TROJ_HUPIGON.GSA

Publish Date: 09 luglio 2013

Backdoor:Win32/Hupigon.AG (Microsoft); [00010600.EXE]:BackDoor-AWQ!hv.i !! (McAfee); Trojan.ADH (Symantec); Backdoor.Win32.Hupigon.avkm (Kaspersky); Backdoor.Win32.Hupigon (Sunbelt); Trojan horse Collected.9.AD (AVG)

Piattaforma:

Windows 2000, Windows XP, Windows Server 2003

Valutazione del rischio complessivo:

Potenziale dannoso: :

Potenziale di distribuzione: :

Reported Infection:

Basso

Medio

Alto

Critico

Tipo di minaccia informatica:
Trojan
Distruttivo?:
No
Crittografato?:
In the wild::
Sì

Panoramica e descrizione

Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.

Dettagli tecnici

Dimensione file: 446,980 bytes

Tipo di file: EXE

Residente in memoria: No

Data di ricezione campioni iniziali: 09 luglio 2013

Otras modificaciones del sistema

Elimina los archivos siguientes:

%Program Files%\Adobe\Reader 10.0\Esl\AiodLite.dll
%Program Files%\Adobe\Reader 10.0\Reader\A3DUtils.dll
%Program Files%\Adobe\Reader 10.0\Reader\ACE.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroBroker.exe
%Program Files%\Adobe\Reader 10.0\Reader\Acrofx32.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.exe
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32Info.exe
%Program Files%\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe
%Program Files%\Adobe\Reader 10.0\Reader\Adobe.Reader.Dependencies.manifest
%Program Files%\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe
%Program Files%\Adobe\Reader 10.0\Reader\AdobeLinguistic.dll
%Program Files%\Adobe\Reader 10.0\Reader\adoberfp.dll
%Program Files%\Adobe\Reader 10.0\Reader\AdobeXMP.dll
%Program Files%\Adobe\Reader 10.0\Reader\AGM.dll
%Program Files%\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini
%Program Files%\Adobe\Reader 10.0\Reader\ahclient.dll
%Program Files%\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
%Program Files%\Adobe\Reader 10.0\Reader\authplay.dll
%Program Files%\Adobe\Reader 10.0\Reader\AXE8SharedExpat.dll
%Program Files%\Adobe\Reader 10.0\Reader\AXSLE.dll
%Program Files%\Adobe\Reader 10.0\Reader\BIB.dll
%Program Files%\Adobe\Reader 10.0\Reader\BIBUtils.dll
%Program Files%\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
%Program Files%\Adobe\Reader 10.0\Reader\ccme_base.dll
%Program Files%\Adobe\Reader 10.0\Reader\CoolType.dll
%Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.dll
%Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.sig
%Program Files%\Adobe\Reader 10.0\Reader\Eula.exe
%Program Files%\Adobe\Reader 10.0\Reader\ExtendScript.dll
%Program Files%\Adobe\Reader 10.0\Reader\icucnv40.dll
%Program Files%\Adobe\Reader 10.0\Reader\icudt40.dll
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin
%Program Files%\Adobe\Reader 10.0\Reader\JP2KLib.dll
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\eula.ini
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
%Program Files%\Adobe\Reader 10.0\Reader\logsession.dll
%Program Files%\Adobe\Reader 10.0\Reader\LogTransport2.exe
%Program Files%\Adobe\Reader 10.0\Reader\Onix32.dll
%Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlr.dll
%Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlrShim.exe
%Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
%Program Files%\Adobe\Reader 10.0\Reader\pe.dll
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Accessibility.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\adobepdf.xdc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroSign.prc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annots.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Checkers.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DigSig.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DVA.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\eBook.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\EScript.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\IA32.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\MakeAccessible.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PDDom.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PPKLite.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\ReadOutLoud.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\reflow.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SaveAsRTF.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Search.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SendMail.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Spelling.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Updater.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\weblink.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\2d.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\MyriadCAD.otf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prcr.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\tesselate.x3d
%Program Files%\Adobe\Reader 10.0\Reader\pmd.cer
%Program Files%\Adobe\Reader 10.0\Reader\reader_sl.exe
%Program Files%\Adobe\Reader 10.0\Reader\rt3d.dll
%Program Files%\Adobe\Reader 10.0\Reader\RTC.der
%Program Files%\Adobe\Reader 10.0\Reader\ScCore.dll
%Program Files%\Adobe\Reader 10.0\Reader\Services\DEXShare.spi
%Program Files%\Adobe\Reader 10.0\Reader\Services\Services.cfg
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl
%Program Files%\Adobe\Reader 10.0\Reader\sqlite.dll
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\bl.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\br.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\info.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\main.css
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\rss.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\tl.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\tr.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\trash.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\warning.gif
%Program Files%\Adobe\Reader 10.0\Reader\ViewerPS.dll
%Program Files%\Adobe\Reader 10.0\ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-H
%Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-V
%Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf
%Program Files%\Adobe\Reader 10.0\Resource\Font\AdobePiStd.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-BoldOblique.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Oblique.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-BoldIt.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-It.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Regular.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-BoldIt.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-It.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Regular.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zx______.pfm
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zy______.pfm
%Program Files%\Adobe\Reader 10.0\Resource\Font\SY______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Font\ZX______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Font\ZY______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
%Program Files%\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
%Program Files%\Common Files\Adobe\ARM\1.0\AdobeARM.exe
%Program Files%\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll
%Program Files%\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
%Program Files%\Common Files\Adobe\HelpCfg\en_US\Reader_10.0.helpcfg
%Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
%Program Files%\Common Files\Microsoft Shared\DW\1025\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1028\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1031\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1033\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1036\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1040\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1041\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1042\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\2052\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\3082\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\DW20.EXE
%Program Files%\Common Files\Microsoft Shared\DW\DWDCW20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
%Program Files%\Common Files\Microsoft Shared\MSInfo\IEFILES5.INF
%Program Files%\Common Files\Microsoft Shared\MSInfo\IEINFO5.OCX
%Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
%Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.cpl
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
%Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
%Program Files%\Common Files\Microsoft Shared\TextConv\html32.cnv
%Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
%Program Files%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc
%Program Files%\Common Files\Microsoft Shared\TextConv\mswrd832.cnv
%Program Files%\Common Files\Microsoft Shared\TextConv\write32.wpc
%Program Files%\Common Files\Microsoft Shared\Triedit\DHTMLED.OCX
%Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
%Program Files%\Common Files\Microsoft Shared\VC\msdia100.dll
%Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
%Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\FPEXT.MSG
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
%Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
%Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
%Program Files%\Common Files\Services\bigfoot.bmp
%Program Files%\Common Files\Services\verisign.bmp
%Program Files%\Common Files\Services\whowhere.bmp
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\ltts1033.lxa
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\r1033tts.lxa
%Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.sdf
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.spd
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
%Program Files%\Common Files\System\ado\adojavas.inc
%Program Files%\Common Files\System\ado\adovbs.inc
%Program Files%\Common Files\System\ado\MDACReadme.htm
%Program Files%\Common Files\System\ado\msader15.dll
%Program Files%\Common Files\System\ado\msado15.dll
%Program Files%\Common Files\System\ado\msado20.tlb
%Program Files%\Common Files\System\ado\msado21.tlb
%Program Files%\Common Files\System\ado\msado25.tlb
%Program Files%\Common Files\System\ado\msado26.tlb
%Program Files%\Common Files\System\ado\msado27.tlb
%Program Files%\Common Files\System\ado\msadomd.dll
%Program Files%\Common Files\System\ado\msador15.dll
%Program Files%\Common Files\System\ado\msadox.dll
%Program Files%\Common Files\System\ado\msadrh15.dll
%Program Files%\Common Files\System\ado\msjro.dll
%Program Files%\Common Files\System\directdb.dll
%Program Files%\Common Files\System\msadc\adcjavas.inc
%Program Files%\Common Files\System\msadc\adcvbs.inc
%Program Files%\Common Files\System\msadc\handler.reg
%Program Files%\Common Files\System\msadc\handsafe.reg
%Program Files%\Common Files\System\msadc\msadce.dll
%Program Files%\Common Files\System\msadc\msadcer.dll
%Program Files%\Common Files\System\msadc\msadcf.dll
%Program Files%\Common Files\System\msadc\msadcfr.dll
%Program Files%\Common Files\System\msadc\msadco.dll
%Program Files%\Common Files\System\msadc\msadcor.dll
%Program Files%\Common Files\System\msadc\msadcs.dll
%Program Files%\Common Files\System\msadc\msadds.dll
%Program Files%\Common Files\System\msadc\msaddsr.dll
%Program Files%\Common Files\System\msadc\msdaprsr.dll
%Program Files%\Common Files\System\msadc\msdaprst.dll
%Program Files%\Common Files\System\msadc\msdarem.dll
%Program Files%\Common Files\System\msadc\msdaremr.dll
%Program Files%\Common Files\System\msadc\msdfmap.dll
%Program Files%\Common Files\System\Ole DB\msdadc.dll
%Program Files%\Common Files\System\Ole DB\msdaenum.dll
%Program Files%\Common Files\System\Ole DB\msdaer.dll
%Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
%Program Files%\Common Files\System\Ole DB\msdaora.dll
%Program Files%\Common Files\System\Ole DB\msdaorar.dll
%Program Files%\Common Files\System\Ole DB\msdaosp.dll
%Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
%Program Files%\Common Files\System\Ole DB\msdaps.dll
%Program Files%\Common Files\System\Ole DB\msdasc.dll
%Program Files%\Common Files\System\Ole DB\msdasql.dll
%Program Files%\Common Files\System\Ole DB\msdasqlr.dll
%Program Files%\Common Files\System\Ole DB\msdatl3.dll
%Program Files%\Common Files\System\Ole DB\msdatt.dll
%Program Files%\Common Files\System\Ole DB\msdaurl.dll
%Program Files%\Common Files\System\Ole DB\msxactps.dll
%Program Files%\Common Files\System\Ole DB\oledb32.dll
%Program Files%\Common Files\System\Ole DB\oledb32r.dll
%Program Files%\Common Files\System\Ole DB\oledbjvs.inc
%Program Files%\Common Files\System\Ole DB\oledbvbs.inc
%Program Files%\Common Files\System\Ole DB\sqloledb.dll
%Program Files%\Common Files\System\Ole DB\sqloledb.rll
%Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
%Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
%Program Files%\Common Files\System\Ole DB\sqlxmlx.rll
%Program Files%\Common Files\System\wab32.dll
%Program Files%\Common Files\System\wab32res.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
%Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
%Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
%Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
%Program Files%\Internet Explorer\Connection Wizard\icwip.dun
%Program Files%\Internet Explorer\Connection Wizard\icwres.dll
%Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
%Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
%Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
%Program Files%\Internet Explorer\Connection Wizard\icwx25a.dun
%Program Files%\Internet Explorer\Connection Wizard\icwx25b.dun
%Program Files%\Internet Explorer\Connection Wizard\icwx25c.dun
%Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
%Program Files%\Internet Explorer\Connection Wizard\isignup.exe
%Program Files%\Internet Explorer\Connection Wizard\msicw.isp
%Program Files%\Internet Explorer\Connection Wizard\msn.isp
%Program Files%\Internet Explorer\Connection Wizard\phone.icw
%Program Files%\Internet Explorer\Connection Wizard\phone.ver
%Program Files%\Internet Explorer\Connection Wizard\state.icw
%Program Files%\Internet Explorer\Connection Wizard\support.icw
%Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
%Program Files%\Internet Explorer\HMMAPI.DLL
%Program Files%\Internet Explorer\iedw.exe
%Program Files%\Internet Explorer\IEXPLORE.EXE
%Program Files%\Internet Explorer\MUI\0409\mscorier.dll
%Program Files%\Internet Explorer\PLUGINS\nppdf32.dll
%Program Files%\Internet Explorer\SIGNUP\INSTALL.INS
%Program Files%\Messenger\custsat.dll
%Program Files%\Messenger\logowin.gif
%Program Files%\Messenger\lvback.gif
%Program Files%\Messenger\msgsc.dll
%Program Files%\Messenger\msgslang.dll
%Program Files%\Messenger\msmsgs.exe
%Program Files%\Messenger\newalert.wav
%Program Files%\Messenger\newemail.wav
%Program Files%\Messenger\online.wav
%Program Files%\Messenger\type.wav
%Program Files%\Messenger\xpmsgr.chm
%Program Files%\Microsoft.NET\RedistList\AssemblyList_4_client.xml
%Program Files%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml
%Program Files%\Movie Maker\moviemk.exe
%Program Files%\Movie Maker\MUI\0409\moviemk.chm
%Program Files%\Movie Maker\Shared\Empty.txt
%Program Files%\Movie Maker\Shared\Filters.xml
%Program Files%\Movie Maker\Shared\news.png
%Program Files%\Movie Maker\Shared\paint.png
%Program Files%\Movie Maker\Shared\Profiles\Blank.txt
%Program Files%\Movie Maker\Shared\Sample1.jpg
%Program Files%\Movie Maker\Shared\Sample2.jpg
%Program Files%\Movie Maker\WMM2AE.dll
%Program Files%\Movie Maker\WMM2ERES.dll
%Program Files%\Movie Maker\WMM2EXT.dll
%Program Files%\Movie Maker\WMM2FILT.dll
%Program Files%\Movie Maker\WMM2FXA.dll
%Program Files%\Movie Maker\WMM2FXB.dll
%Program Files%\Movie Maker\WMM2RES.dll
%Program Files%\Movie Maker\WMM2RES2.dll
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
%Program Files%\MSN\MSNCoreFiles\Install\cinfo.xml
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
%Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
%Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
%Program Files%\MSN\MSNCoreFiles\Install\xfp.xml
%Program Files%\MSN\MSNCoreFiles\OOBE\market.mar
%Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\signup.mar
%Program Files%\MSN Gaming Zone\Windows\bckg.dll
%Program Files%\MSN Gaming Zone\Windows\bckgres.dll
%Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
%Program Files%\MSN Gaming Zone\Windows\chkr.dll
%Program Files%\MSN Gaming Zone\Windows\chkrres.dll
%Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
%Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtz.dll
%Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
%Program Files%\MSN Gaming Zone\Windows\rvse.dll
%Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvl.dll
%Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
%Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
%Program Files%\MSN Gaming Zone\Windows\zClientm.exe
%Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
%Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
%Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
%Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
%Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt
%Program Files%\NetMeeting\Blip.wav
%Program Files%\NetMeeting\callcont.dll
%Program Files%\NetMeeting\cb32.exe
%Program Files%\NetMeeting\conf.exe
%Program Files%\NetMeeting\confmrsl.dll
%Program Files%\NetMeeting\dcap32.dll
%Program Files%\NetMeeting\h323cc.dll
%Program Files%\NetMeeting\MST120.DLL
%Program Files%\NetMeeting\MST123.DLL
%Program Files%\NetMeeting\nac.dll
%Program Files%\NetMeeting\netmeet.htm
%Program Files%\NetMeeting\nmas.dll
%Program Files%\NetMeeting\nmasnt.dll
%Program Files%\NetMeeting\nmchat.dll
%Program Files%\NetMeeting\nmcom.dll
%Program Files%\NetMeeting\nmft.dll
%Program Files%\NetMeeting\nmoldwb.dll
%Program Files%\NetMeeting\nmwb.dll
%Program Files%\NetMeeting\rrcm.dll
%Program Files%\NetMeeting\TestSnd.wav
%Program Files%\NetMeeting\wb32.exe
%Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
%Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
%Program Files%\Outlook Express\msimn.exe
%Program Files%\Outlook Express\msoe.dll
%Program Files%\Outlook Express\msoe.txt
%Program Files%\Outlook Express\msoeres.dll
%Program Files%\Outlook Express\oeimport.dll
%Program Files%\Outlook Express\oemig50.exe
%Program Files%\Outlook Express\oemiglib.dll
%Program Files%\Outlook Express\setup50.exe
%Program Files%\Outlook Express\wab.exe
%Program Files%\Outlook Express\wabfind.dll
%Program Files%\Outlook Express\wabimp.dll
%Program Files%\Outlook Express\wabmig.exe
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll
%Program Files%\Windows Media Player\custsat.dll
%Program Files%\Windows Media Player\migrate.exe
%Program Files%\Windows Media Player\mplayer2.exe
%Program Files%\Windows Media Player\mpvis.dll
%Program Files%\Windows Media Player\npdrmv2.dll
%Program Files%\Windows Media Player\npdrmv2.zip
%Program Files%\Windows Media Player\npds.zip
%Program Files%\Windows Media Player\npdsplay.dll
%Program Files%\Windows Media Player\npwmsdrm.dll
%Program Files%\Windows Media Player\setup_wm.exe
%Program Files%\Windows Media Player\Skins\compact.wmz
%Program Files%\Windows Media Player\Skins\Revert.wmz
%Program Files%\Windows Media Player\wmpband.dll
%Program Files%\Windows Media Player\wmplayer.exe
%Program Files%\Windows Media Player\wmpns.dll
%Program Files%\Windows NT\Accessories\mswrd6.wpc
%Program Files%\Windows NT\Accessories\mswrd8.wpc
%Program Files%\Windows NT\Accessories\wordpad.exe
%Program Files%\Windows NT\Accessories\write.wpc
%Program Files%\Windows NT\dialer.exe
%Program Files%\Windows NT\htrn_jis.dll
%Program Files%\Windows NT\hypertrm.exe
%Program Files%\Windows NT\Pinball\FONT.DAT
%Program Files%\Windows NT\Pinball\PINBALL.DAT
%Program Files%\Windows NT\Pinball\PINBALL.EXE
%Program Files%\Windows NT\Pinball\PINBALL.MID
%Program Files%\Windows NT\Pinball\PINBALL2.MID
%Program Files%\Windows NT\Pinball\SOUND1.WAV
%Program Files%\Windows NT\Pinball\SOUND104.WAV
%Program Files%\Windows NT\Pinball\SOUND105.WAV
%Program Files%\Windows NT\Pinball\SOUND108.WAV
%Program Files%\Windows NT\Pinball\SOUND111.WAV
%Program Files%\Windows NT\Pinball\SOUND112.WAV
%Program Files%\Windows NT\Pinball\SOUND12.WAV
%Program Files%\Windows NT\Pinball\SOUND13.WAV
%Program Files%\Windows NT\Pinball\SOUND131.WAV
%Program Files%\Windows NT\Pinball\SOUND136.WAV
%Program Files%\Windows NT\Pinball\SOUND14.WAV
%Program Files%\Windows NT\Pinball\SOUND16.WAV
%Program Files%\Windows NT\Pinball\SOUND17.WAV
%Program Files%\Windows NT\Pinball\SOUND18.WAV
%Program Files%\Windows NT\Pinball\SOUND181.WAV
%Program Files%\Windows NT\Pinball\SOUND19.WAV
%Program Files%\Windows NT\Pinball\SOUND20.WAV
%Program Files%\Windows NT\Pinball\SOUND21.WAV
%Program Files%\Windows NT\Pinball\SOUND22.WAV
%Program Files%\Windows NT\Pinball\SOUND24.WAV
%Program Files%\Windows NT\Pinball\SOUND240.WAV
%Program Files%\Windows NT\Pinball\SOUND243.WAV
%Program Files%\Windows NT\Pinball\SOUND25.WAV
%Program Files%\Windows NT\Pinball\SOUND26.WAV
%Program Files%\Windows NT\Pinball\SOUND27.WAV
%Program Files%\Windows NT\Pinball\SOUND28.WAV
%Program Files%\Windows NT\Pinball\SOUND29.WAV
%Program Files%\Windows NT\Pinball\SOUND3.WAV
%Program Files%\Windows NT\Pinball\SOUND30.WAV
%Program Files%\Windows NT\Pinball\SOUND34.WAV
%Program Files%\Windows NT\Pinball\SOUND35.WAV
%Program Files%\Windows NT\Pinball\SOUND36.WAV
%Program Files%\Windows NT\Pinball\SOUND38.WAV
%Program Files%\Windows NT\Pinball\SOUND39.WAV
%Program Files%\Windows NT\Pinball\SOUND4.WAV
%Program Files%\Windows NT\Pinball\SOUND42.WAV
%Program Files%\Windows NT\Pinball\SOUND43.WAV
%Program Files%\Windows NT\Pinball\SOUND45.WAV
%Program Files%\Windows NT\Pinball\SOUND49.WAV
%Program Files%\Windows NT\Pinball\SOUND49D.WAV
%Program Files%\Windows NT\Pinball\SOUND5.WAV
%Program Files%\Windows NT\Pinball\SOUND50.WAV
%Program Files%\Windows NT\Pinball\SOUND528.WAV
%Program Files%\Windows NT\Pinball\SOUND53.WAV
%Program Files%\Windows NT\Pinball\SOUND54.WAV
%Program Files%\Windows NT\Pinball\SOUND55.WAV
%Program Files%\Windows NT\Pinball\SOUND560.WAV
%Program Files%\Windows NT\Pinball\SOUND563.WAV
%Program Files%\Windows NT\Pinball\SOUND57.WAV
%Program Files%\Windows NT\Pinball\SOUND58.WAV
%Program Files%\Windows NT\Pinball\SOUND6.WAV
%Program Files%\Windows NT\Pinball\SOUND65.WAV
%Program Files%\Windows NT\Pinball\SOUND68.WAV
%Program Files%\Windows NT\Pinball\SOUND7.WAV
%Program Files%\Windows NT\Pinball\SOUND713.WAV
%Program Files%\Windows NT\Pinball\SOUND735.WAV
%Program Files%\Windows NT\Pinball\SOUND8.WAV
%Program Files%\Windows NT\Pinball\SOUND827.WAV
%Program Files%\Windows NT\Pinball\SOUND9.WAV
%Program Files%\Windows NT\Pinball\SOUND999.WAV
%Program Files%\Windows NT\Pinball\table.bmp
%Program Files%\Windows NT\Pinball\wavemix.inf
%Program Files%\WinPcap\install.log
%Program Files%\WinPcap\rpcapd.exe
%Program Files%\WinPcap\Uninstall.exe
%Program Files%\Common Files\Microsoft Shared\MSInfo\ieinfo5.ocx
%Program Files%\Common Files\Microsoft Shared\Triedit\dhtmled.ocx
%Program Files%\Common Files\Microsoft Shared\Triedit\triedit.dll
%Program Files%\Internet Explorer\hmmapi.dll
%Program Files%\Internet Explorer\iexplore.exe
%Program Files%\Movie Maker\wmm2ae.dll
%Program Files%\Movie Maker\wmm2eres.dll
%Program Files%\Movie Maker\wmm2ext.dll
%Program Files%\Movie Maker\wmm2filt.dll
%Program Files%\Movie Maker\wmm2fxa.dll
%Program Files%\Movie Maker\wmm2fxb.dll
%Program Files%\Movie Maker\wmm2res.dll
%Program Files%\Movie Maker\wmm2res2.dll
%Program Files%\MSN Gaming Zone\Windows\cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\uniansi.dll
%Program Files%\MSN Gaming Zone\Windows\zclientm.exe
%Program Files%\MSN Gaming Zone\Windows\zcorem.dll
%Program Files%\MSN Gaming Zone\Windows\znetm.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibm.dll
%Program Files%\NetMeeting\mst120.dll
%Program Files%\NetMeeting\mst123.dll
%Program Files%\Windows NT\Pinball\pinball.exe

(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Elimina las carpetas siguientes:

%Program Files%\Adobe\Reader 10.0\Esl
%Program Files%\Adobe\Reader 10.0\Reader\AIR
%Program Files%\Adobe\Reader 10.0\Reader\Browser
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU
%Program Files%\Adobe\Reader 10.0\Reader\Legal
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d
%Program Files%\Adobe\Reader 10.0\Reader\Services
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins
%Program Files%\Adobe\Reader 10.0\Reader\Tracker
%Program Files%\Adobe\Reader 10.0\Reader
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM
%Program Files%\Adobe\Reader 10.0\Resource\Font
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport
%Program Files%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA0000000001}
%Program Files%\Adobe\Reader 10.0\Setup Files
%Program Files%\Common Files\Adobe\ARM\1.0
%Program Files%\Common Files\Adobe\ARM
%Program Files%\Common Files\Adobe\HelpCfg\en_US
%Program Files%\Common Files\Adobe\HelpCfg
%Program Files%\Common Files\Microsoft Shared\DAO
%Program Files%\Common Files\Microsoft Shared\DW\1025
%Program Files%\Common Files\Microsoft Shared\DW\1028
%Program Files%\Common Files\Microsoft Shared\DW\1031
%Program Files%\Common Files\Microsoft Shared\DW\1033
%Program Files%\Common Files\Microsoft Shared\DW\1036
%Program Files%\Common Files\Microsoft Shared\DW\1040
%Program Files%\Common Files\Microsoft Shared\DW\1041
%Program Files%\Common Files\Microsoft Shared\DW\1042
%Program Files%\Common Files\Microsoft Shared\DW\2052
%Program Files%\Common Files\Microsoft Shared\DW\3082
%Program Files%\Common Files\Microsoft Shared\DW
%Program Files%\Common Files\Microsoft Shared\MSInfo
%Program Files%\Common Files\Microsoft Shared\Speech\1033
%Program Files%\Common Files\Microsoft Shared\Stationery
%Program Files%\Common Files\Microsoft Shared\TextConv
%Program Files%\Common Files\Microsoft Shared\Triedit
%Program Files%\Common Files\Microsoft Shared\VC
%Program Files%\Common Files\Microsoft Shared\VGX
%Program Files%\Common Files\Microsoft Shared\Web Folders
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admcgi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admisapi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bots\vinavbar
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_aut
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\servsupp
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033
%Program Files%\Common Files\ODBC\Data Sources
%Program Files%\Common Files\ODBC
%Program Files%\Common Files\Services
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033
%Program Files%\Common Files\System\ado
%Program Files%\Common Files\System\msadc
%Program Files%\Common Files\System\Ole DB
%Program Files%\ComPlus Applications
%Program Files%\Internet Explorer\Connection Wizard
%Program Files%\Internet Explorer\MUI\0409
%Program Files%\Internet Explorer\MUI
%Program Files%\Internet Explorer\PLUGINS
%Program Files%\Internet Explorer\SIGNUP
%Program Files%\Messenger
%Program Files%\microsoft frontpage\version3.0\bin
%Program Files%\Microsoft.NET\RedistList
%Program Files%\Microsoft.NET
%Program Files%\Movie Maker\MUI\0409
%Program Files%\Movie Maker\MUI
%Program Files%\Movie Maker\Shared\Profiles
%Program Files%\Movie Maker\Shared
%Program Files%\Movie Maker
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation
%Program Files%\MSBuild\Microsoft
%Program Files%\MSBuild
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components
%Program Files%\MSN\MSNCoreFiles\Install
%Program Files%\MSN\MSNCoreFiles\OOBE
%Program Files%\MSN\MSNCoreFiles
%Program Files%\MSN
%Program Files%\MSN Gaming Zone\Windows
%Program Files%\MSXML 6.0\EULA
%Program Files%\MSXML 6.0
%Program Files%\NetMeeting
%Program Files%\Online Services
%Program Files%\Outlook Express
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5
%Program Files%\Reference Assemblies\Microsoft\Framework
%Program Files%\Reference Assemblies\Microsoft
%Program Files%\Reference Assemblies
%Program Files%\Uninstall Information
%Program Files%\Windows Media Player\Icons
%Program Files%\Windows Media Player\Sample Playlists
%Program Files%\Windows Media Player\Skins
%Program Files%\Windows Media Player\Visualizations
%Program Files%\Windows Media Player
%Program Files%\Windows NT\Accessories
%Program Files%\WindowsUpdate
%Program Files%\WinPcap
%Program Files%\xerox\nwwia

(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Soluzioni

Motore di scansione minimo: 9.300

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Explorar el equipo con su producto de Trend Micro para eliminar los archivos detectados como TROJ_HUPIGON.GSA En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.

Sondaggio

TROJ_HUPIGON.GSA

Panoramica e descrizione

Dettagli tecnici

Soluzioni

Risorse

Assistenza

Informazioni su Trend

TROJ_HUPIGON.GSA

Panoramica e descrizione

Dettagli tecnici

Soluzioni

Risorse

Assistenza

Informazioni su Trend

America

Medio Oriente e Africa

Europa

Asia e Pacifico