TROJ_ANOMALY.BBN

Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.

Instalación

Crea las carpetas siguientes:

• %System Root%\ufr_files

(Nota: %System Root% es la carpeta raíz, normalmente C:\. También es la ubicación del sistema operativo).

Otras modificaciones del sistema

Elimina los archivos siguientes:

• %Windows%\Help\fxsshare.chm
• %Windows%\Help\gen.chm
• %Windows%\Help\Glossary.chm
• %Windows%\Help\gpedit.chm
• %Windows%\Help\hardware.chm
• %Windows%\Help\howto.chm
• %Windows%\Help\hrtz.chm
• %Windows%\Help\hs.chm
• %Windows%\Help\hschelp.chm
• %Windows%\Help\hypertrm.chm
• %Windows%\Help\icwdial.chm
• %Windows%\Help\ieakmmc.chm
• %Windows%\Help\ieeula.chm
• %Windows%\Help\ieos.chm
• %Windows%\Help\ieshared.chm
• %Windows%\Help\iesupp.chm
• %Windows%\Help\iewebhlp.chm
• %Windows%\Help\iexplore.chm
• %Windows%\Help\iis.chm
• %Windows%\Help\iismmc.chm
• %Windows%\Help\imgprev.chm
• %Windows%\Help\inetres.chm
• %Windows%\Help\infrared.chm
• %Windows%\Help\input.chm
• %Windows%\Help\intellimirror.chm
• %Windows%\Help\ipsecconcepts.chm
• %Windows%\Help\ipsecsnp.chm
• %Windows%\Help\Ipv6.chm
• %Windows%\Help\is.chm
• %Windows%\Help\isconcepts.chm
• %Windows%\Help\ixqlang.htm
• %Windows%\Help\joy.chm
• %Windows%\Help\key.chm
• %Windows%\Help\keyb.chm
• %Windows%\Help\keyshort.chm
• %Windows%\Help\lang.chm
• %Windows%\Help\langbar.chm
• %Windows%\Help\license.chm
• %Windows%\Help\localsec.chm
• %Windows%\Help\lpe.chm
• %Windows%\Help\lpeconcepts.chm
• %Windows%\Help\magnify.chm
• %Windows%\Help\mail.chm
• %Windows%\Help\migwiz.htm
• %Windows%\Help\migwiz2.htm
• %Windows%\Help\misc.chm
• %Windows%\Help\mls_trb.chm
• %Windows%\Help\mmc.chm
• %Windows%\Help\mobsync.chm
• %Windows%\Help\mode.chm
• %Windows%\Help\mouse.chm
• %Windows%\Help\mpconcepts.chm
• %Windows%\Help\msconfig.chm
• %Windows%\Help\msdasc.chm
• %Windows%\Help\mshearts.chm
• %Windows%\Help\msinfo32.chm
• %Windows%\Help\msmq.chm
• %Windows%\Help\msmqconcepts.chm
• %Windows%\Help\msoe.chm
• %Windows%\Help\msorcl32.chm
• %Windows%\Help\mspaint.chm
• %Windows%\Help\mstask.chm
• %Windows%\Help\mstsc.chm
• %Windows%\Help\netcfg.chm
• %Windows%\Help\network.chm
• %Windows%\Help\newfeat1.chm
• %Windows%\Help\newfeat2.chm
• %Windows%\Help\newfeat3.chm
• %Windows%\Help\newfeat4.chm
• %Windows%\Help\newfeat5.chm
• %Windows%\Help\nmchat.chm
• %Windows%\Help\nmwhiteb.chm
• %Windows%\Help\nofts.chm
• %Windows%\Help\notepad.chm
• %Windows%\Help\ntart.chm
• %Windows%\Help\ntbackup.chm
• %Windows%\Help\ntchowto.chm
• %Windows%\Help\ntcmds.chm
• %Windows%\Help\ntdef.chm
• %Windows%\Help\nthelp.chm
• %Windows%\Help\ntshared.chm
• %Windows%\Help\nusrmgr.chm
• %Windows%\Help\nwdoc.chm
• %Windows%\Help\odbcinst.chm
• %Windows%\Help\odbcjet.chm
• %Windows%\Help\oe_msgr.chm
• %Windows%\Help\offlinefolders.chm
• %Windows%\Help\omc.chm
• %Windows%\Help\osk.chm
• %Windows%\Help\packager.chm
• %Windows%\Help\password.chm
• %Windows%\Help\phowto.chm
• %Windows%\Help\pinball.chm
• %Windows%\Help\plyr_err.chm
• %Windows%\Help\printfnd.chm
• %Windows%\Help\printing.chm
• %Windows%\Help\pwrmn.chm
• %Windows%\Help\qosconcepts.chm
• %Windows%\Help\ratings.chm
• %Windows%\Help\rdesktop.chm
• %Windows%\Help\reader.chm
• %Windows%\Help\recycle.chm
• %Windows%\Help\regedit.chm
• %Windows%\Help\regopt.chm
• %Windows%\Help\remasst.chm
• %Windows%\Help\reskit.chm
• %Windows%\Help\rktools.chm
• %Windows%\Help\rrc.chm
• %Windows%\Help\rsm.chm
• %Windows%\Help\rsmconcepts.chm
• %Windows%\Help\rsop.chm
• %Windows%\Help\rsopsnp.chm
• %Windows%\Help\rvse.chm
• %Windows%\Help\safer.chm
• %Windows%\Help\saferconcepts.chm
• %Windows%\Help\sc.chm
• %Windows%\Help\sce.chm
• %Windows%\Help\sceconcepts.chm
• %Windows%\Help\scm.chm
• %Windows%\Help\scmconcepts.chm
• %Windows%\Help\secedit.chm
• %Windows%\Help\secsetconcepts.chm
• %Windows%\Help\secsettings.chm
• %Windows%\Help\sendcmsg.chm
• %Windows%\Help\shvl.chm
• %Windows%\Help\smlogcfg.chm
• %Windows%\Help\sndvol32.chm
• %Windows%\Help\sniffpol.dll
• %Windows%\Help\snmpconcepts.chm
• %Windows%\Help\sol.chm
• %Windows%\Help\soundrec.chm
• %Windows%\Help\sounds.chm
• %Windows%\Help\spad.chm
• %Windows%\Help\spconcepts.chm
• %Windows%\Help\speech.chm
• %Windows%\Help\spider.chm
• %Windows%\Help\splash.chm
• %Windows%\Help\spolsconcepts.chm
• %Windows%\Help\sr_ui.chm
• %Windows%\Help\sstub.dll
• %Windows%\Help\supp_ed.chm
• %Windows%\Help\suptools.chm
• %Windows%\Help\sysdm.chm
• %Windows%\Help\sysmon.chm
• %Windows%\Help\sysprop.chm
• %Windows%\Help\sysrestore.chm
• %Windows%\Help\system.chm
• %Windows%\Help\sys_srv.chm
• %Windows%\Help\tapi.chm
• %Windows%\Help\taskbar.chm
• %Windows%\Help\taskmgr.chm
• %Windows%\Help\tcpip.chm
• %Windows%\Help\telnet.chm
• %Windows%\Help\timesrv.chm
• %Windows%\Help\Tours\htmlTour\best_fr.htm
• %Windows%\Help\Tours\htmlTour\best_road.htm
• %Windows%\Help\Tours\htmlTour\best_road.jpg
• %Windows%\Help\Tours\htmlTour\best_road_big.jpg
• %Windows%\Help\Tours\htmlTour\best_road_ghost.jpg
• %Windows%\Help\Tours\htmlTour\best_robust.htm
• %Windows%\Help\Tours\htmlTour\best_robust.jpg
• %Windows%\Help\Tours\htmlTour\best_robust_big.jpg
• %Windows%\Help\Tours\htmlTour\best_robust_ghost.jpg
• %Windows%\Help\Tours\htmlTour\best_secure.htm
• %Windows%\Help\Tours\htmlTour\best_secure.jpg
• %Windows%\Help\Tours\htmlTour\best_secure_big.jpg
• %Windows%\Help\Tours\htmlTour\best_secure_ghost.jpg
• %Windows%\Help\Tours\htmlTour\bluearrow.gif
• %Windows%\Help\Tours\htmlTour\bot_bar.gif
• %Windows%\Help\Tours\htmlTour\connected_data.htm
• %Windows%\Help\Tours\htmlTour\connected_data.jpg
• %Windows%\Help\Tours\htmlTour\connected_data_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_data_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_fr.htm
• %Windows%\Help\Tours\htmlTour\connected_multiple.htm
• %Windows%\Help\Tours\htmlTour\connected_multiple.jpg
• %Windows%\Help\Tours\htmlTour\connected_multiple_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks.htm
• %Windows%\Help\Tours\htmlTour\connected_networks.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard.htm
• %Windows%\Help\Tours\htmlTour\connected_wizard.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
• %Windows%\Help\Tours\htmlTour\control_up.jpg
• %Windows%\Help\Tours\htmlTour\default.htm
• %Windows%\Help\Tours\htmlTour\desktop_screen_shot.jpg
• %Windows%\Help\Tours\htmlTour\desktop_up.jpg
• %Windows%\Help\Tours\htmlTour\end_up.jpg
• %Windows%\Help\Tours\htmlTour\folder_up.jpg
• %Windows%\Help\Tours\htmlTour\footer.htm
• %Windows%\Help\Tours\htmlTour\gradient.jpg
• %Windows%\Help\Tours\htmlTour\icon_up.jpg
• %Windows%\Help\Tours\htmlTour\img004b.jpg
• %Windows%\Help\Tours\htmlTour\img014.jpg
• %Windows%\Help\Tours\htmlTour\img033.jpg
• %Windows%\Help\Tours\htmlTour\img033a.jpg
• %Windows%\Help\Tours\htmlTour\img034.jpg
• %Windows%\Help\Tours\htmlTour\img040.jpg
• %Windows%\Help\Tours\htmlTour\img046.jpg
• %Windows%\Help\Tours\htmlTour\img060.jpg
• %Windows%\Help\Tours\htmlTour\img068.jpg
• %Windows%\Help\Tours\htmlTour\img072.jpg
• %Windows%\Help\Tours\htmlTour\img074a.jpg
• %Windows%\Help\Tours\htmlTour\img089.jpg
• %Windows%\Help\Tours\htmlTour\img100.jpg
• %Windows%\Help\Tours\htmlTour\img103.jpg
• %Windows%\Help\Tours\htmlTour\img109.jpg
• %Windows%\Help\Tours\htmlTour\img110.jpg
• %Windows%\Help\Tours\htmlTour\img116.jpg
• %Windows%\Help\Tours\htmlTour\img121.jpg
• %Windows%\Help\Tours\htmlTour\img123.jpg
• %Windows%\Help\Tours\htmlTour\img126.jpg
• %Windows%\Help\Tours\htmlTour\img136.jpg
• %Windows%\Help\Tours\htmlTour\img149.jpg
• %Windows%\Help\Tours\htmlTour\intro_logo.jpg
• %Windows%\Help\Tours\htmlTour\logo.jpg
• %Windows%\Help\Tours\htmlTour\nav_best.gif
• %Windows%\Help\Tours\htmlTour\nav_best_down.gif
• %Windows%\Help\Tours\htmlTour\nav_blank.gif
• %Windows%\Help\Tours\htmlTour\nav_connected.gif
• %Windows%\Help\Tours\htmlTour\nav_connected_down.gif
• %Windows%\Help\Tours\htmlTour\nav_gray.gif
• %Windows%\Help\Tours\htmlTour\nav_safe_easy.gif
• %Windows%\Help\Tours\htmlTour\nav_safe_easy_down.gif
• %Windows%\Help\Tours\htmlTour\nav_start_here.gif
• %Windows%\Help\Tours\htmlTour\nav_start_here_down.gif
• %Windows%\Help\Tours\htmlTour\nav_unlock.gif
• %Windows%\Help\Tours\htmlTour\nav_unlock_down.gif
• %Windows%\Help\Tours\htmlTour\pen_icon.jpg
• %Windows%\Help\Tours\htmlTour\question_icon.jpg
• %Windows%\Help\Tours\htmlTour\read_icon.jpg
• %Windows%\Help\Tours\htmlTour\safe_better.htm
• %Windows%\Help\Tours\htmlTour\safe_easier.htm
• %Windows%\Help\Tours\htmlTour\safe_easy_better.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_better_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
• %Windows%\Help\Tours\htmlTour\safe_faster.htm
• %Windows%\Help\Tours\htmlTour\safe_fr.htm
• %Windows%\Help\Tours\htmlTour\spacer.gif
• %Windows%\Help\Tours\htmlTour\start_control.htm
• %Windows%\Help\Tours\htmlTour\start_desktop.htm
• %Windows%\Help\Tours\htmlTour\start_ending.htm
• %Windows%\Help\Tours\htmlTour\start_files.htm
• %Windows%\Help\Tours\htmlTour\start_fr.htm
• %Windows%\Help\Tours\htmlTour\start_icons.htm
• %Windows%\Help\Tours\htmlTour\start_menu.htm
• %Windows%\Help\Tours\htmlTour\start_taskbar.htm
• %Windows%\Help\Tours\htmlTour\start_up.jpg
• %Windows%\Help\Tours\htmlTour\start_windows.htm
• %Windows%\Help\Tours\htmlTour\taskbar_up.jpg
• %Windows%\Help\Tours\htmlTour\ul_logo.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built.htm
• %Windows%\Help\Tours\htmlTour\unlock_built.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built_ghost.jpg
• %Windows%\Help\Tours\htmlTour\unlock_fr.htm
• %Windows%\Help\Tours\htmlTour\unlock_optimized.htm
• %Windows%\Help\Tours\htmlTour\unlock_optimized.jpg
• %Windows%\Help\Tours\htmlTour\unlock_optimized_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing.htm
• %Windows%\Help\Tours\htmlTour\unlock_playing.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
• %Windows%\Help\Tours\htmlTour\window_up.jpg
• %Windows%\Help\Tours\mmTour\intro.txt
• %Windows%\Help\Tours\mmTour\nav.txt
• %Windows%\Help\Tours\mmTour\segment1.txt
• %Windows%\Help\Tours\mmTour\segment2.txt
• %Windows%\Help\Tours\mmTour\segment3.txt
• %Windows%\Help\Tours\mmTour\segment4.txt
• %Windows%\Help\Tours\mmTour\segment5.txt
• %Windows%\Help\Tours\mmTour\tour.exe
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\snd.htm
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud1.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud2.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud3.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud4.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud5.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud6.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud7.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud8.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud9.wav
• %Windows%\Help\Tours\WindowsMediaPlayer\Cnt\contents.htm
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktr.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktrh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapp.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapph.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnt.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cntd.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnth.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoff.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoffh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taon.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taonh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpause.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpauseh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplay.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplayh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogo.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogoh.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\tourbg.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\videobg.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\vidsamp.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm1.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm2.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm3.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm4.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm5.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm6.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm7.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm8.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm9.gif
• %Windows%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv
• %Windows%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv
• %Windows%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv
• %Windows%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv
• %Windows%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv
• %Windows%\Help\tshoot.chm
• %Windows%\Help\tshoot.dll
• %Windows%\Help\twclient.chm
• %Windows%\Help\update1.chm
• %Windows%\Help\usercpl.chm
• %Windows%\Help\utilmgr.chm
• %Windows%\Help\wab.chm
• %Windows%\Help\wbemtest.chm
• %Windows%\Help\webpub.chm
• %Windows%\Help\whatsnew.chm
• %Windows%\Help\winchat.chm
• %Windows%\Help\windows.chm
• %Windows%\Help\wininstl.chm
• %Windows%\Help\winmine.chm
• %Windows%\Help\win_dos.chm
• %Windows%\Help\wmic.chm
• %Windows%\Help\wmifltr.chm
• %Windows%\Help\wmplay.chm
• %Windows%\Help\wmplayer.chm
• %Windows%\Help\wordpad.chm
• %Windows%\Help\wpa.chm
• %Windows%\Help\wschelp.chm
• %Windows%\Help\wscript.chm
• %Windows%\Help\wshconcepts.chm
• %Windows%\Help\wuau.chm
• %Windows%\Help\wuauhelp.chm
• %Windows%\hh.exe
• %Windows%\ime\mscandui.dll
• %Windows%\ime\SOFTKBD.DLL
• %Windows%\ime\SPGRMR.dll
• %Windows%\ime\SPTIP.dll
• %Windows%\inf\unregmp2.exe
• %Windows%\Installer\14637f.msi
• %Windows%\Installer\2cdb5c.msi
• %Windows%\Installer\8b8e65.msi
• %Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe
• %Windows%\Installer\{FE2F6A2C-196E-4210-9C04-2B1BC21F07EF}\ARPPRODUCTICON.exe
• %Windows%\Media\chimes.wav
• %Windows%\Media\chord.wav
• %Windows%\Media\ding.wav
• %Windows%\Media\notify.wav
• %Windows%\Media\recycle.wav
• %Windows%\Media\ringin.wav
• %Windows%\Media\ringout.wav
• %Windows%\Media\start.wav
• %Windows%\Media\tada.wav
• %Windows%\Media\Windows XP Balloon.wav
• %Windows%\Media\Windows XP Battery Critical.wav
• %Windows%\Media\Windows XP Battery Low.wav
• %Windows%\Media\Windows XP Critical Stop.wav
• %Windows%\Media\Windows XP Default.wav
• %Windows%\Media\Windows XP Ding.wav
• %Windows%\Media\Windows XP Error.wav
• %Windows%\Media\Windows XP Exclamation.wav
• %Windows%\Media\Windows XP Hardware Fail.wav
• %Windows%\Media\Windows XP Hardware Insert.wav
• %Windows%\Media\Windows XP Hardware Remove.wav
• %Windows%\Media\Windows XP Information Bar.wav
• %Windows%\Media\Windows XP Logoff Sound.wav
• %Windows%\Media\Windows XP Logon Sound.wav
• %Windows%\Media\Windows XP Menu Command.wav
• %Windows%\Media\Windows XP Minimize.wav
• %Windows%\Media\Windows XP Notify.wav
• %Windows%\Media\Windows XP Pop-up Blocked.wav
• %Windows%\Media\Windows XP Print complete.wav
• %Windows%\Media\Windows XP Recycle.wav
• %Windows%\Media\Windows XP Restore.wav
• %Windows%\Media\Windows XP Ringin.wav
• %Windows%\Media\Windows XP Ringout.wav
• %Windows%\Media\Windows XP Shutdown.wav
• %Windows%\Media\Windows XP Start.wav
• %Windows%\Media\Windows XP Startup.wav
• %Windows%\msagent\agentanm.dll
• %Windows%\msagent\agentctl.dll
• %Windows%\msagent\agentdp2.dll
• %Windows%\msagent\agentdpv.dll
• %Windows%\msagent\agentmpx.dll
• %Windows%\msagent\agentpsh.dll
• %Windows%\msagent\agentsr.dll
• %Windows%\msagent\agentsvr.exe
• %Windows%\msagent\agtintl.dll
• %Windows%\msagent\intl\agt0405.dll
• %Windows%\msagent\intl\agt0406.dll
• %Windows%\msagent\intl\agt0407.dll
• %Windows%\msagent\intl\agt0408.dll
• %Windows%\msagent\intl\agt0409.dll
• %Windows%\msagent\intl\agt040b.dll
• %Windows%\msagent\intl\agt040c.dll
• %Windows%\msagent\intl\agt040e.dll
• %Windows%\msagent\intl\agt0410.dll
• %Windows%\msagent\intl\agt0413.dll
• %Windows%\msagent\intl\agt0414.dll
• %Windows%\msagent\intl\agt0415.dll
• %Windows%\msagent\intl\agt0416.dll
• %Windows%\msagent\intl\agt0419.dll
• %Windows%\msagent\intl\agt041d.dll
• %Windows%\msagent\intl\agt041f.dll
• %Windows%\msagent\intl\agt0816.dll
• %Windows%\msagent\intl\agt0c0a.dll
• %Windows%\msagent\mslwvtts.dll
• %Windows%\msdfmap.ini
• %Windows%\mui\muisetup.exe
• %Windows%\NOTEPAD.EXE
• %Windows%\ODBCINST.INI
• %Windows%\OEWABLog.txt
• %Windows%\Offline Web Pages\desktop.ini
• %Windows%\pchealth\helpctr\binaries\brpinfo.dll
• %Windows%\pchealth\helpctr\binaries\HCAppRes.dll
• %Windows%\pchealth\helpctr\binaries\HelpCtr.exe
• %Windows%\pchealth\helpctr\binaries\HelpHost.exe
• %Windows%\pchealth\helpctr\binaries\HelpSvc.exe
• %Windows%\pchealth\helpctr\binaries\HscUpd.exe
• %Windows%\pchealth\helpctr\binaries\msconfig.exe
• %Windows%\pchealth\helpctr\binaries\msinfo.dll
• %Windows%\pchealth\helpctr\binaries\notiflag.exe
• %Windows%\pchealth\helpctr\binaries\pchshell.dll
• %Windows%\pchealth\helpctr\binaries\pchsvc.dll
• %Windows%\pchealth\helpctr\Config\Cntstore.bin
• %Windows%\pchealth\helpctr\OfflineCache\index.dat
• %Windows%\pchealth\helpctr\PackageStore\SkuStore.bin
• %Windows%\pchealth\helpctr\System\blurbs\about_support.htm
• %Windows%\pchealth\helpctr\System\blurbs\Favorites.htm
• %Windows%\pchealth\helpctr\System\blurbs\ftshelp.htm
• %Windows%\pchealth\helpctr\System\blurbs\History.htm
• %Windows%\pchealth\helpctr\System\blurbs\Index.htm
• %Windows%\pchealth\helpctr\System\blurbs\isupport.htm
• %Windows%\pchealth\helpctr\System\blurbs\keywordhelp.htm
• %Windows%\pchealth\helpctr\System\blurbs\options.htm
• %Windows%\pchealth\helpctr\System\blurbs\searchblurb.htm
• %Windows%\pchealth\helpctr\System\blurbs\searchtips.htm
• %Windows%\pchealth\helpctr\System\blurbs\tools.htm
• %Windows%\pchealth\helpctr\System\blurbs\watermark_300x.bmp
• %Windows%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm
• %Windows%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm
• %Windows%\pchealth\helpctr\System\CompatCtr\CompatMode.htm
• %Windows%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm
• %Windows%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm
• %Windows%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm
• %Windows%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
• %Windows%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm
• %Windows%\pchealth\helpctr\System\errors\badurl.htm
• %Windows%\pchealth\helpctr\System\errors\connection.htm
• %Windows%\pchealth\helpctr\System\errors\indexfirstlevel.htm
• %Windows%\pchealth\helpctr\System\errors\notfound.htm
• %Windows%\pchealth\helpctr\System\errors\offline.htm
• %Windows%\pchealth\helpctr\System\errors\redirect.htm
• %Windows%\pchealth\helpctr\System\errors\unreachable.htm
• %Windows%\pchealth\helpctr\System\Headlines.htm
• %Windows%\pchealth\helpctr\System\HomePage__DESKTOP.htm
• %Windows%\pchealth\helpctr\System\HomePage__SERVER.htm
• %Windows%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\compat.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\errmsg.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\support.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\tools.bmp
• %Windows%\pchealth\helpctr\System\images\16x16\update.bmp
• %System Root%\boot.ini
• %System Root%\CONFIG.SYS
• %Desktop%.ini
• %User Profile%\Internet Explorer\brndlog.txt
• %User Profile%\Quick Launch\Launch Internet Explorer Browser.lnk
• %User Profile%\Cookies\index.dat
• %Application Data%\Microsoft\Internet Explorer\MSIMGSIZ.DAT
• %Application Data%\Microsoft\Windows\UsrClass.dat
• %User Profile%\History.IE5\index.dat
• %User Profile%\MSHist012010121320101220\index.dat
• %User Profile%\MSHist012010122720110103\index.dat
• %User Profile%\MSHist012011010720110108\index.dat
• %User Temp%\dd_vcredistMSI5DA7.txt
• %User Temp%\dd_vcredistMSI6BB9.txt
• %User Temp%\dd_vcredistUI5DA7.txt
• %User Temp%\dd_vcredistUI6BB9.txt
• %User Temp%\Perflib_Perfdata_42c.dat
• %User Temp%\Perflib_Perfdata_740.dat
• %Temporary Internet Files%\Content.IE5\2TPM8950\10[1].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\16[1].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[1].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[2].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[3].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[4].htm
• %Temporary Internet Files%\Content.IE5\2TPM8950\bottom_right3[1].png
• %Temporary Internet Files%\Content.IE5\2TPM8950\box01[1].gif
• %Temporary Internet Files%\Content.IE5\2TPM8950\box02[1].gif
• %Temporary Internet Files%\Content.IE5\2TPM8950\box08[1].gif
• %Temporary Internet Files%\Content.IE5\2TPM8950\desktop.ini
• %Temporary Internet Files%\Content.IE5\2TPM8950\header00b[1].gif
• %Temporary Internet Files%\Content.IE5\2TPM8950\report_image[1].png
• %Temporary Internet Files%\Content.IE5\2TPM8950\table_left3[1].png
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\10[1].htm
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[1].htm
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[2].htm
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[3].htm
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[4].htm
• %Windows%\pchealth\helpctr\System\images\16x16\warning.gif
• %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp
• %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp
• %Windows%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp
• %Windows%\pchealth\helpctr\System\images\32x32\logo.bmp
• %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp
• %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp
• %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp
• %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp
• %Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp
• %Windows%\pchealth\helpctr\System\images\Centers\blue_arrow.gif
• %Windows%\pchealth\helpctr\System\images\Centers\Connect.gif
• %Windows%\pchealth\helpctr\System\images\Centers\IULogo.gif
• %Windows%\pchealth\helpctr\System\images\Centers\Uabrand.gif
• %Windows%\pchealth\helpctr\System\images\error.gif
• %Windows%\pchealth\helpctr\System\images\Expando\collapsed.gif
• %Windows%\pchealth\helpctr\System\images\Expando\endnode.gif
• %Windows%\pchealth\helpctr\System\images\Expando\expanded.gif
• %Windows%\pchealth\helpctr\System\images\Expando\helpdoc.gif
• %Windows%\pchealth\helpctr\System\images\feedback.gif
• %Windows%\pchealth\helpctr\System\images\flyout_arrow.gif
• %Windows%\pchealth\helpctr\System\images\get_conn.gif
• %Windows%\pchealth\helpctr\System\images\icon_articles_12x.bmp
• %Windows%\pchealth\helpctr\System\images\icon_blank_12x.bmp
• %Windows%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp
• %Windows%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp
• %Windows%\pchealth\helpctr\System\images\icon_tours_12x.bmp
• %Windows%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp
• %Windows%\pchealth\helpctr\System\images\info.gif
• %Windows%\pchealth\helpctr\System\images\progbar.gif
• %Windows%\pchealth\helpctr\System\images\warning.gif
• %Windows%\pchealth\helpctr\System\images\wrapperhelp.gif
• %Windows%\pchealth\helpctr\System\NetDiag\dglogs.htm
• %Windows%\pchealth\helpctr\System\NetDiag\dglogshelp.htm
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\box07[1].gif
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\desktop.ini
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\dropdown[1].jpg
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\footer00[1].gif
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\header02[1].jpg
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\import[1].png
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\table_bottom3[1].png
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\table_top3[1].png
• %Temporary Internet Files%\Content.IE5\4H9MXTT9\transpix[1].gif
• %Temporary Internet Files%\Content.IE5\desktop.ini
• %Temporary Internet Files%\Content.IE5\index.dat
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\10[1].htm
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[1].htm
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[2].htm
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[3].htm
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[4].htm
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\background[1].gif
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\box03[1].gif
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\box04[1].gif
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\box06[1].gif
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\config[1].gif
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\desktop.ini
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
• %Temporary Internet Files%\Content.IE5\SMCZPN4M\top_right3[1].png
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[1].htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[2].htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[3].htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[4].htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[5].htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\bottom_left3[1].png
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\box09[1].gif
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\desktop.ini
• %Windows%\pchealth\helpctr\System\panels\AdvSearch.htm
• %Windows%\pchealth\helpctr\System\panels\blank.htm
• %Windows%\pchealth\helpctr\System\panels\Context.htm
• %Windows%\pchealth\helpctr\System\panels\firstpage.htm
• %Windows%\pchealth\helpctr\System\panels\HHWrapper.htm
• %Windows%\pchealth\helpctr\System\panels\MiniNavBar.htm
• %Windows%\pchealth\helpctr\System\panels\NavBar.htm
• %Windows%\pchealth\helpctr\System\panels\Options.htm
• %Windows%\pchealth\helpctr\System\panels\RemoteHelp.htm
• %Windows%\pchealth\helpctr\System\panels\ShareHelp.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Channels.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Favorites.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\History.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Index.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Options.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Search.htm
• %Windows%\pchealth\helpctr\System\panels\subpanels\Subsite.htm
• %Windows%\pchealth\helpctr\System\panels\Topics.htm
• %Windows%\pchealth\helpctr\System\rc\rcRequest.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\ding.wav
• %Windows%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\table_right3[1].png
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\top_left3[1].png
• %Temporary Internet Files%\Content.IE5\X9QQH2D9\users[1].png
• %Temporary Internet Files%\desktop.ini
• %User Profile%\My Music\Sample Music.lnk
• %User Profile%\My Pictures\Sample Pictures.lnk
• %User Profile%\NTUSER.DAT
• %User Profile%\ntuser.ini
• %User Profile%\Recent\server.lnk
• %User Profile%\Recent\set_hostname.lnk
• %User Profile%\Recent\set_server.lnk
• %User Profile%\Recent\the_configurator.lnk
• %Start Menu%\desktop.ini
• %Start Menu%\Programs\Accessories\Accessibility\desktop.ini
• %Start Menu%\Programs\Accessories\Accessibility\Magnifier.lnk
• %Start Menu%\Programs\Accessories\Accessibility\Narrator.lnk
• %Start Menu%\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
• %Start Menu%\Programs\Accessories\Accessibility\Utility Manager.lnk
• %Start Menu%\Programs\Accessories\Address Book.lnk
• %Start Menu%\Programs\Accessories\Command Prompt.lnk
• %Start Menu%\Programs\Accessories\desktop.ini
• %Start Menu%\Programs\Accessories\Entertainment\desktop.ini
• %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
• %Start Menu%\Programs\Accessories\Notepad.lnk
• %Start Menu%\Programs\Accessories\Program Compatibility Wizard.lnk
• %Start Menu%\Programs\Accessories\Synchronize.lnk
• %Start Menu%\Programs\Accessories\Tour Windows XP.lnk
• %Start Menu%\Programs\Accessories\Windows Explorer.lnk
• %Start Menu%\Programs\desktop.ini
• %Start Menu%\Programs\Internet Explorer.lnk
• %Start Menu%\Programs\Outlook Express.lnk
• %Start Menu%\Programs\Remote Assistance.lnk
• %User Startup%\desktop.ini
• %Start Menu%\Programs\Windows Media Player.lnk
• %User Profile%\Templates\excel.xls
• %User Profile%\Templates\excel4.xls
• %User Profile%\Templates\powerpnt.ppt
• %User Profile%\Templates\sndrec.wav
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm
• %Windows%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif
• %User Profile%\Templates\winword.doc
• %User Profile%\Templates\winword2.doc
• %User Profile%\Media Player\DefaultStore_59R.bin
• %User Profile%\Media Player\UserMigratedStore_59R.bin
• %User Profile%\Pbk\sharedaccess.ini
• %User Profile%\Downloader\qmgr0.dat
• %User Profile%\Downloader\qmgr1.dat
• %User Profile%\User Account Pictures\Administrator.bmp
• %User Profile%\Default Pictures\airplane.bmp
• %User Profile%\Default Pictures\astronaut.bmp
• %User Profile%\Default Pictures\ball.bmp
• %User Profile%\Default Pictures\beach.bmp
• %User Profile%\Default Pictures\butterfly.bmp
• %User Profile%\Default Pictures\car.bmp
• %User Profile%\Default Pictures\cat.bmp
• %User Profile%\Default Pictures\chess.bmp
• %User Profile%\Default Pictures\dirt bike.bmp
• %User Profile%\Default Pictures\dog.bmp
• %User Profile%\Default Pictures\drip.bmp
• %User Profile%\Default Pictures\duck.bmp
• %User Profile%\Default Pictures\fish.bmp
• %User Profile%\Default Pictures\frog.bmp
• %User Profile%\Default Pictures\guitar.bmp
• %User Profile%\Default Pictures\horses.bmp
• %User Profile%\Default Pictures\kick.bmp
• %User Profile%\Default Pictures\lift-off.bmp
• %User Profile%\Default Pictures\palm tree.bmp
• %User Profile%\Default Pictures\pink flower.bmp
• %User Profile%\Default Pictures\red flower.bmp
• %User Profile%\Default Pictures\skater.bmp
• %User Profile%\Default Pictures\snowflake.bmp
• %User Profile%\User Account Pictures\guest.bmp
• %User Profile%\User Account Pictures\rsa.bmp
• %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
• %User Profile%\Sample Music\New Stories (Highway Blues).wma
• %User Profile%\Sample Pictures\Blue hills.jpg
• %User Profile%\Sample Pictures\Sunset.jpg
• %User Profile%\Sample Pictures\Water lilies.jpg
• %User Profile%\Sample Pictures\Winter.jpg
• %Start Menu%\Programs\Accessories\Accessibility\Accessibility Wizard.lnk
• %Start Menu%\Programs\Accessories\Calculator.lnk
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\alert.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\card.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\cd.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\check.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\chip.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\down.bmp
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\drive.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\error.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\gears.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\info.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\printer.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\system.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\up.bmp
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\usb.gif
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\windows.gif
• %Windows%\pchealth\helpctr\System\sysinfo\msinfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\RSoP.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysinfomain.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysinfosum.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm
• %Windows%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm
• %Windows%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm
• %Windows%\pchealth\helpctr\System\UpdateCtr\Learn.htm
• %Windows%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm
• %Windows%\pchealth\helpctr\System\UpdateCtr\learnWU.htm
• %Windows%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif
• %Start Menu%\Programs\Accessories\Communications\desktop.ini
• %Start Menu%\Programs\Accessories\Communications\HyperTerminal.lnk
• %Start Menu%\Programs\Accessories\Communications\Network Connections.lnk
• %Start Menu%\Programs\Accessories\Communications\Network Setup Wizard.lnk
• %Start Menu%\Programs\Accessories\Communications\New Connection Wizard.lnk
• %Start Menu%\Programs\Accessories\Communications\Remote Desktop Connection.lnk
• %Start Menu%\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Sound Recorder.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Volume Control.lnk
• %Start Menu%\Programs\Accessories\Paint.lnk
• %Start Menu%\Programs\Accessories\System Tools\Backup.lnk
• %Start Menu%\Programs\Accessories\System Tools\Character Map.lnk
• %Start Menu%\Programs\Accessories\System Tools\desktop.ini
• %Start Menu%\Programs\Accessories\System Tools\Disk Cleanup.lnk
• %Start Menu%\Programs\Accessories\System Tools\Disk Defragmenter.lnk
• %Start Menu%\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk
• %Start Menu%\Programs\Accessories\System Tools\Scheduled Tasks.lnk
• %Start Menu%\Programs\Accessories\System Tools\Security Center.lnk
• %Start Menu%\Programs\Accessories\System Tools\System Information.lnk
• %Start Menu%\Programs\Accessories\System Tools\System Restore.lnk
• %Start Menu%\Programs\Accessories\WordPad.lnk
• %Start Menu%\Programs\Administrative Tools\Component Services.lnk
• %Start Menu%\Programs\Administrative Tools\Computer Management.lnk
• %Start Menu%\Programs\Administrative Tools\Data Sources (ODBC).lnk
• %Start Menu%\Programs\Administrative Tools\desktop.ini
• %Start Menu%\Programs\Administrative Tools\Event Viewer.lnk
• %Start Menu%\Programs\Administrative Tools\Local Security Policy.lnk
• %Start Menu%\Programs\Administrative Tools\Performance.lnk
• %Start Menu%\Programs\Administrative Tools\Services.lnk
• %Start Menu%\Programs\Games\desktop.ini
• %Start Menu%\Programs\Games\Freecell.lnk
• %Start Menu%\Programs\Games\Hearts.lnk
• %Start Menu%\Programs\Games\Internet Backgammon.lnk
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm
• %Start Menu%\Programs\Games\Internet Checkers.lnk
• %Start Menu%\Programs\Games\Internet Hearts.lnk
• %Start Menu%\Programs\Games\Internet Reversi.lnk
• %Start Menu%\Programs\Games\Internet Spades.lnk
• %Start Menu%\Programs\Games\Minesweeper.lnk
• %Start Menu%\Programs\Games\Pinball.lnk
• %Start Menu%\Programs\Games\Solitaire.lnk
• %Start Menu%\Programs\Games\Spider Solitaire.lnk
• %Start Menu%\Programs\MSN.lnk
• %Common Startup%\desktop.ini
• %Start Menu%\Programs\Windows Messenger.lnk
• %Start Menu%\Programs\Windows Movie Maker.lnk
• %Start Menu%\Programs\WinPcap\Uninstall WinPcap 4.1.2.lnk
• %Start Menu%\Set Program Access and Defaults.lnk
• %Start Menu%\Windows Catalog.lnk
• %Start Menu%\Windows Update.lnk
• %Desktop%\vcredist_x86.exe
• %Desktop%\WinPcap_4_1_2.exe
• %User Profile%\MSHist012010120620101213\index.dat
• %User Profile%\MSHist012010121320101214\index.dat
• %Temporary Internet Files%\Content.IE5\2BAREZOP\desktop.ini
• %Temporary Internet Files%\Content.IE5\IX09SXE9\desktop.ini
• %Temporary Internet Files%\Content.IE5\M94XI96V\desktop.ini
• %Temporary Internet Files%\Content.IE5\O7EHUPCN\desktop.ini
• %User Temp%\dd_vcredistMSI6806.txt
• %User Temp%\dd_vcredistUI6806.txt
• %Desktop%\Windows Media Player.lnk
• %User Profile%\MSHist012010122820101229\index.dat
• %User Profile%\Recent\Local Disk (C).lnk
• %User Profile%\Recent\sysprep.lnk
• %System Root%\IO.SYS
• %System Root%\MSDOS.SYS
• %System Root%\pagefile.sys
• %Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
• %Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
• %Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
• %Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif
• %Windows%\pchealth\UploadLB\Binaries\UploadM.exe
• %Windows%\PeerNet\sqldb20.dll
• %Windows%\PeerNet\sqlqp20.dll
• %Windows%\PeerNet\sqlse20.dll
• %Windows%\Prairie Wind.bmp
• %Windows%\Prefetch\Layout.ini
• %Windows%\regedit.exe
• %Windows%\repair\ntuser.dat
• %Windows%\Resources\Themes\Luna\Shell\Homestead\shellstyle.dll
• %Windows%\Resources\Themes\Luna\Shell\Metallic\shellstyle.dll
• %Windows%\Resources\Themes\Luna\Shell\NormalColor\shellstyle.dll
• %Windows%\Rhododendron.bmp
• %Windows%\River Sumida.bmp
• %Windows%\Santa Fe Stucco.bmp
• %Windows%\SchedLgU.Txt
• %Windows%\setuplog.txt
• %Windows%\smscfg.ini
• %Windows%\Soap Bubbles.bmp
• %Windows%\srchasst\msgr3en.dll
• %Windows%\srchasst\srchctls.dll
• %Windows%\srchasst\srchui.dll
• %System%\AVICAP.DLL
• %System%\AVIFILE.DLL
• %System%\COMMDLG.DLL
• %System%\LZEXPAND.DLL
• %System%\MMSYSTEM.DLL
• %System%\MSVIDEO.DLL
• %System%\OLECLI.DLL
• %System%\OLESVR.DLL
• %System%\SHELL.DLL
• %System%\TAPI.DLL
• %System%\VER.DLL
• %System%.ini
• %System%\1033\dwintl.dll
• %System%\6to4svc.dll
• %System%\aaaamon.dll
• %System%\acctres.dll
• %System%\accwiz.exe
• %System%\acledit.dll
• %System%\aclui.dll
• %System%\activeds.dll
• %System%\actmovie.exe
• %System%\actxprxy.dll
• %System%\admparse.dll
• %System%\adptif.dll
• %System%\adsldp.dll
• %System%\adsldpc.dll
• %System%\adsmsext.dll
• %System%\adsnds.dll
• %System%\adsnt.dll
• %System%\adsnw.dll
• %System%\advapi32.dll
• %System%\advpack.dll
• %System%\ahui.exe
• %System%\alg.exe
• %System%\alrsvc.dll
• %System%\amstream.dll
• %System%\ansi.sys
• %System%\apcups.dll
• %System%\append.exe
• %System%\apphelp.dll
• %System%\appmgmts.dll
• %System%\appmgr.dll
• %System%\arp.exe
• %System%\asferror.dll
• %System%\asr_fmt.exe
• %System%\asr_ldm.exe
• %System%\asr_pfu.exe
• %System%\asycfilt.dll
• %System%\at.exe
• %System%\atkctrs.dll
• %System%\atl.dll
• %System%\atl71.dll
• %Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
• %Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
• %Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
• %Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
• %Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
• %Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
• %Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
• %Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
• %Program Files%\Common Files\Services\bigfoot.bmp
• %Program Files%\Common Files\Services\verisign.bmp
• %Program Files%\Common Files\Services\whowhere.bmp
• %Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
• %Program Files%\Common Files\System\ado\MDACReadme.htm
• %Program Files%\Common Files\System\ado\msader15.dll
• %Program Files%\Common Files\System\ado\msado15.dll
• %Program Files%\Common Files\System\ado\msadomd.dll
• %Program Files%\Common Files\System\ado\msador15.dll
• %Program Files%\Common Files\System\ado\msadox.dll
• %Program Files%\Common Files\System\ado\msadrh15.dll
• %Program Files%\Common Files\System\ado\msjro.dll
• %Program Files%\Common Files\System\directdb.dll
• %Program Files%\Common Files\System\msadc\msadce.dll
• %Program Files%\Common Files\System\msadc\msadcer.dll
• %Program Files%\Common Files\System\msadc\msadcf.dll
• %Program Files%\Common Files\System\msadc\msadcfr.dll
• %Program Files%\Common Files\System\msadc\msadco.dll
• %System%\atmadm.exe
• %System%\atmfd.dll
• %System%\atmlib.dll
• %System%\atmpvcno.dll
• %System%\atrace.dll
• %System%\attrib.exe
• %System%\audiosrv.dll
• %System%\auditusr.exe
• %System%\authz.dll
• %System%\autochk.exe
• %System%\autoconv.exe
• %System%\autodisc.dll
• %System%\autofmt.exe
• %System%\autolfn.exe
• %System%\avicap.dll
• %System%\avicap32.dll
• %System%\avifil32.dll
• %System%\avifile.dll
• %System%\avmeter.dll
• %System%\avtapi.dll
• %System%\avwav.dll
• %System%\basesrv.dll
• %System%\batmeter.dll
• %System%\batt.dll
• %System%\bidispl.dll
• %System%\bitsprx2.dll
• %System%\bitsprx3.dll
• %System%\blackbox.dll
• %System%\blastcln.exe
• %System%\bootcfg.exe
• %System%\bootok.exe
• %System%\bootvid.dll
• %System%\bootvrfy.exe
• %System%\browselc.dll
• %System%\browser.dll
• %System%\browseui.dll
• %System%\browsewm.dll
• %System%\bthci.dll
• %System%\bthserv.dll
• %System%\btpanui.dll
• %System%\cabinet.dll
• %System%\cabview.dll
• %System%\cacls.exe
• %System%\calc.exe
• %System%\camocx.dll
• %System%\capesnpn.dll
• %System%\cards.dll
• %System%\CatRoot2\dberr.txt
• %System%\catsrv.dll
• %System%\catsrvps.dll
• %System%\catsrvut.dll
• %System%\ccfgnt.dll
• %System%\cdfview.dll
• %System%\cdm.dll
• %System%\cdmodem.dll
• %System%\cdosys.dll
• %System%\certcli.dll
• %System%\certmgr.dll
• %System%\cewmdm.dll
• %Program Files%\Common Files\System\msadc\msadcor.dll
• %Program Files%\Common Files\System\msadc\msadcs.dll
• %Program Files%\Common Files\System\msadc\msadds.dll
• %Program Files%\Common Files\System\msadc\msaddsr.dll
• %Program Files%\Common Files\System\msadc\msdaprsr.dll
• %Program Files%\Common Files\System\msadc\msdaprst.dll
• %Program Files%\Common Files\System\msadc\msdarem.dll
• %Program Files%\Common Files\System\msadc\msdaremr.dll
• %Program Files%\Common Files\System\msadc\msdfmap.dll
• %Program Files%\Common Files\System\Ole DB\msdadc.dll
• %Program Files%\Common Files\System\Ole DB\msdaenum.dll
• %Program Files%\Common Files\System\Ole DB\msdaer.dll
• %Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
• %Program Files%\Common Files\System\Ole DB\msdaora.dll
• %Program Files%\Common Files\System\Ole DB\msdaorar.dll
• %Program Files%\Common Files\System\Ole DB\msdaosp.dll
• %Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
• %Program Files%\Common Files\System\Ole DB\msdaps.dll
• %Program Files%\Common Files\System\Ole DB\msdasc.dll
• %Program Files%\Common Files\System\Ole DB\msdasql.dll
• %Program Files%\Common Files\System\Ole DB\msdasqlr.dll
• %Program Files%\Common Files\System\Ole DB\msdatl3.dll
• %Program Files%\Common Files\System\Ole DB\msdatt.dll
• %Program Files%\Common Files\System\Ole DB\msdaurl.dll
• %Program Files%\Common Files\System\Ole DB\msxactps.dll
• %Program Files%\Common Files\System\Ole DB\oledb32.dll
• %Program Files%\Common Files\System\Ole DB\oledb32r.dll
• %Program Files%\Common Files\System\Ole DB\sqloledb.dll
• %Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
• %Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
• %Program Files%\Common Files\System\wab32.dll
• %Program Files%\Common Files\System\wab32res.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
• %System%\cfgbkend.dll
• %System%\cfgmgr32.dll
• %System%\charmap.exe
• %System%\chkdsk.exe
• %System%\chkntfs.exe
• %System%\ciadmin.dll
• %System%\cic.dll
• %System%\cidaemon.exe
• %System%\ciodm.dll
• %System%\cipher.exe
• %System%\cisvc.exe
• %System%\ckcnv.exe
• %System%\clb.dll
• %System%\clbcatex.dll
• %System%\clbcatq.dll
• %System%\cleanmgr.exe
• %System%\cliconf.chm
• %System%\cliconfg.dll
• %System%\cliconfg.exe
• %System%\clipbrd.exe
• %System%\clipsrv.exe
• %System%\clusapi.dll
• %System%\cmcfg32.dll
• %System%\cmd.exe
• %System%\cmdial32.dll
• %System%\cmdl32.exe
• %System%\cmmon32.exe
• %System%\cmpbk32.dll
• %System%\cmprops.dll
• %System%\cmsetACL.dll
• %System%\cmstp.exe
• %System%\cmutil.dll
• %System%\cnbjmon.dll
• %System%\cnetcfg.dll
• %System%\cnvfat.dll
• %System%\colbact.dll
• %System%\Com\comadmin.dll
• %System%\Com\comempty.dat
• %System%\Com\comrepl.exe
• %System%\Com\comrereg.exe
• %System%\comaddin.dll
• %System%\comcat.dll
• %System%\comctl32.dll
• %System%\comdlg32.dll
• %System%\commdlg.dll
• %System%\comp.exe
• %System%\compact.exe
• %System%\compatUI.dll
• %System%\compobj.dll
• %System%\compstui.dll
• %System%\comrepl.dll
• %System%\comres.dll
• %System%\comsnap.dll
• %System%\comsvcs.dll
• %System%\comuid.dll
• %System%\config\systemprofile\Application Data\desktop.ini
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
• %System%\config\systemprofile\Cookies\index.dat
• %System%\config\systemprofile\Desktop\vcredist_x86.exe
• %System%\config\systemprofile\Desktop\WinPcap_4_1_2.exe
• %System%\config\systemprofile\Favorites\Desktop.ini
• %System%\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
• %System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
• %System%\config\systemprofile\Local Settings\desktop.ini
• %System%\config\systemprofile\Local Settings\History\desktop.ini
• %System%\config\systemprofile\Local Settings\History\History.IE5\desktop.ini
• %System%\config\systemprofile\Local Settings\History\History.IE5\index.dat
• %System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010120620101213\index.dat
• %System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010121320101214\index.dat
• %System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010122820101229\index.dat
• %System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI5DA7.txt
• %System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI6BB9.txt
• %System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI5DA7.txt
• %System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI6BB9.txt
• %System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_42c.dat
• %System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_740.dat
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0XIJ0DEZ\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\10[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\16[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[2].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[3].htm
• %Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwres.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
• %Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
• %Program Files%\Internet Explorer\Connection Wizard\isignup.exe
• %Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
• %Program Files%\Internet Explorer\HMMAPI.DLL
• %Program Files%\Internet Explorer\iedw.exe
• %Program Files%\Internet Explorer\IEXPLORE.EXE
• %Program Files%\Messenger\custsat.dll
• %Program Files%\Messenger\logowin.gif
• %Program Files%\Messenger\lvback.gif
• %Program Files%\Messenger\msgsc.dll
• %Program Files%\Messenger\msgslang.dll
• %Program Files%\Messenger\msmsgs.exe
• %Program Files%\Messenger\newalert.wav
• %Program Files%\Messenger\newemail.wav
• %Program Files%\Messenger\online.wav
• %Program Files%\Messenger\type.wav
• %Program Files%\Messenger\xpmsgr.chm
• %Program Files%\Movie Maker\moviemk.exe
• %Program Files%\Movie Maker\MUI\0409\moviemk.chm
• %Program Files%\Movie Maker\Shared\Empty.txt
• %Program Files%\Movie Maker\Shared\news.png
• %Program Files%\Movie Maker\Shared\paint.png
• %Program Files%\Movie Maker\Shared\Profiles\Blank.txt
• %Program Files%\Movie Maker\Shared\Sample1.jpg
• %Program Files%\Movie Maker\Shared\Sample2.jpg
• %Program Files%\Movie Maker\WMM2AE.dll
• %Program Files%\Movie Maker\WMM2ERES.dll
• %Program Files%\Movie Maker\WMM2EXT.dll
• %Program Files%\Movie Maker\WMM2FILT.dll
• %Program Files%\Movie Maker\WMM2FXA.dll
• %Program Files%\Movie Maker\WMM2FXB.dll
• %Program Files%\Movie Maker\WMM2RES.dll
• %Program Files%\Movie Maker\WMM2RES2.dll
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[4].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\bottom_right3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box01[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box02[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box08[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\header00b[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\report_image[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\table_left3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\10[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[2].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[3].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[4].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\box07[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\dropdown[1].jpg
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\footer00[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\header02[1].jpg
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\import[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_bottom3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_top3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\transpix[1].gif
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
• %Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
• %Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
• %Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
• %Program Files%\MSN Gaming Zone\Windows\bckg.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgres.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
• %Program Files%\MSN Gaming Zone\Windows\chkr.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrres.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
• %Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
• %Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtz.dll
• %Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
• %Program Files%\MSN Gaming Zone\Windows\rvse.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
• %Program Files%\MSN Gaming Zone\Windows\shvl.dll
• %Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
• %Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
• %Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
• %Program Files%\MSN Gaming Zone\Windows\zClientm.exe
• %Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
• %Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
• %Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
• %Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
• %Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
• %Program Files%\NetMeeting\Blip.wav
• %Program Files%\NetMeeting\callcont.dll
• %Program Files%\NetMeeting\cb32.exe
• %Program Files%\NetMeeting\conf.exe
• %Program Files%\NetMeeting\confmrsl.dll
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8XQVK9U7\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\K96JWPA7\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OLQ78TEZ\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\10[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[2].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[3].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[4].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\background[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box03[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box04[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box06[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\config[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\top_right3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[1].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[2].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[3].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[4].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[5].htm
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\bottom_left3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\box09[1].gif
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\desktop.ini
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\table_right3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\top_left3[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\users[1].png
• %System%\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
• %System%\config\systemprofile\My Documents\desktop.ini
• %System%\config\systemprofile\My Documents\My Music\Desktop.ini
• %System%\config\systemprofile\My Documents\My Music\Sample Music.lnk
• %System%\config\systemprofile\My Documents\My Pictures\Desktop.ini
• %System%\config\systemprofile\My Documents\My Pictures\Sample Pictures.lnk
• %System%\config\systemprofile\NTUSER.DAT
• %System%\config\systemprofile\Recent\Desktop.ini
• %System%\config\systemprofile\Recent\server.lnk
• %System%\config\systemprofile\SendTo\desktop.ini
• %System%\config\systemprofile\Start Menu\desktop.ini
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Address Book.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini
• %Program Files%\NetMeeting\dcap32.dll
• %Program Files%\NetMeeting\h323cc.dll
• %Program Files%\NetMeeting\MST120.DLL
• %Program Files%\NetMeeting\MST123.DLL
• %Program Files%\NetMeeting\nac.dll
• %Program Files%\NetMeeting\netmeet.htm
• %Program Files%\NetMeeting\nmas.dll
• %Program Files%\NetMeeting\nmasnt.dll
• %Program Files%\NetMeeting\nmchat.dll
• %Program Files%\NetMeeting\nmcom.dll
• %Program Files%\NetMeeting\nmft.dll
• %Program Files%\NetMeeting\nmoldwb.dll
• %Program Files%\NetMeeting\nmwb.dll
• %Program Files%\NetMeeting\rrcm.dll
• %Program Files%\NetMeeting\TestSnd.wav
• %Program Files%\NetMeeting\wb32.exe
• %Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
• %Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
• %Program Files%\Outlook Express\msimn.exe
• %Program Files%\Outlook Express\msoe.dll
• %Program Files%\Outlook Express\msoe.txt
• %Program Files%\Outlook Express\msoeres.dll
• %Program Files%\Outlook Express\oeimport.dll
• %Program Files%\Outlook Express\oemig50.exe
• %Program Files%\Outlook Express\oemiglib.dll
• %Program Files%\Outlook Express\setup50.exe
• %Program Files%\Outlook Express\wab.exe
• %Program Files%\Outlook Express\wabfind.dll
• %Program Files%\Outlook Express\wabimp.dll
• %Program Files%\Outlook Express\wabmig.exe
• %Program Files%\Windows Media Player\custsat.dll
• %Program Files%\Windows Media Player\migrate.exe
• %Program Files%\Windows Media Player\mplayer2.exe
• %Program Files%\Windows Media Player\mpvis.dll
• %Program Files%\Windows Media Player\npdrmv2.dll
• %Program Files%\Windows Media Player\npdrmv2.zip
• %Program Files%\Windows Media Player\npds.zip
• %Program Files%\Windows Media Player\npdsplay.dll
• %Program Files%\Windows Media Player\npwmsdrm.dll
• %Program Files%\Windows Media Player\setup_wm.exe
• %Program Files%\Windows Media Player\wmpband.dll
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk
• %System%\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk
• %System%\config\systemprofile\Start Menu\Programs\desktop.ini
• %System%\config\systemprofile\Start Menu\Programs\Internet Explorer.lnk
• %System%\config\systemprofile\Start Menu\Programs\Outlook Express.lnk
• %System%\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk
• %System%\config\systemprofile\Start Menu\Programs\Startup\desktop.ini
• %System%\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk
• %System%\config\systemprofile\Templates\excel.xls
• %System%\config\systemprofile\Templates\excel4.xls
• %System%\config\systemprofile\Templates\powerpnt.ppt
• %System%\config\systemprofile\Templates\sndrec.wav
• %System%\config\systemprofile\Templates\winword.doc
• %System%\config\systemprofile\Templates\winword2.doc
• %System%\confmsp.dll
• %System%\conime.exe
• %System%\console.dll
• %System%\control.exe
• %System%\convert.exe
• %System%\corpol.dll
• %System%\country.sys
• %System%\credui.dll
• %System%\crtdll.dll
• %System%\crypt32.dll
• %System%\cryptdlg.dll
• %System%\cryptdll.dll
• %System%\cryptext.dll
• %System%\cryptnet.dll
• %System%\cryptsvc.dll
• %System%\cryptui.dll
• %System%\cscdll.dll
• %System%\cscript.exe
• %System%\cscui.dll
• %System%\csrsrv.dll
• %System%\csrss.exe
• %System%\csseqchk.dll
• %System%\ctfmon.exe
• %System%\ctl3d32.dll
• %System%\ctl3dv2.dll
• %Program Files%\Windows Media Player\wmplayer.exe
• %Program Files%\Windows Media Player\wmpns.dll
• %Program Files%\Windows NT\Accessories\wordpad.exe
• %Program Files%\Windows NT\dialer.exe
• %Program Files%\Windows NT\htrn_jis.dll
• %Program Files%\Windows NT\hypertrm.exe
• %Program Files%\Windows NT\Pinball\FONT.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.EXE
• %Program Files%\Windows NT\Pinball\SOUND1.WAV
• %Program Files%\Windows NT\Pinball\SOUND104.WAV
• %Program Files%\Windows NT\Pinball\SOUND105.WAV
• %Program Files%\Windows NT\Pinball\SOUND108.WAV
• %Program Files%\Windows NT\Pinball\SOUND111.WAV
• %Program Files%\Windows NT\Pinball\SOUND112.WAV
• %Program Files%\Windows NT\Pinball\SOUND12.WAV
• %Program Files%\Windows NT\Pinball\SOUND13.WAV
• %Program Files%\Windows NT\Pinball\SOUND131.WAV
• %Program Files%\Windows NT\Pinball\SOUND136.WAV
• %Program Files%\Windows NT\Pinball\SOUND14.WAV
• %Program Files%\Windows NT\Pinball\SOUND16.WAV
• %Program Files%\Windows NT\Pinball\SOUND17.WAV
• %Program Files%\Windows NT\Pinball\SOUND18.WAV
• %Program Files%\Windows NT\Pinball\SOUND181.WAV
• %Program Files%\Windows NT\Pinball\SOUND19.WAV
• %Program Files%\Windows NT\Pinball\SOUND20.WAV
• %Program Files%\Windows NT\Pinball\SOUND21.WAV
• %Program Files%\Windows NT\Pinball\SOUND22.WAV
• %Program Files%\Windows NT\Pinball\SOUND24.WAV
• %Program Files%\Windows NT\Pinball\SOUND240.WAV
• %Program Files%\Windows NT\Pinball\SOUND243.WAV
• %Program Files%\Windows NT\Pinball\SOUND25.WAV
• %Program Files%\Windows NT\Pinball\SOUND26.WAV
• %Program Files%\Windows NT\Pinball\SOUND27.WAV
• %Program Files%\Windows NT\Pinball\SOUND28.WAV
• %Program Files%\Windows NT\Pinball\SOUND29.WAV
• %Program Files%\Windows NT\Pinball\SOUND3.WAV
• %Program Files%\Windows NT\Pinball\SOUND30.WAV
• %Program Files%\Windows NT\Pinball\SOUND34.WAV
• %Program Files%\Windows NT\Pinball\SOUND35.WAV
• %Program Files%\Windows NT\Pinball\SOUND36.WAV
• %Program Files%\Windows NT\Pinball\SOUND38.WAV
• %Program Files%\Windows NT\Pinball\SOUND39.WAV
• %Program Files%\Windows NT\Pinball\SOUND4.WAV
• %Program Files%\Windows NT\Pinball\SOUND42.WAV
• %Program Files%\Windows NT\Pinball\SOUND43.WAV
• %Program Files%\Windows NT\Pinball\SOUND45.WAV
• %Program Files%\Windows NT\Pinball\SOUND49.WAV
• %Program Files%\Windows NT\Pinball\SOUND49D.WAV
• %Program Files%\Windows NT\Pinball\SOUND5.WAV
• %Program Files%\Windows NT\Pinball\SOUND50.WAV
• %Program Files%\Windows NT\Pinball\SOUND528.WAV
• %Program Files%\Windows NT\Pinball\SOUND53.WAV
• %Program Files%\Windows NT\Pinball\SOUND54.WAV
• %Program Files%\Windows NT\Pinball\SOUND55.WAV
• %Program Files%\Windows NT\Pinball\SOUND560.WAV
• %Program Files%\Windows NT\Pinball\SOUND563.WAV
• %Program Files%\Windows NT\Pinball\SOUND57.WAV
• %Program Files%\Windows NT\Pinball\SOUND58.WAV
• %Program Files%\Windows NT\Pinball\SOUND6.WAV
• %Program Files%\Windows NT\Pinball\SOUND65.WAV
• %Program Files%\Windows NT\Pinball\SOUND68.WAV
• %Program Files%\Windows NT\Pinball\SOUND7.WAV
• %Program Files%\Windows NT\Pinball\SOUND713.WAV
• %Program Files%\Windows NT\Pinball\SOUND735.WAV
• %Program Files%\Windows NT\Pinball\SOUND8.WAV
• %Program Files%\Windows NT\Pinball\SOUND827.WAV
• %Program Files%\Windows NT\Pinball\SOUND9.WAV
• %Program Files%\Windows NT\Pinball\SOUND999.WAV
• %Program Files%\Windows NT\Pinball\table.bmp
• %Program Files%\WinPcap\rpcapd.exe
• %Program Files%\WinPcap\Uninstall.exe
• %System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-1003\desktop.ini
• %System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-500\desktop.ini
• %System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt
• %System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
• %System Root%\vcredist_x86.exe
• %Windows%\AppPatch\AcGenral.dll
• %Windows%\AppPatch\AcLayers.dll
• %Windows%\AppPatch\AcLua.dll
• %Windows%\AppPatch\AcSpecfc.dll
• %Windows%\AppPatch\AcXtrnal.dll
• %Windows%\Blue Lace 16.bmp
• %Windows%\bootstat.dat
• %Windows%\clock.avi
• %Windows%\Coffee Bean.bmp
• %Windows%\control.ini
• %Windows%\desktop.ini
• %Windows%\Downloaded Program Files\desktop.ini
• %Windows%\ehome\custsat.dll
• %Windows%\explorer.exe
• %Windows%\FeatherTexture.bmp
• %Windows%\Fonts\arial.ttf
• %Windows%\Fonts\arialbd.ttf
• %Windows%\Fonts\arialbi.ttf
• %Windows%\Fonts\ariali.ttf
• %Windows%\Fonts\ariblk.ttf
• %Windows%\Fonts\comic.ttf
• %Windows%\Fonts\comicbd.ttf
• %Windows%\Fonts\cour.ttf
• %Windows%\Fonts\courbd.ttf
• %Windows%\Fonts\courbi.ttf
• %Windows%\Fonts\couri.ttf
• %Windows%\Fonts\desktop.ini
• %Windows%\Fonts\estre.ttf
• %Windows%\Fonts\framd.ttf
• %Windows%\Fonts\framdit.ttf
• %Windows%\Fonts\gautami.ttf
• %Windows%\Fonts\georgia.ttf
• %Windows%\Fonts\georgiab.ttf
• %Windows%\Fonts\georgiai.ttf
• %Windows%\Fonts\georgiaz.ttf
• %Windows%\Fonts\impact.ttf
• %Windows%\Fonts\kartika.ttf
• %Windows%\Fonts\latha.ttf
• %Windows%\Fonts\lsans.ttf
• %Windows%\Fonts\lsansd.ttf
• %Windows%\Fonts\lsansdi.ttf
• %Windows%\Fonts\lsansi.ttf
• %Windows%\Fonts\lucon.ttf
• %Windows%\Fonts\l_10646.ttf
• %Windows%\Fonts\mangal.ttf
• %Windows%\Fonts\marlett.ttf
• %Windows%\Fonts\micross.ttf
• %Windows%\Fonts\mvboli.ttf
• %Windows%\Fonts\pala.ttf
• %Windows%\Fonts\palab.ttf
• %Windows%\Fonts\palabi.ttf
• %Windows%\Fonts\palai.ttf
• %Windows%\Fonts\raavi.ttf
• %Windows%\Fonts\shruti.ttf
• %Windows%\Fonts\sylfaen.ttf
• %Windows%\Fonts\symbol.ttf
• %Windows%\Fonts\tahoma.ttf
• %Windows%\Fonts\tahomabd.ttf
• %Windows%\Fonts\times.ttf
• %Windows%\Fonts\timesbd.ttf
• %Windows%\Fonts\timesbi.ttf
• %Windows%\Fonts\timesi.ttf
• %Windows%\Fonts\trebuc.ttf
• %Windows%\Fonts\trebucbd.ttf
• %Windows%\Fonts\trebucbi.ttf
• %Windows%\Fonts\trebucit.ttf
• %Windows%\Fonts\tunga.ttf
• %Windows%\Fonts\verdana.ttf
• %Windows%\Fonts\verdanab.ttf
• %Windows%\Fonts\verdanai.ttf
• %Windows%\Fonts\verdanaz.ttf
• %Windows%\Fonts\vrinda.ttf
• %Windows%\Fonts\webdings.ttf
• %Windows%\Fonts\wingding.ttf
• %Windows%\Gone Fishing.bmp
• %Windows%\Greenstone.bmp
• %Windows%\Help\access.chm
• %Windows%\Help\accessib.chm
• %Windows%\Help\acc_dis.chm
• %Windows%\Help\aclui.chm
• %Windows%\Help\addremov.chm
• %Windows%\Help\admtools.chm
• %Windows%\Help\apps.chm
• %Windows%\Help\apps_sp.chm
• %Windows%\Help\article.chm
• %Windows%\Help\atm.chm
• %Windows%\Help\audit.chm
• %Windows%\Help\bckg.chm
• %Windows%\Help\blurbs.chm
• %Windows%\Help\blutooth.chm
• %Windows%\Help\bnts.dll
• %Windows%\Help\bootcons.chm
• %Windows%\Help\brief.chm
• %Windows%\Help\calc.chm
• %Windows%\Help\camera.chm
• %Windows%\Help\cdmedia.chm
• %Windows%\Help\certmgr.chm
• %Windows%\Help\charmap.chm
• %Windows%\Help\chkr.chm
• %Windows%\Help\ciadmin.htm
• %Windows%\Help\ciquery.htm
• %Windows%\Help\clipbrd.chm
• %Windows%\Help\cmconcepts.chm
• %Windows%\Help\colormgt.chm
• %Windows%\Help\comexp.chm
• %Windows%\Help\common.chm
• %Windows%\Help\compfldr.chm
• %Windows%\Help\compmgmt.chm
• %Windows%\Help\conf.chm
• %Windows%\Help\conf1.chm
• %Windows%\Help\cpanel.chm
• %Windows%\Help\cyycoins.chm
• %Windows%\Help\cyzcoins.chm
• %Windows%\Help\datetime.chm
• %Windows%\Help\ddeshare.chm
• %Windows%\Help\defrag.chm
• %Windows%\Help\devmgr.chm
• %Windows%\Help\diagboot.chm
• %Windows%\Help\dialer.chm
• %Windows%\Help\digiras.chm
• %Windows%\Help\diskmgmt.chm
• %Windows%\Help\display.chm
• %Windows%\Help\dkconcepts.chm
• %Windows%\Help\drvvfp.chm
• %Windows%\Help\drwtsn32.chm
• %Windows%\Help\dskquoui.chm
• %Windows%\Help\dxdiag.chm
• %Windows%\Help\els.chm
• %Windows%\Help\encrypt.chm
• %Windows%\Help\eudcedit.chm
• %Windows%\Help\evconcepts.chm
• %Windows%\Help\filefold.chm
• %Windows%\Help\file_srv.chm
• %Windows%\Help\find.chm
• %Windows%\Help\folderop.chm
• %Windows%\Help\fonts.chm
• %Windows%\Help\freecell.chm
• %Windows%\Help\fxsclnt.chm
• %Windows%\Help\fxscover.chm
• %System%\d3d8.dll
• %System%\d3d8thk.dll
• %System%\d3d9.dll
• %System%\d3dim.dll
• %System%\d3dim700.dll
• %System%\d3dpmesh.dll
• %System%\d3dramp.dll
• %System%\d3drm.dll
• %System%\d3dxof.dll
• %System%\danim.dll

(Nota: %Windows% es la carpeta de Windows, que suele estar en C:\Windows o C:\WINNT).

Rutina de infiltración

Infiltra los archivos siguientes:

• %User Temp%\report_18-04-2012_19-31-02-KJLG.bin
• %User Temp%\Registry-Grabbing.reg
• %User Temp%\18-04-2012_19-31-02-File-Paths.txt
• %User Temp%\cleaner.exe
• %User Temp%\18-04-2012_19-31-02-Files-Are-Copied.txt
• %System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
• %System Root%\ufr_files\Registry-Grabbing.reg
• %System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).