TROJ_FOLCOM.A

March 29, 2014

PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

OVERALL RISK RATING:

DAMAGE POTENTIAL:

DISTRIBUTION POTENTIAL:

REPORTED INFECTION:

Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

TECHNICAL DETAILS

File Size:

425,663 bytes

File Type:

EXE

Memory Resident:

Initial Samples Received Date:

29 Mar 2014

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Dropping Routine

This Trojan drops the following files:

%System Root%/{malware file name}/{malware file name}.exe
%System Root%/Documents and Settings/Documents and Settings.exe
%System Root%/Documents and Settings/All Users/All Users.exe
%System Root%/Documents and Settings/All Users/Application Data/Application Data.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Adobe.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Acrobat/Acrobat.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/Setup.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/Crypto.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/DSS.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/RSA.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/S-1-5-18.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/HTML Help/HTML Help.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Index/Media Index.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Network.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Connections.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Cm/Cm.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Pbk/Pbk.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/User Account Pictures.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/Default Pictures/Default Pictures.exe
%System Root%/Documents and Settings/All Users/Desktop/Desktop.exe
%System Root%/Documents and Settings/All Users/Documents/Documents.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Playlists/My Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Music/Sample Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/Sample Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/0008044E/0008044E.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/Sample Pictures/Sample Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Videos/My Videos.exe
%System Root%/Documents and Settings/All Users/DRM/DRM.exe
%System Root%/Documents and Settings/All Users/Favorites/Favorites.exe
%System Root%/Documents and Settings/All Users/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Communications/Communications.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/System Tools/System Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Games/Games.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/WinPcap/WinPcap.exe
%System Root%/Documents and Settings/All Users/Templates/Templates.exe
%System Root%/Documents and Settings/Default User/Default User.exe
%System Root%/Documents and Settings/Default User/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Default User/Cookies/Cookies.exe
%System Root%/Documents and Settings/Default User/Desktop/Desktop.exe
%System Root%/Documents and Settings/Default User/Favorites/Favorites.exe
%System Root%/Documents and Settings/Default User/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Default User/Local Settings/History/History.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Default User/My Documents/My Documents.exe
%System Root%/Documents and Settings/Default User/NetHood/NetHood.exe
%System Root%/Documents and Settings/Default User/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Default User/Recent/Recent.exe
%System Root%/Documents and Settings/Default User/SendTo/SendTo.exe
%System Root%/Documents and Settings/Default User/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Default User/Templates/Templates.exe
%System Root%/Documents and Settings/LocalService/LocalService.exe
%System Root%/Documents and Settings/LocalService/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/LocalService/Cookies/Cookies.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/LocalService/Local Settings/History/History.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/NetworkService/NetworkService.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/NetworkService/Cookies/Cookies.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/History/History.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/Wilbert.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/Identities.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Quick Launch/Quick Launch.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/MMC.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/secpol/secpol.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Themes/Themes.exe
%System Root%/Documents and Settings/Wilbert/Cookies/Cookies.exe
%System Root%/Documents and Settings/Wilbert/Desktop/Desktop.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Favorites.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Links/Links.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/CD Burning/CD Burning.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/History/History.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Documents.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Music/My Music.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/Wilbert/NetHood/NetHood.exe
%System Root%/Documents and Settings/Wilbert/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Wilbert/Recent/Recent.exe
%System Root%/Documents and Settings/Wilbert/SendTo/SendTo.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Wilbert/Templates/Templates.exe
%System Root%/ntldr/ntldr.exe
%System Root%/Program Files/Program Files.exe
%System Root%/Program Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Common Files.exe
%System Root%/Program Files/Common Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/Acrobat.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/ActiveX/ActiveX.exe
%System Root%/Program Files/Common Files/Adobe/ARM/ARM.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/HelpCfg.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/en_US/en_US.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Microsoft Shared.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DAO/DAO.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/DW.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1025/1025.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1028/1028.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1031/1031.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1036/1036.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1040/1040.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1041/1041.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1042/1042.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/2052/2052.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/3082/3082.exe
%System Root%/Program Files/Common Files/Microsoft Shared/MSInfo/MSInfo.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/Speech.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Stationery/Stationery.exe
%System Root%/Program Files/Common Files/Microsoft Shared/TextConv/TextConv.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Triedit/Triedit.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VC/VC.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VGX/VGX.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Web Folders/Web Folders.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/web server extensions.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/40.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/admcgi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/admisapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/bots.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/vinavbar/vinavbar.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/isapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/servsupp/servsupp.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/MSSoap/MSSoap.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Binaries.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/Resources.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/1033/1033.exe
%System Root%/Program Files/Common Files/ODBC/ODBC.exe
%System Root%/Program Files/Common Files/ODBC/Data Sources/Data Sources.exe
%System Root%/Program Files/Common Files/Services/Services.exe
%System Root%/Program Files/Common Files/SpeechEngines/SpeechEngines.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Microsoft.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/Lexicon.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/1033/1033.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/TTS.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/1033/1033.exe
%System Root%/Program Files/Common Files/System/System.exe
%System Root%/Program Files/Common Files/System/ado/ado.exe
%System Root%/Program Files/Common Files/System/msadc/msadc.exe
%System Root%/Program Files/Common Files/System/Ole DB/Ole DB.exe
%System Root%/Program Files/ComPlus Applications/ComPlus Applications.exe
%System Root%/Program Files/Internet Explorer/Internet Explorer.exe
%System Root%/Program Files/Internet Explorer/Connection Wizard/Connection Wizard.exe
%System Root%/Program Files/Internet Explorer/MUI/MUI.exe
%System Root%/Program Files/Internet Explorer/MUI/0409/0409.exe
%System Root%/Program Files/Internet Explorer/PLUGINS/PLUGINS.exe
%System Root%/Program Files/Internet Explorer/SIGNUP/SIGNUP.exe
%System Root%/Program Files/Messenger/Messenger.exe
%System Root%/Program Files/microsoft frontpage/microsoft frontpage.exe
%System Root%/Program Files/Movie Maker/Movie Maker.exe
%System Root%/Program Files/Movie Maker/MUI/MUI.exe
%System Root%/Program Files/Movie Maker/MUI/0409/0409.exe
%System Root%/Program Files/Movie Maker/Shared/Shared.exe
%System Root%/Program Files/Movie Maker/Shared/Profiles/Profiles.exe
%System Root%/Program Files/MSBuild/MSBuild.exe
%System Root%/Program Files/MSBuild/Microsoft/Microsoft.exe
%System Root%/Program Files/MSBuild/Microsoft/Windows Workflow Foundation/Windows Workflow Foundation.exe
%System Root%/Program Files/MSN/MSN.exe
%System Root%/Program Files/MSN/MSNCoreFiles/MSNCoreFiles.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/Install.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/MSN9Components/MSN9Components.exe
%System Root%/Program Files/MSN/MSNCoreFiles/OOBE/OOBE.exe
%System Root%/Program Files/MSN Gaming Zone/MSN Gaming Zone.exe
%System Root%/Program Files/MSN Gaming Zone/Windows/Windows.exe
%System Root%/Program Files/NetMeeting/NetMeeting.exe
%System Root%/Program Files/Online Services/Online Services.exe
%System Root%/Program Files/Outlook Express/Outlook Express.exe
%System Root%/Program Files/Reference Assemblies/Reference Assemblies.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Microsoft.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Framework/Framework.exe
%System Root%/Program Files/Uninstall Information/Uninstall Information.exe
%System Root%/Program Files/Windows Media Player/Windows Media Player.exe
%System Root%/Program Files/Windows Media Player/Icons/Icons.exe
%System Root%/Program Files/Windows Media Player/Sample Playlists/Sample Playlists.exe
%System Root%/Program Files/Windows Media Player/Skins/Skins.exe
%System Root%/Program Files/Windows Media Player/Visualizations/Visualizations.exe
%System Root%/Program Files/Windows NT/Windows NT.exe
%System Root%/Program Files/Windows NT/Accessories/Accessories.exe
%System Root%/Program Files/Windows NT/Pinball/Pinball.exe
%System Root%/Program Files/WindowsUpdate/WindowsUpdate.exe
%System Root%/Program Files/WinPcap/WinPcap.exe
%System Root%/Program Files/xerox/xerox.exe
%System Root%/Program Files/xerox/nwwia/nwwia.exe
%System Root%/System Volume Information/System Volume Information.exe
%System Root%/WINDOWS/WINDOWS.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/$MSI31Uninstall_KB893803v2$.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00013/reg00013.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00014/reg00014.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00015/reg00015.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00016/reg00016.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00017/reg00017.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00018/reg00018.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00019/reg00019.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00020/reg00020.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00021/reg00021.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00022/reg00022.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00023/reg00023.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00024/reg00024.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00025/reg00025.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00026/reg00026.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00027/reg00027.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00028/reg00028.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00029/reg00029.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00030/reg00030.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00031/reg00031.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00032/reg00032.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00033/reg00033.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00034/reg00034.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00035/reg00035.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00036/reg00036.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00037/reg00037.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00038/reg00038.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00039/reg00039.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00040/reg00040.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00041/reg00041.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00042/reg00042.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00043/reg00043.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00044/reg00044.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00045/reg00045.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00046/reg00046.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00047/reg00047.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00048/reg00048.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00051/reg00051.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00052/reg00052.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00053/reg00053.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00054/reg00054.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00055/reg00055.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00056/reg00056.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00057/reg00057.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00058/reg00058.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00059/reg00059.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00060/reg00060.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00061/reg00061.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00062/reg00062.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00063/reg00063.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00064/reg00064.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00065/reg00065.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00066/reg00066.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00067/reg00067.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00068/reg00068.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00069/reg00069.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00070/reg00070.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00071/reg00071.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00072/reg00072.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00073/reg00073.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00074/reg00074.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00075/reg00075.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00076/reg00076.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00077/reg00077.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00078/reg00078.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00079/reg00079.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00080/reg00080.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00081/reg00081.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00082/reg00082.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00083/reg00083.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00084/reg00084.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00085/reg00085.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00086/reg00086.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00087/reg00087.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00088/reg00088.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00089/reg00089.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00090/reg00090.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00091/reg00091.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00092/reg00092.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00093/reg00093.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00094/reg00094.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00095/reg00095.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00096/reg00096.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00097/reg00097.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00098/reg00098.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00099/reg00099.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00100/reg00100.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00101/reg00101.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00102/reg00102.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00103/reg00103.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00104/reg00104.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00105/reg00105.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00106/reg00106.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00107/reg00107.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00108/reg00108.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00109/reg00109.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00110/reg00110.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00111/reg00111.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00112/reg00112.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00113/reg00113.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00114/reg00114.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00115/reg00115.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00116/reg00116.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/spuninst/spuninst.exe
%System Root%/WINDOWS/$NtUninstallWIC$/$NtUninstallWIC$.exe
%System Root%/WINDOWS/$NtUninstallWIC$/spuninst/spuninst.exe
%System Root%/WINDOWS/addins/addins.exe
%System Root%/WINDOWS/AppPatch/AppPatch.exe
%System Root%/WINDOWS/assembly/assembly.exe
%System Root%/WINDOWS/assembly/GAC_32/GAC_32.exe
%System Root%/WINDOWS/assembly/GAC_32/CustomMarshalers/CustomMarshalers.exe
%System Root%/WINDOWS/assembly/GAC_32/ISymWrapper/ISymWrapper.exe
%System Root%/WINDOWS/assembly/GAC_32/mscorlib/mscorlib.exe
%System Root%/WINDOWS/assembly/GAC_32/PresentationCore/PresentationCore.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/GAC_MSIL.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Accessibility/Accessibility.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/AspNetMMCExt/AspNetMMCExt.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/cscompmgd/cscompmgd.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEExecRemote/IEExecRemote.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEHost/IEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IIEHost/IIEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Microsoft_VsaVb/Microsoft_VsaVb.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationBuildTasks/PresentationBuildTasks.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationCFFRasterizer/PresentationCFFRasterizer.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationFramework/PresentationFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationUI/PresentationUI.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/ReachFramework/ReachFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/SMDiagnostics/SMDiagnostics.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/sysglobl/sysglobl.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/System/System.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClient/UIAutomationClient.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClientsideProviders/UIAutomationClientsideProviders.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationProvider/UIAutomationProvider.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationTypes/UIAutomationTypes.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsBase/WindowsBase.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsFormsIntegration/WindowsFormsIntegration.exe
%System Root%/WINDOWS/assembly/temp/temp.exe
%System Root%/WINDOWS/assembly/tmp/tmp.exe
%System Root%/WINDOWS/Config/Config.exe
%System Root%/WINDOWS/Connection Wizard/Connection Wizard.exe
%System Root%/WINDOWS/Cursors/Cursors.exe
%System Root%/WINDOWS/Debug/Debug.exe
%System Root%/WINDOWS/Debug/UserMode/UserMode.exe
%System Root%/WINDOWS/Downloaded Program Files/Downloaded Program Files.exe
%System Root%/WINDOWS/Driver Cache/Driver Cache.exe
%System Root%/WINDOWS/Driver Cache/i386/i386.exe
%System Root%/WINDOWS/ehome/ehome.exe
%System Root%/WINDOWS/Fonts/Fonts.exe
%System Root%/WINDOWS/Help/Help.exe
%System Root%/WINDOWS/Help/Tours/Tours.exe
%System Root%/WINDOWS/Help/Tours/htmlTour/htmlTour.exe
%System Root%/WINDOWS/Help/Tours/mmTour/mmTour.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/WindowsMediaPlayer.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Audio.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Wav/Wav.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Cnt/Cnt.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Css/Css.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Img.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Btn/Btn.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/WMarks/WMarks.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Scr/Scr.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Video/Video.exe
%System Root%/WINDOWS/ime/ime.exe
%System Root%/WINDOWS/ime/chsime/chsime.exe
%System Root%/WINDOWS/ime/chsime/applets/applets.exe
%System Root%/WINDOWS/ime/CHTIME/CHTIME.exe
%System Root%/WINDOWS/ime/CHTIME/Applets/Applets.exe
%System Root%/WINDOWS/ime/imejp/imejp.exe
%System Root%/WINDOWS/ime/imejp/applets/applets.exe
%System Root%/WINDOWS/ime/imejp98/imejp98.exe
%System Root%/WINDOWS/ime/imjp8_1/imjp8_1.exe
%System Root%/WINDOWS/ime/imjp8_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/imkr6_1.exe
%System Root%/WINDOWS/ime/imkr6_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/dicts/dicts.exe
%System Root%/WINDOWS/ime/shared/shared.exe
%System Root%/WINDOWS/ime/shared/res/res.exe
%System Root%/WINDOWS/inf/inf.exe
%System Root%/WINDOWS/Installer/Installer.exe
%System Root%/WINDOWS/Installer/$PatchCache$/$PatchCache$.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/Managed.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/17400AB28230347339DBAF1833357A38/17400AB28230347339DBAF1833357A38.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/1F3B805BA42A0C233B0158879691FE82/1F3B805BA42A0C233B0158879691FE82.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/ARPIco/ARPIco.exe
%System Root%/WINDOWS/Installer/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}.exe
%System Root%/WINDOWS/Installer/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/WINDOWS/Installer/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/WINDOWS/java/java.exe
%System Root%/WINDOWS/java/classes/classes.exe
%System Root%/WINDOWS/java/trustlib/trustlib.exe
%System Root%/WINDOWS/Media/Media.exe
%System Root%/WINDOWS/msagent/msagent.exe
%System Root%/WINDOWS/msagent/chars/chars.exe
%System Root%/WINDOWS/msagent/intl/intl.exe
%System Root%/WINDOWS/msapps/msapps.exe
%System Root%/WINDOWS/msapps/msinfo/msinfo.exe
%System Root%/WINDOWS/mui/mui.exe
%System Root%/WINDOWS/Offline Web Pages/Offline Web Pages.exe
%System Root%/WINDOWS/pchealth/pchealth.exe
%System Root%/WINDOWS/pchealth/ERRORREP/ERRORREP.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QHEADLES/QHEADLES.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QSIGNOFF/QSIGNOFF.exe
%System Root%/WINDOWS/pchealth/helpctr/helpctr.exe
%System Root%/WINDOWS/pchealth/helpctr/BATCH/BATCH.exe
%System Root%/WINDOWS/pchealth/helpctr/binaries/binaries.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Config.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Cache/Cache.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/CheckPoint/CheckPoint.exe
%System Root%/WINDOWS/pchealth/helpctr/Database/Database.exe
%System Root%/WINDOWS/pchealth/helpctr/DataColl/DataColl.exe
%System Root%/WINDOWS/pchealth/helpctr/HelpFiles/HelpFiles.exe
%System Root%/WINDOWS/pchealth/helpctr/Indices/Indices.exe
%System Root%/WINDOWS/pchealth/helpctr/InstalledSKUs/InstalledSKUs.exe
%System Root%/WINDOWS/pchealth/helpctr/Logs/Logs.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/OfflineCache.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/Professional_32#0409/Professional_32#0409.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/PackageStore.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/CRC_Disk/CRC_Disk.exe
%System Root%/WINDOWS/pchealth/helpctr/System/System.exe
%System Root%/WINDOWS/pchealth/helpctr/System/blurbs/blurbs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/CompatCtr/CompatCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System/css/css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DFS/DFS.exe
%System Root%/WINDOWS/pchealth/helpctr/System/dialogs/dialogs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DVDUpgrd/DVDUpgrd.exe
%System Root%/WINDOWS/pchealth/helpctr/System/ErrMsg/ErrMsg.exe
%System Root%/WINDOWS/pchealth/helpctr/System/errors/errors.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/images.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/16x16/16x16.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/24x24/24x24.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/32x32/32x32.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/48x48/48x48.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Centers/Centers.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Expando/Expando.exe
%System Root%/WINDOWS/pchealth/helpctr/System/NetDiag/NetDiag.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/panels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/subpanels/subpanels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/rc/rc.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Interaction.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Client/Client.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Server/Server.exe
%System Root%/WINDOWS/pchealth/helpctr/System/scripts/scripts.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/sysinfo.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/graphics.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/33x16pie/33x16pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/47x24pie/47x24pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/UpdateCtr/UpdateCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System_OEM/System_OEM.exe
%System Root%/WINDOWS/pchealth/helpctr/Temp/Temp.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/Vendors.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Escalation.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Email/Email.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Unsolicited/Unsolicited.exe
%System Root%/WINDOWS/pchealth/UploadLB/UploadLB.exe
%System Root%/WINDOWS/pchealth/UploadLB/Binaries/Binaries.exe
%System Root%/WINDOWS/pchealth/UploadLB/Config/Config.exe
%System Root%/WINDOWS/PeerNet/PeerNet.exe
%System Root%/WINDOWS/Prefetch/Prefetch.exe
%System Root%/WINDOWS/Provisioning/Provisioning.exe
%System Root%/WINDOWS/Provisioning/Schemas/Schemas.exe
%System Root%/WINDOWS/pss/pss.exe
%System Root%/WINDOWS/Registration/Registration.exe
%System Root%/WINDOWS/Registration/CRMLog/CRMLog.exe
%System Root%/WINDOWS/repair/repair.exe
%System Root%/WINDOWS/repair/default/default.exe
%System Root%/WINDOWS/repair/sam/sam.exe
%System Root%/WINDOWS/repair/security/security.exe
%System Root%/WINDOWS/repair/software/software.exe
%System Root%/WINDOWS/repair/system/system.exe
%System Root%/WINDOWS/Resources/Resources.exe
%System Root%/WINDOWS/Resources/Themes/Themes.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Luna.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Shell.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Homestead/Homestead.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Metallic/Metallic.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/NormalColor/NormalColor.exe
%System Root%/WINDOWS/security/security.exe
%System Root%/WINDOWS/security/Database/Database.exe
%System Root%/WINDOWS/security/logs/logs.exe
%System Root%/WINDOWS/security/templates/templates.exe
%System Root%/WINDOWS/SoftwareDistribution/SoftwareDistribution.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/DataStore.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/Logs/Logs.exe
%System Root%/WINDOWS/SoftwareDistribution/Download/Download.exe
%System Root%/WINDOWS/SoftwareDistribution/EventCache/EventCache.exe
%System Root%/WINDOWS/SoftwareDistribution/SelfUpdate/SelfUpdate.exe
%System Root%/WINDOWS/srchasst/srchasst.exe
%System Root%/WINDOWS/srchasst/chars/chars.exe
%System Root%/WINDOWS/srchasst/mui/mui.exe
%System Root%/WINDOWS/srchasst/mui/0409/0409.exe
%System Root%/WINDOWS/system/system.exe
%System Root%/WINDOWS/system32/system32.exe
%System Root%/WINDOWS/system32/-1/-1.exe
%System Root%/WINDOWS/system32/1025/1025.exe
%System Root%/WINDOWS/system32/1028/1028.exe
%System Root%/WINDOWS/system32/1031/1031.exe
%System Root%/WINDOWS/system32/1033/1033.exe
%System Root%/WINDOWS/system32/1037/1037.exe
%System Root%/WINDOWS/system32/1041/1041.exe
%System Root%/WINDOWS/system32/1042/1042.exe
%System Root%/WINDOWS/system32/1054/1054.exe
%System Root%/WINDOWS/system32/2052/2052.exe
%System Root%/WINDOWS/system32/3076/3076.exe
%System Root%/WINDOWS/system32/3com_dmi/3com_dmi.exe
%System Root%/WINDOWS/system32/CatRoot/CatRoot.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/CatRoot2.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/Com/Com.exe
%System Root%/WINDOWS/system32/config/config.exe
%System Root%/WINDOWS/system32/config/default/default.exe
%System Root%/WINDOWS/system32/config/SAM/SAM.exe
%System Root%/WINDOWS/system32/config/SECURITY/SECURITY.exe
%System Root%/WINDOWS/system32/config/software/software.exe
%System Root%/WINDOWS/system32/config/system/system.exe
%System Root%/WINDOWS/system32/config/systemprofile/systemprofile.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Cookies/Cookies.exe
%System Root%/WINDOWS/system32/config/systemprofile/Desktop/Desktop.exe
%System Root%/WINDOWS/system32/config/systemprofile/Favorites/Favorites.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Local Settings.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/History/History.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temp/Temp.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/WINDOWS/system32/config/systemprofile/My Documents/My Documents.exe
%System Root%/WINDOWS/system32/config/systemprofile/NetHood/NetHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/PrintHood/PrintHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/Recent/Recent.exe
%System Root%/WINDOWS/system32/config/systemprofile/SendTo/SendTo.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Start Menu.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Programs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Startup/Startup.exe
%System Root%/WINDOWS/system32/config/systemprofile/Templates/Templates.exe
%System Root%/WINDOWS/system32/config/userdiff/userdiff.exe
%System Root%/WINDOWS/system32/dhcp/dhcp.exe
%System Root%/WINDOWS/system32/DirectX/DirectX.exe
%System Root%/WINDOWS/system32/DirectX/Dinput/Dinput.exe
%System Root%/WINDOWS/system32/dllcache/dllcache.exe
%System Root%/WINDOWS/system32/drivers/drivers.exe
%System Root%/WINDOWS/system32/drivers/disdn/disdn.exe
%System Root%/WINDOWS/system32/drivers/etc/etc.exe
%System Root%/WINDOWS/system32/drivers/etc/hosts/hosts.exe
%System Root%/WINDOWS/system32/drivers/etc/networks/networks.exe
%System Root%/WINDOWS/system32/drivers/etc/protocol/protocol.exe
%System Root%/WINDOWS/system32/drivers/etc/services/services.exe
%System Root%/WINDOWS/system32/en-us/en-us.exe
%System Root%/WINDOWS/system32/export/export.exe
%System Root%/WINDOWS/system32/GroupPolicy/GroupPolicy.exe
%System Root%/WINDOWS/system32/GroupPolicy/Machine/Machine.exe
%System Root%/WINDOWS/system32/GroupPolicy/User/User.exe
%System Root%/WINDOWS/system32/ias/ias.exe
%System Root%/WINDOWS/system32/icsxml/icsxml.exe
%System Root%/WINDOWS/system32/IME/IME.exe
%System Root%/WINDOWS/system32/IME/CINTLGNT/CINTLGNT.exe
%System Root%/WINDOWS/system32/IME/PINTLGNT/PINTLGNT.exe
%System Root%/WINDOWS/system32/IME/TINTLGNT/TINTLGNT.exe
%System Root%/WINDOWS/system32/inetsrv/inetsrv.exe
%System Root%/WINDOWS/system32/Macromed/Macromed.exe
%System Root%/WINDOWS/system32/Macromed/Flash/Flash.exe
%System Root%/WINDOWS/system32/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/Protect.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/S-1-5-18.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/User.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/04c6e779-a6c8-43ed-83fd-24277a54f46c/04c6e779-a6c8-43ed-83fd-24277a54f46c.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/920943d9-68f1-4a3f-9588-ac25fa191f28/920943d9-68f1-4a3f-9588-ac25fa191f28.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/adce7c98-b0e6-4ecd-b2d3-69b3060c02da/adce7c98-b0e6-4ecd-b2d3-69b3060c02da.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/Preferred/Preferred.exe
%System Root%/WINDOWS/system32/MsDtc/MsDtc.exe
%System Root%/WINDOWS/system32/MsDtc/Trace/Trace.exe
%System Root%/WINDOWS/system32/mui/mui.exe
%System Root%/WINDOWS/system32/mui/0009/0009.exe
%System Root%/WINDOWS/system32/mui/0401/0401.exe
%System Root%/WINDOWS/system32/mui/0402/0402.exe
%System Root%/WINDOWS/system32/mui/0404/0404.exe
%System Root%/WINDOWS/system32/mui/0405/0405.exe
%System Root%/WINDOWS/system32/mui/0406/0406.exe
%System Root%/WINDOWS/system32/mui/0407/0407.exe
%System Root%/WINDOWS/system32/mui/0408/0408.exe
%System Root%/WINDOWS/system32/mui/0409/0409.exe
%System Root%/WINDOWS/system32/mui/040b/040b.exe
%System Root%/WINDOWS/system32/mui/040C/040C.exe
%System Root%/WINDOWS/system32/mui/040D/040D.exe
%System Root%/WINDOWS/system32/mui/040e/040e.exe
%System Root%/WINDOWS/system32/mui/0410/0410.exe
%System Root%/WINDOWS/system32/mui/0411/0411.exe
%System Root%/WINDOWS/system32/mui/0412/0412.exe
%System Root%/WINDOWS/system32/mui/0413/0413.exe
%System Root%/WINDOWS/system32/mui/0414/0414.exe
%System Root%/WINDOWS/system32/mui/0415/0415.exe
%System Root%/WINDOWS/system32/mui/0416/0416.exe
%System Root%/WINDOWS/system32/mui/0418/0418.exe
%System Root%/WINDOWS/system32/mui/0419/0419.exe
%System Root%/WINDOWS/system32/mui/041a/041a.exe
%System Root%/WINDOWS/system32/mui/041b/041b.exe
%System Root%/WINDOWS/system32/mui/041D/041D.exe
%System Root%/WINDOWS/system32/mui/041e/041e.exe
%System Root%/WINDOWS/system32/mui/041f/041f.exe
%System Root%/WINDOWS/system32/mui/0424/0424.exe
%System Root%/WINDOWS/system32/mui/0425/0425.exe
%System Root%/WINDOWS/system32/mui/0426/0426.exe
%System Root%/WINDOWS/system32/mui/0427/0427.exe
%System Root%/WINDOWS/system32/mui/0804/0804.exe
%System Root%/WINDOWS/system32/mui/0816/0816.exe
%System Root%/WINDOWS/system32/mui/0C0A/0C0A.exe
%System Root%/WINDOWS/system32/mui/dispspec/dispspec.exe
%System Root%/WINDOWS/system32/npp/npp.exe
%System Root%/WINDOWS/system32/oobe/oobe.exe
%System Root%/WINDOWS/system32/oobe/actsetup/actsetup.exe
%System Root%/WINDOWS/system32/oobe/error/error.exe
%System Root%/WINDOWS/system32/oobe/html/html.exe
%System Root%/WINDOWS/system32/oobe/html/dslmain/dslmain.exe
%System Root%/WINDOWS/system32/oobe/html/iconnect/iconnect.exe
%System Root%/WINDOWS/system32/oobe/html/ispsgnup/ispsgnup.exe
%System Root%/WINDOWS/system32/oobe/html/isptype/isptype.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/mouse.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/images/images.exe
%System Root%/WINDOWS/system32/oobe/html/oemcust/oemcust.exe
%System Root%/WINDOWS/system32/oobe/html/oemhw/oemhw.exe
%System Root%/WINDOWS/system32/oobe/html/oemreg/oemreg.exe
%System Root%/WINDOWS/system32/oobe/html/sconnect/sconnect.exe
%System Root%/WINDOWS/system32/oobe/icserror/icserror.exe
%System Root%/WINDOWS/system32/oobe/images/images.exe
%System Root%/WINDOWS/system32/oobe/isperror/isperror.exe
%System Root%/WINDOWS/system32/oobe/regerror/regerror.exe
%System Root%/WINDOWS/system32/oobe/sample/sample.exe
%System Root%/WINDOWS/system32/oobe/setup/setup.exe
%System Root%/WINDOWS/system32/ras/ras.exe
%System Root%/WINDOWS/system32/ReinstallBackups/ReinstallBackups.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/0000.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/0001.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/i386/i386.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/0002.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/0003.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/Restore/Restore.exe
%System Root%/WINDOWS/system32/Setup/Setup.exe
%System Root%/WINDOWS/system32/ShellExt/ShellExt.exe
%System Root%/WINDOWS/system32/spool/spool.exe
%System Root%/WINDOWS/system32/spool/drivers/drivers.exe
%System Root%/WINDOWS/system32/spool/drivers/color/color.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/3.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/temp/temp.exe
%System Root%/WINDOWS/system32/spool/PRINTERS/PRINTERS.exe
%System Root%/WINDOWS/system32/spool/prtprocs/prtprocs.exe
%System Root%/WINDOWS/system32/spool/prtprocs/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/prtprocs/x64/x64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/XPSEP.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386/i386.exe
%System Root%/WINDOWS/system32/termcap/termcap.exe
%System Root%/WINDOWS/system32/usmt/usmt.exe
%System Root%/WINDOWS/system32/wbem/wbem.exe
%System Root%/WINDOWS/system32/wbem/AutoRecover/AutoRecover.exe
%System Root%/WINDOWS/system32/wbem/Logs/Logs.exe
%System Root%/WINDOWS/system32/wbem/mof/mof.exe
%System Root%/WINDOWS/system32/wbem/mof/bad/bad.exe
%System Root%/WINDOWS/system32/wbem/mof/good/good.exe
%System Root%/WINDOWS/system32/wbem/Performance/Performance.exe
%System Root%/WINDOWS/system32/wbem/Repository/Repository.exe
%System Root%/WINDOWS/system32/wbem/Repository/FS/FS.exe
%System Root%/WINDOWS/system32/wbem/snmp/snmp.exe
%System Root%/WINDOWS/system32/wbem/xml/xml.exe
%System Root%/WINDOWS/system32/wins/wins.exe
%System Root%/WINDOWS/system32/xircom/xircom.exe
%System Root%/WINDOWS/system32/XPSViewer/XPSViewer.exe
%System Root%/WINDOWS/system32/XPSViewer/en-us/en-us.exe
%System Root%/WINDOWS/Tasks/Tasks.exe
%System Root%/WINDOWS/Temp/Temp.exe
%System Root%/WINDOWS/twain_32/twain_32.exe
%System Root%/WINDOWS/Web/Web.exe
%System Root%/WINDOWS/Web/printers/printers.exe
%System Root%/WINDOWS/Web/printers/images/images.exe
%System Root%/WINDOWS/Web/Wallpaper/Wallpaper.exe
%System Root%/WINDOWS/WinSxS/WinSxS.exe
%System Root%/WINDOWS/WinSxS/InstallTemp/InstallTemp.exe
%System Root%/WINDOWS/WinSxS/Manifests/Manifests.exe
%System Root%/WINDOWS/WinSxS/Policies/Policies.exe

(Note: %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.)

This report is generated via an automated analysis system.

SOLUTION

Minimum Scan Engine:

9.300

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Search and delete these components

[ Learn More ]

There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

%System Root%/{malware file name}/{malware file name}.exe
%System Root%/Documents and Settings/Documents and Settings.exe
%System Root%/Documents and Settings/All Users/All Users.exe
%System Root%/Documents and Settings/All Users/Application Data/Application Data.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Adobe.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Acrobat/Acrobat.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/Setup.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/Crypto.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/DSS.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/RSA.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/S-1-5-18.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/HTML Help/HTML Help.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Index/Media Index.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Network.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Connections.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Cm/Cm.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Pbk/Pbk.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/User Account Pictures.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/Default Pictures/Default Pictures.exe
%System Root%/Documents and Settings/All Users/Desktop/Desktop.exe
%System Root%/Documents and Settings/All Users/Documents/Documents.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Playlists/My Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Music/Sample Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/Sample Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/0008044E/0008044E.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/Sample Pictures/Sample Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Videos/My Videos.exe
%System Root%/Documents and Settings/All Users/DRM/DRM.exe
%System Root%/Documents and Settings/All Users/Favorites/Favorites.exe
%System Root%/Documents and Settings/All Users/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Communications/Communications.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/System Tools/System Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Games/Games.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/WinPcap/WinPcap.exe
%System Root%/Documents and Settings/All Users/Templates/Templates.exe
%System Root%/Documents and Settings/Default User/Default User.exe
%System Root%/Documents and Settings/Default User/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Default User/Cookies/Cookies.exe
%System Root%/Documents and Settings/Default User/Desktop/Desktop.exe
%System Root%/Documents and Settings/Default User/Favorites/Favorites.exe
%System Root%/Documents and Settings/Default User/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Default User/Local Settings/History/History.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Default User/My Documents/My Documents.exe
%System Root%/Documents and Settings/Default User/NetHood/NetHood.exe
%System Root%/Documents and Settings/Default User/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Default User/Recent/Recent.exe
%System Root%/Documents and Settings/Default User/SendTo/SendTo.exe
%System Root%/Documents and Settings/Default User/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Default User/Templates/Templates.exe
%System Root%/Documents and Settings/LocalService/LocalService.exe
%System Root%/Documents and Settings/LocalService/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/LocalService/Cookies/Cookies.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/LocalService/Local Settings/History/History.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/NetworkService/NetworkService.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/NetworkService/Cookies/Cookies.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/History/History.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/Wilbert.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/Identities.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Quick Launch/Quick Launch.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/MMC.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/secpol/secpol.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Themes/Themes.exe
%System Root%/Documents and Settings/Wilbert/Cookies/Cookies.exe
%System Root%/Documents and Settings/Wilbert/Desktop/Desktop.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Favorites.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Links/Links.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/CD Burning/CD Burning.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/History/History.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Documents.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Music/My Music.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/Wilbert/NetHood/NetHood.exe
%System Root%/Documents and Settings/Wilbert/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Wilbert/Recent/Recent.exe
%System Root%/Documents and Settings/Wilbert/SendTo/SendTo.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Wilbert/Templates/Templates.exe
%System Root%/ntldr/ntldr.exe
%System Root%/Program Files/Program Files.exe
%System Root%/Program Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Common Files.exe
%System Root%/Program Files/Common Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/Acrobat.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/ActiveX/ActiveX.exe
%System Root%/Program Files/Common Files/Adobe/ARM/ARM.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/HelpCfg.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/en_US/en_US.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Microsoft Shared.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DAO/DAO.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/DW.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1025/1025.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1028/1028.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1031/1031.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1036/1036.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1040/1040.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1041/1041.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1042/1042.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/2052/2052.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/3082/3082.exe
%System Root%/Program Files/Common Files/Microsoft Shared/MSInfo/MSInfo.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/Speech.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Stationery/Stationery.exe
%System Root%/Program Files/Common Files/Microsoft Shared/TextConv/TextConv.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Triedit/Triedit.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VC/VC.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VGX/VGX.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Web Folders/Web Folders.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/web server extensions.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/40.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/admcgi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/admisapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/bots.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/vinavbar/vinavbar.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/isapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/servsupp/servsupp.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/MSSoap/MSSoap.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Binaries.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/Resources.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/1033/1033.exe
%System Root%/Program Files/Common Files/ODBC/ODBC.exe
%System Root%/Program Files/Common Files/ODBC/Data Sources/Data Sources.exe
%System Root%/Program Files/Common Files/Services/Services.exe
%System Root%/Program Files/Common Files/SpeechEngines/SpeechEngines.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Microsoft.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/Lexicon.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/1033/1033.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/TTS.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/1033/1033.exe
%System Root%/Program Files/Common Files/System/System.exe
%System Root%/Program Files/Common Files/System/ado/ado.exe
%System Root%/Program Files/Common Files/System/msadc/msadc.exe
%System Root%/Program Files/Common Files/System/Ole DB/Ole DB.exe
%System Root%/Program Files/ComPlus Applications/ComPlus Applications.exe
%System Root%/Program Files/Internet Explorer/Internet Explorer.exe
%System Root%/Program Files/Internet Explorer/Connection Wizard/Connection Wizard.exe
%System Root%/Program Files/Internet Explorer/MUI/MUI.exe
%System Root%/Program Files/Internet Explorer/MUI/0409/0409.exe
%System Root%/Program Files/Internet Explorer/PLUGINS/PLUGINS.exe
%System Root%/Program Files/Internet Explorer/SIGNUP/SIGNUP.exe
%System Root%/Program Files/Messenger/Messenger.exe
%System Root%/Program Files/microsoft frontpage/microsoft frontpage.exe
%System Root%/Program Files/Movie Maker/Movie Maker.exe
%System Root%/Program Files/Movie Maker/MUI/MUI.exe
%System Root%/Program Files/Movie Maker/MUI/0409/0409.exe
%System Root%/Program Files/Movie Maker/Shared/Shared.exe
%System Root%/Program Files/Movie Maker/Shared/Profiles/Profiles.exe
%System Root%/Program Files/MSBuild/MSBuild.exe
%System Root%/Program Files/MSBuild/Microsoft/Microsoft.exe
%System Root%/Program Files/MSBuild/Microsoft/Windows Workflow Foundation/Windows Workflow Foundation.exe
%System Root%/Program Files/MSN/MSN.exe
%System Root%/Program Files/MSN/MSNCoreFiles/MSNCoreFiles.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/Install.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/MSN9Components/MSN9Components.exe
%System Root%/Program Files/MSN/MSNCoreFiles/OOBE/OOBE.exe
%System Root%/Program Files/MSN Gaming Zone/MSN Gaming Zone.exe
%System Root%/Program Files/MSN Gaming Zone/Windows/Windows.exe
%System Root%/Program Files/NetMeeting/NetMeeting.exe
%System Root%/Program Files/Online Services/Online Services.exe
%System Root%/Program Files/Outlook Express/Outlook Express.exe
%System Root%/Program Files/Reference Assemblies/Reference Assemblies.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Microsoft.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Framework/Framework.exe
%System Root%/Program Files/Uninstall Information/Uninstall Information.exe
%System Root%/Program Files/Windows Media Player/Windows Media Player.exe
%System Root%/Program Files/Windows Media Player/Icons/Icons.exe
%System Root%/Program Files/Windows Media Player/Sample Playlists/Sample Playlists.exe
%System Root%/Program Files/Windows Media Player/Skins/Skins.exe
%System Root%/Program Files/Windows Media Player/Visualizations/Visualizations.exe
%System Root%/Program Files/Windows NT/Windows NT.exe
%System Root%/Program Files/Windows NT/Accessories/Accessories.exe
%System Root%/Program Files/Windows NT/Pinball/Pinball.exe
%System Root%/Program Files/WindowsUpdate/WindowsUpdate.exe
%System Root%/Program Files/WinPcap/WinPcap.exe
%System Root%/Program Files/xerox/xerox.exe
%System Root%/Program Files/xerox/nwwia/nwwia.exe
%System Root%/System Volume Information/System Volume Information.exe
%System Root%/WINDOWS/WINDOWS.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/$MSI31Uninstall_KB893803v2$.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00013/reg00013.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00014/reg00014.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00015/reg00015.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00016/reg00016.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00017/reg00017.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00018/reg00018.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00019/reg00019.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00020/reg00020.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00021/reg00021.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00022/reg00022.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00023/reg00023.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00024/reg00024.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00025/reg00025.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00026/reg00026.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00027/reg00027.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00028/reg00028.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00029/reg00029.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00030/reg00030.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00031/reg00031.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00032/reg00032.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00033/reg00033.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00034/reg00034.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00035/reg00035.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00036/reg00036.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00037/reg00037.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00038/reg00038.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00039/reg00039.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00040/reg00040.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00041/reg00041.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00042/reg00042.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00043/reg00043.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00044/reg00044.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00045/reg00045.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00046/reg00046.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00047/reg00047.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00048/reg00048.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00051/reg00051.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00052/reg00052.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00053/reg00053.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00054/reg00054.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00055/reg00055.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00056/reg00056.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00057/reg00057.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00058/reg00058.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00059/reg00059.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00060/reg00060.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00061/reg00061.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00062/reg00062.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00063/reg00063.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00064/reg00064.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00065/reg00065.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00066/reg00066.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00067/reg00067.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00068/reg00068.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00069/reg00069.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00070/reg00070.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00071/reg00071.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00072/reg00072.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00073/reg00073.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00074/reg00074.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00075/reg00075.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00076/reg00076.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00077/reg00077.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00078/reg00078.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00079/reg00079.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00080/reg00080.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00081/reg00081.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00082/reg00082.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00083/reg00083.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00084/reg00084.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00085/reg00085.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00086/reg00086.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00087/reg00087.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00088/reg00088.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00089/reg00089.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00090/reg00090.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00091/reg00091.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00092/reg00092.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00093/reg00093.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00094/reg00094.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00095/reg00095.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00096/reg00096.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00097/reg00097.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00098/reg00098.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00099/reg00099.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00100/reg00100.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00101/reg00101.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00102/reg00102.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00103/reg00103.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00104/reg00104.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00105/reg00105.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00106/reg00106.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00107/reg00107.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00108/reg00108.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00109/reg00109.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00110/reg00110.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00111/reg00111.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00112/reg00112.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00113/reg00113.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00114/reg00114.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00115/reg00115.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00116/reg00116.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/spuninst/spuninst.exe
%System Root%/WINDOWS/$NtUninstallWIC$/$NtUninstallWIC$.exe
%System Root%/WINDOWS/$NtUninstallWIC$/spuninst/spuninst.exe
%System Root%/WINDOWS/addins/addins.exe
%System Root%/WINDOWS/AppPatch/AppPatch.exe
%System Root%/WINDOWS/assembly/assembly.exe
%System Root%/WINDOWS/assembly/GAC_32/GAC_32.exe
%System Root%/WINDOWS/assembly/GAC_32/CustomMarshalers/CustomMarshalers.exe
%System Root%/WINDOWS/assembly/GAC_32/ISymWrapper/ISymWrapper.exe
%System Root%/WINDOWS/assembly/GAC_32/mscorlib/mscorlib.exe
%System Root%/WINDOWS/assembly/GAC_32/PresentationCore/PresentationCore.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/GAC_MSIL.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Accessibility/Accessibility.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/AspNetMMCExt/AspNetMMCExt.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/cscompmgd/cscompmgd.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEExecRemote/IEExecRemote.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEHost/IEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IIEHost/IIEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Microsoft_VsaVb/Microsoft_VsaVb.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationBuildTasks/PresentationBuildTasks.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationCFFRasterizer/PresentationCFFRasterizer.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationFramework/PresentationFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationUI/PresentationUI.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/ReachFramework/ReachFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/SMDiagnostics/SMDiagnostics.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/sysglobl/sysglobl.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/System/System.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClient/UIAutomationClient.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClientsideProviders/UIAutomationClientsideProviders.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationProvider/UIAutomationProvider.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationTypes/UIAutomationTypes.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsBase/WindowsBase.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsFormsIntegration/WindowsFormsIntegration.exe
%System Root%/WINDOWS/assembly/temp/temp.exe
%System Root%/WINDOWS/assembly/tmp/tmp.exe
%System Root%/WINDOWS/Config/Config.exe
%System Root%/WINDOWS/Connection Wizard/Connection Wizard.exe
%System Root%/WINDOWS/Cursors/Cursors.exe
%System Root%/WINDOWS/Debug/Debug.exe
%System Root%/WINDOWS/Debug/UserMode/UserMode.exe
%System Root%/WINDOWS/Downloaded Program Files/Downloaded Program Files.exe
%System Root%/WINDOWS/Driver Cache/Driver Cache.exe
%System Root%/WINDOWS/Driver Cache/i386/i386.exe
%System Root%/WINDOWS/ehome/ehome.exe
%System Root%/WINDOWS/Fonts/Fonts.exe
%System Root%/WINDOWS/Help/Help.exe
%System Root%/WINDOWS/Help/Tours/Tours.exe
%System Root%/WINDOWS/Help/Tours/htmlTour/htmlTour.exe
%System Root%/WINDOWS/Help/Tours/mmTour/mmTour.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/WindowsMediaPlayer.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Audio.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Wav/Wav.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Cnt/Cnt.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Css/Css.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Img.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Btn/Btn.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/WMarks/WMarks.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Scr/Scr.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Video/Video.exe
%System Root%/WINDOWS/ime/ime.exe
%System Root%/WINDOWS/ime/chsime/chsime.exe
%System Root%/WINDOWS/ime/chsime/applets/applets.exe
%System Root%/WINDOWS/ime/CHTIME/CHTIME.exe
%System Root%/WINDOWS/ime/CHTIME/Applets/Applets.exe
%System Root%/WINDOWS/ime/imejp/imejp.exe
%System Root%/WINDOWS/ime/imejp/applets/applets.exe
%System Root%/WINDOWS/ime/imejp98/imejp98.exe
%System Root%/WINDOWS/ime/imjp8_1/imjp8_1.exe
%System Root%/WINDOWS/ime/imjp8_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/imkr6_1.exe
%System Root%/WINDOWS/ime/imkr6_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/dicts/dicts.exe
%System Root%/WINDOWS/ime/shared/shared.exe
%System Root%/WINDOWS/ime/shared/res/res.exe
%System Root%/WINDOWS/inf/inf.exe
%System Root%/WINDOWS/Installer/Installer.exe
%System Root%/WINDOWS/Installer/$PatchCache$/$PatchCache$.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/Managed.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/17400AB28230347339DBAF1833357A38/17400AB28230347339DBAF1833357A38.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/1F3B805BA42A0C233B0158879691FE82/1F3B805BA42A0C233B0158879691FE82.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/ARPIco/ARPIco.exe
%System Root%/WINDOWS/Installer/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}.exe
%System Root%/WINDOWS/Installer/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/WINDOWS/Installer/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/WINDOWS/java/java.exe
%System Root%/WINDOWS/java/classes/classes.exe
%System Root%/WINDOWS/java/trustlib/trustlib.exe
%System Root%/WINDOWS/Media/Media.exe
%System Root%/WINDOWS/msagent/msagent.exe
%System Root%/WINDOWS/msagent/chars/chars.exe
%System Root%/WINDOWS/msagent/intl/intl.exe
%System Root%/WINDOWS/msapps/msapps.exe
%System Root%/WINDOWS/msapps/msinfo/msinfo.exe
%System Root%/WINDOWS/mui/mui.exe
%System Root%/WINDOWS/Offline Web Pages/Offline Web Pages.exe
%System Root%/WINDOWS/pchealth/pchealth.exe
%System Root%/WINDOWS/pchealth/ERRORREP/ERRORREP.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QHEADLES/QHEADLES.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QSIGNOFF/QSIGNOFF.exe
%System Root%/WINDOWS/pchealth/helpctr/helpctr.exe
%System Root%/WINDOWS/pchealth/helpctr/BATCH/BATCH.exe
%System Root%/WINDOWS/pchealth/helpctr/binaries/binaries.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Config.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Cache/Cache.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/CheckPoint/CheckPoint.exe
%System Root%/WINDOWS/pchealth/helpctr/Database/Database.exe
%System Root%/WINDOWS/pchealth/helpctr/DataColl/DataColl.exe
%System Root%/WINDOWS/pchealth/helpctr/HelpFiles/HelpFiles.exe
%System Root%/WINDOWS/pchealth/helpctr/Indices/Indices.exe
%System Root%/WINDOWS/pchealth/helpctr/InstalledSKUs/InstalledSKUs.exe
%System Root%/WINDOWS/pchealth/helpctr/Logs/Logs.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/OfflineCache.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/Professional_32#0409/Professional_32#0409.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/PackageStore.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/CRC_Disk/CRC_Disk.exe
%System Root%/WINDOWS/pchealth/helpctr/System/System.exe
%System Root%/WINDOWS/pchealth/helpctr/System/blurbs/blurbs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/CompatCtr/CompatCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System/css/css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DFS/DFS.exe
%System Root%/WINDOWS/pchealth/helpctr/System/dialogs/dialogs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DVDUpgrd/DVDUpgrd.exe
%System Root%/WINDOWS/pchealth/helpctr/System/ErrMsg/ErrMsg.exe
%System Root%/WINDOWS/pchealth/helpctr/System/errors/errors.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/images.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/16x16/16x16.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/24x24/24x24.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/32x32/32x32.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/48x48/48x48.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Centers/Centers.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Expando/Expando.exe
%System Root%/WINDOWS/pchealth/helpctr/System/NetDiag/NetDiag.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/panels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/subpanels/subpanels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/rc/rc.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Interaction.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Client/Client.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Server/Server.exe
%System Root%/WINDOWS/pchealth/helpctr/System/scripts/scripts.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/sysinfo.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/graphics.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/33x16pie/33x16pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/47x24pie/47x24pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/UpdateCtr/UpdateCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System_OEM/System_OEM.exe
%System Root%/WINDOWS/pchealth/helpctr/Temp/Temp.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/Vendors.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Escalation.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Email/Email.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Unsolicited/Unsolicited.exe
%System Root%/WINDOWS/pchealth/UploadLB/UploadLB.exe
%System Root%/WINDOWS/pchealth/UploadLB/Binaries/Binaries.exe
%System Root%/WINDOWS/pchealth/UploadLB/Config/Config.exe
%System Root%/WINDOWS/PeerNet/PeerNet.exe
%System Root%/WINDOWS/Prefetch/Prefetch.exe
%System Root%/WINDOWS/Provisioning/Provisioning.exe
%System Root%/WINDOWS/Provisioning/Schemas/Schemas.exe
%System Root%/WINDOWS/pss/pss.exe
%System Root%/WINDOWS/Registration/Registration.exe
%System Root%/WINDOWS/Registration/CRMLog/CRMLog.exe
%System Root%/WINDOWS/repair/repair.exe
%System Root%/WINDOWS/repair/default/default.exe
%System Root%/WINDOWS/repair/sam/sam.exe
%System Root%/WINDOWS/repair/security/security.exe
%System Root%/WINDOWS/repair/software/software.exe
%System Root%/WINDOWS/repair/system/system.exe
%System Root%/WINDOWS/Resources/Resources.exe
%System Root%/WINDOWS/Resources/Themes/Themes.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Luna.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Shell.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Homestead/Homestead.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Metallic/Metallic.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/NormalColor/NormalColor.exe
%System Root%/WINDOWS/security/security.exe
%System Root%/WINDOWS/security/Database/Database.exe
%System Root%/WINDOWS/security/logs/logs.exe
%System Root%/WINDOWS/security/templates/templates.exe
%System Root%/WINDOWS/SoftwareDistribution/SoftwareDistribution.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/DataStore.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/Logs/Logs.exe
%System Root%/WINDOWS/SoftwareDistribution/Download/Download.exe
%System Root%/WINDOWS/SoftwareDistribution/EventCache/EventCache.exe
%System Root%/WINDOWS/SoftwareDistribution/SelfUpdate/SelfUpdate.exe
%System Root%/WINDOWS/srchasst/srchasst.exe
%System Root%/WINDOWS/srchasst/chars/chars.exe
%System Root%/WINDOWS/srchasst/mui/mui.exe
%System Root%/WINDOWS/srchasst/mui/0409/0409.exe
%System Root%/WINDOWS/system/system.exe
%System Root%/WINDOWS/system32/system32.exe
%System Root%/WINDOWS/system32/-1/-1.exe
%System Root%/WINDOWS/system32/1025/1025.exe
%System Root%/WINDOWS/system32/1028/1028.exe
%System Root%/WINDOWS/system32/1031/1031.exe
%System Root%/WINDOWS/system32/1033/1033.exe
%System Root%/WINDOWS/system32/1037/1037.exe
%System Root%/WINDOWS/system32/1041/1041.exe
%System Root%/WINDOWS/system32/1042/1042.exe
%System Root%/WINDOWS/system32/1054/1054.exe
%System Root%/WINDOWS/system32/2052/2052.exe
%System Root%/WINDOWS/system32/3076/3076.exe
%System Root%/WINDOWS/system32/3com_dmi/3com_dmi.exe
%System Root%/WINDOWS/system32/CatRoot/CatRoot.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/CatRoot2.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/Com/Com.exe
%System Root%/WINDOWS/system32/config/config.exe
%System Root%/WINDOWS/system32/config/default/default.exe
%System Root%/WINDOWS/system32/config/SAM/SAM.exe
%System Root%/WINDOWS/system32/config/SECURITY/SECURITY.exe
%System Root%/WINDOWS/system32/config/software/software.exe
%System Root%/WINDOWS/system32/config/system/system.exe
%System Root%/WINDOWS/system32/config/systemprofile/systemprofile.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Cookies/Cookies.exe
%System Root%/WINDOWS/system32/config/systemprofile/Desktop/Desktop.exe
%System Root%/WINDOWS/system32/config/systemprofile/Favorites/Favorites.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Local Settings.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/History/History.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temp/Temp.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/WINDOWS/system32/config/systemprofile/My Documents/My Documents.exe
%System Root%/WINDOWS/system32/config/systemprofile/NetHood/NetHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/PrintHood/PrintHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/Recent/Recent.exe
%System Root%/WINDOWS/system32/config/systemprofile/SendTo/SendTo.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Start Menu.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Programs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Startup/Startup.exe
%System Root%/WINDOWS/system32/config/systemprofile/Templates/Templates.exe
%System Root%/WINDOWS/system32/config/userdiff/userdiff.exe
%System Root%/WINDOWS/system32/dhcp/dhcp.exe
%System Root%/WINDOWS/system32/DirectX/DirectX.exe
%System Root%/WINDOWS/system32/DirectX/Dinput/Dinput.exe
%System Root%/WINDOWS/system32/dllcache/dllcache.exe
%System Root%/WINDOWS/system32/drivers/drivers.exe
%System Root%/WINDOWS/system32/drivers/disdn/disdn.exe
%System Root%/WINDOWS/system32/drivers/etc/etc.exe
%System Root%/WINDOWS/system32/drivers/etc/hosts/hosts.exe
%System Root%/WINDOWS/system32/drivers/etc/networks/networks.exe
%System Root%/WINDOWS/system32/drivers/etc/protocol/protocol.exe
%System Root%/WINDOWS/system32/drivers/etc/services/services.exe
%System Root%/WINDOWS/system32/en-us/en-us.exe
%System Root%/WINDOWS/system32/export/export.exe
%System Root%/WINDOWS/system32/GroupPolicy/GroupPolicy.exe
%System Root%/WINDOWS/system32/GroupPolicy/Machine/Machine.exe
%System Root%/WINDOWS/system32/GroupPolicy/User/User.exe
%System Root%/WINDOWS/system32/ias/ias.exe
%System Root%/WINDOWS/system32/icsxml/icsxml.exe
%System Root%/WINDOWS/system32/IME/IME.exe
%System Root%/WINDOWS/system32/IME/CINTLGNT/CINTLGNT.exe
%System Root%/WINDOWS/system32/IME/PINTLGNT/PINTLGNT.exe
%System Root%/WINDOWS/system32/IME/TINTLGNT/TINTLGNT.exe
%System Root%/WINDOWS/system32/inetsrv/inetsrv.exe
%System Root%/WINDOWS/system32/Macromed/Macromed.exe
%System Root%/WINDOWS/system32/Macromed/Flash/Flash.exe
%System Root%/WINDOWS/system32/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/Protect.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/S-1-5-18.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/User.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/04c6e779-a6c8-43ed-83fd-24277a54f46c/04c6e779-a6c8-43ed-83fd-24277a54f46c.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/920943d9-68f1-4a3f-9588-ac25fa191f28/920943d9-68f1-4a3f-9588-ac25fa191f28.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/adce7c98-b0e6-4ecd-b2d3-69b3060c02da/adce7c98-b0e6-4ecd-b2d3-69b3060c02da.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/Preferred/Preferred.exe
%System Root%/WINDOWS/system32/MsDtc/MsDtc.exe
%System Root%/WINDOWS/system32/MsDtc/Trace/Trace.exe
%System Root%/WINDOWS/system32/mui/mui.exe
%System Root%/WINDOWS/system32/mui/0009/0009.exe
%System Root%/WINDOWS/system32/mui/0401/0401.exe
%System Root%/WINDOWS/system32/mui/0402/0402.exe
%System Root%/WINDOWS/system32/mui/0404/0404.exe
%System Root%/WINDOWS/system32/mui/0405/0405.exe
%System Root%/WINDOWS/system32/mui/0406/0406.exe
%System Root%/WINDOWS/system32/mui/0407/0407.exe
%System Root%/WINDOWS/system32/mui/0408/0408.exe
%System Root%/WINDOWS/system32/mui/0409/0409.exe
%System Root%/WINDOWS/system32/mui/040b/040b.exe
%System Root%/WINDOWS/system32/mui/040C/040C.exe
%System Root%/WINDOWS/system32/mui/040D/040D.exe
%System Root%/WINDOWS/system32/mui/040e/040e.exe
%System Root%/WINDOWS/system32/mui/0410/0410.exe
%System Root%/WINDOWS/system32/mui/0411/0411.exe
%System Root%/WINDOWS/system32/mui/0412/0412.exe
%System Root%/WINDOWS/system32/mui/0413/0413.exe
%System Root%/WINDOWS/system32/mui/0414/0414.exe
%System Root%/WINDOWS/system32/mui/0415/0415.exe
%System Root%/WINDOWS/system32/mui/0416/0416.exe
%System Root%/WINDOWS/system32/mui/0418/0418.exe
%System Root%/WINDOWS/system32/mui/0419/0419.exe
%System Root%/WINDOWS/system32/mui/041a/041a.exe
%System Root%/WINDOWS/system32/mui/041b/041b.exe
%System Root%/WINDOWS/system32/mui/041D/041D.exe
%System Root%/WINDOWS/system32/mui/041e/041e.exe
%System Root%/WINDOWS/system32/mui/041f/041f.exe
%System Root%/WINDOWS/system32/mui/0424/0424.exe
%System Root%/WINDOWS/system32/mui/0425/0425.exe
%System Root%/WINDOWS/system32/mui/0426/0426.exe
%System Root%/WINDOWS/system32/mui/0427/0427.exe
%System Root%/WINDOWS/system32/mui/0804/0804.exe
%System Root%/WINDOWS/system32/mui/0816/0816.exe
%System Root%/WINDOWS/system32/mui/0C0A/0C0A.exe
%System Root%/WINDOWS/system32/mui/dispspec/dispspec.exe
%System Root%/WINDOWS/system32/npp/npp.exe
%System Root%/WINDOWS/system32/oobe/oobe.exe
%System Root%/WINDOWS/system32/oobe/actsetup/actsetup.exe
%System Root%/WINDOWS/system32/oobe/error/error.exe
%System Root%/WINDOWS/system32/oobe/html/html.exe
%System Root%/WINDOWS/system32/oobe/html/dslmain/dslmain.exe
%System Root%/WINDOWS/system32/oobe/html/iconnect/iconnect.exe
%System Root%/WINDOWS/system32/oobe/html/ispsgnup/ispsgnup.exe
%System Root%/WINDOWS/system32/oobe/html/isptype/isptype.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/mouse.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/images/images.exe
%System Root%/WINDOWS/system32/oobe/html/oemcust/oemcust.exe
%System Root%/WINDOWS/system32/oobe/html/oemhw/oemhw.exe
%System Root%/WINDOWS/system32/oobe/html/oemreg/oemreg.exe
%System Root%/WINDOWS/system32/oobe/html/sconnect/sconnect.exe
%System Root%/WINDOWS/system32/oobe/icserror/icserror.exe
%System Root%/WINDOWS/system32/oobe/images/images.exe
%System Root%/WINDOWS/system32/oobe/isperror/isperror.exe
%System Root%/WINDOWS/system32/oobe/regerror/regerror.exe
%System Root%/WINDOWS/system32/oobe/sample/sample.exe
%System Root%/WINDOWS/system32/oobe/setup/setup.exe
%System Root%/WINDOWS/system32/ras/ras.exe
%System Root%/WINDOWS/system32/ReinstallBackups/ReinstallBackups.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/0000.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/0001.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/i386/i386.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/0002.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/0003.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/Restore/Restore.exe
%System Root%/WINDOWS/system32/Setup/Setup.exe
%System Root%/WINDOWS/system32/ShellExt/ShellExt.exe
%System Root%/WINDOWS/system32/spool/spool.exe
%System Root%/WINDOWS/system32/spool/drivers/drivers.exe
%System Root%/WINDOWS/system32/spool/drivers/color/color.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/3.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/temp/temp.exe
%System Root%/WINDOWS/system32/spool/PRINTERS/PRINTERS.exe
%System Root%/WINDOWS/system32/spool/prtprocs/prtprocs.exe
%System Root%/WINDOWS/system32/spool/prtprocs/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/prtprocs/x64/x64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/XPSEP.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386/i386.exe
%System Root%/WINDOWS/system32/termcap/termcap.exe
%System Root%/WINDOWS/system32/usmt/usmt.exe
%System Root%/WINDOWS/system32/wbem/wbem.exe
%System Root%/WINDOWS/system32/wbem/AutoRecover/AutoRecover.exe
%System Root%/WINDOWS/system32/wbem/Logs/Logs.exe
%System Root%/WINDOWS/system32/wbem/mof/mof.exe
%System Root%/WINDOWS/system32/wbem/mof/bad/bad.exe
%System Root%/WINDOWS/system32/wbem/mof/good/good.exe
%System Root%/WINDOWS/system32/wbem/Performance/Performance.exe
%System Root%/WINDOWS/system32/wbem/Repository/Repository.exe
%System Root%/WINDOWS/system32/wbem/Repository/FS/FS.exe
%System Root%/WINDOWS/system32/wbem/snmp/snmp.exe
%System Root%/WINDOWS/system32/wbem/xml/xml.exe
%System Root%/WINDOWS/system32/wins/wins.exe
%System Root%/WINDOWS/system32/xircom/xircom.exe
%System Root%/WINDOWS/system32/XPSViewer/XPSViewer.exe
%System Root%/WINDOWS/system32/XPSViewer/en-us/en-us.exe
%System Root%/WINDOWS/Tasks/Tasks.exe
%System Root%/WINDOWS/Temp/Temp.exe
%System Root%/WINDOWS/twain_32/twain_32.exe
%System Root%/WINDOWS/Web/Web.exe
%System Root%/WINDOWS/Web/printers/printers.exe
%System Root%/WINDOWS/Web/printers/images/images.exe
%System Root%/WINDOWS/Web/Wallpaper/Wallpaper.exe
%System Root%/WINDOWS/WinSxS/WinSxS.exe
%System Root%/WINDOWS/WinSxS/InstallTemp/InstallTemp.exe
%System Root%/WINDOWS/WinSxS/Manifests/Manifests.exe
%System Root%/WINDOWS/WinSxS/Policies/Policies.exe

To manually delete a malware/grayware component from an affected system:

• For Windows 2000, Windows XP, and Windows Server 2003:

Right-click Start then click Search....
In the Named input box, type:
%System Root%/{malware file name}/{malware file name}.exe
%System Root%/Documents and Settings/Documents and Settings.exe
%System Root%/Documents and Settings/All Users/All Users.exe
%System Root%/Documents and Settings/All Users/Application Data/Application Data.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Adobe.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Acrobat/Acrobat.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/Setup.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/Crypto.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/DSS.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/RSA.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/S-1-5-18.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/HTML Help/HTML Help.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Index/Media Index.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Network.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Connections.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Cm/Cm.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Pbk/Pbk.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/User Account Pictures.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/Default Pictures/Default Pictures.exe
%System Root%/Documents and Settings/All Users/Desktop/Desktop.exe
%System Root%/Documents and Settings/All Users/Documents/Documents.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Playlists/My Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Music/Sample Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/Sample Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/0008044E/0008044E.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/Sample Pictures/Sample Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Videos/My Videos.exe
%System Root%/Documents and Settings/All Users/DRM/DRM.exe
%System Root%/Documents and Settings/All Users/Favorites/Favorites.exe
%System Root%/Documents and Settings/All Users/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Communications/Communications.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/System Tools/System Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Games/Games.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/WinPcap/WinPcap.exe
%System Root%/Documents and Settings/All Users/Templates/Templates.exe
%System Root%/Documents and Settings/Default User/Default User.exe
%System Root%/Documents and Settings/Default User/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Default User/Cookies/Cookies.exe
%System Root%/Documents and Settings/Default User/Desktop/Desktop.exe
%System Root%/Documents and Settings/Default User/Favorites/Favorites.exe
%System Root%/Documents and Settings/Default User/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Default User/Local Settings/History/History.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Default User/My Documents/My Documents.exe
%System Root%/Documents and Settings/Default User/NetHood/NetHood.exe
%System Root%/Documents and Settings/Default User/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Default User/Recent/Recent.exe
%System Root%/Documents and Settings/Default User/SendTo/SendTo.exe
%System Root%/Documents and Settings/Default User/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Default User/Templates/Templates.exe
%System Root%/Documents and Settings/LocalService/LocalService.exe
%System Root%/Documents and Settings/LocalService/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/LocalService/Cookies/Cookies.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/LocalService/Local Settings/History/History.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/NetworkService/NetworkService.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/NetworkService/Cookies/Cookies.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/History/History.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/Wilbert.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/Identities.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Quick Launch/Quick Launch.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/MMC.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/secpol/secpol.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Themes/Themes.exe
%System Root%/Documents and Settings/Wilbert/Cookies/Cookies.exe
%System Root%/Documents and Settings/Wilbert/Desktop/Desktop.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Favorites.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Links/Links.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/CD Burning/CD Burning.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/History/History.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Documents.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Music/My Music.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/Wilbert/NetHood/NetHood.exe
%System Root%/Documents and Settings/Wilbert/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Wilbert/Recent/Recent.exe
%System Root%/Documents and Settings/Wilbert/SendTo/SendTo.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Wilbert/Templates/Templates.exe
%System Root%/ntldr/ntldr.exe
%System Root%/Program Files/Program Files.exe
%System Root%/Program Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Common Files.exe
%System Root%/Program Files/Common Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/Acrobat.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/ActiveX/ActiveX.exe
%System Root%/Program Files/Common Files/Adobe/ARM/ARM.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/HelpCfg.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/en_US/en_US.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Microsoft Shared.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DAO/DAO.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/DW.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1025/1025.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1028/1028.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1031/1031.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1036/1036.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1040/1040.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1041/1041.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1042/1042.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/2052/2052.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/3082/3082.exe
%System Root%/Program Files/Common Files/Microsoft Shared/MSInfo/MSInfo.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/Speech.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Stationery/Stationery.exe
%System Root%/Program Files/Common Files/Microsoft Shared/TextConv/TextConv.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Triedit/Triedit.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VC/VC.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VGX/VGX.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Web Folders/Web Folders.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/web server extensions.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/40.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/admcgi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/admisapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/bots.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/vinavbar/vinavbar.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/isapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/servsupp/servsupp.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/MSSoap/MSSoap.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Binaries.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/Resources.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/1033/1033.exe
%System Root%/Program Files/Common Files/ODBC/ODBC.exe
%System Root%/Program Files/Common Files/ODBC/Data Sources/Data Sources.exe
%System Root%/Program Files/Common Files/Services/Services.exe
%System Root%/Program Files/Common Files/SpeechEngines/SpeechEngines.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Microsoft.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/Lexicon.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/1033/1033.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/TTS.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/1033/1033.exe
%System Root%/Program Files/Common Files/System/System.exe
%System Root%/Program Files/Common Files/System/ado/ado.exe
%System Root%/Program Files/Common Files/System/msadc/msadc.exe
%System Root%/Program Files/Common Files/System/Ole DB/Ole DB.exe
%System Root%/Program Files/ComPlus Applications/ComPlus Applications.exe
%System Root%/Program Files/Internet Explorer/Internet Explorer.exe
%System Root%/Program Files/Internet Explorer/Connection Wizard/Connection Wizard.exe
%System Root%/Program Files/Internet Explorer/MUI/MUI.exe
%System Root%/Program Files/Internet Explorer/MUI/0409/0409.exe
%System Root%/Program Files/Internet Explorer/PLUGINS/PLUGINS.exe
%System Root%/Program Files/Internet Explorer/SIGNUP/SIGNUP.exe
%System Root%/Program Files/Messenger/Messenger.exe
%System Root%/Program Files/microsoft frontpage/microsoft frontpage.exe
%System Root%/Program Files/Movie Maker/Movie Maker.exe
%System Root%/Program Files/Movie Maker/MUI/MUI.exe
%System Root%/Program Files/Movie Maker/MUI/0409/0409.exe
%System Root%/Program Files/Movie Maker/Shared/Shared.exe
%System Root%/Program Files/Movie Maker/Shared/Profiles/Profiles.exe
%System Root%/Program Files/MSBuild/MSBuild.exe
%System Root%/Program Files/MSBuild/Microsoft/Microsoft.exe
%System Root%/Program Files/MSBuild/Microsoft/Windows Workflow Foundation/Windows Workflow Foundation.exe
%System Root%/Program Files/MSN/MSN.exe
%System Root%/Program Files/MSN/MSNCoreFiles/MSNCoreFiles.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/Install.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/MSN9Components/MSN9Components.exe
%System Root%/Program Files/MSN/MSNCoreFiles/OOBE/OOBE.exe
%System Root%/Program Files/MSN Gaming Zone/MSN Gaming Zone.exe
%System Root%/Program Files/MSN Gaming Zone/Windows/Windows.exe
%System Root%/Program Files/NetMeeting/NetMeeting.exe
%System Root%/Program Files/Online Services/Online Services.exe
%System Root%/Program Files/Outlook Express/Outlook Express.exe
%System Root%/Program Files/Reference Assemblies/Reference Assemblies.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Microsoft.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Framework/Framework.exe
%System Root%/Program Files/Uninstall Information/Uninstall Information.exe
%System Root%/Program Files/Windows Media Player/Windows Media Player.exe
%System Root%/Program Files/Windows Media Player/Icons/Icons.exe
%System Root%/Program Files/Windows Media Player/Sample Playlists/Sample Playlists.exe
%System Root%/Program Files/Windows Media Player/Skins/Skins.exe
%System Root%/Program Files/Windows Media Player/Visualizations/Visualizations.exe
%System Root%/Program Files/Windows NT/Windows NT.exe
%System Root%/Program Files/Windows NT/Accessories/Accessories.exe
%System Root%/Program Files/Windows NT/Pinball/Pinball.exe
%System Root%/Program Files/WindowsUpdate/WindowsUpdate.exe
%System Root%/Program Files/WinPcap/WinPcap.exe
%System Root%/Program Files/xerox/xerox.exe
%System Root%/Program Files/xerox/nwwia/nwwia.exe
%System Root%/System Volume Information/System Volume Information.exe
%System Root%/WINDOWS/WINDOWS.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/$MSI31Uninstall_KB893803v2$.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00013/reg00013.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00014/reg00014.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00015/reg00015.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00016/reg00016.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00017/reg00017.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00018/reg00018.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00019/reg00019.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00020/reg00020.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00021/reg00021.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00022/reg00022.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00023/reg00023.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00024/reg00024.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00025/reg00025.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00026/reg00026.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00027/reg00027.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00028/reg00028.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00029/reg00029.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00030/reg00030.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00031/reg00031.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00032/reg00032.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00033/reg00033.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00034/reg00034.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00035/reg00035.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00036/reg00036.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00037/reg00037.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00038/reg00038.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00039/reg00039.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00040/reg00040.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00041/reg00041.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00042/reg00042.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00043/reg00043.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00044/reg00044.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00045/reg00045.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00046/reg00046.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00047/reg00047.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00048/reg00048.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00051/reg00051.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00052/reg00052.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00053/reg00053.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00054/reg00054.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00055/reg00055.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00056/reg00056.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00057/reg00057.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00058/reg00058.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00059/reg00059.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00060/reg00060.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00061/reg00061.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00062/reg00062.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00063/reg00063.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00064/reg00064.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00065/reg00065.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00066/reg00066.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00067/reg00067.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00068/reg00068.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00069/reg00069.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00070/reg00070.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00071/reg00071.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00072/reg00072.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00073/reg00073.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00074/reg00074.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00075/reg00075.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00076/reg00076.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00077/reg00077.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00078/reg00078.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00079/reg00079.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00080/reg00080.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00081/reg00081.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00082/reg00082.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00083/reg00083.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00084/reg00084.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00085/reg00085.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00086/reg00086.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00087/reg00087.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00088/reg00088.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00089/reg00089.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00090/reg00090.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00091/reg00091.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00092/reg00092.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00093/reg00093.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00094/reg00094.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00095/reg00095.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00096/reg00096.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00097/reg00097.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00098/reg00098.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00099/reg00099.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00100/reg00100.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00101/reg00101.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00102/reg00102.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00103/reg00103.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00104/reg00104.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00105/reg00105.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00106/reg00106.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00107/reg00107.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00108/reg00108.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00109/reg00109.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00110/reg00110.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00111/reg00111.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00112/reg00112.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00113/reg00113.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00114/reg00114.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00115/reg00115.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00116/reg00116.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/spuninst/spuninst.exe
%System Root%/WINDOWS/$NtUninstallWIC$/$NtUninstallWIC$.exe
%System Root%/WINDOWS/$NtUninstallWIC$/spuninst/spuninst.exe
%System Root%/WINDOWS/addins/addins.exe
%System Root%/WINDOWS/AppPatch/AppPatch.exe
%System Root%/WINDOWS/assembly/assembly.exe
%System Root%/WINDOWS/assembly/GAC_32/GAC_32.exe
%System Root%/WINDOWS/assembly/GAC_32/CustomMarshalers/CustomMarshalers.exe
%System Root%/WINDOWS/assembly/GAC_32/ISymWrapper/ISymWrapper.exe
%System Root%/WINDOWS/assembly/GAC_32/mscorlib/mscorlib.exe
%System Root%/WINDOWS/assembly/GAC_32/PresentationCore/PresentationCore.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/GAC_MSIL.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Accessibility/Accessibility.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/AspNetMMCExt/AspNetMMCExt.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/cscompmgd/cscompmgd.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEExecRemote/IEExecRemote.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEHost/IEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IIEHost/IIEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Microsoft_VsaVb/Microsoft_VsaVb.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationBuildTasks/PresentationBuildTasks.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationCFFRasterizer/PresentationCFFRasterizer.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationFramework/PresentationFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationUI/PresentationUI.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/ReachFramework/ReachFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/SMDiagnostics/SMDiagnostics.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/sysglobl/sysglobl.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/System/System.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClient/UIAutomationClient.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClientsideProviders/UIAutomationClientsideProviders.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationProvider/UIAutomationProvider.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationTypes/UIAutomationTypes.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsBase/WindowsBase.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsFormsIntegration/WindowsFormsIntegration.exe
%System Root%/WINDOWS/assembly/temp/temp.exe
%System Root%/WINDOWS/assembly/tmp/tmp.exe
%System Root%/WINDOWS/Config/Config.exe
%System Root%/WINDOWS/Connection Wizard/Connection Wizard.exe
%System Root%/WINDOWS/Cursors/Cursors.exe
%System Root%/WINDOWS/Debug/Debug.exe
%System Root%/WINDOWS/Debug/UserMode/UserMode.exe
%System Root%/WINDOWS/Downloaded Program Files/Downloaded Program Files.exe
%System Root%/WINDOWS/Driver Cache/Driver Cache.exe
%System Root%/WINDOWS/Driver Cache/i386/i386.exe
%System Root%/WINDOWS/ehome/ehome.exe
%System Root%/WINDOWS/Fonts/Fonts.exe
%System Root%/WINDOWS/Help/Help.exe
%System Root%/WINDOWS/Help/Tours/Tours.exe
%System Root%/WINDOWS/Help/Tours/htmlTour/htmlTour.exe
%System Root%/WINDOWS/Help/Tours/mmTour/mmTour.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/WindowsMediaPlayer.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Audio.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Wav/Wav.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Cnt/Cnt.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Css/Css.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Img.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Btn/Btn.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/WMarks/WMarks.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Scr/Scr.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Video/Video.exe
%System Root%/WINDOWS/ime/ime.exe
%System Root%/WINDOWS/ime/chsime/chsime.exe
%System Root%/WINDOWS/ime/chsime/applets/applets.exe
%System Root%/WINDOWS/ime/CHTIME/CHTIME.exe
%System Root%/WINDOWS/ime/CHTIME/Applets/Applets.exe
%System Root%/WINDOWS/ime/imejp/imejp.exe
%System Root%/WINDOWS/ime/imejp/applets/applets.exe
%System Root%/WINDOWS/ime/imejp98/imejp98.exe
%System Root%/WINDOWS/ime/imjp8_1/imjp8_1.exe
%System Root%/WINDOWS/ime/imjp8_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/imkr6_1.exe
%System Root%/WINDOWS/ime/imkr6_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/dicts/dicts.exe
%System Root%/WINDOWS/ime/shared/shared.exe
%System Root%/WINDOWS/ime/shared/res/res.exe
%System Root%/WINDOWS/inf/inf.exe
%System Root%/WINDOWS/Installer/Installer.exe
%System Root%/WINDOWS/Installer/$PatchCache$/$PatchCache$.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/Managed.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/17400AB28230347339DBAF1833357A38/17400AB28230347339DBAF1833357A38.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/1F3B805BA42A0C233B0158879691FE82/1F3B805BA42A0C233B0158879691FE82.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/ARPIco/ARPIco.exe
%System Root%/WINDOWS/Installer/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}.exe
%System Root%/WINDOWS/Installer/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/WINDOWS/Installer/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/WINDOWS/java/java.exe
%System Root%/WINDOWS/java/classes/classes.exe
%System Root%/WINDOWS/java/trustlib/trustlib.exe
%System Root%/WINDOWS/Media/Media.exe
%System Root%/WINDOWS/msagent/msagent.exe
%System Root%/WINDOWS/msagent/chars/chars.exe
%System Root%/WINDOWS/msagent/intl/intl.exe
%System Root%/WINDOWS/msapps/msapps.exe
%System Root%/WINDOWS/msapps/msinfo/msinfo.exe
%System Root%/WINDOWS/mui/mui.exe
%System Root%/WINDOWS/Offline Web Pages/Offline Web Pages.exe
%System Root%/WINDOWS/pchealth/pchealth.exe
%System Root%/WINDOWS/pchealth/ERRORREP/ERRORREP.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QHEADLES/QHEADLES.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QSIGNOFF/QSIGNOFF.exe
%System Root%/WINDOWS/pchealth/helpctr/helpctr.exe
%System Root%/WINDOWS/pchealth/helpctr/BATCH/BATCH.exe
%System Root%/WINDOWS/pchealth/helpctr/binaries/binaries.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Config.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Cache/Cache.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/CheckPoint/CheckPoint.exe
%System Root%/WINDOWS/pchealth/helpctr/Database/Database.exe
%System Root%/WINDOWS/pchealth/helpctr/DataColl/DataColl.exe
%System Root%/WINDOWS/pchealth/helpctr/HelpFiles/HelpFiles.exe
%System Root%/WINDOWS/pchealth/helpctr/Indices/Indices.exe
%System Root%/WINDOWS/pchealth/helpctr/InstalledSKUs/InstalledSKUs.exe
%System Root%/WINDOWS/pchealth/helpctr/Logs/Logs.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/OfflineCache.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/Professional_32#0409/Professional_32#0409.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/PackageStore.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/CRC_Disk/CRC_Disk.exe
%System Root%/WINDOWS/pchealth/helpctr/System/System.exe
%System Root%/WINDOWS/pchealth/helpctr/System/blurbs/blurbs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/CompatCtr/CompatCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System/css/css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DFS/DFS.exe
%System Root%/WINDOWS/pchealth/helpctr/System/dialogs/dialogs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DVDUpgrd/DVDUpgrd.exe
%System Root%/WINDOWS/pchealth/helpctr/System/ErrMsg/ErrMsg.exe
%System Root%/WINDOWS/pchealth/helpctr/System/errors/errors.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/images.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/16x16/16x16.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/24x24/24x24.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/32x32/32x32.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/48x48/48x48.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Centers/Centers.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Expando/Expando.exe
%System Root%/WINDOWS/pchealth/helpctr/System/NetDiag/NetDiag.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/panels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/subpanels/subpanels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/rc/rc.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Interaction.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Client/Client.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Server/Server.exe
%System Root%/WINDOWS/pchealth/helpctr/System/scripts/scripts.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/sysinfo.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/graphics.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/33x16pie/33x16pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/47x24pie/47x24pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/UpdateCtr/UpdateCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System_OEM/System_OEM.exe
%System Root%/WINDOWS/pchealth/helpctr/Temp/Temp.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/Vendors.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Escalation.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Email/Email.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Unsolicited/Unsolicited.exe
%System Root%/WINDOWS/pchealth/UploadLB/UploadLB.exe
%System Root%/WINDOWS/pchealth/UploadLB/Binaries/Binaries.exe
%System Root%/WINDOWS/pchealth/UploadLB/Config/Config.exe
%System Root%/WINDOWS/PeerNet/PeerNet.exe
%System Root%/WINDOWS/Prefetch/Prefetch.exe
%System Root%/WINDOWS/Provisioning/Provisioning.exe
%System Root%/WINDOWS/Provisioning/Schemas/Schemas.exe
%System Root%/WINDOWS/pss/pss.exe
%System Root%/WINDOWS/Registration/Registration.exe
%System Root%/WINDOWS/Registration/CRMLog/CRMLog.exe
%System Root%/WINDOWS/repair/repair.exe
%System Root%/WINDOWS/repair/default/default.exe
%System Root%/WINDOWS/repair/sam/sam.exe
%System Root%/WINDOWS/repair/security/security.exe
%System Root%/WINDOWS/repair/software/software.exe
%System Root%/WINDOWS/repair/system/system.exe
%System Root%/WINDOWS/Resources/Resources.exe
%System Root%/WINDOWS/Resources/Themes/Themes.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Luna.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Shell.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Homestead/Homestead.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Metallic/Metallic.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/NormalColor/NormalColor.exe
%System Root%/WINDOWS/security/security.exe
%System Root%/WINDOWS/security/Database/Database.exe
%System Root%/WINDOWS/security/logs/logs.exe
%System Root%/WINDOWS/security/templates/templates.exe
%System Root%/WINDOWS/SoftwareDistribution/SoftwareDistribution.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/DataStore.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/Logs/Logs.exe
%System Root%/WINDOWS/SoftwareDistribution/Download/Download.exe
%System Root%/WINDOWS/SoftwareDistribution/EventCache/EventCache.exe
%System Root%/WINDOWS/SoftwareDistribution/SelfUpdate/SelfUpdate.exe
%System Root%/WINDOWS/srchasst/srchasst.exe
%System Root%/WINDOWS/srchasst/chars/chars.exe
%System Root%/WINDOWS/srchasst/mui/mui.exe
%System Root%/WINDOWS/srchasst/mui/0409/0409.exe
%System Root%/WINDOWS/system/system.exe
%System Root%/WINDOWS/system32/system32.exe
%System Root%/WINDOWS/system32/-1/-1.exe
%System Root%/WINDOWS/system32/1025/1025.exe
%System Root%/WINDOWS/system32/1028/1028.exe
%System Root%/WINDOWS/system32/1031/1031.exe
%System Root%/WINDOWS/system32/1033/1033.exe
%System Root%/WINDOWS/system32/1037/1037.exe
%System Root%/WINDOWS/system32/1041/1041.exe
%System Root%/WINDOWS/system32/1042/1042.exe
%System Root%/WINDOWS/system32/1054/1054.exe
%System Root%/WINDOWS/system32/2052/2052.exe
%System Root%/WINDOWS/system32/3076/3076.exe
%System Root%/WINDOWS/system32/3com_dmi/3com_dmi.exe
%System Root%/WINDOWS/system32/CatRoot/CatRoot.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/CatRoot2.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/Com/Com.exe
%System Root%/WINDOWS/system32/config/config.exe
%System Root%/WINDOWS/system32/config/default/default.exe
%System Root%/WINDOWS/system32/config/SAM/SAM.exe
%System Root%/WINDOWS/system32/config/SECURITY/SECURITY.exe
%System Root%/WINDOWS/system32/config/software/software.exe
%System Root%/WINDOWS/system32/config/system/system.exe
%System Root%/WINDOWS/system32/config/systemprofile/systemprofile.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Cookies/Cookies.exe
%System Root%/WINDOWS/system32/config/systemprofile/Desktop/Desktop.exe
%System Root%/WINDOWS/system32/config/systemprofile/Favorites/Favorites.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Local Settings.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/History/History.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temp/Temp.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/WINDOWS/system32/config/systemprofile/My Documents/My Documents.exe
%System Root%/WINDOWS/system32/config/systemprofile/NetHood/NetHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/PrintHood/PrintHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/Recent/Recent.exe
%System Root%/WINDOWS/system32/config/systemprofile/SendTo/SendTo.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Start Menu.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Programs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Startup/Startup.exe
%System Root%/WINDOWS/system32/config/systemprofile/Templates/Templates.exe
%System Root%/WINDOWS/system32/config/userdiff/userdiff.exe
%System Root%/WINDOWS/system32/dhcp/dhcp.exe
%System Root%/WINDOWS/system32/DirectX/DirectX.exe
%System Root%/WINDOWS/system32/DirectX/Dinput/Dinput.exe
%System Root%/WINDOWS/system32/dllcache/dllcache.exe
%System Root%/WINDOWS/system32/drivers/drivers.exe
%System Root%/WINDOWS/system32/drivers/disdn/disdn.exe
%System Root%/WINDOWS/system32/drivers/etc/etc.exe
%System Root%/WINDOWS/system32/drivers/etc/hosts/hosts.exe
%System Root%/WINDOWS/system32/drivers/etc/networks/networks.exe
%System Root%/WINDOWS/system32/drivers/etc/protocol/protocol.exe
%System Root%/WINDOWS/system32/drivers/etc/services/services.exe
%System Root%/WINDOWS/system32/en-us/en-us.exe
%System Root%/WINDOWS/system32/export/export.exe
%System Root%/WINDOWS/system32/GroupPolicy/GroupPolicy.exe
%System Root%/WINDOWS/system32/GroupPolicy/Machine/Machine.exe
%System Root%/WINDOWS/system32/GroupPolicy/User/User.exe
%System Root%/WINDOWS/system32/ias/ias.exe
%System Root%/WINDOWS/system32/icsxml/icsxml.exe
%System Root%/WINDOWS/system32/IME/IME.exe
%System Root%/WINDOWS/system32/IME/CINTLGNT/CINTLGNT.exe
%System Root%/WINDOWS/system32/IME/PINTLGNT/PINTLGNT.exe
%System Root%/WINDOWS/system32/IME/TINTLGNT/TINTLGNT.exe
%System Root%/WINDOWS/system32/inetsrv/inetsrv.exe
%System Root%/WINDOWS/system32/Macromed/Macromed.exe
%System Root%/WINDOWS/system32/Macromed/Flash/Flash.exe
%System Root%/WINDOWS/system32/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/Protect.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/S-1-5-18.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/User.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/04c6e779-a6c8-43ed-83fd-24277a54f46c/04c6e779-a6c8-43ed-83fd-24277a54f46c.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/920943d9-68f1-4a3f-9588-ac25fa191f28/920943d9-68f1-4a3f-9588-ac25fa191f28.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/adce7c98-b0e6-4ecd-b2d3-69b3060c02da/adce7c98-b0e6-4ecd-b2d3-69b3060c02da.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/Preferred/Preferred.exe
%System Root%/WINDOWS/system32/MsDtc/MsDtc.exe
%System Root%/WINDOWS/system32/MsDtc/Trace/Trace.exe
%System Root%/WINDOWS/system32/mui/mui.exe
%System Root%/WINDOWS/system32/mui/0009/0009.exe
%System Root%/WINDOWS/system32/mui/0401/0401.exe
%System Root%/WINDOWS/system32/mui/0402/0402.exe
%System Root%/WINDOWS/system32/mui/0404/0404.exe
%System Root%/WINDOWS/system32/mui/0405/0405.exe
%System Root%/WINDOWS/system32/mui/0406/0406.exe
%System Root%/WINDOWS/system32/mui/0407/0407.exe
%System Root%/WINDOWS/system32/mui/0408/0408.exe
%System Root%/WINDOWS/system32/mui/0409/0409.exe
%System Root%/WINDOWS/system32/mui/040b/040b.exe
%System Root%/WINDOWS/system32/mui/040C/040C.exe
%System Root%/WINDOWS/system32/mui/040D/040D.exe
%System Root%/WINDOWS/system32/mui/040e/040e.exe
%System Root%/WINDOWS/system32/mui/0410/0410.exe
%System Root%/WINDOWS/system32/mui/0411/0411.exe
%System Root%/WINDOWS/system32/mui/0412/0412.exe
%System Root%/WINDOWS/system32/mui/0413/0413.exe
%System Root%/WINDOWS/system32/mui/0414/0414.exe
%System Root%/WINDOWS/system32/mui/0415/0415.exe
%System Root%/WINDOWS/system32/mui/0416/0416.exe
%System Root%/WINDOWS/system32/mui/0418/0418.exe
%System Root%/WINDOWS/system32/mui/0419/0419.exe
%System Root%/WINDOWS/system32/mui/041a/041a.exe
%System Root%/WINDOWS/system32/mui/041b/041b.exe
%System Root%/WINDOWS/system32/mui/041D/041D.exe
%System Root%/WINDOWS/system32/mui/041e/041e.exe
%System Root%/WINDOWS/system32/mui/041f/041f.exe
%System Root%/WINDOWS/system32/mui/0424/0424.exe
%System Root%/WINDOWS/system32/mui/0425/0425.exe
%System Root%/WINDOWS/system32/mui/0426/0426.exe
%System Root%/WINDOWS/system32/mui/0427/0427.exe
%System Root%/WINDOWS/system32/mui/0804/0804.exe
%System Root%/WINDOWS/system32/mui/0816/0816.exe
%System Root%/WINDOWS/system32/mui/0C0A/0C0A.exe
%System Root%/WINDOWS/system32/mui/dispspec/dispspec.exe
%System Root%/WINDOWS/system32/npp/npp.exe
%System Root%/WINDOWS/system32/oobe/oobe.exe
%System Root%/WINDOWS/system32/oobe/actsetup/actsetup.exe
%System Root%/WINDOWS/system32/oobe/error/error.exe
%System Root%/WINDOWS/system32/oobe/html/html.exe
%System Root%/WINDOWS/system32/oobe/html/dslmain/dslmain.exe
%System Root%/WINDOWS/system32/oobe/html/iconnect/iconnect.exe
%System Root%/WINDOWS/system32/oobe/html/ispsgnup/ispsgnup.exe
%System Root%/WINDOWS/system32/oobe/html/isptype/isptype.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/mouse.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/images/images.exe
%System Root%/WINDOWS/system32/oobe/html/oemcust/oemcust.exe
%System Root%/WINDOWS/system32/oobe/html/oemhw/oemhw.exe
%System Root%/WINDOWS/system32/oobe/html/oemreg/oemreg.exe
%System Root%/WINDOWS/system32/oobe/html/sconnect/sconnect.exe
%System Root%/WINDOWS/system32/oobe/icserror/icserror.exe
%System Root%/WINDOWS/system32/oobe/images/images.exe
%System Root%/WINDOWS/system32/oobe/isperror/isperror.exe
%System Root%/WINDOWS/system32/oobe/regerror/regerror.exe
%System Root%/WINDOWS/system32/oobe/sample/sample.exe
%System Root%/WINDOWS/system32/oobe/setup/setup.exe
%System Root%/WINDOWS/system32/ras/ras.exe
%System Root%/WINDOWS/system32/ReinstallBackups/ReinstallBackups.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/0000.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/0001.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/i386/i386.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/0002.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/0003.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/Restore/Restore.exe
%System Root%/WINDOWS/system32/Setup/Setup.exe
%System Root%/WINDOWS/system32/ShellExt/ShellExt.exe
%System Root%/WINDOWS/system32/spool/spool.exe
%System Root%/WINDOWS/system32/spool/drivers/drivers.exe
%System Root%/WINDOWS/system32/spool/drivers/color/color.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/3.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/temp/temp.exe
%System Root%/WINDOWS/system32/spool/PRINTERS/PRINTERS.exe
%System Root%/WINDOWS/system32/spool/prtprocs/prtprocs.exe
%System Root%/WINDOWS/system32/spool/prtprocs/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/prtprocs/x64/x64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/XPSEP.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386/i386.exe
%System Root%/WINDOWS/system32/termcap/termcap.exe
%System Root%/WINDOWS/system32/usmt/usmt.exe
%System Root%/WINDOWS/system32/wbem/wbem.exe
%System Root%/WINDOWS/system32/wbem/AutoRecover/AutoRecover.exe
%System Root%/WINDOWS/system32/wbem/Logs/Logs.exe
%System Root%/WINDOWS/system32/wbem/mof/mof.exe
%System Root%/WINDOWS/system32/wbem/mof/bad/bad.exe
%System Root%/WINDOWS/system32/wbem/mof/good/good.exe
%System Root%/WINDOWS/system32/wbem/Performance/Performance.exe
%System Root%/WINDOWS/system32/wbem/Repository/Repository.exe
%System Root%/WINDOWS/system32/wbem/Repository/FS/FS.exe
%System Root%/WINDOWS/system32/wbem/snmp/snmp.exe
%System Root%/WINDOWS/system32/wbem/xml/xml.exe
%System Root%/WINDOWS/system32/wins/wins.exe
%System Root%/WINDOWS/system32/xircom/xircom.exe
%System Root%/WINDOWS/system32/XPSViewer/XPSViewer.exe
%System Root%/WINDOWS/system32/XPSViewer/en-us/en-us.exe
%System Root%/WINDOWS/Tasks/Tasks.exe
%System Root%/WINDOWS/Temp/Temp.exe
%System Root%/WINDOWS/twain_32/twain_32.exe
%System Root%/WINDOWS/Web/Web.exe
%System Root%/WINDOWS/Web/printers/printers.exe
%System Root%/WINDOWS/Web/printers/images/images.exe
%System Root%/WINDOWS/Web/Wallpaper/Wallpaper.exe
%System Root%/WINDOWS/WinSxS/WinSxS.exe
%System Root%/WINDOWS/WinSxS/InstallTemp/InstallTemp.exe
%System Root%/WINDOWS/WinSxS/Manifests/Manifests.exe
%System Root%/WINDOWS/WinSxS/Policies/Policies.exe
In the Look In drop-down list, select My Computer then press Enter.
Once located, select the file then press SHIFT+DELETE to delete it.
Repeat the said steps for all files listed.

• For Windows Vista and Windows 7 users:

Click Start>Computer.
In the Search input box, type:
%System Root%/{malware file name}/{malware file name}.exe
%System Root%/Documents and Settings/Documents and Settings.exe
%System Root%/Documents and Settings/All Users/All Users.exe
%System Root%/Documents and Settings/All Users/Application Data/Application Data.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Adobe.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Acrobat/Acrobat.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/Setup.exe
%System Root%/Documents and Settings/All Users/Application Data/Adobe/Setup/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/Crypto.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/DSS.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/DSS/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/RSA.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/MachineKeys/MachineKeys.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/S-1-5-18.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Crypto/RSA/S-1-5-18/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b/d42cc0c3858a58db2db37658219e6400_6abce574-4afc-42c5-8ab9-5739a84d8a8b.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/HTML Help/HTML Help.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Index/Media Index.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Network.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Connections.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Cm/Cm.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/Network/Connections/Pbk/Pbk.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/User Account Pictures.exe
%System Root%/Documents and Settings/All Users/Application Data/Microsoft/User Account Pictures/Default Pictures/Default Pictures.exe
%System Root%/Documents and Settings/All Users/Desktop/Desktop.exe
%System Root%/Documents and Settings/All Users/Documents/Documents.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/My Playlists/My Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Music/Sample Music.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/Sample Playlists.exe
%System Root%/Documents and Settings/All Users/Documents/My Music/Sample Playlists/0008044E/0008044E.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Pictures/Sample Pictures/Sample Pictures.exe
%System Root%/Documents and Settings/All Users/Documents/My Videos/My Videos.exe
%System Root%/Documents and Settings/All Users/DRM/DRM.exe
%System Root%/Documents and Settings/All Users/Favorites/Favorites.exe
%System Root%/Documents and Settings/All Users/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Communications/Communications.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Accessories/System Tools/System Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Games/Games.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/All Users/Start Menu/Programs/WinPcap/WinPcap.exe
%System Root%/Documents and Settings/All Users/Templates/Templates.exe
%System Root%/Documents and Settings/Default User/Default User.exe
%System Root%/Documents and Settings/Default User/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Default User/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Default User/Cookies/Cookies.exe
%System Root%/Documents and Settings/Default User/Desktop/Desktop.exe
%System Root%/Documents and Settings/Default User/Favorites/Favorites.exe
%System Root%/Documents and Settings/Default User/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Default User/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Default User/Local Settings/History/History.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Default User/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Default User/My Documents/My Documents.exe
%System Root%/Documents and Settings/Default User/NetHood/NetHood.exe
%System Root%/Documents and Settings/Default User/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Default User/Recent/Recent.exe
%System Root%/Documents and Settings/Default User/SendTo/SendTo.exe
%System Root%/Documents and Settings/Default User/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Default User/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Default User/Templates/Templates.exe
%System Root%/Documents and Settings/LocalService/LocalService.exe
%System Root%/Documents and Settings/LocalService/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/LocalService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/LocalService/Cookies/Cookies.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-19/S-1-5-19.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/LocalService/Local Settings/History/History.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/LocalService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/NetworkService/NetworkService.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/NetworkService/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/NetworkService/Cookies/Cookies.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Credentials/S-1-5-20/S-1-5-20.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/History/History.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/NetworkService/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/Wilbert.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/Identities.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Identities/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}/{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Internet Explorer/Quick Launch/Quick Launch.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/MMC.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/MMC/secpol/secpol.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Application Data/Microsoft/Windows/Themes/Themes.exe
%System Root%/Documents and Settings/Wilbert/Cookies/Cookies.exe
%System Root%/Documents and Settings/Wilbert/Desktop/Desktop.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Favorites.exe
%System Root%/Documents and Settings/Wilbert/Favorites/Links/Links.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Local Settings.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Application Data.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/CD Burning/CD Burning.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/Credentials.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Credentials/S-1-5-21-1645522239-1292428093-682003330-1003/S-1-5-21-1645522239-1292428093-682003330-1003.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows/Windows.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/History/History.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/Temp.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temp/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/Documents and Settings/Wilbert/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Documents.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Music/My Music.exe
%System Root%/Documents and Settings/Wilbert/My Documents/My Pictures/My Pictures.exe
%System Root%/Documents and Settings/Wilbert/NetHood/NetHood.exe
%System Root%/Documents and Settings/Wilbert/PrintHood/PrintHood.exe
%System Root%/Documents and Settings/Wilbert/Recent/Recent.exe
%System Root%/Documents and Settings/Wilbert/SendTo/SendTo.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Start Menu.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Programs.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Administrative Tools/Administrative Tools.exe
%System Root%/Documents and Settings/Wilbert/Start Menu/Programs/Startup/Startup.exe
%System Root%/Documents and Settings/Wilbert/Templates/Templates.exe
%System Root%/ntldr/ntldr.exe
%System Root%/Program Files/Program Files.exe
%System Root%/Program Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Common Files.exe
%System Root%/Program Files/Common Files/Adobe/Adobe.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/Acrobat.exe
%System Root%/Program Files/Common Files/Adobe/Acrobat/ActiveX/ActiveX.exe
%System Root%/Program Files/Common Files/Adobe/ARM/ARM.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/HelpCfg.exe
%System Root%/Program Files/Common Files/Adobe/HelpCfg/en_US/en_US.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Microsoft Shared.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DAO/DAO.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/DW.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1025/1025.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1028/1028.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1031/1031.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1036/1036.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1040/1040.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1041/1041.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/1042/1042.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/2052/2052.exe
%System Root%/Program Files/Common Files/Microsoft Shared/DW/3082/3082.exe
%System Root%/Program Files/Common Files/Microsoft Shared/MSInfo/MSInfo.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/Speech.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Speech/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Stationery/Stationery.exe
%System Root%/Program Files/Common Files/Microsoft Shared/TextConv/TextConv.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Triedit/Triedit.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VC/VC.exe
%System Root%/Program Files/Common Files/Microsoft Shared/VGX/VGX.exe
%System Root%/Program Files/Common Files/Microsoft Shared/Web Folders/Web Folders.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/web server extensions.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/40.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/admcgi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admcgi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/admisapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/admisapi/scripts/scripts.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bin/1033/1033.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/bots.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/bots/vinavbar/vinavbar.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/isapi.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/isapi/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/servsupp/servsupp.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_bin.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_adm/_vti_adm.exe
%System Root%/Program Files/Common Files/Microsoft Shared/web server extensions/40/_vti_bin/_vti_aut/_vti_aut.exe
%System Root%/Program Files/Common Files/MSSoap/MSSoap.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Binaries.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/Resources.exe
%System Root%/Program Files/Common Files/MSSoap/Binaries/Resources/1033/1033.exe
%System Root%/Program Files/Common Files/ODBC/ODBC.exe
%System Root%/Program Files/Common Files/ODBC/Data Sources/Data Sources.exe
%System Root%/Program Files/Common Files/Services/Services.exe
%System Root%/Program Files/Common Files/SpeechEngines/SpeechEngines.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Microsoft.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/Lexicon.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/Lexicon/1033/1033.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/TTS.exe
%System Root%/Program Files/Common Files/SpeechEngines/Microsoft/TTS/1033/1033.exe
%System Root%/Program Files/Common Files/System/System.exe
%System Root%/Program Files/Common Files/System/ado/ado.exe
%System Root%/Program Files/Common Files/System/msadc/msadc.exe
%System Root%/Program Files/Common Files/System/Ole DB/Ole DB.exe
%System Root%/Program Files/ComPlus Applications/ComPlus Applications.exe
%System Root%/Program Files/Internet Explorer/Internet Explorer.exe
%System Root%/Program Files/Internet Explorer/Connection Wizard/Connection Wizard.exe
%System Root%/Program Files/Internet Explorer/MUI/MUI.exe
%System Root%/Program Files/Internet Explorer/MUI/0409/0409.exe
%System Root%/Program Files/Internet Explorer/PLUGINS/PLUGINS.exe
%System Root%/Program Files/Internet Explorer/SIGNUP/SIGNUP.exe
%System Root%/Program Files/Messenger/Messenger.exe
%System Root%/Program Files/microsoft frontpage/microsoft frontpage.exe
%System Root%/Program Files/Movie Maker/Movie Maker.exe
%System Root%/Program Files/Movie Maker/MUI/MUI.exe
%System Root%/Program Files/Movie Maker/MUI/0409/0409.exe
%System Root%/Program Files/Movie Maker/Shared/Shared.exe
%System Root%/Program Files/Movie Maker/Shared/Profiles/Profiles.exe
%System Root%/Program Files/MSBuild/MSBuild.exe
%System Root%/Program Files/MSBuild/Microsoft/Microsoft.exe
%System Root%/Program Files/MSBuild/Microsoft/Windows Workflow Foundation/Windows Workflow Foundation.exe
%System Root%/Program Files/MSN/MSN.exe
%System Root%/Program Files/MSN/MSNCoreFiles/MSNCoreFiles.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/Install.exe
%System Root%/Program Files/MSN/MSNCoreFiles/Install/MSN9Components/MSN9Components.exe
%System Root%/Program Files/MSN/MSNCoreFiles/OOBE/OOBE.exe
%System Root%/Program Files/MSN Gaming Zone/MSN Gaming Zone.exe
%System Root%/Program Files/MSN Gaming Zone/Windows/Windows.exe
%System Root%/Program Files/NetMeeting/NetMeeting.exe
%System Root%/Program Files/Online Services/Online Services.exe
%System Root%/Program Files/Outlook Express/Outlook Express.exe
%System Root%/Program Files/Reference Assemblies/Reference Assemblies.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Microsoft.exe
%System Root%/Program Files/Reference Assemblies/Microsoft/Framework/Framework.exe
%System Root%/Program Files/Uninstall Information/Uninstall Information.exe
%System Root%/Program Files/Windows Media Player/Windows Media Player.exe
%System Root%/Program Files/Windows Media Player/Icons/Icons.exe
%System Root%/Program Files/Windows Media Player/Sample Playlists/Sample Playlists.exe
%System Root%/Program Files/Windows Media Player/Skins/Skins.exe
%System Root%/Program Files/Windows Media Player/Visualizations/Visualizations.exe
%System Root%/Program Files/Windows NT/Windows NT.exe
%System Root%/Program Files/Windows NT/Accessories/Accessories.exe
%System Root%/Program Files/Windows NT/Pinball/Pinball.exe
%System Root%/Program Files/WindowsUpdate/WindowsUpdate.exe
%System Root%/Program Files/WinPcap/WinPcap.exe
%System Root%/Program Files/xerox/xerox.exe
%System Root%/Program Files/xerox/nwwia/nwwia.exe
%System Root%/System Volume Information/System Volume Information.exe
%System Root%/WINDOWS/WINDOWS.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/$MSI31Uninstall_KB893803v2$.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00013/reg00013.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00014/reg00014.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00015/reg00015.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00016/reg00016.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00017/reg00017.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00018/reg00018.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00019/reg00019.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00020/reg00020.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00021/reg00021.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00022/reg00022.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00023/reg00023.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00024/reg00024.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00025/reg00025.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00026/reg00026.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00027/reg00027.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00028/reg00028.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00029/reg00029.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00030/reg00030.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00031/reg00031.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00032/reg00032.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00033/reg00033.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00034/reg00034.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00035/reg00035.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00036/reg00036.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00037/reg00037.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00038/reg00038.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00039/reg00039.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00040/reg00040.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00041/reg00041.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00042/reg00042.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00043/reg00043.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00044/reg00044.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00045/reg00045.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00046/reg00046.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00047/reg00047.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00048/reg00048.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00051/reg00051.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00052/reg00052.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00053/reg00053.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00054/reg00054.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00055/reg00055.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00056/reg00056.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00057/reg00057.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00058/reg00058.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00059/reg00059.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00060/reg00060.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00061/reg00061.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00062/reg00062.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00063/reg00063.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00064/reg00064.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00065/reg00065.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00066/reg00066.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00067/reg00067.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00068/reg00068.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00069/reg00069.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00070/reg00070.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00071/reg00071.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00072/reg00072.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00073/reg00073.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00074/reg00074.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00075/reg00075.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00076/reg00076.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00077/reg00077.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00078/reg00078.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00079/reg00079.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00080/reg00080.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00081/reg00081.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00082/reg00082.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00083/reg00083.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00084/reg00084.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00085/reg00085.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00086/reg00086.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00087/reg00087.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00088/reg00088.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00089/reg00089.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00090/reg00090.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00091/reg00091.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00092/reg00092.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00093/reg00093.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00094/reg00094.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00095/reg00095.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00096/reg00096.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00097/reg00097.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00098/reg00098.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00099/reg00099.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00100/reg00100.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00101/reg00101.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00102/reg00102.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00103/reg00103.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00104/reg00104.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00105/reg00105.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00106/reg00106.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00107/reg00107.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00108/reg00108.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00109/reg00109.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00110/reg00110.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00111/reg00111.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00112/reg00112.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00113/reg00113.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00114/reg00114.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00115/reg00115.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/reg00116/reg00116.exe
%System Root%/WINDOWS/$MSI31Uninstall_KB893803v2$/spuninst/spuninst.exe
%System Root%/WINDOWS/$NtUninstallWIC$/$NtUninstallWIC$.exe
%System Root%/WINDOWS/$NtUninstallWIC$/spuninst/spuninst.exe
%System Root%/WINDOWS/addins/addins.exe
%System Root%/WINDOWS/AppPatch/AppPatch.exe
%System Root%/WINDOWS/assembly/assembly.exe
%System Root%/WINDOWS/assembly/GAC_32/GAC_32.exe
%System Root%/WINDOWS/assembly/GAC_32/CustomMarshalers/CustomMarshalers.exe
%System Root%/WINDOWS/assembly/GAC_32/ISymWrapper/ISymWrapper.exe
%System Root%/WINDOWS/assembly/GAC_32/mscorlib/mscorlib.exe
%System Root%/WINDOWS/assembly/GAC_32/PresentationCore/PresentationCore.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/GAC_MSIL.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Accessibility/Accessibility.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/AspNetMMCExt/AspNetMMCExt.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/cscompmgd/cscompmgd.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEExecRemote/IEExecRemote.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IEHost/IEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/IIEHost/IIEHost.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/Microsoft_VsaVb/Microsoft_VsaVb.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationBuildTasks/PresentationBuildTasks.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationCFFRasterizer/PresentationCFFRasterizer.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationFramework/PresentationFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/PresentationUI/PresentationUI.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/ReachFramework/ReachFramework.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/SMDiagnostics/SMDiagnostics.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/sysglobl/sysglobl.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/System/System.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClient/UIAutomationClient.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationClientsideProviders/UIAutomationClientsideProviders.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationProvider/UIAutomationProvider.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/UIAutomationTypes/UIAutomationTypes.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsBase/WindowsBase.exe
%System Root%/WINDOWS/assembly/GAC_MSIL/WindowsFormsIntegration/WindowsFormsIntegration.exe
%System Root%/WINDOWS/assembly/temp/temp.exe
%System Root%/WINDOWS/assembly/tmp/tmp.exe
%System Root%/WINDOWS/Config/Config.exe
%System Root%/WINDOWS/Connection Wizard/Connection Wizard.exe
%System Root%/WINDOWS/Cursors/Cursors.exe
%System Root%/WINDOWS/Debug/Debug.exe
%System Root%/WINDOWS/Debug/UserMode/UserMode.exe
%System Root%/WINDOWS/Downloaded Program Files/Downloaded Program Files.exe
%System Root%/WINDOWS/Driver Cache/Driver Cache.exe
%System Root%/WINDOWS/Driver Cache/i386/i386.exe
%System Root%/WINDOWS/ehome/ehome.exe
%System Root%/WINDOWS/Fonts/Fonts.exe
%System Root%/WINDOWS/Help/Help.exe
%System Root%/WINDOWS/Help/Tours/Tours.exe
%System Root%/WINDOWS/Help/Tours/htmlTour/htmlTour.exe
%System Root%/WINDOWS/Help/Tours/mmTour/mmTour.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/WindowsMediaPlayer.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Audio.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Audio/Wav/Wav.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Cnt/Cnt.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Css/Css.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Img.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/Btn/Btn.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Img/WMarks/WMarks.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Scr/Scr.exe
%System Root%/WINDOWS/Help/Tours/WindowsMediaPlayer/Video/Video.exe
%System Root%/WINDOWS/ime/ime.exe
%System Root%/WINDOWS/ime/chsime/chsime.exe
%System Root%/WINDOWS/ime/chsime/applets/applets.exe
%System Root%/WINDOWS/ime/CHTIME/CHTIME.exe
%System Root%/WINDOWS/ime/CHTIME/Applets/Applets.exe
%System Root%/WINDOWS/ime/imejp/imejp.exe
%System Root%/WINDOWS/ime/imejp/applets/applets.exe
%System Root%/WINDOWS/ime/imejp98/imejp98.exe
%System Root%/WINDOWS/ime/imjp8_1/imjp8_1.exe
%System Root%/WINDOWS/ime/imjp8_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/imkr6_1.exe
%System Root%/WINDOWS/ime/imkr6_1/applets/applets.exe
%System Root%/WINDOWS/ime/imkr6_1/dicts/dicts.exe
%System Root%/WINDOWS/ime/shared/shared.exe
%System Root%/WINDOWS/ime/shared/res/res.exe
%System Root%/WINDOWS/inf/inf.exe
%System Root%/WINDOWS/Installer/Installer.exe
%System Root%/WINDOWS/Installer/$PatchCache$/$PatchCache$.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/Managed.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/17400AB28230347339DBAF1833357A38/17400AB28230347339DBAF1833357A38.exe
%System Root%/WINDOWS/Installer/$PatchCache$/Managed/1F3B805BA42A0C233B0158879691FE82/1F3B805BA42A0C233B0158879691FE82.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}.exe
%System Root%/WINDOWS/Installer/{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}/ARPIco/ARPIco.exe
%System Root%/WINDOWS/Installer/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}/{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}.exe
%System Root%/WINDOWS/Installer/{835818DD-220C-4ABD-946E-0D8660B95E29}/{835818DD-220C-4ABD-946E-0D8660B95E29}.exe
%System Root%/WINDOWS/Installer/{AC76BA86-7AD7-1033-7B44-AA0000000001}/{AC76BA86-7AD7-1033-7B44-AA0000000001}.exe
%System Root%/WINDOWS/java/java.exe
%System Root%/WINDOWS/java/classes/classes.exe
%System Root%/WINDOWS/java/trustlib/trustlib.exe
%System Root%/WINDOWS/Media/Media.exe
%System Root%/WINDOWS/msagent/msagent.exe
%System Root%/WINDOWS/msagent/chars/chars.exe
%System Root%/WINDOWS/msagent/intl/intl.exe
%System Root%/WINDOWS/msapps/msapps.exe
%System Root%/WINDOWS/msapps/msinfo/msinfo.exe
%System Root%/WINDOWS/mui/mui.exe
%System Root%/WINDOWS/Offline Web Pages/Offline Web Pages.exe
%System Root%/WINDOWS/pchealth/pchealth.exe
%System Root%/WINDOWS/pchealth/ERRORREP/ERRORREP.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QHEADLES/QHEADLES.exe
%System Root%/WINDOWS/pchealth/ERRORREP/QSIGNOFF/QSIGNOFF.exe
%System Root%/WINDOWS/pchealth/helpctr/helpctr.exe
%System Root%/WINDOWS/pchealth/helpctr/BATCH/BATCH.exe
%System Root%/WINDOWS/pchealth/helpctr/binaries/binaries.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Config.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/Cache/Cache.exe
%System Root%/WINDOWS/pchealth/helpctr/Config/CheckPoint/CheckPoint.exe
%System Root%/WINDOWS/pchealth/helpctr/Database/Database.exe
%System Root%/WINDOWS/pchealth/helpctr/DataColl/DataColl.exe
%System Root%/WINDOWS/pchealth/helpctr/HelpFiles/HelpFiles.exe
%System Root%/WINDOWS/pchealth/helpctr/Indices/Indices.exe
%System Root%/WINDOWS/pchealth/helpctr/InstalledSKUs/InstalledSKUs.exe
%System Root%/WINDOWS/pchealth/helpctr/Logs/Logs.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/OfflineCache.exe
%System Root%/WINDOWS/pchealth/helpctr/OfflineCache/Professional_32#0409/Professional_32#0409.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/PackageStore.exe
%System Root%/WINDOWS/pchealth/helpctr/PackageStore/CRC_Disk/CRC_Disk.exe
%System Root%/WINDOWS/pchealth/helpctr/System/System.exe
%System Root%/WINDOWS/pchealth/helpctr/System/blurbs/blurbs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/CompatCtr/CompatCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System/css/css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DFS/DFS.exe
%System Root%/WINDOWS/pchealth/helpctr/System/dialogs/dialogs.exe
%System Root%/WINDOWS/pchealth/helpctr/System/DVDUpgrd/DVDUpgrd.exe
%System Root%/WINDOWS/pchealth/helpctr/System/ErrMsg/ErrMsg.exe
%System Root%/WINDOWS/pchealth/helpctr/System/errors/errors.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/images.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/16x16/16x16.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/24x24/24x24.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/32x32/32x32.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/48x48/48x48.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Centers/Centers.exe
%System Root%/WINDOWS/pchealth/helpctr/System/images/Expando/Expando.exe
%System Root%/WINDOWS/pchealth/helpctr/System/NetDiag/NetDiag.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/panels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/panels/subpanels/subpanels.exe
%System Root%/WINDOWS/pchealth/helpctr/System/rc/rc.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Interaction.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Client/Client.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/System/Remote Assistance/Interaction/Server/Server.exe
%System Root%/WINDOWS/pchealth/helpctr/System/scripts/scripts.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/sysinfo.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/graphics.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/33x16pie/33x16pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/sysinfo/graphics/47x24pie/47x24pie.exe
%System Root%/WINDOWS/pchealth/helpctr/System/UpdateCtr/UpdateCtr.exe
%System Root%/WINDOWS/pchealth/helpctr/System_OEM/System_OEM.exe
%System Root%/WINDOWS/pchealth/helpctr/Temp/Temp.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/Vendors.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Remote Assistance.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Css/Css.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Escalation.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Common/Common.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Email/Email.exe
%System Root%/WINDOWS/pchealth/helpctr/Vendors/CN=Microsoft Corporation,L=Redmond,S=Washington,C=US/Remote Assistance/Escalation/Unsolicited/Unsolicited.exe
%System Root%/WINDOWS/pchealth/UploadLB/UploadLB.exe
%System Root%/WINDOWS/pchealth/UploadLB/Binaries/Binaries.exe
%System Root%/WINDOWS/pchealth/UploadLB/Config/Config.exe
%System Root%/WINDOWS/PeerNet/PeerNet.exe
%System Root%/WINDOWS/Prefetch/Prefetch.exe
%System Root%/WINDOWS/Provisioning/Provisioning.exe
%System Root%/WINDOWS/Provisioning/Schemas/Schemas.exe
%System Root%/WINDOWS/pss/pss.exe
%System Root%/WINDOWS/Registration/Registration.exe
%System Root%/WINDOWS/Registration/CRMLog/CRMLog.exe
%System Root%/WINDOWS/repair/repair.exe
%System Root%/WINDOWS/repair/default/default.exe
%System Root%/WINDOWS/repair/sam/sam.exe
%System Root%/WINDOWS/repair/security/security.exe
%System Root%/WINDOWS/repair/software/software.exe
%System Root%/WINDOWS/repair/system/system.exe
%System Root%/WINDOWS/Resources/Resources.exe
%System Root%/WINDOWS/Resources/Themes/Themes.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Luna.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Shell.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Homestead/Homestead.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/Metallic/Metallic.exe
%System Root%/WINDOWS/Resources/Themes/Luna/Shell/NormalColor/NormalColor.exe
%System Root%/WINDOWS/security/security.exe
%System Root%/WINDOWS/security/Database/Database.exe
%System Root%/WINDOWS/security/logs/logs.exe
%System Root%/WINDOWS/security/templates/templates.exe
%System Root%/WINDOWS/SoftwareDistribution/SoftwareDistribution.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/DataStore.exe
%System Root%/WINDOWS/SoftwareDistribution/DataStore/Logs/Logs.exe
%System Root%/WINDOWS/SoftwareDistribution/Download/Download.exe
%System Root%/WINDOWS/SoftwareDistribution/EventCache/EventCache.exe
%System Root%/WINDOWS/SoftwareDistribution/SelfUpdate/SelfUpdate.exe
%System Root%/WINDOWS/srchasst/srchasst.exe
%System Root%/WINDOWS/srchasst/chars/chars.exe
%System Root%/WINDOWS/srchasst/mui/mui.exe
%System Root%/WINDOWS/srchasst/mui/0409/0409.exe
%System Root%/WINDOWS/system/system.exe
%System Root%/WINDOWS/system32/system32.exe
%System Root%/WINDOWS/system32/-1/-1.exe
%System Root%/WINDOWS/system32/1025/1025.exe
%System Root%/WINDOWS/system32/1028/1028.exe
%System Root%/WINDOWS/system32/1031/1031.exe
%System Root%/WINDOWS/system32/1033/1033.exe
%System Root%/WINDOWS/system32/1037/1037.exe
%System Root%/WINDOWS/system32/1041/1041.exe
%System Root%/WINDOWS/system32/1042/1042.exe
%System Root%/WINDOWS/system32/1054/1054.exe
%System Root%/WINDOWS/system32/2052/2052.exe
%System Root%/WINDOWS/system32/3076/3076.exe
%System Root%/WINDOWS/system32/3com_dmi/3com_dmi.exe
%System Root%/WINDOWS/system32/CatRoot/CatRoot.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/CatRoot2.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{127D0A1D-4EF2-11D1-8608-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/catdb/catdb.exe
%System Root%/WINDOWS/system32/CatRoot2/{F750E6C3-38EE-11D1-85E5-00C04FC295EE}/TimeStamp/TimeStamp.exe
%System Root%/WINDOWS/system32/Com/Com.exe
%System Root%/WINDOWS/system32/config/config.exe
%System Root%/WINDOWS/system32/config/default/default.exe
%System Root%/WINDOWS/system32/config/SAM/SAM.exe
%System Root%/WINDOWS/system32/config/SECURITY/SECURITY.exe
%System Root%/WINDOWS/system32/config/software/software.exe
%System Root%/WINDOWS/system32/config/system/system.exe
%System Root%/WINDOWS/system32/config/systemprofile/systemprofile.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Internet Explorer/Internet Explorer.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/SystemCertificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/My.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/Certificates/Certificates.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CRLs/CRLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Application Data/Microsoft/SystemCertificates/My/CTLs/CTLs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Cookies/Cookies.exe
%System Root%/WINDOWS/system32/config/systemprofile/Desktop/Desktop.exe
%System Root%/WINDOWS/system32/config/systemprofile/Favorites/Favorites.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Local Settings.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Application Data.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Media Player/Media Player.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Application Data/Microsoft/Windows Media/Windows Media.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/History/History.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temp/Temp.exe
%System Root%/WINDOWS/system32/config/systemprofile/Local Settings/Temporary Internet Files/Temporary Internet Files.exe
%System Root%/WINDOWS/system32/config/systemprofile/My Documents/My Documents.exe
%System Root%/WINDOWS/system32/config/systemprofile/NetHood/NetHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/PrintHood/PrintHood.exe
%System Root%/WINDOWS/system32/config/systemprofile/Recent/Recent.exe
%System Root%/WINDOWS/system32/config/systemprofile/SendTo/SendTo.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Start Menu.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Programs.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessories.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Accessibility/Accessibility.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Accessories/Entertainment/Entertainment.exe
%System Root%/WINDOWS/system32/config/systemprofile/Start Menu/Programs/Startup/Startup.exe
%System Root%/WINDOWS/system32/config/systemprofile/Templates/Templates.exe
%System Root%/WINDOWS/system32/config/userdiff/userdiff.exe
%System Root%/WINDOWS/system32/dhcp/dhcp.exe
%System Root%/WINDOWS/system32/DirectX/DirectX.exe
%System Root%/WINDOWS/system32/DirectX/Dinput/Dinput.exe
%System Root%/WINDOWS/system32/dllcache/dllcache.exe
%System Root%/WINDOWS/system32/drivers/drivers.exe
%System Root%/WINDOWS/system32/drivers/disdn/disdn.exe
%System Root%/WINDOWS/system32/drivers/etc/etc.exe
%System Root%/WINDOWS/system32/drivers/etc/hosts/hosts.exe
%System Root%/WINDOWS/system32/drivers/etc/networks/networks.exe
%System Root%/WINDOWS/system32/drivers/etc/protocol/protocol.exe
%System Root%/WINDOWS/system32/drivers/etc/services/services.exe
%System Root%/WINDOWS/system32/en-us/en-us.exe
%System Root%/WINDOWS/system32/export/export.exe
%System Root%/WINDOWS/system32/GroupPolicy/GroupPolicy.exe
%System Root%/WINDOWS/system32/GroupPolicy/Machine/Machine.exe
%System Root%/WINDOWS/system32/GroupPolicy/User/User.exe
%System Root%/WINDOWS/system32/ias/ias.exe
%System Root%/WINDOWS/system32/icsxml/icsxml.exe
%System Root%/WINDOWS/system32/IME/IME.exe
%System Root%/WINDOWS/system32/IME/CINTLGNT/CINTLGNT.exe
%System Root%/WINDOWS/system32/IME/PINTLGNT/PINTLGNT.exe
%System Root%/WINDOWS/system32/IME/TINTLGNT/TINTLGNT.exe
%System Root%/WINDOWS/system32/inetsrv/inetsrv.exe
%System Root%/WINDOWS/system32/Macromed/Macromed.exe
%System Root%/WINDOWS/system32/Macromed/Flash/Flash.exe
%System Root%/WINDOWS/system32/Microsoft/Microsoft.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/Protect.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/S-1-5-18.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/User.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/04c6e779-a6c8-43ed-83fd-24277a54f46c/04c6e779-a6c8-43ed-83fd-24277a54f46c.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/920943d9-68f1-4a3f-9588-ac25fa191f28/920943d9-68f1-4a3f-9588-ac25fa191f28.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/adce7c98-b0e6-4ecd-b2d3-69b3060c02da/adce7c98-b0e6-4ecd-b2d3-69b3060c02da.exe
%System Root%/WINDOWS/system32/Microsoft/Protect/S-1-5-18/User/Preferred/Preferred.exe
%System Root%/WINDOWS/system32/MsDtc/MsDtc.exe
%System Root%/WINDOWS/system32/MsDtc/Trace/Trace.exe
%System Root%/WINDOWS/system32/mui/mui.exe
%System Root%/WINDOWS/system32/mui/0009/0009.exe
%System Root%/WINDOWS/system32/mui/0401/0401.exe
%System Root%/WINDOWS/system32/mui/0402/0402.exe
%System Root%/WINDOWS/system32/mui/0404/0404.exe
%System Root%/WINDOWS/system32/mui/0405/0405.exe
%System Root%/WINDOWS/system32/mui/0406/0406.exe
%System Root%/WINDOWS/system32/mui/0407/0407.exe
%System Root%/WINDOWS/system32/mui/0408/0408.exe
%System Root%/WINDOWS/system32/mui/0409/0409.exe
%System Root%/WINDOWS/system32/mui/040b/040b.exe
%System Root%/WINDOWS/system32/mui/040C/040C.exe
%System Root%/WINDOWS/system32/mui/040D/040D.exe
%System Root%/WINDOWS/system32/mui/040e/040e.exe
%System Root%/WINDOWS/system32/mui/0410/0410.exe
%System Root%/WINDOWS/system32/mui/0411/0411.exe
%System Root%/WINDOWS/system32/mui/0412/0412.exe
%System Root%/WINDOWS/system32/mui/0413/0413.exe
%System Root%/WINDOWS/system32/mui/0414/0414.exe
%System Root%/WINDOWS/system32/mui/0415/0415.exe
%System Root%/WINDOWS/system32/mui/0416/0416.exe
%System Root%/WINDOWS/system32/mui/0418/0418.exe
%System Root%/WINDOWS/system32/mui/0419/0419.exe
%System Root%/WINDOWS/system32/mui/041a/041a.exe
%System Root%/WINDOWS/system32/mui/041b/041b.exe
%System Root%/WINDOWS/system32/mui/041D/041D.exe
%System Root%/WINDOWS/system32/mui/041e/041e.exe
%System Root%/WINDOWS/system32/mui/041f/041f.exe
%System Root%/WINDOWS/system32/mui/0424/0424.exe
%System Root%/WINDOWS/system32/mui/0425/0425.exe
%System Root%/WINDOWS/system32/mui/0426/0426.exe
%System Root%/WINDOWS/system32/mui/0427/0427.exe
%System Root%/WINDOWS/system32/mui/0804/0804.exe
%System Root%/WINDOWS/system32/mui/0816/0816.exe
%System Root%/WINDOWS/system32/mui/0C0A/0C0A.exe
%System Root%/WINDOWS/system32/mui/dispspec/dispspec.exe
%System Root%/WINDOWS/system32/npp/npp.exe
%System Root%/WINDOWS/system32/oobe/oobe.exe
%System Root%/WINDOWS/system32/oobe/actsetup/actsetup.exe
%System Root%/WINDOWS/system32/oobe/error/error.exe
%System Root%/WINDOWS/system32/oobe/html/html.exe
%System Root%/WINDOWS/system32/oobe/html/dslmain/dslmain.exe
%System Root%/WINDOWS/system32/oobe/html/iconnect/iconnect.exe
%System Root%/WINDOWS/system32/oobe/html/ispsgnup/ispsgnup.exe
%System Root%/WINDOWS/system32/oobe/html/isptype/isptype.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/mouse.exe
%System Root%/WINDOWS/system32/oobe/html/mouse/images/images.exe
%System Root%/WINDOWS/system32/oobe/html/oemcust/oemcust.exe
%System Root%/WINDOWS/system32/oobe/html/oemhw/oemhw.exe
%System Root%/WINDOWS/system32/oobe/html/oemreg/oemreg.exe
%System Root%/WINDOWS/system32/oobe/html/sconnect/sconnect.exe
%System Root%/WINDOWS/system32/oobe/icserror/icserror.exe
%System Root%/WINDOWS/system32/oobe/images/images.exe
%System Root%/WINDOWS/system32/oobe/isperror/isperror.exe
%System Root%/WINDOWS/system32/oobe/regerror/regerror.exe
%System Root%/WINDOWS/system32/oobe/sample/sample.exe
%System Root%/WINDOWS/system32/oobe/setup/setup.exe
%System Root%/WINDOWS/system32/ras/ras.exe
%System Root%/WINDOWS/system32/ReinstallBackups/ReinstallBackups.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/0000.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0000/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/0001.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0001/DriverFiles/i386/i386.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/0002.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0002/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/0003.exe
%System Root%/WINDOWS/system32/ReinstallBackups/0003/DriverFiles/DriverFiles.exe
%System Root%/WINDOWS/system32/Restore/Restore.exe
%System Root%/WINDOWS/system32/Setup/Setup.exe
%System Root%/WINDOWS/system32/ShellExt/ShellExt.exe
%System Root%/WINDOWS/system32/spool/spool.exe
%System Root%/WINDOWS/system32/spool/drivers/drivers.exe
%System Root%/WINDOWS/system32/spool/drivers/color/color.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/3.exe
%System Root%/WINDOWS/system32/spool/drivers/w32x86/3/temp/temp.exe
%System Root%/WINDOWS/system32/spool/PRINTERS/PRINTERS.exe
%System Root%/WINDOWS/system32/spool/prtprocs/prtprocs.exe
%System Root%/WINDOWS/system32/spool/prtprocs/w32x86/w32x86.exe
%System Root%/WINDOWS/system32/spool/prtprocs/x64/x64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/XPSEP.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/amd64/amd64/amd64.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386.exe
%System Root%/WINDOWS/system32/spool/XPSEP/i386/i386/i386.exe
%System Root%/WINDOWS/system32/termcap/termcap.exe
%System Root%/WINDOWS/system32/usmt/usmt.exe
%System Root%/WINDOWS/system32/wbem/wbem.exe
%System Root%/WINDOWS/system32/wbem/AutoRecover/AutoRecover.exe
%System Root%/WINDOWS/system32/wbem/Logs/Logs.exe
%System Root%/WINDOWS/system32/wbem/mof/mof.exe
%System Root%/WINDOWS/system32/wbem/mof/bad/bad.exe
%System Root%/WINDOWS/system32/wbem/mof/good/good.exe
%System Root%/WINDOWS/system32/wbem/Performance/Performance.exe
%System Root%/WINDOWS/system32/wbem/Repository/Repository.exe
%System Root%/WINDOWS/system32/wbem/Repository/FS/FS.exe
%System Root%/WINDOWS/system32/wbem/snmp/snmp.exe
%System Root%/WINDOWS/system32/wbem/xml/xml.exe
%System Root%/WINDOWS/system32/wins/wins.exe
%System Root%/WINDOWS/system32/xircom/xircom.exe
%System Root%/WINDOWS/system32/XPSViewer/XPSViewer.exe
%System Root%/WINDOWS/system32/XPSViewer/en-us/en-us.exe
%System Root%/WINDOWS/Tasks/Tasks.exe
%System Root%/WINDOWS/Temp/Temp.exe
%System Root%/WINDOWS/twain_32/twain_32.exe
%System Root%/WINDOWS/Web/Web.exe
%System Root%/WINDOWS/Web/printers/printers.exe
%System Root%/WINDOWS/Web/printers/images/images.exe
%System Root%/WINDOWS/Web/Wallpaper/Wallpaper.exe
%System Root%/WINDOWS/WinSxS/WinSxS.exe
%System Root%/WINDOWS/WinSxS/InstallTemp/InstallTemp.exe
%System Root%/WINDOWS/WinSxS/Manifests/Manifests.exe
%System Root%/WINDOWS/WinSxS/Policies/Policies.exe
Once located, select the file then press SHIFT+DELETE to delete it.
Repeat the said steps for all files listed.
*Note: Read the following Microsoft page if these steps do not work on Windows 7.

Step 3

Scan your computer with your Trend Micro product to delete files detected as TROJ_FOLCOM.A. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Did this description help? Tell us how we did.

TROJ_FOLCOM.A

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

TROJ_FOLCOM.A

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific