TROJ_HUPIGON.GSA

Publish Date: 09 de июля de 2013

Backdoor:Win32/Hupigon.AG (Microsoft); [00010600.EXE]:BackDoor-AWQ!hv.i !! (McAfee); Trojan.ADH (Symantec); Backdoor.Win32.Hupigon.avkm (Kaspersky); Backdoor.Win32.Hupigon (Sunbelt); Trojan horse Collected.9.AD (AVG)

PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

OVER ALL RISK RATING:

DAMAGE POTENTIAL::

DISTRIBUTION POTENTIAL::

REPORTED INFECTION:

Low

Medium

High

Critical

Threat Type:
Trojan
Destructiveness:
No
Encrypted:
In the wild::
Yes

OVERVIEW

Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.

TECHNICAL DETAILS

File size: 446,980 bytes

File type: EXE

Memory resident: No

INITIAL SAMPLES RECEIVED DATE: 09 de июля de 2013

Otras modificaciones del sistema

Elimina los archivos siguientes:

%Program Files%\Adobe\Reader 10.0\Esl\AiodLite.dll
%Program Files%\Adobe\Reader 10.0\Reader\A3DUtils.dll
%Program Files%\Adobe\Reader 10.0\Reader\ACE.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroBroker.exe
%Program Files%\Adobe\Reader 10.0\Reader\Acrofx32.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.dll
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.exe
%Program Files%\Adobe\Reader 10.0\Reader\AcroRd32Info.exe
%Program Files%\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe
%Program Files%\Adobe\Reader 10.0\Reader\Adobe.Reader.Dependencies.manifest
%Program Files%\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe
%Program Files%\Adobe\Reader 10.0\Reader\AdobeLinguistic.dll
%Program Files%\Adobe\Reader 10.0\Reader\adoberfp.dll
%Program Files%\Adobe\Reader 10.0\Reader\AdobeXMP.dll
%Program Files%\Adobe\Reader 10.0\Reader\AGM.dll
%Program Files%\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini
%Program Files%\Adobe\Reader 10.0\Reader\ahclient.dll
%Program Files%\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
%Program Files%\Adobe\Reader 10.0\Reader\authplay.dll
%Program Files%\Adobe\Reader 10.0\Reader\AXE8SharedExpat.dll
%Program Files%\Adobe\Reader 10.0\Reader\AXSLE.dll
%Program Files%\Adobe\Reader 10.0\Reader\BIB.dll
%Program Files%\Adobe\Reader 10.0\Reader\BIBUtils.dll
%Program Files%\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
%Program Files%\Adobe\Reader 10.0\Reader\ccme_base.dll
%Program Files%\Adobe\Reader 10.0\Reader\CoolType.dll
%Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.dll
%Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.sig
%Program Files%\Adobe\Reader 10.0\Reader\Eula.exe
%Program Files%\Adobe\Reader 10.0\Reader\ExtendScript.dll
%Program Files%\Adobe\Reader 10.0\Reader\icucnv40.dll
%Program Files%\Adobe\Reader 10.0\Reader\icudt40.dll
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin
%Program Files%\Adobe\Reader 10.0\Reader\JP2KLib.dll
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\eula.ini
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
%Program Files%\Adobe\Reader 10.0\Reader\logsession.dll
%Program Files%\Adobe\Reader 10.0\Reader\LogTransport2.exe
%Program Files%\Adobe\Reader 10.0\Reader\Onix32.dll
%Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlr.dll
%Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlrShim.exe
%Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
%Program Files%\Adobe\Reader 10.0\Reader\pe.dll
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Accessibility.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\adobepdf.xdc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroSign.prc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annots.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Checkers.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DigSig.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DVA.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\eBook.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\EScript.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\IA32.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\MakeAccessible.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PDDom.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PPKLite.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\ReadOutLoud.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\reflow.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SaveAsRTF.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Search.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SendMail.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Spelling.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Updater.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\weblink.api
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\2d.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\MyriadCAD.otf
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prcr.x3d
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\tesselate.x3d
%Program Files%\Adobe\Reader 10.0\Reader\pmd.cer
%Program Files%\Adobe\Reader 10.0\Reader\reader_sl.exe
%Program Files%\Adobe\Reader 10.0\Reader\rt3d.dll
%Program Files%\Adobe\Reader 10.0\Reader\RTC.der
%Program Files%\Adobe\Reader 10.0\Reader\ScCore.dll
%Program Files%\Adobe\Reader 10.0\Reader\Services\DEXShare.spi
%Program Files%\Adobe\Reader 10.0\Reader\Services\Services.cfg
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl
%Program Files%\Adobe\Reader 10.0\Reader\sqlite.dll
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\bl.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\br.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\info.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\main.css
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\rss.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\tl.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\tr.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\trash.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
%Program Files%\Adobe\Reader 10.0\Reader\Tracker\warning.gif
%Program Files%\Adobe\Reader 10.0\Reader\ViewerPS.dll
%Program Files%\Adobe\Reader 10.0\ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-H
%Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-V
%Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf
%Program Files%\Adobe\Reader 10.0\Resource\Font\AdobePiStd.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-BoldOblique.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Oblique.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-BoldIt.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-It.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Regular.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Bold.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-BoldIt.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-It.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Regular.otf
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zx______.pfm
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zy______.pfm
%Program Files%\Adobe\Reader 10.0\Resource\Font\SY______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Font\ZX______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Font\ZY______.PFB
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll
%Program Files%\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
%Program Files%\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
%Program Files%\Common Files\Adobe\ARM\1.0\AdobeARM.exe
%Program Files%\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll
%Program Files%\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
%Program Files%\Common Files\Adobe\HelpCfg\en_US\Reader_10.0.helpcfg
%Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
%Program Files%\Common Files\Microsoft Shared\DW\1025\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1028\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1031\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1033\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1036\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1040\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1041\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\1042\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\2052\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\3082\DWINTL20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\DW20.EXE
%Program Files%\Common Files\Microsoft Shared\DW\DWDCW20.DLL
%Program Files%\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
%Program Files%\Common Files\Microsoft Shared\MSInfo\IEFILES5.INF
%Program Files%\Common Files\Microsoft Shared\MSInfo\IEINFO5.OCX
%Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
%Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.cpl
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
%Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
%Program Files%\Common Files\Microsoft Shared\TextConv\html32.cnv
%Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
%Program Files%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc
%Program Files%\Common Files\Microsoft Shared\TextConv\mswrd832.cnv
%Program Files%\Common Files\Microsoft Shared\TextConv\write32.wpc
%Program Files%\Common Files\Microsoft Shared\Triedit\DHTMLED.OCX
%Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
%Program Files%\Common Files\Microsoft Shared\VC\msdia100.dll
%Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
%Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\FPEXT.MSG
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
%Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
%Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
%Program Files%\Common Files\Services\bigfoot.bmp
%Program Files%\Common Files\Services\verisign.bmp
%Program Files%\Common Files\Services\whowhere.bmp
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\ltts1033.lxa
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\r1033tts.lxa
%Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.sdf
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.spd
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
%Program Files%\Common Files\System\ado\adojavas.inc
%Program Files%\Common Files\System\ado\adovbs.inc
%Program Files%\Common Files\System\ado\MDACReadme.htm
%Program Files%\Common Files\System\ado\msader15.dll
%Program Files%\Common Files\System\ado\msado15.dll
%Program Files%\Common Files\System\ado\msado20.tlb
%Program Files%\Common Files\System\ado\msado21.tlb
%Program Files%\Common Files\System\ado\msado25.tlb
%Program Files%\Common Files\System\ado\msado26.tlb
%Program Files%\Common Files\System\ado\msado27.tlb
%Program Files%\Common Files\System\ado\msadomd.dll
%Program Files%\Common Files\System\ado\msador15.dll
%Program Files%\Common Files\System\ado\msadox.dll
%Program Files%\Common Files\System\ado\msadrh15.dll
%Program Files%\Common Files\System\ado\msjro.dll
%Program Files%\Common Files\System\directdb.dll
%Program Files%\Common Files\System\msadc\adcjavas.inc
%Program Files%\Common Files\System\msadc\adcvbs.inc
%Program Files%\Common Files\System\msadc\handler.reg
%Program Files%\Common Files\System\msadc\handsafe.reg
%Program Files%\Common Files\System\msadc\msadce.dll
%Program Files%\Common Files\System\msadc\msadcer.dll
%Program Files%\Common Files\System\msadc\msadcf.dll
%Program Files%\Common Files\System\msadc\msadcfr.dll
%Program Files%\Common Files\System\msadc\msadco.dll
%Program Files%\Common Files\System\msadc\msadcor.dll
%Program Files%\Common Files\System\msadc\msadcs.dll
%Program Files%\Common Files\System\msadc\msadds.dll
%Program Files%\Common Files\System\msadc\msaddsr.dll
%Program Files%\Common Files\System\msadc\msdaprsr.dll
%Program Files%\Common Files\System\msadc\msdaprst.dll
%Program Files%\Common Files\System\msadc\msdarem.dll
%Program Files%\Common Files\System\msadc\msdaremr.dll
%Program Files%\Common Files\System\msadc\msdfmap.dll
%Program Files%\Common Files\System\Ole DB\msdadc.dll
%Program Files%\Common Files\System\Ole DB\msdaenum.dll
%Program Files%\Common Files\System\Ole DB\msdaer.dll
%Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
%Program Files%\Common Files\System\Ole DB\msdaora.dll
%Program Files%\Common Files\System\Ole DB\msdaorar.dll
%Program Files%\Common Files\System\Ole DB\msdaosp.dll
%Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
%Program Files%\Common Files\System\Ole DB\msdaps.dll
%Program Files%\Common Files\System\Ole DB\msdasc.dll
%Program Files%\Common Files\System\Ole DB\msdasql.dll
%Program Files%\Common Files\System\Ole DB\msdasqlr.dll
%Program Files%\Common Files\System\Ole DB\msdatl3.dll
%Program Files%\Common Files\System\Ole DB\msdatt.dll
%Program Files%\Common Files\System\Ole DB\msdaurl.dll
%Program Files%\Common Files\System\Ole DB\msxactps.dll
%Program Files%\Common Files\System\Ole DB\oledb32.dll
%Program Files%\Common Files\System\Ole DB\oledb32r.dll
%Program Files%\Common Files\System\Ole DB\oledbjvs.inc
%Program Files%\Common Files\System\Ole DB\oledbvbs.inc
%Program Files%\Common Files\System\Ole DB\sqloledb.dll
%Program Files%\Common Files\System\Ole DB\sqloledb.rll
%Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
%Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
%Program Files%\Common Files\System\Ole DB\sqlxmlx.rll
%Program Files%\Common Files\System\wab32.dll
%Program Files%\Common Files\System\wab32res.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
%Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
%Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
%Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
%Program Files%\Internet Explorer\Connection Wizard\icwip.dun
%Program Files%\Internet Explorer\Connection Wizard\icwres.dll
%Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
%Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
%Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
%Program Files%\Internet Explorer\Connection Wizard\icwx25a.dun
%Program Files%\Internet Explorer\Connection Wizard\icwx25b.dun
%Program Files%\Internet Explorer\Connection Wizard\icwx25c.dun
%Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
%Program Files%\Internet Explorer\Connection Wizard\isignup.exe
%Program Files%\Internet Explorer\Connection Wizard\msicw.isp
%Program Files%\Internet Explorer\Connection Wizard\msn.isp
%Program Files%\Internet Explorer\Connection Wizard\phone.icw
%Program Files%\Internet Explorer\Connection Wizard\phone.ver
%Program Files%\Internet Explorer\Connection Wizard\state.icw
%Program Files%\Internet Explorer\Connection Wizard\support.icw
%Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
%Program Files%\Internet Explorer\HMMAPI.DLL
%Program Files%\Internet Explorer\iedw.exe
%Program Files%\Internet Explorer\IEXPLORE.EXE
%Program Files%\Internet Explorer\MUI\0409\mscorier.dll
%Program Files%\Internet Explorer\PLUGINS\nppdf32.dll
%Program Files%\Internet Explorer\SIGNUP\INSTALL.INS
%Program Files%\Messenger\custsat.dll
%Program Files%\Messenger\logowin.gif
%Program Files%\Messenger\lvback.gif
%Program Files%\Messenger\msgsc.dll
%Program Files%\Messenger\msgslang.dll
%Program Files%\Messenger\msmsgs.exe
%Program Files%\Messenger\newalert.wav
%Program Files%\Messenger\newemail.wav
%Program Files%\Messenger\online.wav
%Program Files%\Messenger\type.wav
%Program Files%\Messenger\xpmsgr.chm
%Program Files%\Microsoft.NET\RedistList\AssemblyList_4_client.xml
%Program Files%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml
%Program Files%\Movie Maker\moviemk.exe
%Program Files%\Movie Maker\MUI\0409\moviemk.chm
%Program Files%\Movie Maker\Shared\Empty.txt
%Program Files%\Movie Maker\Shared\Filters.xml
%Program Files%\Movie Maker\Shared\news.png
%Program Files%\Movie Maker\Shared\paint.png
%Program Files%\Movie Maker\Shared\Profiles\Blank.txt
%Program Files%\Movie Maker\Shared\Sample1.jpg
%Program Files%\Movie Maker\Shared\Sample2.jpg
%Program Files%\Movie Maker\WMM2AE.dll
%Program Files%\Movie Maker\WMM2ERES.dll
%Program Files%\Movie Maker\WMM2EXT.dll
%Program Files%\Movie Maker\WMM2FILT.dll
%Program Files%\Movie Maker\WMM2FXA.dll
%Program Files%\Movie Maker\WMM2FXB.dll
%Program Files%\Movie Maker\WMM2RES.dll
%Program Files%\Movie Maker\WMM2RES2.dll
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
%Program Files%\MSN\MSNCoreFiles\Install\cinfo.xml
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
%Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
%Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
%Program Files%\MSN\MSNCoreFiles\Install\xfp.xml
%Program Files%\MSN\MSNCoreFiles\OOBE\market.mar
%Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\signup.mar
%Program Files%\MSN Gaming Zone\Windows\bckg.dll
%Program Files%\MSN Gaming Zone\Windows\bckgres.dll
%Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
%Program Files%\MSN Gaming Zone\Windows\chkr.dll
%Program Files%\MSN Gaming Zone\Windows\chkrres.dll
%Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
%Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtz.dll
%Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
%Program Files%\MSN Gaming Zone\Windows\rvse.dll
%Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvl.dll
%Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
%Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
%Program Files%\MSN Gaming Zone\Windows\zClientm.exe
%Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
%Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
%Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
%Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
%Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt
%Program Files%\NetMeeting\Blip.wav
%Program Files%\NetMeeting\callcont.dll
%Program Files%\NetMeeting\cb32.exe
%Program Files%\NetMeeting\conf.exe
%Program Files%\NetMeeting\confmrsl.dll
%Program Files%\NetMeeting\dcap32.dll
%Program Files%\NetMeeting\h323cc.dll
%Program Files%\NetMeeting\MST120.DLL
%Program Files%\NetMeeting\MST123.DLL
%Program Files%\NetMeeting\nac.dll
%Program Files%\NetMeeting\netmeet.htm
%Program Files%\NetMeeting\nmas.dll
%Program Files%\NetMeeting\nmasnt.dll
%Program Files%\NetMeeting\nmchat.dll
%Program Files%\NetMeeting\nmcom.dll
%Program Files%\NetMeeting\nmft.dll
%Program Files%\NetMeeting\nmoldwb.dll
%Program Files%\NetMeeting\nmwb.dll
%Program Files%\NetMeeting\rrcm.dll
%Program Files%\NetMeeting\TestSnd.wav
%Program Files%\NetMeeting\wb32.exe
%Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
%Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
%Program Files%\Outlook Express\msimn.exe
%Program Files%\Outlook Express\msoe.dll
%Program Files%\Outlook Express\msoe.txt
%Program Files%\Outlook Express\msoeres.dll
%Program Files%\Outlook Express\oeimport.dll
%Program Files%\Outlook Express\oemig50.exe
%Program Files%\Outlook Express\oemiglib.dll
%Program Files%\Outlook Express\setup50.exe
%Program Files%\Outlook Express\wab.exe
%Program Files%\Outlook Express\wabfind.dll
%Program Files%\Outlook Express\wabimp.dll
%Program Files%\Outlook Express\wabmig.exe
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll
%Program Files%\Windows Media Player\custsat.dll
%Program Files%\Windows Media Player\migrate.exe
%Program Files%\Windows Media Player\mplayer2.exe
%Program Files%\Windows Media Player\mpvis.dll
%Program Files%\Windows Media Player\npdrmv2.dll
%Program Files%\Windows Media Player\npdrmv2.zip
%Program Files%\Windows Media Player\npds.zip
%Program Files%\Windows Media Player\npdsplay.dll
%Program Files%\Windows Media Player\npwmsdrm.dll
%Program Files%\Windows Media Player\setup_wm.exe
%Program Files%\Windows Media Player\Skins\compact.wmz
%Program Files%\Windows Media Player\Skins\Revert.wmz
%Program Files%\Windows Media Player\wmpband.dll
%Program Files%\Windows Media Player\wmplayer.exe
%Program Files%\Windows Media Player\wmpns.dll
%Program Files%\Windows NT\Accessories\mswrd6.wpc
%Program Files%\Windows NT\Accessories\mswrd8.wpc
%Program Files%\Windows NT\Accessories\wordpad.exe
%Program Files%\Windows NT\Accessories\write.wpc
%Program Files%\Windows NT\dialer.exe
%Program Files%\Windows NT\htrn_jis.dll
%Program Files%\Windows NT\hypertrm.exe
%Program Files%\Windows NT\Pinball\FONT.DAT
%Program Files%\Windows NT\Pinball\PINBALL.DAT
%Program Files%\Windows NT\Pinball\PINBALL.EXE
%Program Files%\Windows NT\Pinball\PINBALL.MID
%Program Files%\Windows NT\Pinball\PINBALL2.MID
%Program Files%\Windows NT\Pinball\SOUND1.WAV
%Program Files%\Windows NT\Pinball\SOUND104.WAV
%Program Files%\Windows NT\Pinball\SOUND105.WAV
%Program Files%\Windows NT\Pinball\SOUND108.WAV
%Program Files%\Windows NT\Pinball\SOUND111.WAV
%Program Files%\Windows NT\Pinball\SOUND112.WAV
%Program Files%\Windows NT\Pinball\SOUND12.WAV
%Program Files%\Windows NT\Pinball\SOUND13.WAV
%Program Files%\Windows NT\Pinball\SOUND131.WAV
%Program Files%\Windows NT\Pinball\SOUND136.WAV
%Program Files%\Windows NT\Pinball\SOUND14.WAV
%Program Files%\Windows NT\Pinball\SOUND16.WAV
%Program Files%\Windows NT\Pinball\SOUND17.WAV
%Program Files%\Windows NT\Pinball\SOUND18.WAV
%Program Files%\Windows NT\Pinball\SOUND181.WAV
%Program Files%\Windows NT\Pinball\SOUND19.WAV
%Program Files%\Windows NT\Pinball\SOUND20.WAV
%Program Files%\Windows NT\Pinball\SOUND21.WAV
%Program Files%\Windows NT\Pinball\SOUND22.WAV
%Program Files%\Windows NT\Pinball\SOUND24.WAV
%Program Files%\Windows NT\Pinball\SOUND240.WAV
%Program Files%\Windows NT\Pinball\SOUND243.WAV
%Program Files%\Windows NT\Pinball\SOUND25.WAV
%Program Files%\Windows NT\Pinball\SOUND26.WAV
%Program Files%\Windows NT\Pinball\SOUND27.WAV
%Program Files%\Windows NT\Pinball\SOUND28.WAV
%Program Files%\Windows NT\Pinball\SOUND29.WAV
%Program Files%\Windows NT\Pinball\SOUND3.WAV
%Program Files%\Windows NT\Pinball\SOUND30.WAV
%Program Files%\Windows NT\Pinball\SOUND34.WAV
%Program Files%\Windows NT\Pinball\SOUND35.WAV
%Program Files%\Windows NT\Pinball\SOUND36.WAV
%Program Files%\Windows NT\Pinball\SOUND38.WAV
%Program Files%\Windows NT\Pinball\SOUND39.WAV
%Program Files%\Windows NT\Pinball\SOUND4.WAV
%Program Files%\Windows NT\Pinball\SOUND42.WAV
%Program Files%\Windows NT\Pinball\SOUND43.WAV
%Program Files%\Windows NT\Pinball\SOUND45.WAV
%Program Files%\Windows NT\Pinball\SOUND49.WAV
%Program Files%\Windows NT\Pinball\SOUND49D.WAV
%Program Files%\Windows NT\Pinball\SOUND5.WAV
%Program Files%\Windows NT\Pinball\SOUND50.WAV
%Program Files%\Windows NT\Pinball\SOUND528.WAV
%Program Files%\Windows NT\Pinball\SOUND53.WAV
%Program Files%\Windows NT\Pinball\SOUND54.WAV
%Program Files%\Windows NT\Pinball\SOUND55.WAV
%Program Files%\Windows NT\Pinball\SOUND560.WAV
%Program Files%\Windows NT\Pinball\SOUND563.WAV
%Program Files%\Windows NT\Pinball\SOUND57.WAV
%Program Files%\Windows NT\Pinball\SOUND58.WAV
%Program Files%\Windows NT\Pinball\SOUND6.WAV
%Program Files%\Windows NT\Pinball\SOUND65.WAV
%Program Files%\Windows NT\Pinball\SOUND68.WAV
%Program Files%\Windows NT\Pinball\SOUND7.WAV
%Program Files%\Windows NT\Pinball\SOUND713.WAV
%Program Files%\Windows NT\Pinball\SOUND735.WAV
%Program Files%\Windows NT\Pinball\SOUND8.WAV
%Program Files%\Windows NT\Pinball\SOUND827.WAV
%Program Files%\Windows NT\Pinball\SOUND9.WAV
%Program Files%\Windows NT\Pinball\SOUND999.WAV
%Program Files%\Windows NT\Pinball\table.bmp
%Program Files%\Windows NT\Pinball\wavemix.inf
%Program Files%\WinPcap\install.log
%Program Files%\WinPcap\rpcapd.exe
%Program Files%\WinPcap\Uninstall.exe
%Program Files%\Common Files\Microsoft Shared\MSInfo\ieinfo5.ocx
%Program Files%\Common Files\Microsoft Shared\Triedit\dhtmled.ocx
%Program Files%\Common Files\Microsoft Shared\Triedit\triedit.dll
%Program Files%\Internet Explorer\hmmapi.dll
%Program Files%\Internet Explorer\iexplore.exe
%Program Files%\Movie Maker\wmm2ae.dll
%Program Files%\Movie Maker\wmm2eres.dll
%Program Files%\Movie Maker\wmm2ext.dll
%Program Files%\Movie Maker\wmm2filt.dll
%Program Files%\Movie Maker\wmm2fxa.dll
%Program Files%\Movie Maker\wmm2fxb.dll
%Program Files%\Movie Maker\wmm2res.dll
%Program Files%\Movie Maker\wmm2res2.dll
%Program Files%\MSN Gaming Zone\Windows\cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\uniansi.dll
%Program Files%\MSN Gaming Zone\Windows\zclientm.exe
%Program Files%\MSN Gaming Zone\Windows\zcorem.dll
%Program Files%\MSN Gaming Zone\Windows\znetm.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibm.dll
%Program Files%\NetMeeting\mst120.dll
%Program Files%\NetMeeting\mst123.dll
%Program Files%\Windows NT\Pinball\pinball.exe

(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Elimina las carpetas siguientes:

%Program Files%\Adobe\Reader 10.0\Esl
%Program Files%\Adobe\Reader 10.0\Reader\AIR
%Program Files%\Adobe\Reader 10.0\Reader\Browser
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU
%Program Files%\Adobe\Reader 10.0\Reader\Legal
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d
%Program Files%\Adobe\Reader 10.0\Reader\Services
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins
%Program Files%\Adobe\Reader 10.0\Reader\Tracker
%Program Files%\Adobe\Reader 10.0\Reader
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM
%Program Files%\Adobe\Reader 10.0\Resource\Font
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport
%Program Files%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA0000000001}
%Program Files%\Adobe\Reader 10.0\Setup Files
%Program Files%\Common Files\Adobe\ARM\1.0
%Program Files%\Common Files\Adobe\ARM
%Program Files%\Common Files\Adobe\HelpCfg\en_US
%Program Files%\Common Files\Adobe\HelpCfg
%Program Files%\Common Files\Microsoft Shared\DAO
%Program Files%\Common Files\Microsoft Shared\DW\1025
%Program Files%\Common Files\Microsoft Shared\DW\1028
%Program Files%\Common Files\Microsoft Shared\DW\1031
%Program Files%\Common Files\Microsoft Shared\DW\1033
%Program Files%\Common Files\Microsoft Shared\DW\1036
%Program Files%\Common Files\Microsoft Shared\DW\1040
%Program Files%\Common Files\Microsoft Shared\DW\1041
%Program Files%\Common Files\Microsoft Shared\DW\1042
%Program Files%\Common Files\Microsoft Shared\DW\2052
%Program Files%\Common Files\Microsoft Shared\DW\3082
%Program Files%\Common Files\Microsoft Shared\DW
%Program Files%\Common Files\Microsoft Shared\MSInfo
%Program Files%\Common Files\Microsoft Shared\Speech\1033
%Program Files%\Common Files\Microsoft Shared\Stationery
%Program Files%\Common Files\Microsoft Shared\TextConv
%Program Files%\Common Files\Microsoft Shared\Triedit
%Program Files%\Common Files\Microsoft Shared\VC
%Program Files%\Common Files\Microsoft Shared\VGX
%Program Files%\Common Files\Microsoft Shared\Web Folders
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admcgi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admisapi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bots\vinavbar
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_aut
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\servsupp
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033
%Program Files%\Common Files\ODBC\Data Sources
%Program Files%\Common Files\ODBC
%Program Files%\Common Files\Services
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033
%Program Files%\Common Files\System\ado
%Program Files%\Common Files\System\msadc
%Program Files%\Common Files\System\Ole DB
%Program Files%\ComPlus Applications
%Program Files%\Internet Explorer\Connection Wizard
%Program Files%\Internet Explorer\MUI\0409
%Program Files%\Internet Explorer\MUI
%Program Files%\Internet Explorer\PLUGINS
%Program Files%\Internet Explorer\SIGNUP
%Program Files%\Messenger
%Program Files%\microsoft frontpage\version3.0\bin
%Program Files%\Microsoft.NET\RedistList
%Program Files%\Microsoft.NET
%Program Files%\Movie Maker\MUI\0409
%Program Files%\Movie Maker\MUI
%Program Files%\Movie Maker\Shared\Profiles
%Program Files%\Movie Maker\Shared
%Program Files%\Movie Maker
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation
%Program Files%\MSBuild\Microsoft
%Program Files%\MSBuild
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components
%Program Files%\MSN\MSNCoreFiles\Install
%Program Files%\MSN\MSNCoreFiles\OOBE
%Program Files%\MSN\MSNCoreFiles
%Program Files%\MSN
%Program Files%\MSN Gaming Zone\Windows
%Program Files%\MSXML 6.0\EULA
%Program Files%\MSXML 6.0
%Program Files%\NetMeeting
%Program Files%\Online Services
%Program Files%\Outlook Express
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5
%Program Files%\Reference Assemblies\Microsoft\Framework
%Program Files%\Reference Assemblies\Microsoft
%Program Files%\Reference Assemblies
%Program Files%\Uninstall Information
%Program Files%\Windows Media Player\Icons
%Program Files%\Windows Media Player\Sample Playlists
%Program Files%\Windows Media Player\Skins
%Program Files%\Windows Media Player\Visualizations
%Program Files%\Windows Media Player
%Program Files%\Windows NT\Accessories
%Program Files%\WindowsUpdate
%Program Files%\WinPcap
%Program Files%\xerox\nwwia

(Nota: %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

SOLUTION

Minimum scan engine: 9.300

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Explorar el equipo con su producto de Trend Micro para eliminar los archivos detectados como TROJ_HUPIGON.GSA En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.

Did this description help? Tell us how we did.

TROJ_HUPIGON.GSA

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Ресурсы

Поддержка

О компании Trend

TROJ_HUPIGON.GSA

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Ресурсы

Поддержка

О компании Trend

Северная и Южная Америка

Ближний Восток и Африка

Европа

Азиатско-Тихоокеанский регион