Files\Microsoft Works\1033\WkWpLng.dll
*\Program Files\Microsoft Works\1033\wkwzlng.dll
*\Program Files\Microsoft Works\1033\WorksPSS.chm
*\Program Files\Microsoft Works Suite 2002\Setup\LAUNCHER.EXE
*\Program Files\Microsoft Works Suite 2002\Setup\OEM
*\Program Files\Microsoft Works Suite 2002\Setup\SETUPLNG.DLL
*\Program Files\Microsoft Works Suite 2002\Setup\Uninstall.inf
*\Program Files\Microsoft Works Suite 2002\Setup\UNREGWTR.EXE
*\Program Files\Microsoft Works Suite 2002\Setup\WKSFONT.TTF
*\Program Files\Microsoft Works Suite 2002\Setup\WKSFONTB.TTF
*\Program Files\MSN Gaming Zone\Windows\bckg.dll
*\Program Files\MSN Gaming Zone\Windows\bckgres.dll
*\Program Files\MSN Gaming Zone\Windows\bckgzm.exe
*\Program Files\MSN Gaming Zone\Windows\chkr.dll
*\Program Files\MSN Gaming Zone\Windows\chkrres.dll
*\Program Files\MSN Gaming Zone\Windows\chkrzm.exe
*\Program Files\MSN Gaming Zone\Windows\Cmnclim.dll
*\Program Files\MSN Gaming Zone\Windows\Cmnresm.dll
*\Program Files\MSN Gaming Zone\Windows\hrtz.dll
*\Program Files\MSN Gaming Zone\Windows\Hrtzres.dll
*\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe
*\Program Files\MSN Gaming Zone\Windows\rvse.dll
*\Program Files\MSN Gaming Zone\Windows\Rvseres.dll
*\Program Files\MSN Gaming Zone\Windows\Rvsezm.exe
*\Program Files\MSN Gaming Zone\Windows\shvl.dll
*\Program Files\MSN Gaming Zone\Windows\Shvlres.dll
*\Program Files\MSN Gaming Zone\Windows\shvlzm.exe
*\Program Files\MSN Gaming Zone\Windows\UniAnsi.dll
*\Program Files\MSN Gaming Zone\Windows\zClientm.exe
*\Program Files\MSN Gaming Zone\Windows\ZCorem.dll
*\Program Files\MSN Gaming Zone\Windows\zeeverm.dll
*\Program Files\MSN Gaming Zone\Windows\ZNetM.dll
*\Program Files\MSN Gaming Zone\Windows\zoneclim.dll
*\Program Files\MSN Gaming Zone\Windows\zonelibM.dll
*\Program Files\Norton AntiVirus\Quarantine\38E40EB1
*\Program Files\Norton AntiVirus\Quarantine\38EE0CA6
*\Program Files\Norton AntiVirus\Quarantine\38EE0CA6.dll
*\Program Files\Norton AntiVirus\Quarantine\38EE0CA6.exe
*\Program Files\Norton AntiVirus\Quarantine\38F236A2.dll
*\Program Files\Norton AntiVirus\Quarantine\38F236A2.tmp
*\Program Files\Norton AntiVirus\Quarantine\4E803AB5.exe
*\Program Files\Norton AntiVirus\Quarantine\5E087CB7.exe
*\Program Files\Norton AntiVirus\Quarantine\5F0B68A9.exe
*\Program Files\Norton AntiVirus\Quarantine\5F0E12A5.fr1854
*\Program Files\Norton AntiVirus\Quarantine\659A29C4
*\Program Files\Norton AntiVirus\Quarantine\65AB068F
*\Program Files\Symantec\LiveUpdate\1.Settings.Default.LiveUpdate
*\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXE
*\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
*\Program Files\Symantec\LiveUpdate\DISreboot.exe
*\Program Files\Symantec\LiveUpdate\LSETUP.EXE
*\Program Files\Symantec\LiveUpdate\LUALL.EXE
*\Program Files\Symantec\LiveUpdate\LuComServerPS_2_6.DLL
*\Program Files\Symantec\LiveUpdate\LuComServer_2_6.EXE
*\Program Files\Symantec\LiveUpdate\ludirloc.dat
*\Program Files\Symantec\LiveUpdate\LUINFO.INF
*\Program Files\Symantec\LiveUpdate\LUInit.exe
*\Program Files\Symantec\LiveUpdate\LUInit.ini
*\Program Files\Symantec\LiveUpdate\LUINSDLL.DLL
*\Program Files\Symantec\LiveUpdate\LuPreCon.DLL
*\Program Files\Symantec\LiveUpdate\LuResult.txt
*\Program Files\Symantec\LiveUpdate\Lusetup-lt.exe
*\Program Files\Symantec\LiveUpdate\Luupdate.exe
*\Program Files\Symantec\LiveUpdate\NDETECT.EXE
*\Program Files\Symantec\LiveUpdate\NetDetectController_2_6.DLL
*\Program Files\Symantec\LiveUpdate\ProductRegComPS_2_6.DLL
*\Program Files\Symantec\LiveUpdate\ProductRegCom_2_6.DLL
*\Program Files\Symantec\LiveUpdate\README.TXT
*\Program Files\Symantec\LiveUpdate\S32LIVE1.DLL
*\Program Files\Symantec\LiveUpdate\S32LUCP1.CPL
*\Program Files\Symantec\LiveUpdate\S32LUIS1.DLL
*\Program Files\Symantec\LiveUpdate\S32LUWI1.DLL
*\Program Files\Symantec\LiveUpdate\Settings.Default.LiveUpdate
*\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.exe
*\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.log
*\Program Files\Symantec\LiveUpdate\UNRAR.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AddStamp.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AddStamp.hlp
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AddStamp_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ADJUSTIMAGE.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Aefilter.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\autoenh.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AutoRen.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AutoRen.hlp
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\AutoRen_RES.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Capmgr.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\CAPMGR.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\cleanBKN.hlp
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Convermpegpar.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\cpuinf32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DB.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DC210.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DC240.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DC280.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\download.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DOWNLOAD.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\download_RES.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DSCWzrd.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DSCWZRD.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DSCWzrd_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DswPlug.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DSWPLUG.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\DswRc.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\dswUleadMpegCap.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekexifio.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekfpixaudio.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekfpixguid.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekfpixio130.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekfpixjpeg.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ekfpixpsets.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\EmbView.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\EpExifUtil.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\EpPIM2.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\EpTiffUtil.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\eViewer.cnt
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\eviewer.exe
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\EVIEWER.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\eviewer_RES.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\F210.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\INETWH16.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\INETWH32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\MailAPI.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\MailAPI_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\monitor.exe
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\MpgSetin.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\mpg_hvd.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\OLEAUT32.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\OLEPRO32.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pal.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Pex.cnt
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pex.exe
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\PEX.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Pex8.pdf
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexbuf.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexdesc.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexexif.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexexif_Res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Pexmisc.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexslide.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\PEXSLIDE.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexslide_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexvideo.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\PEXVIDEO.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexvideo_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexwvcd.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\PEXWVCD.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\pexwvcd_res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Pex_Res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ReadMe.htm
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\RefreshIcon.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\regutil.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\RenderPolicy.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ROBOEX32.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Runslider.exe
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\S2REVideoConverter.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\SCANNER.CNT
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\SCANNER.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\SCANRES.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Sepa.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\SETBROWS.EXE
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\SSPLAYER_Res.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Base.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Brows.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32ccs.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Cfg.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Clips.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Comm.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32comm.ini
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Cvt.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Fe.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32FeUI.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Fido.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32File.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Misc.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Path.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Plug.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Print.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Prod.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Scan.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32SN.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Tu.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Tx.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32TxEx.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32TXTUR.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32video.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32Wallp.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\u32XView.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\UAboutbox.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Ubrincon.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uBufCom.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uclrbaln.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Ucrop.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ucvtmem.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uedttool.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uesviewer.exe
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uExifLib.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uinet.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uipares.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ukmgr.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Ul3DUi32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibGif.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibJp2.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibJpc.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibJpg.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibLzw.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibPng.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uLibTif.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ULUS_COMM.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\unZip32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uoacomm.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uoares.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uPictrl.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\upload1.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\UpView.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\UpViewSvr.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uRender.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Urotate.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uShadow.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\ussagcvt.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\UssCvt.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\USSGifsa.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uTx.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvbase.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvDsBASE.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvdv.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvipl.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplA6.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplM5.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplM6.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\UVIPLP5.DLL
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplP6.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplPX.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uviplW7.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvMPEG2.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\uvplay.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Uwupdate.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Vcvrt32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Vepb40.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Veui32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\VfwPluin.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\vfwuleadmpegcap.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\VFX32.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\VIPLIB.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\WebPageOutput.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\WEBPAGEOUTPUT.HLP
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\WebPageOutput_RES.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\WrapPIM.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\XBuf.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\XBurnMgr.dll
*\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\XBurnMgrRC.dll
*\Program Files\Windows Media Player\Skins\9SeriesDefault.wmz
*\Program Files\Windows Media Player\Skins\Atomic.wmz
*\Program Files\Windows Media Player\Skins\Bluesky.wmz
*\Program Files\Windows Media Player\Skins\Canvas.wmz
*\Program Files\Windows Media Player\Skins\Classic.wmz
*\Program Files\Windows Media Player\Skins\Compact.wmz
*\Program Files\Windows Media Player\Skins\goo.wmz
*\Program Files\Windows Media Player\Skins\Headspace.wmz
*\Program Files\Windows Media Player\Skins\heart.wmz
*\Program Files\Windows Media Player\Skins\iconic.wmz
*\Program Files\Windows Media Player\Skins\Miniplayer.wmz
*\Program Files\Windows Media Player\Skins\Optik.wmz
*\Program Files\Windows Media Player\Skins\pyrite.wmz
*\Program Files\Windows Media Player\Skins\QuickSilver.wmz
*\Program Files\Windows Media Player\Skins\Radio.wmz
*\Program Files\Windows Media Player\Skins\Revert.wmz
*\Program Files\Windows Media Player\Skins\Roundlet.wmz
*\Program Files\Windows Media Player\Skins\Rusty.wmz
*\Program Files\Windows Media Player\Skins\splat.wmz
*\Program Files\Windows Media Player\Skins\Toothy.wmz
*\Program Files\Windows Media Player\Skins\Windows Classic.wmz
*\Program Files\Windows Media Player\Skins\Windows XP.wmz
*\Program Files\Windows NT\Accessories\wordpad.exe
*\Program Files\Windows NT\Pinball\FONT.DAT
*\Program Files\Windows NT\Pinball\PINBALL.DAT
*\Program Files\Windows NT\Pinball\PINBALL.EXE
*\Program Files\Windows NT\Pinball\PINBALL.MID
*\Program Files\Windows NT\Pinball\PINBALL2.MID
*\Program Files\Windows NT\Pinball\SOUND1.WAV
*\Program Files\Windows NT\Pinball\SOUND104.WAV
*\Program Files\Windows NT\Pinball\SOUND105.WAV
*\Program Files\Windows NT\Pinball\SOUND108.WAV
*\Program Files\Windows NT\Pinball\SOUND111.WAV
*\Program Files\Windows NT\Pinball\SOUND112.WAV
*\Program Files\Windows NT\Pinball\SOUND12.WAV
*\Program Files\Windows NT\Pinball\SOUND13.WAV
*\Program Files\Windows NT\Pinball\SOUND131.WAV
*\Program Files\Windows NT\Pinball\SOUND136.WAV
*\Program Files\Windows NT\Pinball\SOUND14.WAV
*\Program Files\Windows NT\Pinball\SOUND16.WAV
*\Program Files\Windows NT\Pinball\SOUND17.WAV
*\Program Files\Windows NT\Pinball\SOUND18.WAV
*\Program Files\Windows NT\Pinball\SOUND181.WAV
*\Program Files\Windows NT\Pinball\SOUND19.WAV
*\Program Files\Windows NT\Pinball\SOUND20.WAV
*\Program Files\Windows NT\Pinball\SOUND21.WAV
*\Program Files\Windows NT\Pinball\SOUND22.WAV
*\Program Files\Windows NT\Pinball\SOUND24.WAV
*\Program Files\Windows NT\Pinball\SOUND240.WAV
*\Program Files\Windows NT\Pinball\SOUND243.WAV
*\Program Files\Windows NT\Pinball\SOUND25.WAV
*\Program Files\Windows NT\Pinball\SOUND26.WAV
*\Program Files\Windows NT\Pinball\SOUND27.WAV
*\Program Files\Windows NT\Pinball\SOUND28.WAV
*\Program Files\Windows NT\Pinball\SOUND29.WAV
*\Program Files\Windows NT\Pinball\SOUND3.WAV
*\Program Files\Windows NT\Pinball\SOUND30.WAV
*\Program Files\Windows NT\Pinball\SOUND34.WAV
*\Program Files\Windows NT\Pinball\SOUND35.WAV
*\Program Files\Windows NT\Pinball\SOUND36.WAV
*\Program Files\Windows NT\Pinball\SOUND38.WAV
*\Program Files\Windows NT\Pinball\SOUND39.WAV
*\Program Files\Windows NT\Pinball\SOUND4.WAV
*\Program Files\Windows NT\Pinball\SOUND42.WAV
*\Program Files\Windows NT\Pinball\SOUND43.WAV
*\Program Files\Windows NT\Pinball\SOUND45.WAV
*\Program Files\Windows NT\Pinball\SOUND49.WAV
*\Program Files\Windows NT\Pinball\SOUND49D.WAV
*\Program Files\Windows NT\Pinball\SOUND5.WAV
*\Program Files\Windows NT\Pinball\SOUND50.WAV
*\Program Files\Windows NT\Pinball\SOUND528.WAV
*\Program Files\Windows NT\Pinball\SOUND53.WAV
*\Program Files\Windows NT\Pinball\SOUND54.WAV
*\Program Files\Windows NT\Pinball\SOUND55.WAV
*\Program Files\Windows NT\Pinball\SOUND560.WAV
*\Program Files\Windows NT\Pinball\SOUND563.WAV
*\Program Files\Windows NT\Pinball\SOUND57.WAV
*\Program Files\Windows NT\Pinball\SOUND58.WAV
*\Program Files\Windows NT\Pinball\SOUND6.WAV
*\Program Files\Windows NT\Pinball\SOUND65.WAV
*\Program Files\Windows NT\Pinball\SOUND68.WAV
*\Program Files\Windows NT\Pinball\SOUND7.WAV
*\Program Files\Windows NT\Pinball\SOUND713.WAV
*\Program Files\Windows NT\Pinball\SOUND735.WAV
*\Program Files\Windows NT\Pinball\SOUND8.WAV
*\Program Files\Windows NT\Pinball\SOUND827.WAV
*\Program Files\Windows NT\Pinball\SOUND9.WAV
*\Program Files\Windows NT\Pinball\SOUND999.WAV
*\Program Files\Windows NT\Pinball\table.bmp
*\Program Files\Windows NT\Pinball\wavemix.inf
*\Program Files\Yahoo!\Installs\ymsgrie.exe
*\Program Files\Yahoo!\Messenger\asw.dll
*\Program Files\Yahoo!\Messenger\AswRes.dll
*\Program Files\Yahoo!\Messenger\blank.html
*\Program Files\Yahoo!\Messenger\d32-fw.dll
*\Program Files\Yahoo!\Messenger\default.reg
*\Program Files\Yahoo!\Messenger\emote.dat
*\Program Files\Yahoo!\Messenger\emote_user.dat
*\Program Files\Yahoo!\Messenger\filter1.enc
*\Program Files\Yahoo!\Messenger\filter1.txt
*\Program Files\Yahoo!\Messenger\ft.dll
*\Program Files\Yahoo!\Messenger\idle.dll
*\Program Files\Yahoo!\Messenger\INSTALL.LOG
*\Program Files\Yahoo!\Messenger\kdu_v32M.dll
*\Program Files\Yahoo!\Messenger\kdu_v32R.dll
*\Program Files\Yahoo!\Messenger\messmod.dll
*\Program Files\Yahoo!\Messenger\msvcp71.dll
*\Program Files\Yahoo!\Messenger\msvcr71.dll
*\Program Files\Yahoo!\Messenger\MyYahoo.dll
*\Program Files\Yahoo!\Messenger\n2pclient.dll
*\Program Files\Yahoo!\Messenger\pcre.dll
*\Program Files\Yahoo!\Messenger\privacy.txt
*\Program Files\Yahoo!\Messenger\proxy.dll
*\Program Files\Yahoo!\Messenger\res_msgr.dll
*\Program Files\Yahoo!\Messenger\stock.dll
*\Program Files\Yahoo!\Messenger\tsd2.dll
*\Program Files\Yahoo!\Messenger\UNWISE.EXE
*\Program Files\Yahoo!\Messenger\ViewInfo.reg
*\Program Files\Yahoo!\Messenger\XMLParse.dll
*\Program Files\Yahoo!\Messenger\Xmltok.dll
*\Program Files\Yahoo!\Messenger\yacscom.dll
*\Program Files\Yahoo!\Messenger\yacsui.dll
*\Program Files\Yahoo!\Messenger\ycrwin32.dll
*\Program Files\Yahoo!\Messenger\ygxa_2.dll
*\Program Files\Yahoo!\Messenger\Yml.dll
*\Program Files\Yahoo!\Messenger\ymsgip.dll
*\Program Files\Yahoo!\Messenger\ymsgipdl.ini
*\Program Files\Yahoo!\Messenger\ymsgr.ini
*\Program Files\Yahoo!\Messenger\Ymsgr_tray.exe
*\Program Files\Yahoo!\Messenger\YPager.exe
*\Program Files\Yahoo!\Messenger\ypager.exe.manifest
*\Program Files\Yahoo!\Messenger\ypager.log
*\Program Files\Yahoo!\Messenger\ypager.tlb
*\Program Files\Yahoo!\Messenger\ypagerps.dll
*\Program Files\Yahoo!\Messenger\YServer.exe
*\Program Files\Yahoo!\Messenger\yupdater.exe
*\Program Files\Yahoo!\Messenger\ywcupl.dll
*\Program Files\Yahoo!\Messenger\ywcvwr.dll
*\Program Files\Yahoo!\Shared\YAlertCenter.dll
*\Program Files\Yahoo!\Shared\YbSkin2.dll
*\Program Files\Yahoo!\Shared\YbSkinSelect.dll
*\Program Files\Yahoo!\Shared\YbSkinSelectRes.dll
*\WINDOWS\backup\T\50517000.DAT
*\WINDOWS\Debug\WPD\wpdtrace.log
*\WINDOWS\Driver Cache\i386\driver.cab
*\WINDOWS\Installer\{3075C5C3-0807-4924-AF8F-FF27052C12AE}\Navw32.ico
*\WINDOWS\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe
*\WINDOWS\Installer\{609F7AC8-C510-11D4-A788-009027ABA5D0}\1033.MST
*\WINDOWS\Installer\{609F7AC8-C510-11D4-A788-009027ABA5D0}\_120EE3189D01_4295_A082_3E1D3E62CB31.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\accicons.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\cagicon.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\fpicon.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\graph.ico
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\misc.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\mspicons.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\opwicon.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\outicon.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\PEicons.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\pptico.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\unbndico.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\wordicon.exe
*\WINDOWS\Installer\{90280409-6000-11D3-8CFE-0050048383C9}\xlicons.exe
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\cagicon.76D90421_D2BE_11D2_99FF_0060B0EC3D2E.exe
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\manual.exe.6D0D2DC2_4B0D_429A_A764_5C9486DB99D9
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\Win2Kico.ico
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\WSBico.exe.AC86DEF4_8584_482C_9D93_A0F82816036C
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\_41BECA2.exe
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\_DECBE09.exe.AC86DEF4_8584_482C_9D93_A0F82816036C
*\WINDOWS\Installer\{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}\_F493EA3.exe.1B68564D_2701_4750_A917_5BBA0592E332
*\WINDOWS\Installer\{BD3DCAB0-3FE5-44FB-90DA-EFB0A2CD1387}\Win2Kico_WordAddin.ico
*\WINDOWS\Installer\{DC19E750-988B-4005-A355-85EF66055EFE}\Win2Kico_WordAddin.ico
*\WINDOWS\LastGood\INF\banner.inf
*\WINDOWS\LastGood\INF\banner.PNF
*\WINDOWS\LastGood\INF\ceres.inf
*\WINDOWS\LastGood\INF\ceres.PNF
*\WINDOWS\LastGood\INF\codecs10.inf
*\WINDOWS\LastGood\INF\codecs10.PNF
*\WINDOWS\LastGood\INF\dlmax.inf
*\WINDOWS\LastGood\INF\dlmax.PNF
*\WINDOWS\LastGood\INF\DRM10.inf
*\WINDOWS\LastGood\INF\DRM10.PNF
*\WINDOWS\LastGood\INF\Erma.inf
*\WINDOWS\LastGood\INF\Erma.PNF
*\WINDOWS\LastGood\INF\farmmext.inf
*\WINDOWS\LastGood\INF\farmmext.PNF
*\WINDOWS\LastGood\INF\MPCD10.inf
*\WINDOWS\LastGood\INF\MPCD10.PNF
*\WINDOWS\LastGood\INF\MPPRE10.inf
*\WINDOWS\LastGood\INF\MPPRE10.PNF
*\WINDOWS\LastGood\INF\MPSTUB10.inf
*\WINDOWS\LastGood\INF\MPSTUB10.PNF
*\WINDOWS\LastGood\INF\oem19.inf
*\WINDOWS\LastGood\INF\oem19.PNF
*\WINDOWS\LastGood\INF\oem20.inf
*\WINDOWS\LastGood\INF\oem20.PNF
*\WINDOWS\LastGood\INF\oem21.inf
*\WINDOWS\LastGood\INF\oem21.PNF
*\WINDOWS\LastGood\INF\oem22.inf
*\WINDOWS\LastGood\INF\oem22.PNF
*\WINDOWS\LastGood\INF\oem23.inf
*\WINDOWS\LastGood\INF\oem23.PNF
*\WINDOWS\LastGood\INF\payload2.inf
*\WINDOWS\LastGood\INF\payload2.PNF
*\WINDOWS\LastGood\INF\Pynix.inf
*\WINDOWS\LastGood\INF\Pynix.PNF
*\WINDOWS\LastGood\INF\swflash.inf
*\WINDOWS\LastGood\INF\swflash.PNF
*\WINDOWS\LastGood\INF\unregmp2.exe
*\WINDOWS\LastGood\INF\wmad.inf
*\WINDOWS\LastGood\INF\wmad.PNF
*\WINDOWS\LastGood\INF\WMDM10.inf
*\WINDOWS\LastGood\INF\WMDM10.PNF
*\WINDOWS\LastGood\INF\WMFSDK10.inf
*\WINDOWS\LastGood\INF\WMFSDK10.PNF
*\WINDOWS\LastGood\INF\WMP10.inf
*\WINDOWS\LastGood\INF\WMP10.PNF
*\WINDOWS\LastGood\INF\WMSET10.inf
*\WINDOWS\LastGood\INF\WMSET10.PNF
*\WINDOWS\LastGood\INF\wmv9vcm.inf
*\WINDOWS\LastGood\INF\wmv9vcm.PNF
*\WINDOWS\LastGood\INF\WPD10.inf
*\WINDOWS\LastGood\INF\WPD10.PNF
*\WINDOWS\LastGood\INF\wpdmtp.inf
*\WINDOWS\LastGood\INF\wpdmtp.PNF
*\WINDOWS\LastGood\srchasst\srchui.dll
*\WINDOWS\LastGood\System32\asferror.dll
*\WINDOWS\LastGood\System32\asfsipc.dll
*\WINDOWS\LastGood\System32\ASYCFILT.DLL
*\WINDOWS\LastGood\System32\blackbox.dll
*\WINDOWS\LastGood\System32\cdm.dll
*\WINDOWS\LastGood\System32\cewmdm.dll
*\WINDOWS\LastGood\System32\COMCAT.DLL
*\WINDOWS\LastGood\System32\drmclien.dll
*\WINDOWS\LastGood\System32\drmstor.dll
*\WINDOWS\LastGood\System32\drmv2clt.dll
*\WINDOWS\LastGood\System32\iuengine.dll
*\WINDOWS\LastGood\System32\kbd101b.dll
*\WINDOWS\LastGood\System32\kbd101c.dll
*\WINDOWS\LastGood\System32\kbd103.dll
*\WINDOWS\LastGood\System32\kbd106.dll
*\WINDOWS\LastGood\System32\kbdjpn.dll
*\WINDOWS\LastGood\System32\kbdkor.dll
*\WINDOWS\LastGood\System32\l3codeca.acm
*\WINDOWS\LastGood\System32\laprxy.dll
*\WINDOWS\LastGood\System32\logagent.exe
*\WINDOWS\LastGood\System32\mpg4dmod.dll
*\WINDOWS\LastGood\System32\msaud32.acm
*\WINDOWS\LastGood\System32\msdmo.dll
*\WINDOWS\LastGood\System32\msnetobj.dll
*\WINDOWS\LastGood\System32\MsPMSP.dll
*\WINDOWS\LastGood\System32\MSSCP.dll
*\WINDOWS\LastGood\System32\MSVBVM60.DLL
*\WINDOWS\LastGood\System32\msvcrt.dll
*\WINDOWS\LastGood\System32\MSWMDM.dll
*\WINDOWS\LastGood\System32\npwmsdrm.dll
*\WINDOWS\LastGood\System32\OLEAUT32.DLL
*\WINDOWS\LastGood\System32\OLEPRO32.DLL
*\WINDOWS\LastGood\System32\qasf.dll
*\WINDOWS\LastGood\System32\qmgr.dll
*\WINDOWS\LastGood\System32\qmgrprxy.dll
*\WINDOWS\LastGood\System32\REGSVR32.EXE
*\WINDOWS\LastGood\System32\SCHANNEL.DLL
*\WINDOWS\LastGood\System32\sl_anet.acm
*\WINDOWS\LastGood\System32\STDOLE2.TLB
*\WINDOWS\LastGood\System32\winhttp.dll
*\WINDOWS\LastGood\System32\WinInet.dll
*\WINDOWS\LastGood\System32\wmadmod.dll
*\WINDOWS\LastGood\System32\wmadmoe.dll
*\WINDOWS\LastGood\System32\WMASF.dll
*\WINDOWS\LastGood\System32\WMDMLOG.dll
*\WINDOWS\LastGood\System32\WMDMPS.dll
*\WINDOWS\LastGood\System32\wmidx.ocx
*\WINDOWS\LastGood\System32\wmnetmgr.dll
*\WINDOWS\LastGood\System32\wmp.ocx
*\WINDOWS\LastGood\System32\wmpcd.dll
*\WINDOWS\LastGood\System32\wmpcore.dll
*\WINDOWS\LastGood\System32\wmploc.dll
*\WINDOWS\LastGood\System32\wmpshell.dll
*\WINDOWS\LastGood\System32\wmpui.dll
*\WINDOWS\LastGood\System32\wmsdmod.dll
*\WINDOWS\LastGood\System32\wmsdmoe.dll
*\WINDOWS\LastGood\System32\wmstream.dll
*\WINDOWS\LastGood\System32\wmvcore.dll
*\WINDOWS\LastGood\System32\wmvdmod.dll
*\WINDOWS\LastGood\System32\wmvdmoe.dll
*\WINDOWS\LastGood\System32\wuauclt.exe
*\WINDOWS\LastGood\System32\wuaueng.dll
*\WINDOWS\LastGood.Tmp\INF\oem0.inf
*\WINDOWS\LastGood.Tmp\INF\oem0.PNF
*\WINDOWS\LastGood.Tmp\INF\oem1.inf
*\WINDOWS\LastGood.Tmp\INF\oem1.PNF
*\WINDOWS\LastGood.Tmp\INF\oem10.inf
*\WINDOWS\LastGood.Tmp\INF\oem10.PNF
*\WINDOWS\LastGood.Tmp\INF\oem11.inf
*\WINDOWS\LastGood.Tmp\INF\oem11.PNF
*\WINDOWS\LastGood.Tmp\INF\oem12.inf
*\WINDOWS\LastGood.Tmp\INF\oem12.PNF
*\WINDOWS\LastGood.Tmp\INF\oem13.inf
*\WINDOWS\LastGood.Tmp\INF\oem13.PNF
*\WINDOWS\LastGood.Tmp\INF\oem14.inf
*\WINDOWS\LastGood.Tmp\INF\oem14.PNF
*\WINDOWS\LastGood.Tmp\INF\oem15.inf
*\WINDOWS\LastGood.Tmp\INF\oem15.PNF
*\WINDOWS\LastGood.Tmp\INF\oem16.inf
*\WINDOWS\LastGood.Tmp\INF\oem16.PNF
*\WINDOWS\LastGood.Tmp\INF\oem17.inf
*\WINDOWS\LastGood.Tmp\INF\oem17.PNF
*\WINDOWS\LastGood.Tmp\INF\oem18.inf
*\WINDOWS\LastGood.Tmp\INF\oem18.PNF
*\WINDOWS\LastGood.Tmp\INF\oem2.inf
*\WINDOWS\LastGood.Tmp\INF\oem2.PNF
*\WINDOWS\LastGood.Tmp\INF\oem3.inf
*\WINDOWS\LastGood.Tmp\INF\oem3.PNF
*\WINDOWS\LastGood.Tmp\INF\oem4.inf
*\WINDOWS\LastGood.Tmp\INF\oem4.PNF
*\WINDOWS\LastGood.Tmp\INF\oem5.inf
*\WINDOWS\LastGood.Tmp\INF\oem5.PNF
*\WINDOWS\LastGood.Tmp\INF\oem6.inf
*\WINDOWS\LastGood.Tmp\INF\oem6.PNF
*\WINDOWS\LastGood.Tmp\INF\oem7.inf
*\WINDOWS\LastGood.Tmp\INF\oem7.PNF
*\WINDOWS\LastGood.Tmp\INF\oem8.inf
*\WINDOWS\LastGood.Tmp\INF\oem8.PNF
*\WINDOWS\LastGood.Tmp\INF\oem9.inf
*\WINDOWS\LastGood.Tmp\INF\oem9.PNF
*\WINDOWS\LastGood.Tmp\system32\hccutils.dll
*\WINDOWS\LastGood.Tmp\system32\hkcmd.exe
*\WINDOWS\LastGood.Tmp\system32\iAlmCoIn_0_pv1102.dll
*\WINDOWS\LastGood.Tmp\system32\ialmdd5.dll
*\WINDOWS\LastGood.Tmp\system32\ialmdev5.dll
*\WINDOWS\LastGood.Tmp\system32\ialmdnt5.dll
*\WINDOWS\LastGood.Tmp\system32\ialmgdev.dll
*\WINDOWS\LastGood.Tmp\system32\ialmgicd.dll
*\WINDOWS\LastGood.Tmp\system32\ialmrem.dll
*\WINDOWS\LastGood.Tmp\system32\ialmrnt5.dll
*\WINDOWS\LastGood.Tmp\system32\igfxcfg.exe
*\WINDOWS\LastGood.Tmp\system32\igfxcpl.cpl
*\WINDOWS\LastGood.Tmp\system32\igfxdev.dll
*\WINDOWS\LastGood.Tmp\system32\igfxdgps.dll
*\WINDOWS\LastGood.Tmp\system32\igfxdiag.exe
*\WINDOWS\LastGood.Tmp\system32\igfxdo.dll
*\WINDOWS\LastGood.Tmp\system32\igfxeud.dll
*\WINDOWS\LastGood.Tmp\system32\igfxhara.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxharb.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhchs.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhcht.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhcsy.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhdan.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhdeu.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhell.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxheng.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhenu.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhesp.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhfin.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhfra.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhfrc.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhheb.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhhun.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhita.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhjpn.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhk.dll
*\WINDOWS\LastGood.Tmp\system32\igfxhkor.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhnld.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhnor.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhplk.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhptb.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhptg.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhrus.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhsve.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhtha.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxhtrk.lhp
*\WINDOWS\LastGood.Tmp\system32\igfxpph.dll
*\WINDOWS\LastGood.Tmp\system32\igfxrara.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrarb.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrchs.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrcht.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrcsy.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrdan.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrdeu.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrell.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxreng.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrenu.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxresp.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxress.dll
*\WINDOWS\LastGood.Tmp\system32\igfxrfin.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrfra.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrfrc.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrheb.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrhun.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrita.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrjpn.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrkor.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrnld.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrnor.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrplk.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrptb.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrptg.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrrus.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrsve.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrtha.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxrtrk.lrc
*\WINDOWS\LastGood.Tmp\system32\igfxsrvc.dll
*\WINDOWS\LastGood.Tmp\system32\igfxtray.exe
*\WINDOWS\LastGood.Tmp\system32\ksproxy.ax
*\WINDOWS\LastGood.Tmp\system32\ksuser.dll
*\WINDOWS\LastGood.Tmp\system32\shpshftr.dll
*\WINDOWS\LastGood.Tmp\system32\wdmaud.drv
*\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
*\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.hkf
*\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_diasymreader.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_iehost.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_mscordbi.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_mscorrc.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_mscorsec.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_system.configuration.install.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_system.data.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
*\WINDOWS\Microsoft.NET\Framework\sbs_wminet_utils.dll
*\WINDOWS\msagent\chars\merlin.acs
*\WINDOWS\msagent\intl\agt0405.dll
*\WINDOWS\msagent\intl\agt0406.dll
*\WINDOWS\msagent\intl\agt0407.dll
*\WINDOWS\msagent\intl\agt0408.dll
*\WINDOWS\msagent\intl\agt0409.dll
*\WINDOWS\msagent\intl\agt040b.dll
*\WINDOWS\msagent\intl\agt040c.dll
*\WINDOWS\msagent\intl\agt040e.dll
*\WINDOWS\msagent\intl\agt0410.dll
*\WINDOWS\msagent\intl\agt0413.dll
*\WINDOWS\msagent\intl\agt0414.dll
*\WINDOWS\msagent\intl\agt0415.dll
*\WINDOWS\msagent\intl\agt0416.dll
*\WINDOWS\msagent\intl\agt0419.dll
*\WINDOWS\msagent\intl\agt041d.dll
*\WINDOWS\msagent\intl\agt041f.dll
*\WINDOWS\msagent\intl\agt0816.dll
*\WINDOWS\msagent\intl\agt0c0a.dll
*\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\mppre10.cat
*\WINDOWS\RegisteredPackages\{077ACEC7-979C-40AB-9835-435BA1511E0D}\MPPRE10.inf
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\cewmdm.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSP.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSSCP.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSWMDM.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\wmdm10.cat
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDM10.inf
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMLOG.dll
*\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMPS.dll
*\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\setup_wm.exe
*\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\wmset10.cat
*\WINDOWS\RegisteredPackages\{3FDF25EE-E592-4495-8391-6E9C504DAC2B}\WMSET10.inf
*\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\mpstub10.cat
*\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\MPSTUB10.inf
*\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\wmpcore.dll
*\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\wmpui.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\uwdf.exe
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfapi.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfmgr.exe
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd10.cat
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\WPD10.inf
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdconns.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtp.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtp.inf
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpdr.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpus.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdsp.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdtrace.dll
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdusb.sys
*\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd_ci.dll
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.cat
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\codecs10.inf
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmadmod.dll
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmsdmod.dll
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmspdmod.dll
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvadvd.dll
*\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvdmod.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\laprxy.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\logagent.exe
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\qasf.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmadmoe.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmasf.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMdev.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMNet.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmfsdk10.cat
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMFSDK10.inf
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmidx.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmnetmgr.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmsdmoe2.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmspdmoe.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMVADVE.DLL
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvcore.dll
*\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvdmoe2.dll
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\blackbox.dll
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drm10.cat
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\DRM10.inf
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmclien.dll
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmstor.dll
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmv2clt.dll
*\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\msnetobj.dll
*\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\mpcd10.cat
*\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\MPCD10.inf
*\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\wmp.ocx
*\WINDOWS\RegisteredPackages\{CFB4B314-0328-45E1-94AF-45A3F5F48E0B}\wmpcd.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\asferror.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\Audiodev.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\custsat.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\eula.txt
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\l3codecp.acm
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\migrate.exe
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\mpvis.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\unregmp2.exe
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmerror.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmlaunch.exe
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp10.cat
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmp10.chm
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\WMP10.inf
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpasf.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpband.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpdxm.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpenc.exe
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpencen.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmperr10.chm
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmplayer.adm
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmplayer.exe
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmploc.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpshell.dll
*\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmpsrcwp.dll
*\WINDOWS\Resources\Themes\Luna.theme
*\WINDOWS\Resources\Themes\Windows Classic.theme
*\WINDOWS\Security\Database\secedit.sdb
*\WINDOWS\Security\logs\backup.log
*\WINDOWS\Security\logs\scecomp.old
*\WINDOWS\Security\logs\SceRoot.log
*\WINDOWS\Security\logs\scesetup.log
*\WINDOWS\Security\templates\hisecdc.inf
*\WINDOWS\Security\templates\hisecws.inf
*\WINDOWS\Security\templates\setup security.inf
*\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
*\WINDOWS\SoftwareDistribution\Download\34d822e0c61e0d8067f37ec0ed66a15343e1a58f
*\WINDOWS\SoftwareDistribution\Download\a79bcfc22f1d4c15ae4840c3d535bd203a0a7506
*\WINDOWS\SoftwareDistribution\EventCache\{67520303-1709-4615-A01A-70A68F633EFD}.bin
*\WINDOWS\SoftwareDistribution\EventCache\{74171546-3D44-498C-90D8-5E7E93382756}.bin
*\WINDOWS\srchasst\chars\courtney.acs
*\WINDOWS\srchasst\chars\earl.acs
*\WINDOWS\srchasst\chars\rover.acs
*\WINDOWS\system32\1033\dwintl.dll
*\WINDOWS\system32\bits\qmgr.dll
*\WINDOWS\system32\CatRoot2\dberr.txt
*\WINDOWS\system32\CatRoot2\edb.chk
*\WINDOWS\system32\CatRoot2\edb.log
*\WINDOWS\system32\CatRoot2\res1.log
*\WINDOWS\system32\CatRoot2\res2.log
*\WINDOWS\system32\Com\comadmin.dll
*\WINDOWS\system32\Com\comempty.dat
*\WINDOWS\system32\Com\comexp.msc
*\WINDOWS\system32\Com\comrepl.exe
*\WINDOWS\system32\Com\comrereg.exe
*\WINDOWS\system32\Com\mtsadmin.tlb
*\WINDOWS\system32\config\AppEvent.Evt
*\WINDOWS\system32\config\default
*\WINDOWS\system32\config\default.LOG
*\WINDOWS\system32\config\default.sav
*\WINDOWS\system32\config\SAM
*\WINDOWS\system32\config\SAM.LOG
*\WINDOWS\system32\config\SecEvent.Evt
*\WINDOWS\system32\config\SECURITY
*\WINDOWS\system32\config\SECURITY.LOG
*\WINDOWS\system32\config\software
*\WINDOWS\system32\config\software.LOG
*\WINDOWS\system32\config\software.sav
*\WINDOWS\system32\config\SysEvent.Evt
*\WINDOWS\system32\config\system
*\WINDOWS\system32\config\system.LOG
*\WINDOWS\system32\config\system.sav
*\WINDOWS\system32\config\TempKey.LOG
*\WINDOWS\system32\config\userdiff
*\WINDOWS\system32\config\userdiff.LOG

Remote Saxon · 05-22-2005, 12:39 PM

*\WINDOWS\system32\dllcache\12520437.cpx
*\WINDOWS\system32\dllcache\12520850.cpx
*\WINDOWS\system32\dllcache\6to4svc.dll
*\WINDOWS\system32\dllcache\a3d.dll
*\WINDOWS\system32\dllcache\aaaamon.dll
*\WINDOWS\system32\dllcache\access.cpl
*\WINDOWS\system32\dllcache\acctres.dll
*\WINDOWS\system32\dllcache\accwiz.exe
*\WINDOWS\system32\dllcache\acgenral.dll
*\WINDOWS\system32\dllcache\aclayers.dll
*\WINDOWS\system32\dllcache\acledit.dll
*\WINDOWS\system32\dllcache\aclua.dll
*\WINDOWS\system32\dllcache\aclui.dll
*\WINDOWS\system32\dllcache\acspecfc.dll
*\WINDOWS\system32\dllcache\activeds.dll
*\WINDOWS\system32\dllcache\activeds.tlb
*\WINDOWS\system32\dllcache\actmovie.exe
*\WINDOWS\system32\dllcache\actxprxy.dll
*\WINDOWS\system32\dllcache\acverfyr.dll
*\WINDOWS\system32\dllcache\acxtrnal.dll
*\WINDOWS\system32\dllcache\admin.dll
*\WINDOWS\system32\dllcache\admin.exe
*\WINDOWS\system32\dllcache\admparse.dll
*\WINDOWS\system32\dllcache\adptif.dll
*\WINDOWS\system32\dllcache\adsldp.dll
*\WINDOWS\system32\dllcache\adsldpc.dll
*\WINDOWS\system32\dllcache\adsmsext.dll
*\WINDOWS\system32\dllcache\adsnt.dll
*\WINDOWS\system32\dllcache\advapi32.dll
*\WINDOWS\system32\dllcache\advpack.dll
*\WINDOWS\system32\dllcache\aec.sys
*\WINDOWS\system32\dllcache\afd.sys
*\WINDOWS\system32\dllcache\agentanm.dll
*\WINDOWS\system32\dllcache\agentctl.dll
*\WINDOWS\system32\dllcache\agentdp2.dll
*\WINDOWS\system32\dllcache\agentdpv.dll
*\WINDOWS\system32\dllcache\agentmpx.dll
*\WINDOWS\system32\dllcache\agentpsh.dll
*\WINDOWS\system32\dllcache\agentsr.dll
*\WINDOWS\system32\dllcache\agentsvr.exe
*\WINDOWS\system32\dllcache\agt0401.dll
*\WINDOWS\system32\dllcache\agt0404.dll
*\WINDOWS\system32\dllcache\agt0405.dll
*\WINDOWS\system32\dllcache\agt0406.dll
*\WINDOWS\system32\dllcache\agt0407.dll
*\WINDOWS\system32\dllcache\agt0408.dll
*\WINDOWS\system32\dllcache\agt0409.dll
*\WINDOWS\system32\dllcache\agt040b.dll
*\WINDOWS\system32\dllcache\agt040c.dll
*\WINDOWS\system32\dllcache\agt040d.dll
*\WINDOWS\system32\dllcache\agt040e.dll
*\WINDOWS\system32\dllcache\agt0410.dll
*\WINDOWS\system32\dllcache\agt0411.dll
*\WINDOWS\system32\dllcache\agt0412.dll
*\WINDOWS\system32\dllcache\agt0413.dll
*\WINDOWS\system32\dllcache\agt0414.dll
*\WINDOWS\system32\dllcache\agt0415.dll
*\WINDOWS\system32\dllcache\agt0416.dll
*\WINDOWS\system32\dllcache\agt0419.dll
*\WINDOWS\system32\dllcache\agt041d.dll
*\WINDOWS\system32\dllcache\agt041f.dll
*\WINDOWS\system32\dllcache\agt0804.dll
*\WINDOWS\system32\dllcache\agt0816.dll
*\WINDOWS\system32\dllcache\agt0c0a.dll
*\WINDOWS\system32\dllcache\agtctl15.tlb
*\WINDOWS\system32\dllcache\agtintl.dll
*\WINDOWS\system32\dllcache\ahui.exe
*\WINDOWS\system32\dllcache\alg.exe
*\WINDOWS\system32\dllcache\alrsvc.dll
*\WINDOWS\system32\dllcache\amstream.dll
*\WINDOWS\system32\dllcache\ansi.sys
*\WINDOWS\system32\dllcache\apcups.dll
*\WINDOWS\system32\dllcache\append.exe
*\WINDOWS\system32\dllcache\apphelp.dll
*\WINDOWS\system32\dllcache\apphelp.sdb
*\WINDOWS\system32\dllcache\appwiz.cpl
*\WINDOWS\system32\dllcache\arp.exe
*\WINDOWS\system32\dllcache\asctrls.ocx
*\WINDOWS\system32\dllcache\asferror.dll
*\WINDOWS\system32\dllcache\asfsipc.dll
*\WINDOWS\system32\dllcache\asycfilt.dll
*\WINDOWS\system32\dllcache\asyncmac.sys
*\WINDOWS\system32\dllcache\at.exe
*\WINDOWS\system32\dllcache\atkctrs.dll
*\WINDOWS\system32\dllcache\atl.dll
*\WINDOWS\system32\dllcache\atmadm.exe
*\WINDOWS\system32\dllcache\atmarpc.sys
*\WINDOWS\system32\dllcache\atmepvc.sys
*\WINDOWS\system32\dllcache\atmfd.dll
*\WINDOWS\system32\dllcache\atmlane.sys
*\WINDOWS\system32\dllcache\atmlib.dll
*\WINDOWS\system32\dllcache\atmpvcno.dll
*\WINDOWS\system32\dllcache\atmuni.sys
*\WINDOWS\system32\dllcache\atrace.dll
*\WINDOWS\system32\dllcache\attrib.exe
*\WINDOWS\system32\dllcache\audiosrv.dll
*\WINDOWS\system32\dllcache\author.dll
*\WINDOWS\system32\dllcache\author.exe
*\WINDOWS\system32\dllcache\authz.dll
*\WINDOWS\system32\dllcache\autochk.exe
*\WINDOWS\system32\dllcache\autoconv.exe
*\WINDOWS\system32\dllcache\autodisc.dll
*\WINDOWS\system32\dllcache\autofmt.exe
*\WINDOWS\system32\dllcache\autolfn.exe
*\WINDOWS\system32\dllcache\avicap.dll
*\WINDOWS\system32\dllcache\avicap32.dll
*\WINDOWS\system32\dllcache\avifil32.dll
*\WINDOWS\system32\dllcache\avifile.dll
*\WINDOWS\system32\dllcache\avmeter.dll
*\WINDOWS\system32\dllcache\avtapi.dll
*\WINDOWS\system32\dllcache\avwav.dll
*\WINDOWS\system32\dllcache\basesrv.dll
*\WINDOWS\system32\dllcache\batmeter.dll
*\WINDOWS\system32\dllcache\batt.dll
*\WINDOWS\system32\dllcache\bckg.dll
*\WINDOWS\system32\dllcache\bckgres.dll
*\WINDOWS\system32\dllcache\bckgzm.exe
*\WINDOWS\system32\dllcache\beep.sys
*\WINDOWS\system32\dllcache\bidispl.dll
*\WINDOWS\system32\dllcache\bitsprx2.dll
*\WINDOWS\system32\dllcache\bitsprx3.dll
*\WINDOWS\system32\dllcache\blackbox.dll
*\WINDOWS\system32\dllcache\blue_ss.dll
*\WINDOWS\system32\dllcache\bnts.dll
*\WINDOWS\system32\dllcache\bootok.exe
*\WINDOWS\system32\dllcache\bootvid.dll
*\WINDOWS\system32\dllcache\bootvrfy.exe
*\WINDOWS\system32\dllcache\bridge.sys
*\WINDOWS\system32\dllcache\browselc.dll
*\WINDOWS\system32\dllcache\browser.dll
*\WINDOWS\system32\dllcache\browseui.dll
*\WINDOWS\system32\dllcache\browsewm.dll
*\WINDOWS\system32\dllcache\brpinfo.dll
*\WINDOWS\system32\dllcache\cabinet.dll
*\WINDOWS\system32\dllcache\cabview.dll
*\WINDOWS\system32\dllcache\cacls.exe
*\WINDOWS\system32\dllcache\calc.exe
*\WINDOWS\system32\dllcache\callcont.dll
*\WINDOWS\system32\dllcache\camocx.dll
*\WINDOWS\system32\dllcache\cap7146.sys
*\WINDOWS\system32\dllcache\capesnpn.dll
*\WINDOWS\system32\dllcache\cards.dll
*\WINDOWS\system32\dllcache\catsrv.dll
*\WINDOWS\system32\dllcache\catsrvps.dll
*\WINDOWS\system32\dllcache\catsrvut.dll
*\WINDOWS\system32\dllcache\cb32.exe
*\WINDOWS\system32\dllcache\ccfgnt.dll
*\WINDOWS\system32\dllcache\cdfs.sys
*\WINDOWS\system32\dllcache\cdfview.dll
*\WINDOWS\system32\dllcache\cdm.dll
*\WINDOWS\system32\dllcache\cdmodem.dll
*\WINDOWS\system32\dllcache\cdosys.dll
*\WINDOWS\system32\dllcache\certcli.dll
*\WINDOWS\system32\dllcache\certmgr.dll
*\WINDOWS\system32\dllcache\cewmdm.dll
*\WINDOWS\system32\dllcache\cfgbkend.dll
*\WINDOWS\system32\dllcache\cfgmgr32.dll
*\WINDOWS\system32\dllcache\cfgwiz.exe
*\WINDOWS\system32\dllcache\chajei.ime
*\WINDOWS\system32\dllcache\change.exe
*\WINDOWS\system32\dllcache\charmap.exe
*\WINDOWS\system32\dllcache\chglogon.exe
*\WINDOWS\system32\dllcache\chgport.exe
*\WINDOWS\system32\dllcache\chgusr.exe
*\WINDOWS\system32\dllcache\chkdsk.exe
*\WINDOWS\system32\dllcache\chkntfs.exe
*\WINDOWS\system32\dllcache\chkr.dll
*\WINDOWS\system32\dllcache\chkrres.dll
*\WINDOWS\system32\dllcache\chkrzm.exe
*\WINDOWS\system32\dllcache\chsbrkr.dll
*\WINDOWS\system32\dllcache\chtbrkr.dll
*\WINDOWS\system32\dllcache\chtmbx.dll
*\WINDOWS\system32\dllcache\chtskdic.dll
*\WINDOWS\system32\dllcache\chtskf.dll
*\WINDOWS\system32\dllcache\ciadmin.dll
*\WINDOWS\system32\dllcache\cic.dll
*\WINDOWS\system32\dllcache\cidaemon.exe
*\WINDOWS\system32\dllcache\cimwin32.dll
*\WINDOWS\system32\dllcache\cintime.dll
*\WINDOWS\system32\dllcache\cintlgnt.ime
*\WINDOWS\system32\dllcache\cintsetp.exe
*\WINDOWS\system32\dllcache\ciodm.dll
*\WINDOWS\system32\dllcache\cisvc.exe
*\WINDOWS\system32\dllcache\ckcnv.exe
*\WINDOWS\system32\dllcache\classpnp.sys
*\WINDOWS\system32\dllcache\class_ss.dll
*\WINDOWS\system32\dllcache\clb.dll
*\WINDOWS\system32\dllcache\clbcatex.dll
*\WINDOWS\system32\dllcache\clbcatq.dll
*\WINDOWS\system32\dllcache\cleanmgr.exe
*\WINDOWS\system32\dllcache\clipbrd.exe
*\WINDOWS\system32\dllcache\clipsrv.exe
*\WINDOWS\system32\dllcache\clusapi.dll
*\WINDOWS\system32\dllcache\cmcfg32.dll
*\WINDOWS\system32\dllcache\cmd.exe
*\WINDOWS\system32\dllcache\cmdial32.dll
*\WINDOWS\system32\dllcache\cmdl32.exe
*\WINDOWS\system32\dllcache\cmmon32.exe
*\WINDOWS\system32\dllcache\cmnclim.dll
*\WINDOWS\system32\dllcache\cmnresm.dll
*\WINDOWS\system32\dllcache\cmpbk32.dll
*\WINDOWS\system32\dllcache\cmprops.dll
*\WINDOWS\system32\dllcache\cmstp.exe
*\WINDOWS\system32\dllcache\cmutil.dll
*\WINDOWS\system32\dllcache\cnetcfg.dll
*\WINDOWS\system32\dllcache\cnvfat.dll
*\WINDOWS\system32\dllcache\colbact.dll
*\WINDOWS\system32\dllcache\comaddin.dll
*\WINDOWS\system32\dllcache\comadmin.dll
*\WINDOWS\system32\dllcache\comcat.dll
*\WINDOWS\system32\dllcache\comctl32.dll
*\WINDOWS\system32\dllcache\comdlg32.dll
*\WINDOWS\system32\dllcache\commdlg.dll
*\WINDOWS\system32\dllcache\comp.exe
*\WINDOWS\system32\dllcache\compact.exe
*\WINDOWS\system32\dllcache\compatui.dll
*\WINDOWS\system32\dllcache\compobj.dll
*\WINDOWS\system32\dllcache\compstui.dll
*\WINDOWS\system32\dllcache\comrepl.dll
*\WINDOWS\system32\dllcache\comrepl.exe
*\WINDOWS\system32\dllcache\comrereg.exe
*\WINDOWS\system32\dllcache\comres.dll
*\WINDOWS\system32\dllcache\comsetup.dll
*\WINDOWS\system32\dllcache\comsnap.dll
*\WINDOWS\system32\dllcache\comsvcs.dll
*\WINDOWS\system32\dllcache\comuid.dll
*\WINDOWS\system32\dllcache\conf.exe
*\WINDOWS\system32\dllcache\confmrsl.dll
*\WINDOWS\system32\dllcache\confmsp.dll
*\WINDOWS\system32\dllcache\conime.exe
*\WINDOWS\system32\dllcache\console.dll
*\WINDOWS\system32\dllcache\control.exe
*\WINDOWS\system32\dllcache\convert.exe
*\WINDOWS\system32\dllcache\corpol.dll
*\WINDOWS\system32\dllcache\country.sys
*\WINDOWS\system32\dllcache\cplexe.exe
*\WINDOWS\system32\dllcache\cprofile.exe
*\WINDOWS\system32\dllcache\credui.dll
*\WINDOWS\system32\dllcache\crtdll.dll
*\WINDOWS\system32\dllcache\crypt32.dll
*\WINDOWS\system32\dllcache\cryptdlg.dll
*\WINDOWS\system32\dllcache\cryptdll.dll
*\WINDOWS\system32\dllcache\cryptext.dll
*\WINDOWS\system32\dllcache\cryptnet.dll
*\WINDOWS\system32\dllcache\cryptsvc.dll
*\WINDOWS\system32\dllcache\cryptui.dll
*\WINDOWS\system32\dllcache\cscdll.dll
*\WINDOWS\system32\dllcache\cscript.exe
*\WINDOWS\system32\dllcache\cscui.dll
*\WINDOWS\system32\dllcache\csrsrv.dll
*\WINDOWS\system32\dllcache\csrss.exe
*\WINDOWS\system32\dllcache\csseqchk.dll
*\WINDOWS\system32\dllcache\ctfmon.exe
*\WINDOWS\system32\dllcache\ctl3d32.dll
*\WINDOWS\system32\dllcache\ctl3dv2.dll
*\WINDOWS\system32\dllcache\c_g18030.dll
*\WINDOWS\system32\dllcache\c_is2022.dll
*\WINDOWS\system32\dllcache\c_iscii.dll
*\WINDOWS\system32\dllcache\d3d8.dll
*\WINDOWS\system32\dllcache\d3d8thk.dll
*\WINDOWS\system32\dllcache\d3dim.dll
*\WINDOWS\system32\dllcache\d3dim700.dll
*\WINDOWS\system32\dllcache\d3dpmesh.dll
*\WINDOWS\system32\dllcache\d3dramp.dll
*\WINDOWS\system32\dllcache\d3drm.dll
*\WINDOWS\system32\dllcache\d3dxof.dll
*\WINDOWS\system32\dllcache\danim.dll
*\WINDOWS\system32\dllcache\dao360.dll
*\WINDOWS\system32\dllcache\dataclen.dll
*\WINDOWS\system32\dllcache\datime.dll
*\WINDOWS\system32\dllcache\davclnt.dll
*\WINDOWS\system32\dllcache\daxctle.ocx
*\WINDOWS\system32\dllcache\dayi.ime
*\WINDOWS\system32\dllcache\dbgeng.dll
*\WINDOWS\system32\dllcache\dbghelp.dll
*\WINDOWS\system32\dllcache\dbnetlib.dll
*\WINDOWS\system32\dllcache\dcap32.dll
*\WINDOWS\system32\dllcache\dciman32.dll
*\WINDOWS\system32\dllcache\dcomcnfg.exe
*\WINDOWS\system32\dllcache\ddeml.dll
*\WINDOWS\system32\dllcache\ddeshare.exe
*\WINDOWS\system32\dllcache\ddraw.dll
*\WINDOWS\system32\dllcache\ddrawex.dll
*\WINDOWS\system32\dllcache\debug.exe
*\WINDOWS\system32\dllcache\defrag.exe
*\WINDOWS\system32\dllcache\desk.cpl
*\WINDOWS\system32\dllcache\deskadp.dll
*\WINDOWS\system32\dllcache\deskmon.dll
*\WINDOWS\system32\dllcache\deskperf.dll
*\WINDOWS\system32\dllcache\devenum.dll
*\WINDOWS\system32\dllcache\devmgr.dll
*\WINDOWS\system32\dllcache\dfrgfat.exe
*\WINDOWS\system32\dllcache\dfrgntfs.exe
*\WINDOWS\system32\dllcache\dfrgres.dll
*\WINDOWS\system32\dllcache\dfrgsnap.dll
*\WINDOWS\system32\dllcache\dfrgui.dll
*\WINDOWS\system32\dllcache\dfsshlex.dll
*\WINDOWS\system32\dllcache\dgnet.dll
*\WINDOWS\system32\dllcache\dgrpsetu.dll
*\WINDOWS\system32\dllcache\dgsetup.dll
*\WINDOWS\system32\dllcache\dhcpcsvc.dll
*\WINDOWS\system32\dllcache\dhcpmon.dll
*\WINDOWS\system32\dllcache\dhcpsapi.dll
*\WINDOWS\system32\dllcache\dhtmled.ocx
*\WINDOWS\system32\dllcache\diactfrm.dll
*\WINDOWS\system32\dllcache\dialer.exe
*\WINDOWS\system32\dllcache\diantz.exe
*\WINDOWS\system32\dllcache\digest.dll
*\WINDOWS\system32\dllcache\dimap.dll
*\WINDOWS\system32\dllcache\dinput.dll
*\WINDOWS\system32\dllcache\dinput8.dll
*\WINDOWS\system32\dllcache\directdb.dll
*\WINDOWS\system32\dllcache\diskcopy.dll
*\WINDOWS\system32\dllcache\diskdump.sys
*\WINDOWS\system32\dllcache\diskpart.exe
*\WINDOWS\system32\dllcache\diskperf.exe
*\WINDOWS\system32\dllcache\dispex.dll
*\WINDOWS\system32\dllcache\dlimport.exe
*\WINDOWS\system32\dllcache\dllhost.exe
*\WINDOWS\system32\dllcache\dllhst3g.exe
*\WINDOWS\system32\dllcache\dmadmin.exe
*\WINDOWS\system32\dllcache\dmband.dll
*\WINDOWS\system32\dllcache\dmboot.sys
*\WINDOWS\system32\dllcache\dmcompos.dll
*\WINDOWS\system32\dllcache\dmconfig.dll
*\WINDOWS\system32\dllcache\dmdlgs.dll
*\WINDOWS\system32\dllcache\dmdskmgr.dll
*\WINDOWS\system32\dllcache\dmdskres.dll
*\WINDOWS\system32\dllcache\dmime.dll
*\WINDOWS\system32\dllcache\dmintf.dll
*\WINDOWS\system32\dllcache\dmio.sys
*\WINDOWS\system32\dllcache\dmload.sys
*\WINDOWS\system32\dllcache\dmloader.dll
*\WINDOWS\system32\dllcache\dmocx.dll
*\WINDOWS\system32\dllcache\dmremote.exe
*\WINDOWS\system32\dllcache\dmscript.dll
*\WINDOWS\system32\dllcache\dmserver.dll
*\WINDOWS\system32\dllcache\dmstyle.dll
*\WINDOWS\system32\dllcache\dmsynth.dll
*\WINDOWS\system32\dllcache\dmusic.dll
*\WINDOWS\system32\dllcache\dmusic.sys
*\WINDOWS\system32\dllcache\dmview.ocx
*\WINDOWS\system32\dllcache\dnsapi.dll
*\WINDOWS\system32\dllcache\dnsrslvr.dll
*\WINDOWS\system32\dllcache\docprop.dll
*\WINDOWS\system32\dllcache\docprop2.dll
*\WINDOWS\system32\dllcache\dosapp.fon
*\WINDOWS\system32\dllcache\doskey.exe
*\WINDOWS\system32\dllcache\dosx.exe
*\WINDOWS\system32\dllcache\dpcdll.dll
*\WINDOWS\system32\dllcache\dplay.dll
*\WINDOWS\system32\dllcache\dplaysvr.exe
*\WINDOWS\system32\dllcache\dplayx.dll
*\WINDOWS\system32\dllcache\dpmodemx.dll
*\WINDOWS\system32\dllcache\dpnaddr.dll
*\WINDOWS\system32\dllcache\dpnet.dll
*\WINDOWS\system32\dllcache\dpnhpast.dll
*\WINDOWS\system32\dllcache\dpnhupnp.dll
*\WINDOWS\system32\dllcache\dpnlobby.dll
*\WINDOWS\system32\dllcache\dpnmodem.dll
*\WINDOWS\system32\dllcache\dpnsvr.exe
*\WINDOWS\system32\dllcache\dpnwsock.dll
*\WINDOWS\system32\dllcache\dpserial.dll
*\WINDOWS\system32\dllcache\dpvacm.dll
*\WINDOWS\system32\dllcache\dpvoice.dll
*\WINDOWS\system32\dllcache\dpvsetup.exe
*\WINDOWS\system32\dllcache\dpvvox.dll
*\WINDOWS\system32\dllcache\dpwsock.dll
*\WINDOWS\system32\dllcache\dpwsockx.dll
*\WINDOWS\system32\dllcache\drmclien.dll
*\WINDOWS\system32\dllcache\drmk.sys
*\WINDOWS\system32\dllcache\drmkaud.sys
*\WINDOWS\system32\dllcache\drmstor.dll
*\WINDOWS\system32\dllcache\drmv2clt.dll
*\WINDOWS\system32\dllcache\drprov.dll
*\WINDOWS\system32\dllcache\drvmain.sdb
*\WINDOWS\system32\dllcache\drwatson.exe
*\WINDOWS\system32\dllcache\drwtsn32.exe
*\WINDOWS\system32\dllcache\ds16gt.dll
*\WINDOWS\system32\dllcache\ds32gt.dll
*\WINDOWS\system32\dllcache\dsauth.dll
*\WINDOWS\system32\dllcache\dsdmo.dll
*\WINDOWS\system32\dllcache\dsdmoprp.dll
*\WINDOWS\system32\dllcache\dskquota.dll
*\WINDOWS\system32\dllcache\dskquoui.dll
*\WINDOWS\system32\dllcache\dsound.dll
*\WINDOWS\system32\dllcache\dsound3d.dll
*\WINDOWS\system32\dllcache\dsprop.dll
*\WINDOWS\system32\dllcache\dsprov.dll
*\WINDOWS\system32\dllcache\dsquery.dll
*\WINDOWS\system32\dllcache\dssec.dll
*\WINDOWS\system32\dllcache\dssenh.dll
*\WINDOWS\system32\dllcache\dsuiext.dll
*\WINDOWS\system32\dllcache\dswave.dll
*\WINDOWS\system32\dllcache\dumprep.exe
*\WINDOWS\system32\dllcache\duser.dll
*\WINDOWS\system32\dllcache\dvdupgrd.exe
*\WINDOWS\system32\dllcache\dwil1033.dll
*\WINDOWS\system32\dllcache\dwwin.exe
*\WINDOWS\system32\dllcache\dx7vb.dll
*\WINDOWS\system32\dllcache\dx8vb.dll
*\WINDOWS\system32\dllcache\dxapi.sys
*\WINDOWS\system32\dllcache\dxdiag.exe
*\WINDOWS\system32\dllcache\dxg.sys
*\WINDOWS\system32\dllcache\dxgthk.sys
*\WINDOWS\system32\dllcache\dxmasf.dll
*\WINDOWS\system32\dllcache\dxmrtp.dll
*\WINDOWS\system32\dllcache\dxtmsft.dll
*\WINDOWS\system32\dllcache\dxtrans.dll
*\WINDOWS\system32\dllcache\edb500.dll
*\WINDOWS\system32\dllcache\edlin.exe
*\WINDOWS\system32\dllcache\els.dll
*\WINDOWS\system32\dllcache\eqnclass.dll
*\WINDOWS\system32\dllcache\ersvc.dll
*\WINDOWS\system32\dllcache\es.dll
*\WINDOWS\system32\dllcache\esent.dll
*\WINDOWS\system32\dllcache\esent97.dll
*\WINDOWS\system32\dllcache\esentprf.dll
*\WINDOWS\system32\dllcache\esentutl.exe
*\WINDOWS\system32\dllcache\esscli.dll
*\WINDOWS\system32\dllcache\esucmd.dll
*\WINDOWS\system32\dllcache\esuimgd.dll
*\WINDOWS\system32\dllcache\esunid.dll
*\WINDOWS\system32\dllcache\et4000.sys
*\WINDOWS\system32\dllcache\eudcedit.exe
*\WINDOWS\system32\dllcache\eventcls.dll
*\WINDOWS\system32\dllcache\eventlog.dll
*\WINDOWS\system32\dllcache\eventvwr.exe
*\WINDOWS\system32\dllcache\evntagnt.dll
*\WINDOWS\system32\dllcache\evntcmd.exe
*\WINDOWS\system32\dllcache\evntrprv.dll
*\WINDOWS\system32\dllcache\evntwin.exe
*\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
*\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
*\WINDOWS\system32\dllcache\EXCH_aqueue.dll
*\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
*\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
*\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
*\WINDOWS\system32\dllcache\EXCH_regtrace.exe
*\WINDOWS\system32\dllcache\EXCH_rwnh.dll
*\WINDOWS\system32\dllcache\EXCH_scripto.dll
*\WINDOWS\system32\dllcache\EXCH_seo.dll
*\WINDOWS\system32\dllcache\EXCH_seos.dll
*\WINDOWS\system32\dllcache\EXCH_smtpadm.dll
*\WINDOWS\system32\dllcache\EXCH_smtpapi.dll
*\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
*\WINDOWS\system32\dllcache\EXCH_smtpsnap.dll
*\WINDOWS\system32\dllcache\EXCH_smtpsvc.dll
*\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
*\WINDOWS\system32\dllcache\exe2bin.exe
*\WINDOWS\system32\dllcache\expand.exe
*\WINDOWS\system32\dllcache\explorer.exe
*\WINDOWS\system32\dllcache\expsrv.dll
*\WINDOWS\system32\dllcache\extrac32.exe
*\WINDOWS\system32\dllcache\exts.dll
*\WINDOWS\system32\dllcache\f3ahvoas.dll
*\WINDOWS\system32\dllcache\fastfat.sys
*\WINDOWS\system32\dllcache\fastopen.exe
*\WINDOWS\system32\dllcache\fastprox.dll
*\WINDOWS\system32\dllcache\faultrep.dll
*\WINDOWS\system32\dllcache\fc.exe
*\WINDOWS\system32\dllcache\feclient.dll
*\WINDOWS\system32\dllcache\filemgmt.dll
*\WINDOWS\system32\dllcache\find.exe
*\WINDOWS\system32\dllcache\findstr.exe
*\WINDOWS\system32\dllcache\finger.exe
*\WINDOWS\system32\dllcache\fips.sys
*\WINDOWS\system32\dllcache\fixmapi.exe
*\WINDOWS\system32\dllcache\flattemp.exe
*\WINDOWS\system32\dllcache\fldrclnr.dll
*\WINDOWS\system32\dllcache\fmifs.dll
*\WINDOWS\system32\dllcache\fontext.dll
*\WINDOWS\system32\dllcache\fontsub.dll
*\WINDOWS\system32\dllcache\fontview.exe
*\WINDOWS\system32\dllcache\forcedos.exe
*\WINDOWS\system32\dllcache\FP4.CAT
*\WINDOWS\system32\dllcache\fp40ext.dll
*\WINDOWS\system32\dllcache\fp4amsft.dll
*\WINDOWS\system32\dllcache\fp4anscp.dll
*\WINDOWS\system32\dllcache\fp4apws.dll
*\WINDOWS\system32\dllcache\fp4areg.dll
*\WINDOWS\system32\dllcache\fp4atxt.dll
*\WINDOWS\system32\dllcache\fp4autl.dll
*\WINDOWS\system32\dllcache\fp4avnb.dll
*\WINDOWS\system32\dllcache\fp4avss.dll
*\WINDOWS\system32\dllcache\fp4awebs.dll
*\WINDOWS\system32\dllcache\fp4awel.dll
*\WINDOWS\system32\dllcache\fp98sadm.exe
*\WINDOWS\system32\dllcache\fp98swin.exe
*\WINDOWS\system32\dllcache\fpadmcgi.exe
*\WINDOWS\system32\dllcache\fpadmdll.dll
*\WINDOWS\system32\dllcache\fpcount.exe
*\WINDOWS\system32\dllcache\fpencode.dll
*\WINDOWS\system32\dllcache\fpexedll.dll
*\WINDOWS\system32\dllcache\fpmmc.dll
*\WINDOWS\system32\dllcache\fpmmcsat.dll
*\WINDOWS\system32\dllcache\fpremadm.exe
*\WINDOWS\system32\dllcache\framd.ttf
*\WINDOWS\system32\dllcache\framdit.ttf
*\WINDOWS\system32\dllcache\framebuf.dll
*\WINDOWS\system32\dllcache\framedyn.dll
*\WINDOWS\system32\dllcache\freecell.exe
*\WINDOWS\system32\dllcache\fsconins.dll
*\WINDOWS\system32\dllcache\fsusd.dll
*\WINDOWS\system32\dllcache\fsutil.exe
*\WINDOWS\system32\dllcache\fs_rec.sys
*\WINDOWS\system32\dllcache\ftlx041e.dll
*\WINDOWS\system32\dllcache\ftp.exe
*\WINDOWS\system32\dllcache\ftsrch.dll
*\WINDOWS\system32\dllcache\fwdprov.dll
*\WINDOWS\system32\dllcache\fxsapi.dll
*\WINDOWS\system32\dllcache\fxscfgwz.dll
*\WINDOWS\system32\dllcache\fxsclnt.exe
*\WINDOWS\system32\dllcache\fxsclntr.dll
*\WINDOWS\system32\dllcache\fxscom.dll
*\WINDOWS\system32\dllcache\fxscomex.dll
*\WINDOWS\system32\dllcache\fxscover.exe
*\WINDOWS\system32\dllcache\fxsdrv.dll
*\WINDOWS\system32\dllcache\fxsevent.dll
*\WINDOWS\system32\dllcache\fxsext32.dll
*\WINDOWS\system32\dllcache\fxsmon.dll
*\WINDOWS\system32\dllcache\fxsocm.dll
*\WINDOWS\system32\dllcache\fxsperf.dll
*\WINDOWS\system32\dllcache\fxsres.dll
*\WINDOWS\system32\dllcache\fxsroute.dll
*\WINDOWS\system32\dllcache\fxssend.exe
*\WINDOWS\system32\dllcache\fxsst.dll
*\WINDOWS\system32\dllcache\fxssvc.exe
*\WINDOWS\system32\dllcache\fxst30.dll
*\WINDOWS\system32\dllcache\fxstiff.dll
*\WINDOWS\system32\dllcache\fxsui.dll
*\WINDOWS\system32\dllcache\fxswzrd.dll
*\WINDOWS\system32\dllcache\fxsxp32.dll
*\WINDOWS\system32\dllcache\g711codc.ax
*\WINDOWS\system32\dllcache\gcdef.dll
*\WINDOWS\system32\dllcache\gdi.exe
*\WINDOWS\system32\dllcache\gdi32.dll
*\WINDOWS\system32\dllcache\getuname.dll
*\WINDOWS\system32\dllcache\glmf32.dll
*\WINDOWS\system32\dllcache\glu32.dll
*\WINDOWS\system32\dllcache\gpkcsp.dll
*\WINDOWS\system32\dllcache\gpkrsrc.dll
*\WINDOWS\system32\dllcache\grpconv.exe
*\WINDOWS\system32\dllcache\guitrn.dll
*\WINDOWS\system32\dllcache\guitrn_a.dll
*\WINDOWS\system32\dllcache\h323.tsp
*\WINDOWS\system32\dllcache\h323cc.dll
*\WINDOWS\system32\dllcache\h323msp.dll
*\WINDOWS\system32\dllcache\hanja.lex
*\WINDOWS\system32\dllcache\hanjadic.dll
*\WINDOWS\system32\dllcache\hcappres.dll
*\WINDOWS\system32\dllcache\hdwwiz.cpl
*\WINDOWS\system32\dllcache\help.exe
*\WINDOWS\system32\dllcache\helpctr.exe
*\WINDOWS\system32\dllcache\helphost.exe
*\WINDOWS\system32\dllcache\helpsvc.exe
*\WINDOWS\system32\dllcache\hh.exe
*\WINDOWS\system32\dllcache\hhctrl.ocx
*\WINDOWS\system32\dllcache\hhctrlui.dll
*\WINDOWS\system32\dllcache\hhsetup.dll
*\WINDOWS\system32\dllcache\hidphone.tsp
*\WINDOWS\system32\dllcache\himem.sys
*\WINDOWS\system32\dllcache\hlink.dll
*\WINDOWS\system32\dllcache\hmmapi.dll
*\WINDOWS\system32\dllcache\hnetcfg.dll
*\WINDOWS\system32\dllcache\hnetmon.dll
*\WINDOWS\system32\dllcache\hnetwiz.dll
*\WINDOWS\system32\dllcache\home_ss.dll
*\WINDOWS\system32\dllcache\hostmib.dll
*\WINDOWS\system32\dllcache\hostname.exe
*\WINDOWS\system32\dllcache\hotplug.dll
*\WINDOWS\system32\dllcache\HPCRDP.CAT
*\WINDOWS\system32\dllcache\hrtz.dll
*\WINDOWS\system32\dllcache\hrtzres.dll
*\WINDOWS\system32\dllcache\hrtzzm.exe
*\WINDOWS\system32\dllcache\htrn_jis.dll
*\WINDOWS\system32\dllcache\htui.dll
*\WINDOWS\system32\dllcache\hwxcht.dll
*\WINDOWS\system32\dllcache\hwxjpn.dll
*\WINDOWS\system32\dllcache\hwxkor.dll
*\WINDOWS\system32\dllcache\iasacct.dll
*\WINDOWS\system32\dllcache\iasads.dll
*\WINDOWS\system32\dllcache\iashlpr.dll
*\WINDOWS\system32\dllcache\iasnap.dll
*\WINDOWS\system32\dllcache\IASNT4.CAT
*\WINDOWS\system32\dllcache\iaspolcy.dll
*\WINDOWS\system32\dllcache\iasrad.dll
*\WINDOWS\system32\dllcache\iasrecst.dll
*\WINDOWS\system32\dllcache\iassam.dll
*\WINDOWS\system32\dllcache\iassdo.dll
*\WINDOWS\system32\dllcache\iassvcs.dll
*\WINDOWS\system32\dllcache\icaapi.dll
*\WINDOWS\system32\dllcache\icfgnt5.dll
*\WINDOWS\system32\dllcache\icm32.dll
*\WINDOWS\system32\dllcache\icmp.dll
*\WINDOWS\system32\dllcache\icmui.dll
*\WINDOWS\system32\dllcache\icwconn.dll
*\WINDOWS\system32\dllcache\icwconn1.exe
*\WINDOWS\system32\dllcache\icwconn2.exe
*\WINDOWS\system32\dllcache\icwdial.dll
*\WINDOWS\system32\dllcache\icwdl.dll
*\WINDOWS\system32\dllcache\icwhelp.dll
*\WINDOWS\system32\dllcache\icwphbk.dll
*\WINDOWS\system32\dllcache\icwres.dll
*\WINDOWS\system32\dllcache\icwrmind.exe
*\WINDOWS\system32\dllcache\icwtutor.exe
*\WINDOWS\system32\dllcache\icwutil.dll
*\WINDOWS\system32\dllcache\idq.dll
*\WINDOWS\system32\dllcache\ie4uinit.exe
*\WINDOWS\system32\dllcache\ieakeng.dll
*\WINDOWS\system32\dllcache\ieaksie.dll
*\WINDOWS\system32\dllcache\ieakui.dll
*\WINDOWS\system32\dllcache\iedkcs32.dll
*\WINDOWS\system32\dllcache\ieinfo5.ocx
*\WINDOWS\system32\dllcache\iepeers.dll
*\WINDOWS\system32\dllcache\iernonce.dll
*\WINDOWS\system32\dllcache\iesetup.dll
*\WINDOWS\system32\dllcache\iexplore.exe
*\WINDOWS\system32\dllcache\iexpress.exe
*\WINDOWS\system32\dllcache\ifmon.dll
*\WINDOWS\system32\dllcache\ifsutil.dll
*\WINDOWS\system32\dllcache\igmpagnt.dll
*\WINDOWS\system32\dllcache\iis.dll
*\WINDOWS\system32\dllcache\ils.dll
*\WINDOWS\system32\dllcache\imagehlp.dll
*\WINDOWS\system32\dllcache\imapi.exe
*\WINDOWS\system32\dllcache\imapi.sys
*\WINDOWS\system32\dllcache\imekr.lex
*\WINDOWS\system32\dllcache\imekr61.ime
*\WINDOWS\system32\dllcache\imekrcic.dll
*\WINDOWS\system32\dllcache\imekrmbx.dll
*\WINDOWS\system32\dllcache\imekrmig.exe
*\WINDOWS\system32\dllcache\imepadsm.dll
*\WINDOWS\system32\dllcache\imepadsv.exe
*\WINDOWS\system32\dllcache\imeshare.dll
*\WINDOWS\system32\dllcache\imgutil.dll
*\WINDOWS\system32\dllcache\imjp81.ime
*\WINDOWS\system32\dllcache\imjp81k.dll
*\WINDOWS\system32\dllcache\imjpcic.dll
*\WINDOWS\system32\dllcache\imjpcus.dll
*\WINDOWS\system32\dllcache\imjpdadm.exe
*\WINDOWS\system32\dllcache\imjpdct.dll
*\WINDOWS\system32\dllcache\imjpdct.exe
*\WINDOWS\system32\dllcache\imjpdsvr.exe
*\WINDOWS\system32\dllcache\imjpinst.exe
*\WINDOWS\system32\dllcache\imjpmig.exe
*\WINDOWS\system32\dllcache\imjprw.exe
*\WINDOWS\system32\dllcache\imjpuex.exe
*\WINDOWS\system32\dllcache\imjputy.exe
*\WINDOWS\system32\dllcache\imjputyc.dll
*\WINDOWS\system32\dllcache\imkrinst.exe
*\WINDOWS\system32\dllcache\imlang.dll
*\WINDOWS\system32\dllcache\imm32.dll
*\WINDOWS\system32\dllcache\IMS.CAT
*\WINDOWS\system32\dllcache\imscinst.exe
*\WINDOWS\system32\dllcache\imsinsnt.dll
*\WINDOWS\system32\dllcache\imskdic.dll
*\WINDOWS\system32\dllcache\imskf.dll
*\WINDOWS\system32\dllcache\inetcfg.dll
*\WINDOWS\system32\dllcache\inetcomm.dll
*\WINDOWS\system32\dllcache\inetcpl.cpl
*\WINDOWS\system32\dllcache\inetcplc.dll
*\WINDOWS\system32\dllcache\inetmib1.dll
*\WINDOWS\system32\dllcache\inetpp.dll
*\WINDOWS\system32\dllcache\inetppui.dll
*\WINDOWS\system32\dllcache\inetres.dll
*\WINDOWS\system32\dllcache\inetwiz.exe
*\WINDOWS\system32\dllcache\infosoft.dll
*\WINDOWS\system32\dllcache\initpki.dll
*\WINDOWS\system32\dllcache\input.dll
*\WINDOWS\system32\dllcache\inseng.dll
*\WINDOWS\system32\dllcache\intl.cpl
*\WINDOWS\system32\dllcache\iologmsg.dll
*\WINDOWS\system32\dllcache\ipconf.tsp
*\WINDOWS\system32\dllcache\ipconfig.exe
*\WINDOWS\system32\dllcache\ipfltdrv.sys
*\WINDOWS\system32\dllcache\iphlpapi.dll
*\WINDOWS\system32\dllcache\ipinip.sys
*\WINDOWS\system32\dllcache\ipmontr.dll
*\WINDOWS\system32\dllcache\ipnat.sys
*\WINDOWS\system32\dllcache\ipnathlp.dll
*\WINDOWS\system32\dllcache\ippromon.dll
*\WINDOWS\system32\dllcache\iprip.dll
*\WINDOWS\system32\dllcache\iprop.dll
*\WINDOWS\system32\dllcache\iprtprio.dll
*\WINDOWS\system32\dllcache\iprtrmgr.dll
*\WINDOWS\system32\dllcache\ipsec.sys
*\WINDOWS\system32\dllcache\ipsec6.exe
*\WINDOWS\system32\dllcache\ipsecsnp.dll
*\WINDOWS\system32\dllcache\ipsecsvc.dll
*\WINDOWS\system32\dllcache\ipsmsnap.dll
*\WINDOWS\system32\dllcache\ipv6.exe
*\WINDOWS\system32\dllcache\ipv6mon.dll
*\WINDOWS\system32\dllcache\ipxmontr.dll
*\WINDOWS\system32\dllcache\ipxpromn.dll
*\WINDOWS\system32\dllcache\ipxrip.dll
*\WINDOWS\system32\dllcache\ipxroute.exe
*\WINDOWS\system32\dllcache\ipxrtmgr.dll
*\WINDOWS\system32\dllcache\ipxsap.dll
*\WINDOWS\system32\dllcache\ipxwan.dll
*\WINDOWS\system32\dllcache\irclass.dll
*\WINDOWS\system32\dllcache\irenum.sys
*\WINDOWS\system32\dllcache\isign32.dll
*\WINDOWS\system32\dllcache\isignup.exe
*\WINDOWS\system32\dllcache\isrdbg32.dll
*\WINDOWS\system32\dllcache\itircl.dll
*\WINDOWS\system32\dllcache\itss.dll
*\WINDOWS\system32\dllcache\iuctl.dll
*\WINDOWS\system32\dllcache\iuengine.dll
*\WINDOWS\system32\dllcache\ixsso.dll
*\WINDOWS\system32\dllcache\jet500.dll
*\WINDOWS\system32\dllcache\jgaw400.dll
*\WINDOWS\system32\dllcache\jgdw400.dll
*\WINDOWS\system32\dllcache\jgmd400.dll
*\WINDOWS\system32\dllcache\jgpl400.dll
*\WINDOWS\system32\dllcache\jgsd400.dll
*\WINDOWS\system32\dllcache\jgsh400.dll
*\WINDOWS\system32\dllcache\jobexec.dll
*\WINDOWS\system32\dllcache\joy.cpl
*\WINDOWS\system32\dllcache\jscript.dll
*\WINDOWS\system32\dllcache\jsproxy.dll
*\WINDOWS\system32\dllcache\jupiw.dll
*\WINDOWS\system32\dllcache\kbd101.dll
*\WINDOWS\system32\dllcache\kbd101a.dll
*\WINDOWS\system32\dllcache\kbd101b.dll
*\WINDOWS\system32\dllcache\kbd101c.dll
*\WINDOWS\system32\dllcache\kbd103.dll
*\WINDOWS\system32\dllcache\kbd106.dll
*\WINDOWS\system32\dllcache\kbd106n.dll
*\WINDOWS\system32\dllcache\kbda1.dll
*\WINDOWS\system32\dllcache\kbda2.dll
*\WINDOWS\system32\dllcache\kbda3.dll
*\WINDOWS\system32\dllcache\kbdal.dll
*\WINDOWS\system32\dllcache\kbdarme.dll
*\WINDOWS\system32\dllcache\kbdarmw.dll
*\WINDOWS\system32\dllcache\kbdax2.dll
*\WINDOWS\system32\dllcache\kbdaze.dll
*\WINDOWS\system32\dllcache\kbdazel.dll
*\WINDOWS\system32\dllcache\kbdbe.dll
*\WINDOWS\system32\dllcache\kbdbene.dll
*\WINDOWS\system32\dllcache\kbdblr.dll
*\WINDOWS\system32\dllcache\kbdbr.dll
*\WINDOWS\system32\dllcache\kbdbu.dll
*\WINDOWS\system32\dllcache\kbdca.dll
*\WINDOWS\system32\dllcache\kbdcan.dll
*\WINDOWS\system32\dllcache\kbdcr.dll
*\WINDOWS\system32\dllcache\kbdcz.dll
*\WINDOWS\system32\dllcache\kbdcz1.dll
*\WINDOWS\system32\dllcache\kbdcz2.dll
*\WINDOWS\system32\dllcache\kbdda.dll
*\WINDOWS\system32\dllcache\kbddiv1.dll
*\WINDOWS\system32\dllcache\kbddiv2.dll
*\WINDOWS\system32\dllcache\kbddv.dll
*\WINDOWS\system32\dllcache\kbdes.dll
*\WINDOWS\system32\dllcache\kbdest.dll
*\WINDOWS\system32\dllcache\kbdfa.dll
*\WINDOWS\system32\dllcache\kbdfc.dll
*\WINDOWS\system32\dllcache\kbdfi.dll
*\WINDOWS\system32\dllcache\kbdfo.dll
*\WINDOWS\system32\dllcache\kbdfr.dll
*\WINDOWS\system32\dllcache\kbdgae.dll
*\WINDOWS\system32\dllcache\kbdgeo.dll
*\WINDOWS\system32\dllcache\kbdgkl.dll
*\WINDOWS\system32\dllcache\kbdgr.dll
*\WINDOWS\system32\dllcache\kbdgr1.dll
*\WINDOWS\system32\dllcache\kbdhe.dll
*\WINDOWS\system32\dllcache\kbdhe220.dll
*\WINDOWS\system32\dllcache\kbdhe319.dll
*\WINDOWS\system32\dllcache\kbdheb.dll
*\WINDOWS\system32\dllcache\kbdhela2.dll
*\WINDOWS\system32\dllcache\kbdhela3.dll
*\WINDOWS\system32\dllcache\kbdhept.dll
*\WINDOWS\system32\dllcache\kbdhu.dll
*\WINDOWS\system32\dllcache\kbdhu1.dll
*\WINDOWS\system32\dllcache\kbdibm02.dll
*\WINDOWS\system32\dllcache\kbdic.dll
*\WINDOWS\system32\dllcache\kbdindev.dll
*\WINDOWS\system32\dllcache\kbdinguj.dll
*\WINDOWS\system32\dllcache\kbdinhin.dll
*\WINDOWS\system32\dllcache\kbdinkan.dll
*\WINDOWS\system32\dllcache\kbdinmar.dll
*\WINDOWS\system32\dllcache\kbdinpun.dll
*\WINDOWS\system32\dllcache\kbdintam.dll
*\WINDOWS\system32\dllcache\kbdintel.dll
*\WINDOWS\system32\dllcache\kbdir.dll
*\WINDOWS\system32\dllcache\kbdit.dll
*\WINDOWS\system32\dllcache\kbdit142.dll
*\WINDOWS\system32\dllcache\kbdjpn.dll
*\WINDOWS\system32\dllcache\kbdkaz.dll
*\WINDOWS\system32\dllcache\kbdkor.dll
*\WINDOWS\system32\dllcache\kbdkyr.dll
*\WINDOWS\system32\dllcache\kbdla.dll
*\WINDOWS\system32\dllcache\kbdlk41a.dll
*\WINDOWS\system32\dllcache\kbdlk41j.dll
*\WINDOWS\system32\dllcache\kbdlt.dll
*\WINDOWS\system32\dllcache\kbdlt1.dll
*\WINDOWS\system32\dllcache\kbdlv.dll
*\WINDOWS\system32\dllcache\kbdlv1.dll
*\WINDOWS\system32\dllcache\kbdmac.dll
*\WINDOWS\system32\dllcache\kbdmon.dll
*\WINDOWS\system32\dllcache\kbdne.dll
*\WINDOWS\system32\dllcache\kbdnec.dll
*\WINDOWS\system32\dllcache\kbdnec95.dll
*\WINDOWS\system32\dllcache\kbdnecat.dll
*\WINDOWS\system32\dllcache\kbdnecnt.dll
*\WINDOWS\system32\dllcache\kbdno.dll
*\WINDOWS\system32\dllcache\kbdpl.dll
*\WINDOWS\system32\dllcache\kbdpl1.dll
*\WINDOWS\system32\dllcache\kbdpo.dll
*\WINDOWS\system32\dllcache\kbdro.dll
*\WINDOWS\system32\dllcache\kbdru.dll
*\WINDOWS\system32\dllcache\kbdru1.dll
*\WINDOWS\system32\dllcache\kbdsf.dll
*\WINDOWS\system32\dllcache\kbdsg.dll
*\WINDOWS\system32\dllcache\kbdsl.dll
*\WINDOWS\system32\dllcache\kbdsl1.dll
*\WINDOWS\system32\dllcache\kbdsp.dll
*\WINDOWS\system32\dllcache\kbdsw.dll
*\WINDOWS\system32\dllcache\kbdsyr1.dll
*\WINDOWS\system32\dllcache\kbdsyr2.dll
*\WINDOWS\system32\dllcache\kbdtat.dll
*\WINDOWS\system32\dllcache\kbdth0.dll
*\WINDOWS\system32\dllcache\kbdth1.dll
*\WINDOWS\system32\dllcache\kbdth2.dll
*\WINDOWS\system32\dllcache\kbdth3.dll
*\WINDOWS\system32\dllcache\kbdtuf.dll
*\WINDOWS\system32\dllcache\kbdtuq.dll
*\WINDOWS\system32\dllcache\kbduk.dll
*\WINDOWS\system32\dllcache\kbdur.dll
*\WINDOWS\system32\dllcache\kbdurdu.dll
*\WINDOWS\system32\dllcache\kbdus.dll
*\WINDOWS\system32\dllcache\kbdusa.dll
*\WINDOWS\system32\dllcache\kbdusl.dll
*\WINDOWS\system32\dllcache\kbdusr.dll
*\WINDOWS\system32\dllcache\kbdusx.dll
*\WINDOWS\system32\dllcache\kbduzb.dll
*\WINDOWS\system32\dllcache\kbdvntc.dll
*\WINDOWS\system32\dllcache\kbdycc.dll
*\WINDOWS\system32\dllcache\kbdycl.dll
*\WINDOWS\system32\dllcache\kd1394.dll
*\WINDOWS\system32\dllcache\kdcom.dll
*\WINDOWS\system32\dllcache\kerberos.dll
*\WINDOWS\system32\dllcache\kernel32.dll
*\WINDOWS\system32\dllcache\key01.sys
*\WINDOWS\system32\dllcache\keyboard.drv
*\WINDOWS\system32\dllcache\keyboard.sys
*\WINDOWS\system32\dllcache\keymgr.dll
*\WINDOWS\system32\dllcache\kmddsp.tsp
*\WINDOWS\system32\dllcache\kmixer.sys
*\WINDOWS\system32\dllcache\korwbrkr.dll
*\WINDOWS\system32\dllcache\korwbrkr.lex
*\WINDOWS\system32\dllcache\krnl386.exe
*\WINDOWS\system32\dllcache\krnlprov.dll
*\WINDOWS\system32\dllcache\ks.sys
*\WINDOWS\system32\dllcache\ksecdd.sys
*\WINDOWS\system32\dllcache\ksproxy.ax
*\WINDOWS\system32\dllcache\ksuser.dll
*\WINDOWS\system32\dllcache\label.exe
*\WINDOWS\system32\dllcache\langwrbk.dll
*\WINDOWS\system32\dllcache\laprxy.dll
*\WINDOWS\system32\dllcache\licdll.dll
*\WINDOWS\system32\dllcache\licmgr10.dll
*\WINDOWS\system32\dllcache\licwmi.dll
*\WINDOWS\system32\dllcache\lights.exe
*\WINDOWS\system32\dllcache\linkinfo.dll
*\WINDOWS\system32\dllcache\lmhsvc.dll
*\WINDOWS\system32\dllcache\lmmib2.dll
*\WINDOWS\system32\dllcache\lmrt.dll
*\WINDOWS\system32\dllcache\lnkstub.exe
*\WINDOWS\system32\dllcache\loadperf.dll
*\WINDOWS\system32\dllcache\localsec.dll
*\WINDOWS\system32\dllcache\localspl.dll
*\WINDOWS\system32\dllcache\localui.dll
*\WINDOWS\system32\dllcache\locator.exe
*\WINDOWS\system32\dllcache\lodctr.exe
*\WINDOWS\system32\dllcache\log.dll
*\WINDOWS\system32\dllcache\logagent.exe
*\WINDOWS\system32\dllcache\loghours.dll
*\WINDOWS\system32\dllcache\logoff.exe
*\WINDOWS\system32\dllcache\logon.scr
*\WINDOWS\system32\dllcache\logonui.exe
*\WINDOWS\system32\dllcache\lpdsvc.dll
*\WINDOWS\system32\dllcache\lpk.dll
*\WINDOWS\system32\dllcache\lpq.exe
*\WINDOWS\system32\dllcache\lpr.exe
*\WINDOWS\system32\dllcache\lprhelp.dll
*\WINDOWS\system32\dllcache\lprmon.dll
*\WINDOWS\system32\dllcache\lprmonui.dll
*\WINDOWS\system32\dllcache\lsasrv.dll
*\WINDOWS\system32\dllcache\lsass.exe
*\WINDOWS\system32\dllcache\ltts1033.lxa
*\WINDOWS\system32\dllcache\luna.mst
*\WINDOWS\system32\dllcache\lz32.dll
*\WINDOWS\system32\dllcache\lzexpand.dll
*\WINDOWS\system32\dllcache\magnify.exe
*\WINDOWS\system32\dllcache\mag_hook.dll
*\WINDOWS\system32\dllcache\main.cpl
*\WINDOWS\system32\dllcache\makecab.exe
*\WINDOWS\system32\dllcache\MAPIMIG.CAT
*\WINDOWS\system32\dllcache\mcastmib.dll
*\WINDOWS\system32\dllcache\mcd.sys
*\WINDOWS\system32\dllcache\mcd32.dll
*\WINDOWS\system32\dllcache\mcdsrv32.dll
*\WINDOWS\system32\dllcache\mchgrcoi.dll
*\WINDOWS\system32\dllcache\mciavi.drv
*\WINDOWS\system32\dllcache\mciavi32.dll
*\WINDOWS\system32\dllcache\mcicda.dll
*\WINDOWS\system32\dllcache\mciole16.dll
*\WINDOWS\system32\dllcache\mciole32.dll
*\WINDOWS\system32\dllcache\mciqtz32.dll
*\WINDOWS\system32\dllcache\mciseq.dll
*\WINDOWS\system32\dllcache\mciseq.drv
*\WINDOWS\system32\dllcache\mciwave.dll
*\WINDOWS\system32\dllcache\mciwave.drv
*\WINDOWS\system32\dllcache\mdhcp.dll
*\WINDOWS\system32\dllcache\mdminst.dll
*\WINDOWS\system32\dllcache\mem.exe
*\WINDOWS\system32\dllcache\metal_ss.dll
*\WINDOWS\system32\dllcache\mf3216.dll
*\WINDOWS\system32\dllcache\mfc40.dll
*\WINDOWS\system32\dllcache\mfc40u.dll
*\WINDOWS\system32\dllcache\mfc42.dll
*\WINDOWS\system32\dllcache\mfc42u.dll
*\WINDOWS\system32\dllcache\mfcsubs.dll
*\WINDOWS\system32\dllcache\mga.dll
*\WINDOWS\system32\dllcache\mga.sys
*\WINDOWS\system32\dllcache\mgmtapi.dll
*\WINDOWS\system32\dllcache\micross.ttf
*\WINDOWS\system32\dllcache\midimap.dll
*\WINDOWS\system32\dllcache\migism.dll
*\WINDOWS\system32\dllcache\migism_a.dll
*\WINDOWS\system32\dllcache\migisol.exe
*\WINDOWS\system32\dllcache\miglibnt.dll
*\WINDOWS\system32\dllcache\migload.exe
*\WINDOWS\system32\dllcache\migregdb.exe
*\WINDOWS\system32\dllcache\migwiz.exe
*\WINDOWS\system32\dllcache\migwiz_a.exe
*\WINDOWS\system32\dllcache\mimefilt.dll
*\WINDOWS\system32\dllcache\mindex.dll
*\WINDOWS\system32\dllcache\mlang.dll
*\WINDOWS\system32\dllcache\mll_hp.dll
*\WINDOWS\system32\dllcache\mll_mtf.dll
*\WINDOWS\system32\dllcache\mll_qic.dll
*\WINDOWS\system32\dllcache\mmc.exe
*\WINDOWS\system32\dllcache\mmcbase.dll
*\WINDOWS\system32\dllcache\mmcndmgr.dll
*\WINDOWS\system32\dllcache\mmcshext.dll
*\WINDOWS\system32\dllcache\mmdrv.dll
*\WINDOWS\system32\dllcache\mmfutil.dll
*\WINDOWS\system32\dllcache\mmsys.cpl
*\WINDOWS\system32\dllcache\mmsystem.dll
*\WINDOWS\system32\dllcache\mmtask.tsk
*\WINDOWS\system32\dllcache\mmutilse.dll
*\WINDOWS\system32\dllcache\mnmdd.dll
*\WINDOWS\system32\dllcache\mnmdd.sys
*\WINDOWS\system32\dllcache\mnmsrvc.exe
*\WINDOWS\system32\dllcache\mobsync.dll
*\WINDOWS\system32\dllcache\mobsync.exe
*\WINDOWS\system32\dllcache\modemui.dll
*\WINDOWS\system32\dllcache\modern.fon
*\WINDOWS\system32\dllcache\modex.dll
*\WINDOWS\system32\dllcache\mofcomp.exe
*\WINDOWS\system32\dllcache\mofd.dll
*\WINDOWS\system32\dllcache\moricons.dll
*\WINDOWS\system32\dllcache\mountmgr.sys
*\WINDOWS\system32\dllcache\mountvol.exe
*\WINDOWS\system32\dllcache\mouse.drv
*\WINDOWS\system32\dllcache\moviemk.exe
*\WINDOWS\system32\dllcache\mpg2splt.ax
*\WINDOWS\system32\dllcache\mpg4dmod.dll
*\WINDOWS\system32\dllcache\mpg4ds32.ax
*\WINDOWS\system32\dllcache\mplay32.exe
*\WINDOWS\system32\dllcache\mplayer2.exe
*\WINDOWS\system32\dllcache\mpnotify.exe
*\WINDOWS\system32\dllcache\mpr.dll
*\WINDOWS\system32\dllcache\mprapi.dll
*\WINDOWS\system32\dllcache\mprddm.dll
*\WINDOWS\system32\dllcache\mprdim.dll
*\WINDOWS\system32\dllcache\mprmsg.dll
*\WINDOWS\system32\dllcache\mprui.dll
*\WINDOWS\system32\dllcache\mrinfo.exe
*\WINDOWS\system32\dllcache\mrxdav.sys
*\WINDOWS\system32\dllcache\mrxsmb.sys
*\WINDOWS\system32\dllcache\msaatext.dll
*\WINDOWS\system32\dllcache\msacm.dll
*\WINDOWS\system32\dllcache\msacm32.dll
*\WINDOWS\system32\dllcache\msadce.dll
*\WINDOWS\system32\dllcache\msadcer.dll
*\WINDOWS\system32\dllcache\msadcf.dll
*\WINDOWS\system32\dllcache\msadcfr.dll
*\WINDOWS\system32\dllcache\msadco.dll
*\WINDOWS\system32\dllcache\msadcor.dll
*\WINDOWS\system32\dllcache\msadcs.dll
*\WINDOWS\system32\dllcache\msadds.dll
*\WINDOWS\system32\dllcache\msadds32.ax
*\WINDOWS\system32\dllcache\msaddsr.dll
*\WINDOWS\system32\dllcache\msader15.dll
*\WINDOWS\system32\dllcache\msado15.dll
*\WINDOWS\system32\dllcache\msado20.tlb
*\WINDOWS\system32\dllcache\msado21.tlb
*\WINDOWS\system32\dllcache\msado25.tlb
*\WINDOWS\system32\dllcache\msado26.tlb
*\WINDOWS\system32\dllcache\msadomd.dll
*\WINDOWS\system32\dllcache\msador15.dll
*\WINDOWS\system32\dllcache\msadox.dll
*\WINDOWS\system32\dllcache\msadrh15.dll
*\WINDOWS\system32\dllcache\msafd.dll
*\WINDOWS\system32\dllcache\msapsspc.dll
*\WINDOWS\system32\dllcache\msasn1.dll
*\WINDOWS\system32\dllcache\msaudite.dll
*\WINDOWS\system32\dllcache\mscandui.dll
*\WINDOWS\system32\dllcache\mscat32.dll
*\WINDOWS\system32\dllcache\mscdexnt.exe
*\WINDOWS\system32\dllcache\mscms.dll
*\WINDOWS\system32\dllcache\msconf.dll
*\WINDOWS\system32\dllcache\msconfig.exe
*\WINDOWS\system32\dllcache\mscpx32r.dll
*\WINDOWS\system32\dllcache\mscpxl32.dll
*\WINDOWS\system32\dllcache\msctf.dll
*\WINDOWS\system32\dllcache\msctfp.dll
*\WINDOWS\system32\dllcache\msdadc.dll
*\WINDOWS\system32\dllcache\msdaenum.dll
*\WINDOWS\system32\dllcache\msdaer.dll
*\WINDOWS\system32\dllcache\msdaora.dll
*\WINDOWS\system32\dllcache\msdaorar.dll
*\WINDOWS\system32\dllcache\msdaosp.dll
*\WINDOWS\system32\dllcache\msdaprsr.dll
*\WINDOWS\system32\dllcache\msdaprst.dll
*\WINDOWS\system32\dllcache\msdaps.dll
*\WINDOWS\system32\dllcache\msdarem.dll
*\WINDOWS\system32\dllcache\msdaremr.dll
*\WINDOWS\system32\dllcache\msdart.dll
*\WINDOWS\system32\dllcache\msdasc.dll
*\WINDOWS\system32\dllcache\msdasql.dll
*\WINDOWS\system32\dllcache\msdasqlr.dll
*\WINDOWS\system32\dllcache\msdatl3.dll
*\WINDOWS\system32\dllcache\msdatsrc.tlb
*\WINDOWS\system32\dllcache\msdatt.dll
*\WINDOWS\system32\dllcache\msdaurl.dll
*\WINDOWS\system32\dllcache\msdfmap.dll
*\WINDOWS\system32\dllcache\msdmo.dll
*\WINDOWS\system32\dllcache\msdtc.exe
*\WINDOWS\system32\dllcache\msdtclog.dll
*\WINDOWS\system32\dllcache\msdtcprx.dll
*\WINDOWS\system32\dllcache\msdtcstp.dll
*\WINDOWS\system32\dllcache\msdtctm.dll
*\WINDOWS\system32\dllcache\msdtcuiu.dll
*\WINDOWS\system32\dllcache\msdvdopt.dll
*\WINDOWS\system32\dllcache\msdxm.ocx
*\WINDOWS\system32\dllcache\msdxmlc.dll
*\WINDOWS\system32\dllcache\msexch40.dll
*\WINDOWS\system32\dllcache\msexcl40.dll
*\WINDOWS\system32\dllcache\msfs.sys
*\WINDOWS\system32\dllcache\msg.exe
*\WINDOWS\system32\dllcache\msgina.dll
*\WINDOWS\system32\dllcache\msgpc.sys
*\WINDOWS\system32\dllcache\msgr3en.dll
*\WINDOWS\system32\dllcache\msgrocm.dll
*\WINDOWS\system32\dllcache\msgsvc.dll
*\WINDOWS\system32\dllcache\mshearts.exe
*\WINDOWS\system32\dllcache\mshta.exe
*\WINDOWS\system32\dllcache\mshtml.dll
*\WINDOWS\system32\dllcache\mshtml.tlb
*\WINDOWS\system32\dllcache\mshtmled.dll
*\WINDOWS\system32\dllcache\mshtmler.dll
*\WINDOWS\system32\dllcache\msi.dll
*\WINDOWS\system32\dllcache\msident.dll
*\WINDOWS\system32\dllcache\msidle.dll
*\WINDOWS\system32\dllcache\msidntld.dll
*\WINDOWS\system32\dllcache\msieftp.dll
*\WINDOWS\system32\dllcache\msiexec.exe
*\WINDOWS\system32\dllcache\msihnd.dll
*\WINDOWS\system32\dllcache\msimain.sdb
*\WINDOWS\system32\dllcache\msimg32.dll
*\WINDOWS\system32\dllcache\msimn.exe
*\WINDOWS\system32\dllcache\msimsg.dll
*\WINDOWS\system32\dllcache\msimtf.dll
*\WINDOWS\system32\dllcache\msinfo.dll
*\WINDOWS\system32\dllcache\msinfo32.exe
*\WINDOWS\system32\dllcache\msiprov.dll
*\WINDOWS\system32\dllcache\msir3jp.dll
*\WINDOWS\system32\dllcache\msir3jp.lex
*\WINDOWS\system32\dllcache\msiregmv.exe
*\WINDOWS\system32\dllcache\msisam11.dll
*\WINDOWS\system32\dllcache\msisip.dll
*\WINDOWS\system32\dllcache\msjet40.dll
*\WINDOWS\system32\dllcache\msjetol1.dll
*\WINDOWS\system32\dllcache\msjint40.dll
*\WINDOWS\system32\dllcache\msjro.dll
*\WINDOWS\system32\dllcache\msjter40.dll
*\WINDOWS\system32\dllcache\msjtes40.dll
*\WINDOWS\system32\dllcache\mslbui.dll
*\WINDOWS\system32\dllcache\msls31.dll
*\WINDOWS\system32\dllcache\msltus40.dll
*\WINDOWS\system32\dllcache\mslwvtts.dll
*\WINDOWS\system32\dllcache\MSMSGS.CAT
*\WINDOWS\system32\dllcache\msnetobj.dll
*\WINDOWS\system32\dllcache\msnsspc.dll
*\WINDOWS\system32\dllcache\msobcomm.dll
*\WINDOWS\system32\dllcache\msobdl.dll
*\WINDOWS\system32\dllcache\msobjs.dll
*\WINDOWS\system32\dllcache\msobmain.dll
*\WINDOWS\system32\dllcache\msobshel.dll
*\WINDOWS\system32\dllcache\msobweb.dll
*\WINDOWS\system32\dllcache\msoe.dll
*\WINDOWS\system32\dllcache\msoeacct.dll
*\WINDOWS\system32\dllcache\msoeres.dll
*\WINDOWS\system32\dllcache\msoert2.dll
*\WINDOWS\system32\dllcache\msoobe.exe
*\WINDOWS\system32\dllcache\msorc32r.dll
*\WINDOWS\system32\dllcache\msorcl32.dll
*\WINDOWS\system32\dllcache\mspaint.exe
*\WINDOWS\system32\dllcache\mspatcha.dll
*\WINDOWS\system32\dllcache\mspbde40.dll
*\WINDOWS\system32\dllcache\mspmsp.dll
*\WINDOWS\system32\dllcache\mspmspsv.dll
*\WINDOWS\system32\dllcache\msports.dll
*\WINDOWS\system32\dllcache\msprivs.dll
*\WINDOWS\system32\dllcache\msr2c.dll
*\WINDOWS\system32\dllcache\msr2cenu.dll
*\WINDOWS\system32\dllcache\msratelc.dll
*\WINDOWS\system32\dllcache\msrating.dll
*\WINDOWS\system32\dllcache\msrd2x40.dll
*\WINDOWS\system32\dllcache\msrd3x40.dll
*\WINDOWS\system32\dllcache\msrepl40.dll
*\WINDOWS\system32\dllcache\msrle32.dll
*\WINDOWS\system32\dllcache\msscds32.ax
*\WINDOWS\system32\dllcache\msscp.dll
*\WINDOWS\system32\dllcache\msscript.ocx
*\WINDOWS\system32\dllcache\mssign32.dll
*\WINDOWS\system32\dllcache\mssip32.dll
*\WINDOWS\system32\dllcache\mssoap1.dll
*\WINDOWS\system32\dllcache\mssoapr.dll
*\WINDOWS\system32\dllcache\msswch.dll
*\WINDOWS\system32\dllcache\msswchx.exe
*\WINDOWS\system32\dllcache\mst120.dll
*\WINDOWS\system32\dllcache\mst123.dll
*\WINDOWS\system32\dllcache\mstask.dll
*\WINDOWS\system32\dllcache\mstext40.dll
*\WINDOWS\system32\dllcache\mstime.dll
*\WINDOWS\system32\dllcache\mstinit.exe
*\WINDOWS\system32\dllcache\mstlsapi.dll
*\WINDOWS\system32\dllcache\mstsc.exe
*\WINDOWS\system32\dllcache\mstscax.dll
*\WINDOWS\system32\dllcache\MSTSWEB.CAT
*\WINDOWS\system32\dllcache\mstvca.dll
*\WINDOWS\system32\dllcache\mstvgs.dll
*\WINDOWS\system32\dllcache\msuni11.dll
*\WINDOWS\system32\dllcache\msutb.dll
*\WINDOWS\system32\dllcache\msv1_0.dll
*\WINDOWS\system32\dllcache\msvcirt.dll
*\WINDOWS\system32\dllcache\msvcp50.dll
*\WINDOWS\system32\dllcache\msvcp60.dll
*\WINDOWS\system32\dllcache\msvcrt.dll
*\WINDOWS\system32\dllcache\msvcrt20.dll
*\WINDOWS\system32\dllcache\msvcrt40.dll
*\WINDOWS\system32\dllcache\msvfw32.dll
*\WINDOWS\system32\dllcache\msvidc32.dll
*\WINDOWS\system32\dllcache\msvidctl.dll
*\WINDOWS\system32\dllcache\msvideo.dll
*\WINDOWS\system32\dllcache\msw3prt.dll
*\WINDOWS\system32\dllcache\mswdat10.dll
*\WINDOWS\system32\dllcache\mswebdvd.dll
*\WINDOWS\system32\dllcache\mswmdm.dll
*\WINDOWS\system32\dllcache\mswsock.dll
*\WINDOWS\system32\dllcache\mswstr10.dll
*\WINDOWS\system32\dllcache\msxactps.dll
*\WINDOWS\system32\dllcache\msxbde40.dll
*\WINDOWS\system32\dllcache\msxml.dll
*\WINDOWS\system32\dllcache\msxml2.dll
*\WINDOWS\system32\dllcache\msxml2r.dll
*\WINDOWS\system32\dllcache\msxml3.dll
*\WINDOWS\system32\dllcache\msxml3r.dll
*\WINDOWS\system32\dllcache\msxmlr.dll
*\WINDOWS\system32\dllcache\mtsadmin.tlb
*\WINDOWS\system32\dllcache\mtstocom.exe
*\WINDOWS\system32\dllcache\mtxclu.dll
*\WINDOWS\system32\dllcache\mtxdm.dll
*\WINDOWS\system32\dllcache\mtxex.dll
*\WINDOWS\system32\dllcache\mtxlegih.dll
*\WINDOWS\system32\dllcache\mtxoci.dll
*\WINDOWS\system32\dllcache\muisetup.exe
*\WINDOWS\system32\dllcache\multibox.dll
*\WINDOWS\system32\dllcache\mup.sys
*\WINDOWS\system32\dllcache\MW770.CAT
*\WINDOWS\system32\dllcache\mycomput.dll
*\WINDOWS\system32\dllcache\mydocs.dll
*\WINDOWS\system32\dllcache\nac.dll
*\WINDOWS\system32\dllcache\narrator.exe
*\WINDOWS\system32\dllcache\narrhook.dll
*\WINDOWS\system32\dllcache\nbtstat.exe
*\WINDOWS\system32\dllcache\ncobjapi.dll
*\WINDOWS\system32\dllcache\ncpa.cpl
*\WINDOWS\system32\dllcache\ncprov.dll
*\WINDOWS\system32\dllcache\ncxpnt.dll
*\WINDOWS\system32\dllcache\nddeapi.dll
*\WINDOWS\system32\dllcache\nddeapir.exe
*\WINDOWS\system32\dllcache\nddenb32.dll
*\WINDOWS\system32\dllcache\ndis.sys
*\WINDOWS\system32\dllcache\ndisnpp.dll
*\WINDOWS\system32\dllcache\ndistapi.sys
*\WINDOWS\system32\dllcache\ndiswan.sys
*\WINDOWS\system32\dllcache\ndproxy.sys
*\WINDOWS\system32\dllcache\ndptsp.tsp
*\WINDOWS\system32\dllcache\net.exe
*\WINDOWS\system32\dllcache\net1.exe
*\WINDOWS\system32\dllcache\netapi.dll
*\WINDOWS\system32\dllcache\netapi32.dll
*\WINDOWS\system32\dllcache\netbios.sys
*\WINDOWS\system32\dllcache\netbt.sys
*\WINDOWS\system32\dllcache\netcfgx.dll
*\WINDOWS\system32\dllcache\netdde.exe
*\WINDOWS\system32\dllcache\netevent.dll
*\WINDOWS\system32\dllcache\neth.dll
*\WINDOWS\system32\dllcache\netid.dll
*\WINDOWS\system32\dllcache\netlogon.dll
*\WINDOWS\system32\dllcache\netman.dll
*\WINDOWS\system32\dllcache\netmsg.dll
*\WINDOWS\system32\dllcache\netoc.dll
*\WINDOWS\system32\dllcache\netplwiz.dll
*\WINDOWS\system32\dllcache\netrap.dll
*\WINDOWS\system32\dllcache\netsh.exe
*\WINDOWS\system32\dllcache\netshell.dll
*\WINDOWS\system32\dllcache\netstat.exe
*\WINDOWS\system32\dllcache\netui0.dll
*\WINDOWS\system32\dllcache\netui1.dll
*\WINDOWS\system32\dllcache\netui2.dll
*\WINDOWS\system32\dllcache\newdev.dll
*\WINDOWS\system32\dllcache\nlhtml.dll
*\WINDOWS\system32\dllcache\nls302en.lex
*\WINDOWS\system32\dllcache\nlsfunc.exe
*\WINDOWS\system32\dllcache\nmas.dll
*\WINDOWS\system32\dllcache\nmasnt.dll
*\WINDOWS\system32\dllcache\nmchat.dll
*\WINDOWS\system32\dllcache\nmcom.dll
*\WINDOWS\system32\dllcache\nmevtmsg.dll
*\WINDOWS\system32\dllcache\nmft.dll
*\WINDOWS\system32\dllcache\nmmkcert.dll
*\WINDOWS\system32\dllcache\nmnt.sys
*\WINDOWS\system32\dllcache\nmoldwb.dll
*\WINDOWS\system32\dllcache\nmwb.dll
*\WINDOWS\system32\dllcache\notepad.exe
*\WINDOWS\system32\dllcache\notiflag.exe
*\WINDOWS\system32\dllcache\npdrmv2.dll
*\WINDOWS\system32\dllcache\npdsplay.dll
*\WINDOWS\system32\dllcache\npfs.sys
*\WINDOWS\system32\dllcache\nppagent.exe
*\WINDOWS\system32\dllcache\npptools.dll
*\WINDOWS\system32\dllcache\npwmsdrm.dll
*\WINDOWS\system32\dllcache\nslookup.exe
*\WINDOWS\system32\dllcache\NT5.CAT
*\WINDOWS\system32\dllcache\NT5IIS.CAT
*\WINDOWS\system32\dllcache\NT5INF.CAT
*\WINDOWS\system32\dllcache\ntdll.dll
*\WINDOWS\system32\dllcache\ntdos.sys
*\WINDOWS\system32\dllcache\ntdos404.sys
*\WINDOWS\system32\dllcache\ntdos411.sys
*\WINDOWS\system32\dllcache\ntdos412.sys
*\WINDOWS\system32\dllcache\ntdos804.sys
*\WINDOWS\system32\dllcache\ntdsapi.dll
*\WINDOWS\system32\dllcache\ntevt.dll
*\WINDOWS\system32\dllcache\ntfs.sys
*\WINDOWS\system32\dllcache\ntio.sys
*\WINDOWS\system32\dllcache\ntio404.sys
*\WINDOWS\system32\dllcache\ntio411.sys
*\WINDOWS\system32\dllcache\ntio412.sys
*\WINDOWS\system32\dllcache\ntio804.sys
*\WINDOWS\system32\dllcache\ntlanman.dll
*\WINDOWS\system32\dllcache\ntlanui.dll
*\WINDOWS\system32\dllcache\ntlanui2.dll
*\WINDOWS\system32\dllcache\ntlsapi.dll
*\WINDOWS\system32\dllcache\ntmarta.dll
*\WINDOWS\system32\dllcache\ntmsapi.dll
*\WINDOWS\system32\dllcache\ntmsdba.dll
*\WINDOWS\system32\dllcache\ntmsevt.dll
*\WINDOWS\system32\dllcache\ntmsmgr.dll
*\WINDOWS\system32\dllcache\ntmssvc.dll
*\WINDOWS\system32\dllcache\ntoc.dll
*\WINDOWS\system32\dllcache\NTPRINT.CAT
*\WINDOWS\system32\dllcache\ntprint.dll
*\WINDOWS\system32\dllcache\ntsd.exe
*\WINDOWS\system32\dllcache\ntsdexts.dll
*\WINDOWS\system32\dllcache\ntshrui.dll
*\WINDOWS\system32\dllcache\ntvdm.exe
*\WINDOWS\system32\dllcache\ntvdmd.dll
*\WINDOWS\system32\dllcache\null.sys
*\WINDOWS\system32\dllcache\nusrmgr.cpl
*\WINDOWS\system32\dllcache\nwlnkflt.sys
*\WINDOWS\system32\dllcache\nwlnkfwd.sys
*\WINDOWS\system32\dllcache\nwlnkipx.sys
*\WINDOWS\system32\dllcache\nwlnknb.sys
*\WINDOWS\system32\dllcache\nwlnkspx.sys
*\WINDOWS\system32\dllcache\nwprovau.dll
*\WINDOWS\system32\dllcache\oakley.dll
*\WINDOWS\system32\dllcache\objsel.dll
*\WINDOWS\system32\dllcache\occache.dll
*\WINDOWS\system32\dllcache\ocgen.dll
*\WINDOWS\system32\dllcache\ocmanage.dll
*\WINDOWS\system32\dllcache\ocmsn.dll
*\WINDOWS\system32\dllcache\odbc16gt.dll
*\WINDOWS\system32\dllcache\odbc32.dll
*\WINDOWS\system32\dllcache\odbc32gt.dll
*\WINDOWS\system32\dllcache\odbcad32.exe
*\WINDOWS\system32\dllcache\odbcconf.dll
*\WINDOWS\system32\dllcache\odbcconf.exe
*\WINDOWS\system32\dllcache\odbcconf.rsp
*\WINDOWS\system32\dllcache\odbccp32.cpl
*\WINDOWS\system32\dllcache\odbccp32.dll
*\WINDOWS\system32\dllcache\odbccr32.dll
*\WINDOWS\system32\dllcache\odbccu32.dll
*\WINDOWS\system32\dllcache\odbcint.dll
*\WINDOWS\system32\dllcache\odbcji32.dll
*\WINDOWS\system32\dllcache\odbcjt32.dll
*\WINDOWS\system32\dllcache\odbcp32r.dll
*\WINDOWS\system32\dllcache\odbctrac.dll
*\WINDOWS\system32\dllcache\oddbse32.dll
*\WINDOWS\system32\dllcache\odexl32.dll
*\WINDOWS\system32\dllcache\odfox32.dll
*\WINDOWS\system32\dllcache\odpdx32.dll
*\WINDOWS\system32\dllcache\odtext32.dll
*\WINDOWS\system32\dllcache\oeimport.dll
*\WINDOWS\system32\dllcache\oembios.bin
*\WINDOWS\system32\dllcache\OEMBIOS.CAT
*\WINDOWS\system32\dllcache\oembios.dat
*\WINDOWS\system32\dllcache\oembios.sig
*\WINDOWS\system32\dllcache\oemig50.exe
*\WINDOWS\system32\dllcache\oemiglib.dll
*\WINDOWS\system32\dllcache\offfilt.dll
*\WINDOWS\system32\dllcache\ole2.dll
*\WINDOWS\system32\dllcache\ole2disp.dll
*\WINDOWS\system32\dllcache\ole2nls.dll
*\WINDOWS\system32\dllcache\ole32.dll
*\WINDOWS\system32\dllcache\oleacc.dll
*\WINDOWS\system32\dllcache\oleaccrc.dll
*\WINDOWS\system32\dllcache\oleaut32.dll
*\WINDOWS\system32\dllcache\olecli.dll
*\WINDOWS\system32\dllcache\olecli32.dll
*\WINDOWS\system32\dllcache\olecnv32.dll
*\WINDOWS\system32\dllcache\oledb32.dll
*\WINDOWS\system32\dllcache\oledb32r.dll
*\WINDOWS\system32\dllcache\oledlg.dll
*\WINDOWS\system32\dllcache\oleprn.dll
*\WINDOWS\system32\dllcache\olepro32.dll
*\WINDOWS\system32\dllcache\olesvr.dll
*\WINDOWS\system32\dllcache\olesvr32.dll
*\WINDOWS\system32\dllcache\olethk32.dll
*\WINDOWS\system32\dllcache\oobebaln.exe
*\WINDOWS\system32\dllcache\opengl32.dll
*\WINDOWS\system32\dllcache\osk.exe
*\WINDOWS\system32\dllcache\osuninst.dll
*\WINDOWS\system32\dllcache\osuninst.exe
*\WINDOWS\system32\dllcache\packager.exe
*\WINDOWS\system32\dllcache\padrs404.dll
*\WINDOWS\system32\dllcache\padrs411.dll
*\WINDOWS\system32\dllcache\padrs412.dll
*\WINDOWS\system32\dllcache\padrs804.dll
*\WINDOWS\system32\dllcache\panmap.dll
*\WINDOWS\system32\dllcache\partmgr.sys
*\WINDOWS\system32\dllcache\parvdm.sys
*\WINDOWS\system32\dllcache\pathping.exe
*\WINDOWS\system32\dllcache\pautoenr.dll
*\WINDOWS\system32\dllcache\pchshell.dll
*\WINDOWS\system32\dllcache\pchsvc.dll
*\WINDOWS\system32\dllcache\pdh.dll
*\WINDOWS\system32\dllcache\pentnt.exe
*\WINDOWS\system32\dllcache\perfctrs.dll
*\WINDOWS\system32\dllcache\perfdisk.dll
*\WINDOWS\system32\dllcache\perfmon.exe
*\WINDOWS\system32\dllcache\perfnet.dll
*\WINDOWS\system32\dllcache\perfos.dll
*\WINDOWS\system32\dllcache\perfproc.dll
*\WINDOWS\system32\dllcache\perfts.dll
*\WINDOWS\system32\dllcache\phon.ime
*\WINDOWS\system32\dllcache\photowiz.dll
*\WINDOWS\system32\dllcache\pidgen.dll
*\WINDOWS\system32\dllcache\pifmgr.dll
*\WINDOWS\system32\dllcache\pinball.exe
*\WINDOWS\system32\dllcache\ping.exe
*\WINDOWS\system32\dllcache\ping6.exe
*\WINDOWS\system32\dllcache\pintlcsa.dll
*\WINDOWS\system32\dllcache\pintlcsd.dll
*\WINDOWS\system32\dllcache\pintlgnt.ime
*\WINDOWS\system32\dllcache\pintlphr.exe
*\WINDOWS\system32\dllcache\plugin.ocx
*\WINDOWS\system32\dllcache\plustab.dll
*\WINDOWS\system32\dllcache\pmigrate.dll
*\WINDOWS\system32\dllcache\pmspl.dll
*\WINDOWS\system32\dllcache\pmxgl.dll
*\WINDOWS\system32\dllcache\pmxmcro.dll
*\WINDOWS\system32\dllcache\pmxviceo.dll
*\WINDOWS\system32\dllcache\pngfilt.dll
*\WINDOWS\system32\dllcache\polstore.dll
*\WINDOWS\system32\dllcache\portcls.sys
*\WINDOWS\system32\dllcache\powercfg.cpl
*\WINDOWS\system32\dllcache\powrprof.dll
*\WINDOWS\system32\dllcache\prflbmsg.dll
*\WINDOWS\system32\dllcache\print.exe
*\WINDOWS\system32\dllcache\printui.dll

05-18-2005, 05:42 AM	#1 (permalink)
Remote Saxon Registered User Join Date: Mar 2005 Posts: 48 OS: XP	Problems Again Hello everyone. Since technology is going down the drain, I'm experiencing new problems. 1. I keep getting this "ads1.revenue.net" ad, I don't know how to get rid of that. 2. My Search Companion file is somehow missing from my computer, so I can't search for anything on my computer, which leads to: 3. Probably not in ya'lls area, but Yahoo Messenger isn't working. When I try to re-install it, it ways "ymsg_~.exe is experiencing problems". Here's my HijackThis log: Logfile of HijackThis v1.99.1 Scan saved at 6:37:54 AM, on 5/18/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\PROGRA~1\NORTON~1\navapw32.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\AutoUpdate\AutoUpdate.exe C:\Program Files\AIM\aim.exe C:\WINDOWS\System32\umpfile.exe C:\WINDOWS\System32\untorts.exe C:\Program Files\CxtPls\CxtPls.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HijackTHis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\cfgmgr52.dll O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dll O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file) O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitegsx32.exe O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\mmvpvm.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe" O4 - HKLM\..\Run: [r7nX3pl] untorts.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [aw47RfJme] umpfile.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{29DF46C9-A4BC-471F-B55B-362BE2954472}: NameServer = 151.164.17.201 151.164.11.201 O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe Thanks for the help, to whomever replies to this. Oh, and why is it that Mozilla Firefox doesn't block popups? Its not blocking anything for me (mostly the ads1.revenue popups) ~ RS

05-18-2005, 06:32 AM	#2 (permalink)
tinag Join Date: Mar 2005 Location: VT (via NL and TO) Posts: 341 OS: WinXP SP2 Pro and Home	Hi, RS. Sorry to see you back under these circumstances, but welcome. I'm currently reviewing your log under the supervision of an expert analyst. I'll be back with a fix for your problem ASAP, and I ask your patience while it's being composed and checked. We recommend that you subscribe to this thread so you'll be notified as soon as we post your fix. To do this, at the top of your original post, click Thread Tools and then Subscribe to this thread; on the next page, make sure "Instant notification by email" is selected, then click Add subscription. Thanks. __________________ Have TSF volunteers helped you? Please consider helping TSF by subscribing or donating. Thanks!

05-19-2005, 06:26 AM	#3 (permalink)
tinag Join Date: Mar 2005 Location: VT (via NL and TO) Posts: 341 OS: WinXP SP2 Pro and Home	Hello again. Before proceeding, please print this page or copy it to Notepad to help you carry out the instructions. If you have questions about any instruction, please ask before performing it. If you can't download one of the below programs by simply clicking its link, please try right-clicking that link instead. Then click Save Target As.. and save the file to your computer. In response to your questions, the fix below should take care of (or begin to take care of) problem #1. Can't say anything about questions 2 or 3 yet. (If you go to Start > Search > For Files and Folders.., you get an error message? If it's simply a missing file, it may possibly be as simple as replacing it from your install disk, but that's definitely a question for the XP boards if our fix doesn't solve the problem.) Now, the fix.. I'm not sure how many of these programs you've kept around, so I'll give you all the download instructions again. Download and install CleanUp (alternate link). Download KillBox. Download Rkfiles.zip and UNZIP the contents to a permanent folder on your desktop. Download the attachment remv3.zip from this page. Make a folder on the root drive C:\ and unzip the files into it. Download the Elitebar Removal Tool. Unzip it, but don't run it yet (it won't work until you're in Safe Mode). Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option. Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No. Go to Start > Run, type services.msc, and click OK. Look for hcijyao. Double-click on it. Click the Stop button, and under Startup type, choose Disabled. Reboot your system into Safe Mode by repeatedly tapping the F8 key until the menu appears, then selecting Safe Mode. Run the Elitebar Removal Tool. Open HijackThis. Click Config > Misc. Tools > Open process manager. If they still exist -- and they might not -- select the following items one at a time and click Kill process for each: C:\Program Files\AutoUpdate\AutoUpdate.exe C:\WINDOWS\System32\umpfile.exe C:\WINDOWS\System32\untorts.exe C:\Program Files\CxtPls\CxtPls.exe Click Start > (Settings >) Control Panel > Add/Remove Programs. If the following programs exist -- and they might not -- uninstall them: AutoUpdate CxtPls Open Hijack This and click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any): R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\cfgmgr52.dll O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dll O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file) O4 - HKLM\..\Run: [PS1] C:\WINDOWS\System32\ps1.exe O4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitegsx32.exe O4 - HKLM\..\Run: [C:\WINDOWS\VCMnet11.exe] C:\WINDOWS\VCMnet11.exe O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\mmvpvm.exe O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe" O4 - HKLM\..\Run: [r7nX3pl] untorts.exe O4 - HKCU\..\Run: [aw47RfJme] umpfile.exe O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe *Please close all other windows, including browsers, then click Fix checked.* If they still exist, delete the following files indicated in RED and folders indicated in BLUE. C:\WINDOWS\cfgmgr52.dll C:\WINDOWS\VCMnet11.exe C:\windows\system32\elitegsx32.exe if there are other "elite.exe" files, delete those as well* C:\WINDOWS\System32\fkndu.dll C:\WINDOWS\system32\hcijyao.exe C:\WINDOWS\System32\mmvpvm.exe C:\WINDOWS\System32\ps1.exe C:\WINDOWS\System32\umpfile.exe C:\WINDOWS\System32\untorts.exe C:\Program Files\AutoUpdate C:\Program Files\CxtPls Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click Yes. Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). This is very important, as the following must be done in Safe Mode! Double-click rkfiles.bat. It will scan for a while, so please be patient. Wait until the DOS window closes, then open the C:\log.txt it created and rename it log1.txt. This is important: both this tool and the next one use log.txt as the logfile name, so if you don't rename this one, it'll be overwritten when you run the next tool, and you don't want that! Next, open the folder where you unzipped the remv3.zip files, and double-click the rem.bat file. Let it run. It will delete the files and remove the infection, and then make a log of the files it finds. The log files will be C:\log.txt and bad1.txt. Reboot back into normal mode. In your next post, please include a fresh HijackThis log and the contents of both the log.txt and log1.txt (from the rkfiles and rem.bat scans), and let's see how much progress we've made. __________________ Have TSF volunteers helped you? Please consider helping TSF by subscribing or donating. Thanks!

05-20-2005, 08:12 AM	#5 (permalink)
tinag Join Date: Mar 2005 Location: VT (via NL and TO) Posts: 341 OS: WinXP SP2 Pro and Home	Well, that's a little better. Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No. Go to Start > Run, type services.msc, and click OK. Look for hcijyao. Double-click on it. Click the Stop button (if it's available), and under Startup type, make sure it's still set to Disabled. Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode. Open Hijack This. On the main screen, click Open the misc tools. Then click Delete an NT Service. In the box that pops up, paste in: hcijyao.exe and click OK. Under Other Stuff in the bottom right-hand corner, click Back to return to the HJT scanning screen. Now click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any): R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe *Please close all other windows, including browsers, then click Fix checked.* Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No. Run Killbox (one of the programs you downloaded in the last fix). You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist: C:\WINDOWS\system32\elitegsx32.exe C:\WINDOWS\system32\eliteuxx32.exe C:\WINDOWS\system32\elitevbs32.exe C:\WINDOWS\System32\fkndu.dll C:\WINDOWS\system32\hcijyao.exe Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). This is very important, as the following must be done in Safe Mode! Now you need to run rkfiles.bat and rem.bat again. You should probably delete or move the logs you created with these tools last time around so there's no confusion between the old and new ones: Double-click rkfiles.bat. It will scan for a while, so please be patient. Wait until the DOS window closes, then open the C:\log.txt it created and rename it log1.txt. This is important: both this tool and the next one use log.txt as the logfile name, so if you don't rename this one, it'll be overwritten when you run the next tool, and you don't want that! Next, open the folder where you unzipped the remv3.zip files, and double-click the rem.bat file. Let it run. It will delete the files and remove the infection, and then make a log of the files it finds. The log files will be C:\log.txt and bad1.txt. Reboot back to normal mode. In your next post, please include a fresh HijackThis log and the contents of both the log.txt and log1.txt (from the rkfiles and rem.bat scans). __________________ Have TSF volunteers helped you? Please consider helping TSF by subscribing or donating. Thanks!

05-21-2005, 08:20 AM	#7 (permalink)
tinag Join Date: Mar 2005 Location: VT (via NL and TO) Posts: 341 OS: WinXP SP2 Pro and Home	And I don't know about services.msc, either. Getting rid of the malware might solve it, or else recopying files from your install disk later might also do it. Along with some of the other issues, that's a question for the XP board after we get rid of the bad guys here. In any event, the service is not showing up in the HJT log, so that's something. We're going to take a stab at the two baddies currently showing in your HJT log. But we're also going to use some deeper-scanning tools to see what might be hidden. Download the following three programs and install/unzip only as instructed -- do not run any of them yet: 1. Download Mwav virus checker -- use link 3. 2. Right-click on http://www.silentrunners.org/Silent%20Runners.vbs, choose Save As.. (or Save Target As..), and save it to your desktop. 3. Download StartDreck. (If you have trouble downloading it, right-click on the link, select Save Target As.. and select a location to save it.) Unzip into its own folder. Run an online virus scan at Trend Micro or RAV Antivirus. Please select the “autoclean” option if using Trend Micro. If you don't have high-speed Internet access, plan on this taking a while. Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click Yes. Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode. Open HijackThis and click Scan. If they still exist -- and some might not -- check all of the following entries (make sure you do not miss any): O4 - HKLM\..\Run: [fknduc] C:\WINDOWS\System32\fknduc.exe O4 - HKLM\..\Run: [guarnset] C:\WINDOWS\System32\guarnset.exe *Please close all other windows, including browsers, then click Fix checked.* Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No. Run Killbox. You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist: C:\WINDOWS\System32\fknduc.exe C:\WINDOWS\System32\guarnset.exe Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). Now we're going to do an mwav scan. Before running this tool, please empty any Quarantine folder in your antivirus programs; if you use Spybot, purge all recovery items in the program. 1. Save the mwav tool to a folder. 2. Double-click the Mwav.exe file. This is a standalone tool and NOT just a virus checker, so it won't install anything. 3. Select all local drives and scan all files. If you see a setting that will allow you to exclude registry settings, please set it so that you don't get registry results. Then press SCAN. NOTE: If you see a prompt that a virus was found and you need to purchase the product to remove the malware, just close the prompt and let the tool continue scanning. We are not going to use this to remove anything, only to ID the bad files. 4. When the scan is completed, it will display anything found in the lower pane. 5. In the Virus Log Information Pane, left-click and highlight all the information in the Lower pane. Then use CTRL and C on your keyboard to copy everything found in the lower pane, open a new Notepad file, and paste it in. Then save the Notepad file. 6. Copy the saved information into your next post. Reboot into normal mode. Make sure you disable any programs that may block/disable scripts (like your anti-virus or anti-spyware programs -- if you're going to disable these, then disconnect from the Internet for this step). Double-click Silent Runners to run it. This will take a few minutes, and will create a file called "Startup Programs" followed by your computer name and current date. Open up that file and post all its contents here in your next post. Now for a StartDreck log. Double-click on it to start the program: Click Config and Mark All. Then uncheck the following boxes only: System/Running Process -> List Modules System/Drivers -> NT Services System/Drivers -> NT Kernel- and FS-drivers Click OK. Click Save and select the location to save the log file (default is the same folder as the application). When it's done, post the log in this thread. These logs can be long, so you may have to stretch across a couple of posts -- that's fine. So, in your next post, we need to see the logs from mwav, Silent Runners, and StartDreck, and a fresh HJT log (run it last, in normal mode). __________________ Have TSF volunteers helped you? Please consider helping TSF by subscribing or donating. Thanks!

05-19-2005, 07:00 PM	#4 (permalink)
Remote Saxon Registered User Join Date: Mar 2005 Posts: 48 OS: XP	Alright, I did everything you asked thus far, and here's what I have: Logfile of HijackThis v1.99.1 Scan saved at 7:58:14 PM, on 5/19/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\PROGRA~1\NORTON~1\navapw32.exe C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HijackThis\HijackThis.exe C:\WINDOWS\System32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: SDWin32 Class - {5DA6856F-CF78-43F4-9885-C7DC0E6258FF} - C:\WINDOWS\System32\fkndu.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{29DF46C9-A4BC-471F-B55B-362BE2954472}: NameServer = 151.164.17.201 151.164.11.201 O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: hcijyao - Unknown owner - C:\WINDOWS\system32\hcijyao.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe Here's the first log: The batch is run from -- C:\remv3 Files Found................. ---------------------------------------- Files Not deleted................. ---------------------------------------- Merging registry entries ----------------------------------------------------------------- The Registry Entries Found... ----------------------------------------------------------------- Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting ----------------------------------------------------------------- Volume in drive C has no label. Volume Serial Number is 20E0-FAEF Directory of C:\WINDOWS\system32 msi.dll Finished And now log1: The batch is run from -- C:\remv3 Files Found................. ---------------------------------------- Files Not deleted................. ---------------------------------------- Merging registry entries ----------------------------------------------------------------- The Registry Entries Found... ----------------------------------------------------------------- Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting ----------------------------------------------------------------- Volume in drive C has no label. Volume Serial Number is 20E0-FAEF Directory of C:\WINDOWS\system32 msi.dll Finished PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------ C:\WINDOWS\system32\elitegsx32.exe: FSG! C:\WINDOWS\system32\eliteuxx32.exe: FSG! C:\WINDOWS\system32\elitevbs32.exe: FSG! C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\DivX.dll: PEC2 Files Found in all users startup Folder............ ------------------------ Files Found in all users windows Folder............ ------------------------ C:\WINDOWS\tsc.exe: UPX! C:\WINDOWS\vsapi32.dll: UPX!t4 Finished bye Thanks for the help so far. ~ RS

05-20-2005, 04:38 PM	#6 (permalink)
Remote Saxon Registered User Join Date: Mar 2005 Posts: 48 OS: XP	I did everything you requested, with one major problem: I can't run services.msc. The file is there, but the computer won't let me run it for some reason. All that set aside, here's the new HijackThis log: Logfile of HijackThis v1.99.1 Scan saved at 5:34:11 PM, on 5/20/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [fknduc] C:\WINDOWS\System32\fknduc.exe O4 - HKLM\..\Run: [guarnset] C:\WINDOWS\System32\guarnset.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe Here is the rkfiles log: The batch is run from -- C:\remv3 Files Found................. ---------------------------------------- Files Not deleted................. ---------------------------------------- Merging registry entries ----------------------------------------------------------------- The Registry Entries Found... ----------------------------------------------------------------- Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting ----------------------------------------------------------------- Volume in drive C has no label. Volume Serial Number is 20E0-FAEF Directory of C:\WINDOWS\system32 msi.dll Finished PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------ C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\DivX.dll: PEC2 Files Found in all users startup Folder............ ------------------------ Files Found in all users windows Folder............ ------------------------ C:\WINDOWS\tsc.exe: UPX! C:\WINDOWS\vsapi32.dll: UPX!t4 Finished bye Finally, the remv3 log: The batch is run from -- C:\remv3 Files Found................. ---------------------------------------- Files Not deleted................. ---------------------------------------- Merging registry entries ----------------------------------------------------------------- The Registry Entries Found... ----------------------------------------------------------------- Other bad files to be Manually deleted.. Please note that this might also list legit Files, be careful while deleting ----------------------------------------------------------------- Volume in drive C has no label. Volume Serial Number is 20E0-FAEF Directory of C:\WINDOWS\system32 msi.dll Finished Again, thanks for you help so far. I don't know if services.msc can be fixed though :( ~ RS

05-22-2005, 11:29 AM	#9 (permalink)
tinag Join Date: Mar 2005 Location: VT (via NL and TO) Posts: 341 OS: WinXP SP2 Pro and Home	Well, I know I asked for a StartDreck log as well, but mwav has already given us plenty to work with, so I'm going to respond to what you've sent me so far. If you haven't already run StartDreck, you can do that after you do the following -- I'm putting in the instructions at the end of this fix as if that's the case. Reboot your system into Safe Mode: restart it and then repeatedly tap the F8 key until the menu appears, then select Safe Mode. Run CleanUp! and click the CleanUp! button. When it asks whether you want to log off, click No. Delete this folder: C:\WINDOWS\system32\Cache Run Killbox. You'll need to paste the following list of files into Killbox one at a time. Check the Delete on Reboot box and the Unregistered DLL (if the latter is available -- it won't be every time). Click the red X. It will confirm the file for deletion; click YES. Then it will ask to reboot now; click NO and proceed with the next file. Once you get to the last file, click YES so it will reboot. If you get a “Pending FileRename Operations Registry Data has been Removed by External Process!" message, then just restart manually. Here's the list of files to delete -- some of them may not exist: C:\!Submit\fknduc.exe C:\WINDOWS\cmiirln.exe C:\WINDOWS\pgntcoiv.exe C:\WINDOWS\System32\cxtpls_loader.exe C:\WINDOWS\System32\dist001.exe C:\WINDOWS\System32\fkndud.exe C:\WINDOWS\System32\fknduf.exe C:\WINDOWS\System32\GSM3-0511.exe C:\WINDOWS\System32\hfauyba.exe C:\WINDOWS\System32\hhajefl.vxd C:\WINDOWS\System32\hhalecn.exe C:\WINDOWS\System32\hhiqygg.dll C:\WINDOWS\SYSTEM32\HLIVEEP.SYS C:\WINDOWS\System32\HookPopup.dll C:\WINDOWS\System32\installer_MARKETING18.exe C:\WINDOWS\System32\n.dll C:\WINDOWS\System32\Netkwr.exe C:\WINDOWS\System32\PopOops.dll C:\WINDOWS\System32\PopOops2.dll C:\WINDOWS\System32\rrbnbrc.exe C:\WINDOWS\System32\SWLAD1.dll C:\WINDOWS\System32\SWLAD2.dll Reboot your system into Safe Mode once more (again, this means repeatedly tapping F8 until the menu appears, then selecting Safe Mode). Now we're going to do a followup mwav scan. Before running this tool, please empty any Quarantine folder in your antivirus programs; if you use Spybot, purge all recovery items in the program. 1. Save the mwav tool to a folder. 2. Double-click the Mwav.exe file. This is a standalone tool and NOT just a virus checker, so it won't install anything. 3. Select all local drives and scan all files. If you see a setting that will allow you to exclude registry settings, please set it so that you don't get registry results. Then press SCAN. NOTE: If you see a prompt that a virus was found and you need to purchase the product to remove the malware, just close the prompt and let the tool continue scanning. We are not going to use this to remove anything, only to ID the bad files. 4. When the scan is completed, it will display anything found in the lower pane. 5. In the Virus Log Information Pane, left-click and highlight all the information in the Lower pane. Then use CTRL and C on your keyboard to copy everything found in the lower pane, open a new Notepad file, and paste it in. Then save the Notepad file. 6. Copy the saved information into your next post. Reboot into normal mode. Now for a StartDreck log. Double-click on it to start the program: Click Config and Mark All. Then uncheck the following boxes only: System/Running Process -> List Modules System/Drivers -> NT Services System/Drivers -> NT Kernel- and FS-drivers Click OK. Click Save and select the location to save the log file (default is the same folder as the application). When it's done, post the log in this thread. These logs can be long, so you may have to stretch across a couple of posts -- that's fine. So, in your next post, we need to see the logs from mwav and StartDreck, and a fresh HJT log (run it last, in normal mode). How's the computer doing at this point? __________________ Have TSF volunteers helped you? Please consider helping TSF by subscribing or donating. Thanks!