Ransom.Win32.ICRYPT.SMGC.hp

November 09, 2019

ALIASES:

Ransom-IEncrypt (McAfee); Trojan.Gen.2 (Symantec); HEUR:Trojan.Win32.Generic (Kaspersky); Mal/Qbot-R (Sophos); Trojan.Win32.Generic!BT (Sunbelt)

PLATFORM:

Windows

OVERALL RISK RATING:

DAMAGE POTENTIAL:

REPORTED INFECTION:

Threat Type: Ransomware
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

It drops files as ransom note.

TECHNICAL DETAILS

File Size: 278,528 bytes

File Type: EXE

Memory Resident: Yes

Initial Samples Received Date: 09 Nov 2019

Arrival Details

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Ransomware drops the following copies of itself into the affected system:

%Application Data%\0TDUTO~1:bin
%Application Data%\sBmMbYI%System Root%bin
%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Roaming on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).)

It adds the following processes:

%Application Data%\sBmMbYI%System Root%bin %User Temp%\a5242cf2d2a800334cc1fa8f8aa74f6f8251568c.dat
%System%\vssadmin.exe Delete Shadows /All /Quiet
%System%\diskshadow.exe /s %User Temp%\QAD9C.tmp
%System%\takeown.exe /F %System%\msiexec.exe
%System%\icacls.exe %System%\msiexec.exe /reset
%System%\takeown.exe /F %Windows%\servicing\TrustedInstaller.exe
%System%\icacls.exe %Windows%\servicing\TrustedInstaller.exe /reset
"%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"
%Windows%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
%System%\svchost.exe -k LocalServiceAndNoImpersonation
%Windows%\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
%System%\sppsvc.exe
"%System Root%\Program Files\Windows Media Player\wmpnetwk.exe"
%Application Data%\0TDUTO~1:bin
%System%\diskshadow.exe /s %Windows%\TEMP\UFC58.tmp
%System%\arp.exe -a
%System%\nslookup.exe 192.168.44.1
%System%\nslookup.exe 192.168.44.2
%System%\nslookup.exe 192.168.44.255
%System%\nslookup.exe 224.0.0.22
%System%\nslookup.exe 224.0.0.252
%System%\net.exe view igmp.mcast.net

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local\Temp on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).)

It creates the following folders:

%Windows%\ServiceProfiles\NetworkService\AppData\Local\Microsoft

(Note: %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.)

Autostart Technique

This Ransomware registers itself as a system service to ensure its automatic execution at every system startup by adding the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe /V"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"

Other System Modifications

This Ransomware adds the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ObjectName = "LocalSystem"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
DependOnService = "rpcss"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
RequiredPrivileges = ""

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ObjectName = "NT AUTHORITY\LocalService"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
DependOnService = "rpcss"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
DependOnService = ""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\NetworkList\
Nla\Cache\Intranet
{89BCDCB3-5725-45A2-94AB-2D6B641209B0} = "\x00PV\xbcl%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
cval = "0"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ObjectName = "LocalSystem"

(Note: The default value data of the said registry entry is LocalSystem.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
DependOnService = "rpcss"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ObjectName = "LocalSystem"

(Note: The default value data of the said registry entry is NT AUTHORITY\LocalService.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
RFC1156Agent\CurrentVersion\Parameters
TrapPollTimeMilliSecs = "15000"

(Note: The default value data of the said registry entry is 3a98.)

Dropping Routine

This Ransomware drops the following files:

%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png
%System Root%\excel2k\XLS2KE03.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Content.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui
%System Root%\powerpoint2k\PPT2KE03.ppt.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv
%System Root%\Program Files\Common Files\System\ado\msadomd28.tlb
%System Root%\Program Files\Mozilla Firefox\updated\update-settings.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\dependentlibs.list.cmsnwned
%System Root%\powerpoint2k\PPT2KExx.PPT.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\poweron-vm-default.bat.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
%System Root%\Program Files\Microsoft Games\FreeCell\en-US\FreeCell.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\directshowtap.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\VmUpgradeHelper.bat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png
%System Root%\Program Files\Common Files\System\ado\msadox28.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\title.js.cmsnwned
%System Root%\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\omni.ja.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\resume-vm-default.bat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
%System Root%\Program Files\Common Files\System\Ole DB\oledbvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.inf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\plugin.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\seertlow.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png
%System Root%\Program Files\Mozilla Firefox\uninstall\uninstall.log.cmsnwned
%System Root%\powerpoint2k\PPT2KE04.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\crashreporter.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png
%System Root%\powerpoint2k\PPT2KE05.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
%System Root%\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png
%System Root%\excel2k\XLS2KE04.xls.cmsnwned
%System Root%\Program Files\DVD Maker\SecretST.TTF
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
%Windows%\Temp\UOC95.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
%System Root%\Program Files\Internet Explorer\images\bing.ico
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png
%Windows%\Temp\M21742.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgzm.exe.mui.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.cat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png
%System Root%\Program Files\Internet Explorer\en-US\F12Resources.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.lnk.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv
%Windows%\Temp\HD3AE.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\meta-index.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
%Windows%\Temp\FpFC5A.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png
%System Root%\Program Files\Mozilla Firefox\updated\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\currency.data.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png
%System Root%\Program Files\DVD Maker\Shared\Parity.fx
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3dmp.sys.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\vm-support.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Mozilla Firefox\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair1.js
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\topics.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\collapse.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.inf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png
%System Root%\powerpoint2k\PPT2KE02.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
%System Root%\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\css\GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
%System Root%\Program Files\VMware\VMware Tools\open_source_licenses.txt.cmsnwned
%All Users Profile%\Microsoft\Windows\DRM\v3ks.sec
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png
%System Root%\Program Files\Common Files\System\ado\adovbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\eula.rtf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\updater.ini.cmsnwned
%Windows%\Temp\UFC58.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
%System Root%\Program Files\Mozilla Firefox\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado28.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
%System Root%\set_hostname.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
%System Root%\Program Files\Common Files\System\ado\msado25.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\crashreporter.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\platform.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\DVDMaker.exe.mui
%System Root%\Program Files\Common Files\System\ado\msado20.tlb
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\images\seebttm.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\files.js.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.png
%System Root%\Program Files\VMware\VMware Tools\VMControlPanel.cpl.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\en-US\SpiderSolitaire.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png
%System Root%\Program Files\Mozilla Firefox\Accessible.tlb.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\management.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
%Application Data%\0TdUtO3ApJ17
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
%System Root%\Program Files\Common Files\System\msadc\handsafe.reg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzmappings.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\softokn3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
%System Root%\Program Files\DVD Maker\Shared\DissolveNoise.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png
%System Root%\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\ieinstal.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\shvlzm.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Eurosti.TTF
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\uninstall.log.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.cmsnwned
%System Root%\Program Files\Microsoft Games\Minesweeper\en-US\Minesweeper.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe:0
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
%System Root%\Program Files\Microsoft Games\Solitaire\en-US\Solitaire.exe.mui.cmsnwned
%System Root%\excel2k\XLS2KExx.xls.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\OmdProject.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\Welcome.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png
%System Root%\Program Files\DVD Maker\Shared\Filters.xml
%System Root%\Program Files\VMware\VMware Tools\help\images\expanded.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\precomplete.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
%System Root%\Program Files\Mozilla Firefox\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\content-types.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\javaws.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png
%System Root%\Program Files\Mozilla Firefox\updated\install.log.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.png
%System Root%\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqloledb.rll
%System Root%\Program Files\Mozilla Firefox\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
%System Root%\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Email and Password List.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seelflow.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png
%System Root%\Program Files\Java\jre1.8.0_144\LICENSE.cmsnwned
%Windows%\Temp\I0u19E3.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.cat.cmsnwned
%System Root%\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png
%System Root%\Email and Password List.vbs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
%System Root%\Program Files\DVD Maker\sonicsptransform.ax
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
%System Root%\Program Files\Internet Explorer\en-US\iexplore.exe.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\release.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png
%System Root%\Program Files\Mozilla Firefox\updated\nssdbm3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\win_hlp.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png
%System Root%\Program Files\Internet Explorer\ie9props.propdesc
%Windows%\Temp\cFC59.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\jsse.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\warning_small.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x86.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
%System Root%\Program Files\Common Files\System\ado\adojavas.inc
%System Root%\Program Files\DVD Maker\Shared\Common.fxh
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv
%System Root%\Program Files\Internet Explorer\en-US\F12.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\precomplete.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklist.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\memctl\vmmemctl.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
%System Root%\Program Files\VMware\VMware Tools\help\index.html.cmsnwned
%System Root%\Program Files\Mozilla Firefox\nssdbm3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\charsets.jar.cmsnwned
%System Root%\excel2k\XLS2KE05.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
%System Root%\Program Files\Common Files\System\ado\msado27.tlb
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.sys.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcjavas.inc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png
%System Root%\Program Files\VMware\VMware Tools\poweroff-vm-default.bat.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv
%System Root%\Program Files\VMware\VMware Tools\suspend-vm-default.bat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\rt.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\README.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui
%Application Data%\0TDUTO~1
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\logging.properties.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\Mso Example Setup File A.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\net.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png
%System Root%\Email and Password List.htm.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
%System Root%\Program Files\Mozilla Firefox\updated\freebl3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png
%System Root%\Program Files\ImDisk\lang.txt.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png
%System Root%\Program Files\DVD Maker\Shared\DissolveAnother.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\cacerts.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp
%System Root%\Program Files\Mozilla Firefox\updater.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\javafx.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png
%System Root%\excel2k\XLS2KE01.xls.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\index.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\chkrzm.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.security.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seeright.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png
%Windows%\Temp\XY1464.tmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.cmsnwned
%System Root%\Program Files\DVD Maker\fieldswitch.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.cmsnwned
%Windows%\Temp\tC94.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png
%System Root%\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png
%Windows%\Temp\0O3AD.tmp
%Windows%\Temp\81743.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.cmsnwned
%System Root%\powerpoint2k\PPT2KE00.pot.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado26.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\calendars.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\install.log.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jce.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv
%System Root%\Program Files\Microsoft Games\Chess\en-US\Chess.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\offset.ax
%System Root%\Program Files\VMware\VMware Tools\help\images\seertup.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png
%System Root%\Program Files\DVD Maker\bod_r.TTF
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\resources.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
%System Root%\Program Files\Mozilla Firefox\update-settings.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\softokn3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
%System Root%\Email and Password List.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\context.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png
%System Root%\Program Files\Mozilla Firefox\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\omni.ja.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\scripts\expand.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.cat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png
%System Root%\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
%System Root%\Program Files\Mozilla Firefox\platform.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
%System Root%\AVScanner.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhsec.htm.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair0.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\excel2k\XLS2KE00.xlt.cmsnwned
%System Root%\Program Files\DVD Maker\rtstreamsink.ax
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
%System Root%\Program Files\VMware\VMware Tools\vmrawdsk.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png
%System Root%\Program Files\Mozilla Firefox\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\css\webworks.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png
%System Root%\Program Files\DVD Maker\rtstreamsource.ax
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png
%System Root%\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png
%System Root%\excel2k\XLS2KE02.xls.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\icudt44l.dat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned
%System Root%\Program Files\Internet Explorer\en-US\F12Tools.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png
%System Root%\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\towwhdir.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\toc.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\ado\msado21.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\soniccolorconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
%System Root%\Program Files\Common Files\System\en-US\wab32res.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File A.txt.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File B.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png
%Application Data%\sBmMbYIc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png
%System Root%\Program Files\VMware\VMware Tools\help\caution_small.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
%System Root%\Program Files\Mozilla Firefox\dependentlibs.list.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\audiodepthconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.sys.cmsnwned
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%Windows%\Temp\M119E4.tmp
%System Root%\Program Files\VMware\VMware Tools\help\images\blank.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\iedvtool.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\wwhpagef.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
%System Root%\Program Files\Common Files\System\Ole DB\oledbjvs.inc
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\install.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\Timeline.cpu.xml
%Windows%\Temp\Yr1453.tmp
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\alinks.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
%All Users Profile%\Microsoft\Windows\DRM\drmstore.hds
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\synonyms.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\Accessible.tlb.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x64.sys.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
%System Root%\Program Files\Internet Explorer\SIGNUP\install.ins.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\en-US\Mahjong.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png
%AppDataLocal%\Microsoft\Media Player\CurrentDatabase_372.wmdb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\sound.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png
%System Root%\Program Files\Common Files\Services\verisign.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\search0.js.cmsnwned
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.cat.cmsnwned
%Windows%\Temp\F9O254.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.cmsnwned
%Windows%\servicing\TrustedInstaller.exe
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Hearts\en-US\Hearts.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\classlist.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png
%Windows%\Temp\2Y253.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png
%System Root%\powerpoint2k\PPT2KE01.ppt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\COPYRIGHT.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.cmsnwned
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
%System Root%\Program Files\Internet Explorer\en-US\networkinspection.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
%System Root%\Program Files\Mozilla Firefox\freebl3.chk.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\handler.reg
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

(Note: %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %All Users Profile% is the common user's profile folder, which is usually C:\Documents and Settings\All Users on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\ProgramData on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit). . %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Roaming on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).. %AppDataLocal% is the Local Application Data folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).)

Other Details

This Ransomware connects to the following possibly malicious URL:

http://2.{BLOCKED}{BLOCKED}.168.192.in-addr.arpa
http://22.{BLOCKED}0.{BLOCKED}0.224.in-addr.arpa
http://252.{BLOCKED}0.{BLOCKED}0.224.in-addr.arpa

It deletes itself after execution.

Ransomware Routine

This Ransomware drops the following file(s) as ransom note:

AVScanner.ini.cmsnwned_readme
Email and Password List.htm.cmsnwned_readme
Email and Password List.js.cmsnwned_readme
Email and Password List.txt.cmsnwned_readme
Email and Password List.vbs.cmsnwned_readme
set_hostname.vbs.cmsnwned_readme
$IC8HJH8.zip.cmsnwned_readme
XLS2KE00.xlt.cmsnwned_readme
XLS2KE01.xls.cmsnwned_readme
XLS2KE02.xls.cmsnwned_readme
XLS2KE03.xls.cmsnwned_readme
XLS2KE04.xls.cmsnwned_readme
XLS2KE05.xls.cmsnwned_readme
XLS2KExx.xls.cmsnwned_readme
ExcelLR.cab.cmsnwned_readme
ExcelMUI.msi.cmsnwned_readme
ExcelMUI.xml.cmsnwned_readme
Setup.xml.cmsnwned_readme
PowerPointMUI.msi.cmsnwned_readme
PowerPointMUI.xml.cmsnwned_readme
PptLR.cab.cmsnwned_readme
PublisherMUI.msi.cmsnwned_readme
PublisherMUI.xml.cmsnwned_readme
PubLR.cab.cmsnwned_readme
OutlkLR.cab.cmsnwned_readme
OutlookMUI.msi.cmsnwned_readme
OutlookMUI.xml.cmsnwned_readme
WordLR.cab.cmsnwned_readme
WordMUI.msi.cmsnwned_readme
WordMUI.xml.cmsnwned_readme
Proofing.msi.cmsnwned_readme
Proofing.xml.cmsnwned_readme
Proof.cab.cmsnwned_readme
Proof.msi.cmsnwned_readme
Proof.xml.cmsnwned_readme
EnterpriseWW.msi.cmsnwned_readme
EnterpriseWW.xml.cmsnwned_readme
EnterWW.cab.cmsnwned_readme
ID_00030.DPC.cmsnwned_readme
Office64WW.msi.cmsnwned_readme
Office64WW.xml.cmsnwned_readme
OWOW64WW.cab.cmsnwned_readme
InfLR.cab.cmsnwned_readme
InfoPathMUI.msi.cmsnwned_readme
InfoPathMUI.xml.cmsnwned_readme
OneNoteMUI.msi.cmsnwned_readme
OneNoteMUI.xml.cmsnwned_readme
OnoteLR.cab.cmsnwned_readme
GrooveMUISet.msi.cmsnwned_readme
GrooveMUISet.xml.cmsnwned_readme
GrooveLR.cab.cmsnwned_readme
GrooveMUI.msi.cmsnwned_readme
GrooveMUI.xml.cmsnwned_readme
branding.xml.cmsnwned_readme
Microsoft.VC80.CRT.manifest.cmsnwned_readme
OfficeLR.cab.cmsnwned_readme
OfficeMUI.msi.cmsnwned_readme
OfficeMUI.xml.cmsnwned_readme
OfficeMUISet.msi.cmsnwned_readme
OfficeMUISet.xml.cmsnwned_readme
pss10r.chm.cmsnwned_readme
setup.chm.cmsnwned_readme
ShellUI.MST.cmsnwned_readme
Office64MUI.msi.cmsnwned_readme
Office64MUI.xml.cmsnwned_readme
Office64MUISet.msi.cmsnwned_readme
Office64MUISet.xml.cmsnwned_readme
OWOW64LR.cab.cmsnwned_readme
AccessMUISet.msi.cmsnwned_readme
AccessMUISet.xml.cmsnwned_readme
AccessMUI.msi.cmsnwned_readme
AccessMUI.xml.cmsnwned_readme
AccLR.cab.cmsnwned_readme
PPT2KE00.pot.cmsnwned_readme
PPT2KE01.ppt.cmsnwned_readme
PPT2KE02.ppt.cmsnwned_readme
PPT2KE03.ppt.cmsnwned_readme
PPT2KE04.ppt.cmsnwned_readme
PPT2KE05.ppt.cmsnwned_readme
PPT2KExx.PPT.cmsnwned_readme
vmci.cat.cmsnwned_readme
vmci.inf.cmsnwned_readme
vmci.sys.cmsnwned_readme
install.txt.cmsnwned_readme
vm3d.cat.cmsnwned_readme
vm3d.inf.cmsnwned_readme
vm3dmp.sys.cmsnwned_readme
lang.txt.cmsnwned_readme
install.ins.cmsnwned_readme
COPYRIGHT.cmsnwned_readme
LICENSE.cmsnwned_readme
README.txt.cmsnwned_readme
release.cmsnwned_readme
THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned_readme
THIRDPARTYLICENSEREADME.txt.cmsnwned_readme
Welcome.html.cmsnwned_readme
javacpl.cpl.cmsnwned_readme
classes.jsa.cmsnwned_readme
Xusage.txt.cmsnwned_readme
accessibility.properties.cmsnwned_readme
calendars.properties.cmsnwned_readme
charsets.jar.cmsnwned_readme
classlist.cmsnwned_readme
content-types.properties.cmsnwned_readme
currency.data.cmsnwned_readme
deploy.jar.cmsnwned_readme
flavormap.properties.cmsnwned_readme
fontconfig.bfc.cmsnwned_readme
fontconfig.properties.src.cmsnwned_readme
hijrah-config-umalqura.properties.cmsnwned_readme
javafx.properties.cmsnwned_readme
javaws.jar.cmsnwned_readme
jce.jar.cmsnwned_readme
jfr.jar.cmsnwned_readme
jfxswt.jar.cmsnwned_readme
jsse.jar.cmsnwned_readme
jvm.hprof.txt.cmsnwned_readme
logging.properties.cmsnwned_readme
management-agent.jar.cmsnwned_readme
meta-index.cmsnwned_readme
net.properties.cmsnwned_readme
plugin.jar.cmsnwned_readme
psfont.properties.ja.cmsnwned_readme
psfontj2d.properties.cmsnwned_readme
resources.jar.cmsnwned_readme
rt.jar.cmsnwned_readme
sound.properties.cmsnwned_readme
tzdb.dat.cmsnwned_readme
tzmappings.cmsnwned_readme
jvm.cfg.cmsnwned_readme
CIEXYZ.pf.cmsnwned_readme
GRAY.pf.cmsnwned_readme
LINEAR_RGB.pf.cmsnwned_readme
PYCC.pf.cmsnwned_readme
sRGB.pf.cmsnwned_readme
ffjcext.zip.cmsnwned_readme
messages.properties.cmsnwned_readme
messages_de.properties.cmsnwned_readme
messages_es.properties.cmsnwned_readme
messages_fr.properties.cmsnwned_readme
messages_it.properties.cmsnwned_readme
messages_ja.properties.cmsnwned_readme
messages_ko.properties.cmsnwned_readme
messages_pt_BR.properties.cmsnwned_readme
messages_sv.properties.cmsnwned_readme
messages_zh_CN.properties.cmsnwned_readme
messages_zh_HK.properties.cmsnwned_readme
messages_zh_TW.properties.cmsnwned_readme
splash.gif.cmsnwned_readme
splash@2x.gif.cmsnwned_readme
splash_11-lic.gif.cmsnwned_readme
splash_11@2x-lic.gif.cmsnwned_readme
access-bridge-64.jar.cmsnwned_readme
cldrdata.jar.cmsnwned_readme
dnsns.jar.cmsnwned_readme
jaccess.jar.cmsnwned_readme
jfxrt.jar.cmsnwned_readme
localedata.jar.cmsnwned_readme
nashorn.jar.cmsnwned_readme
sunec.jar.cmsnwned_readme
sunjce_provider.jar.cmsnwned_readme
sunmscapi.jar.cmsnwned_readme
sunpkcs11.jar.cmsnwned_readme
zipfs.jar.cmsnwned_readme
LucidaBrightDemiBold.ttf.cmsnwned_readme
LucidaBrightDemiItalic.ttf.cmsnwned_readme
LucidaBrightItalic.ttf.cmsnwned_readme
LucidaBrightRegular.ttf.cmsnwned_readme
LucidaSansDemiBold.ttf.cmsnwned_readme
LucidaSansRegular.ttf.cmsnwned_readme
LucidaTypewriterBold.ttf.cmsnwned_readme
LucidaTypewriterRegular.ttf.cmsnwned_readme
cursors.properties.cmsnwned_readme
invalid32x32.gif.cmsnwned_readme
win32_CopyDrop32x32.gif.cmsnwned_readme
win32_CopyNoDrop32x32.gif.cmsnwned_readme
win32_LinkDrop32x32.gif.cmsnwned_readme
win32_LinkNoDrop32x32.gif.cmsnwned_readme
win32_MoveDrop32x32.gif.cmsnwned_readme
win32_MoveNoDrop32x32.gif.cmsnwned_readme
default.jfc.cmsnwned_readme
profile.jfc.cmsnwned_readme
jmxremote.access.cmsnwned_readme
jmxremote.password.template.cmsnwned_readme
management.properties.cmsnwned_readme
snmp.acl.template.cmsnwned_readme
blacklist.cmsnwned_readme
blacklisted.certs.cmsnwned_readme
cacerts.cmsnwned_readme
java.policy.cmsnwned_readme
java.security.cmsnwned_readme
javaws.policy.cmsnwned_readme
local_policy.jar.cmsnwned_readme
US_export_policy.jar.cmsnwned_readme
ChessMCE.lnk.cmsnwned_readme
Chess.exe.mui.cmsnwned_readme
FreeCellMCE.lnk.cmsnwned_readme
FreeCell.exe.mui.cmsnwned_readme
HeartsMCE.lnk.cmsnwned_readme
Hearts.exe.mui.cmsnwned_readme
MahjongMCE.lnk.cmsnwned_readme
Mahjong.exe.mui.cmsnwned_readme
Minesweeper.exe.mui.cmsnwned_readme
MoreGames.dll.mui.cmsnwned_readme
bckgRes.dll.mui.cmsnwned_readme
bckgzm.exe.mui.cmsnwned_readme
ChkrRes.dll.mui.cmsnwned_readme
chkrzm.exe.mui.cmsnwned_readme
ShvlRes.dll.mui.cmsnwned_readme
shvlzm.exe.mui.cmsnwned_readme
PurblePlaceMCE.lnk.cmsnwned_readme
PurblePlace.exe.mui.cmsnwned_readme
SolitaireMCE.lnk.cmsnwned_readme
Solitaire.exe.mui.cmsnwned_readme
SpiderSolitaireMCE.lnk.cmsnwned_readme
SpiderSolitaire.exe.mui.cmsnwned_readme
Mso Example Setup File A.txt.cmsnwned_readme
Mso Example Intl Setup File A.txt.cmsnwned_readme
Mso Example Intl Setup File B.txt.cmsnwned_readme
Accessible.tlb.cmsnwned_readme
application.ini.cmsnwned_readme
crashreporter.ini.cmsnwned_readme
dependentlibs.list.cmsnwned_readme
firefox.exe.sig.cmsnwned_readme
firefox.VisualElementsManifest.xml.cmsnwned_readme
freebl3.chk.cmsnwned_readme
install.log.cmsnwned_readme
nssdbm3.chk.cmsnwned_readme
omni.ja.cmsnwned_readme
platform.ini.cmsnwned_readme
plugin-container.exe.sig.cmsnwned_readme
precomplete.cmsnwned_readme
softokn3.chk.cmsnwned_readme
update-settings.ini.cmsnwned_readme
updater.ini.cmsnwned_readme
xul.dll.sig.cmsnwned_readme
blocklist.xml.cmsnwned_readme
crashreporter-override.ini.cmsnwned_readme
formautofill@mozilla.org.xpi.cmsnwned_readme
screenshots@mozilla.org.xpi.cmsnwned_readme
webcompat-reporter@mozilla.org.xpi.cmsnwned_readme
webcompat@mozilla.org.xpi.cmsnwned_readme
VisualElements_150.png.cmsnwned_readme
VisualElements_70.png.cmsnwned_readme
channel-prefs.js.cmsnwned_readme
TwemojiMozilla.ttf.cmsnwned_readme
clearkey.dll.sig.cmsnwned_readme
manifest.json.cmsnwned_readme
shortcuts_log.ini.cmsnwned_readme
uninstall.log.cmsnwned_readme
Workflow.Targets.cmsnwned_readme
Workflow.VisualBasic.Targets.cmsnwned_readme
WinFXList.xml.cmsnwned_readme
FrameworkList.xml.cmsnwned_readme
icudt44l.dat.cmsnwned_readme
open_source_licenses.txt.cmsnwned_readme
poweroff-vm-default.bat.cmsnwned_readme
poweron-vm-default.bat.cmsnwned_readme
resume-vm-default.bat.cmsnwned_readme
suspend-vm-default.bat.cmsnwned_readme
vm-support.vbs.cmsnwned_readme
VMControlPanel.cpl.cmsnwned_readme
vmrawdsk.sys.cmsnwned_readme
VmUpgradeHelper.bat.cmsnwned_readme
win_hlp.zip.cmsnwned_readme
vmaudio.cat.cmsnwned_readme
vmaudio.inf.cmsnwned_readme
vmaudio.sys.cmsnwned_readme
vmmemctl.sys.cmsnwned_readme
vmmouse.cat.cmsnwned_readme
vmmouse.inf.cmsnwned_readme
vmmouse.sys.cmsnwned_readme
pvscsi.cat.cmsnwned_readme
pvscsi.inf.cmsnwned_readme
pvscsi.sys.cmsnwned_readme
caution_small.png.cmsnwned_readme
vmxnet3ndis6.inf.cmsnwned_readme
GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned_readme
vmxnet3ndis6.cat.cmsnwned_readme
vmxnet3n61x64.sys.cmsnwned_readme
vmxnet3n61x86.sys.cmsnwned_readme
GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned_readme
GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned_readme
GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned_readme
GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned_readme
GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned_readme
GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned_readme
GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned_readme
GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned_readme
GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned_readme
GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned_readme
GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned_readme
GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned_readme
GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned_readme
GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned_readme
index.html.cmsnwned_readme
warning_small.gif.cmsnwned_readme
wwhsec.htm.cmsnwned_readme
GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned_readme
webworks.css.cmsnwned_readme
blank.gif.cmsnwned_readme
collapse.gif.cmsnwned_readme
expanded.gif.cmsnwned_readme
seebttm.gif.cmsnwned_readme
seelflow.gif.cmsnwned_readme
seeright.gif.cmsnwned_readme
seertlow.gif.cmsnwned_readme
seertup.gif.cmsnwned_readme
expand.js.cmsnwned_readme
alinks.js.cmsnwned_readme
context.js.cmsnwned_readme
files.js.cmsnwned_readme
synonyms.xml.cmsnwned_readme
title.js.cmsnwned_readme
topics.js.cmsnwned_readme
towwhdir.js.cmsnwned_readme
wwhpagef.js.cmsnwned_readme
index.js.cmsnwned_readme
search.js.cmsnwned_readme
toc.js.cmsnwned_readme
search0.js.cmsnwned_readme
pair0.js.cmsnwned_readme

This report is generated via an automated analysis system.

SOLUTION

Minimum Scan Engine: 9.850

Step 1

Before doing any scans, Windows 7, Windows 8, Windows 8.1, and Windows 10 users must disable System Restore to allow full scanning of their computers.

Step 2

Identify and terminate files detected as Ransom.Win32.ICRYPT.SMGC.hp

[ Learn More ]

Windows Task Manager may not display all running processes. In this case, please use a third-party process viewer, preferably Process Explorer, to terminate the malware/grayware/spyware file. You may download the said tool here.
If the detected file is displayed in either Windows Task Manager or Process Explorer but you cannot delete it, restart your computer in safe mode. To do this, refer to this link for the complete steps.
If the detected file is not displayed in either Windows Task Manager or Process Explorer, continue doing the next steps.

Step 3

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- ObjectName = "LocalSystem"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- DependOnService = "rpcss"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- RequiredPrivileges = ""

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- ObjectName = "NT AUTHORITY\LocalService"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- DependOnService = "rpcss"

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- DependOnService = ""

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Nla\Cache\Intranet
- {89BCDCB3-5725-45A2-94AB-2D6B641209B0} = "\x00PV\xbcl%"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- cval = "0"

To delete the registry value this malware/grayware created:

Open Registry Editor.
» For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
» For Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2) users, right-click on the lower-left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>services>msiserver
In the right panel, locate and delete the entry:
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
Again In the right panel, locate and delete the entry:
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
Again In the right panel, locate and delete the entry:
ObjectName = "LocalSystem"
Again In the right panel, locate and delete the entry:
DependOnService = "rpcss"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>services>Microsoft Office Groove Audit Service
In the right panel, locate and delete the entry:
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
Again In the right panel, locate and delete the entry:
RequiredPrivileges = ""
Again In the right panel, locate and delete the entry:
ObjectName = "NT AUTHORITY\LocalService"
Again In the right panel, locate and delete the entry:
DependOnService = "rpcss"
Again In the right panel, locate and delete the entry:
DependOnService = ""
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>NetworkList>Nla>Cache>Intranet
In the right panel, locate and delete the entry:
{89BCDCB3-5725-45A2-94AB-2D6B641209B0} = "\x00PV\xbcl%"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Security Center
In the right panel, locate and delete the entry:
cval = "0"
Close Registry Editor.

Step 4

Restore these modified registry values

[ Learn More ]

Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- From: ObjectName = "LocalSystem"
  To: ObjectName = ""LocalSystem""

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- From: DependOnService = "rpcss"
  To: DependOnService = ""{random values}""

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver
- From: ImagePath = "%System%\msiexec.exe"
  To: ImagePath = ""{random values}""

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- From: ObjectName = "LocalSystem"
  To: ObjectName = ""NT AUTHORITY\LocalService""

In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Microsoft Office Groove Audit Service
- From: ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"
  To: ImagePath = ""{random values}""

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters
- From: TrapPollTimeMilliSecs = "15000"
  To: TrapPollTimeMilliSecs = ""3a98""

To restore registry values this malware/grayware modified:

Open Registry Editor. To do this:
- On Windows 7 and Server 2008 (R2):
  Click the Start button, type REGEDIT in the Search input field then press Enter.
- On Windows 8, 8.1, 10, and Server 2012 (R2):
  Right-click on the lower left corner of the screen and click Run, type REGEDIT in the Run input field, and then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>services>msiserver
In the right panel, locate the registry value:
ObjectName = "LocalSystem"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ObjectName = "LocalSystem"
Again In the right panel, locate the registry value:
DependOnService = "rpcss"
Right-click on the value name and choose Modify. Change the value data of this entry to:
DependOnService = "{random values}"
Again In the right panel, locate the registry value:
ImagePath = "%System%\msiexec.exe"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ImagePath = "{random values}"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>services>Microsoft Office Groove Audit Service
In the right panel, locate the registry value:
ObjectName = "LocalSystem"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ObjectName = "NT AUTHORITY\LocalService"
Again In the right panel, locate the registry value:
ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"
Right-click on the value name and choose Modify. Change the value data of this entry to:
ImagePath = "{random values}"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>RFC1156Agent>CurrentVersion>Parameters
In the right panel, locate the registry value:
TrapPollTimeMilliSecs = "15000"
Right-click on the value name and choose Modify. Change the value data of this entry to:
TrapPollTimeMilliSecs = "3a98"
Close Registry Editor.

Step 5

Search and delete these components

[ Learn More ]

There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png
%System Root%\excel2k\XLS2KE03.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Content.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui
%System Root%\powerpoint2k\PPT2KE03.ppt.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv
%System Root%\Program Files\Common Files\System\ado\msadomd28.tlb
%System Root%\Program Files\Mozilla Firefox\updated\update-settings.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\dependentlibs.list.cmsnwned
%System Root%\powerpoint2k\PPT2KExx.PPT.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\poweron-vm-default.bat.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
%System Root%\Program Files\Microsoft Games\FreeCell\en-US\FreeCell.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\directshowtap.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\VmUpgradeHelper.bat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png
%System Root%\Program Files\Common Files\System\ado\msadox28.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\title.js.cmsnwned
%System Root%\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\omni.ja.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\resume-vm-default.bat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
%System Root%\Program Files\Common Files\System\Ole DB\oledbvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.inf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\plugin.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\seertlow.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png
%System Root%\Program Files\Mozilla Firefox\uninstall\uninstall.log.cmsnwned
%System Root%\powerpoint2k\PPT2KE04.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\crashreporter.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png
%System Root%\powerpoint2k\PPT2KE05.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
%System Root%\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png
%System Root%\excel2k\XLS2KE04.xls.cmsnwned
%System Root%\Program Files\DVD Maker\SecretST.TTF
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
%Windows%\Temp\UOC95.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
%System Root%\Program Files\Internet Explorer\images\bing.ico
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png
%Windows%\Temp\M21742.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgzm.exe.mui.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.cat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png
%System Root%\Program Files\Internet Explorer\en-US\F12Resources.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.lnk.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv
%Windows%\Temp\HD3AE.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\meta-index.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
%Windows%\Temp\FpFC5A.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png
%System Root%\Program Files\Mozilla Firefox\updated\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\currency.data.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png
%System Root%\Program Files\DVD Maker\Shared\Parity.fx
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3dmp.sys.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\vm-support.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Mozilla Firefox\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair1.js
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\topics.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\collapse.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.inf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png
%System Root%\powerpoint2k\PPT2KE02.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
%System Root%\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\css\GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
%System Root%\Program Files\VMware\VMware Tools\open_source_licenses.txt.cmsnwned
%All Users Profile%\Microsoft\Windows\DRM\v3ks.sec
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png
%System Root%\Program Files\Common Files\System\ado\adovbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\eula.rtf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\updater.ini.cmsnwned
%Windows%\Temp\UFC58.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
%System Root%\Program Files\Mozilla Firefox\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado28.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
%System Root%\set_hostname.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
%System Root%\Program Files\Common Files\System\ado\msado25.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\crashreporter.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\platform.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\DVDMaker.exe.mui
%System Root%\Program Files\Common Files\System\ado\msado20.tlb
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\images\seebttm.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\files.js.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.png
%System Root%\Program Files\VMware\VMware Tools\VMControlPanel.cpl.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\en-US\SpiderSolitaire.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png
%System Root%\Program Files\Mozilla Firefox\Accessible.tlb.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\management.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
%Application Data%\0TdUtO3ApJ17
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
%System Root%\Program Files\Common Files\System\msadc\handsafe.reg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzmappings.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\softokn3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
%System Root%\Program Files\DVD Maker\Shared\DissolveNoise.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png
%System Root%\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\ieinstal.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\shvlzm.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Eurosti.TTF
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\uninstall.log.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.cmsnwned
%System Root%\Program Files\Microsoft Games\Minesweeper\en-US\Minesweeper.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe:0
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
%System Root%\Program Files\Microsoft Games\Solitaire\en-US\Solitaire.exe.mui.cmsnwned
%System Root%\excel2k\XLS2KExx.xls.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\OmdProject.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\Welcome.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png
%System Root%\Program Files\DVD Maker\Shared\Filters.xml
%System Root%\Program Files\VMware\VMware Tools\help\images\expanded.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\precomplete.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
%System Root%\Program Files\Mozilla Firefox\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\content-types.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\javaws.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png
%System Root%\Program Files\Mozilla Firefox\updated\install.log.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.png
%System Root%\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqloledb.rll
%System Root%\Program Files\Mozilla Firefox\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
%System Root%\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Email and Password List.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seelflow.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png
%System Root%\Program Files\Java\jre1.8.0_144\LICENSE.cmsnwned
%Windows%\Temp\I0u19E3.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.cat.cmsnwned
%System Root%\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png
%System Root%\Email and Password List.vbs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
%System Root%\Program Files\DVD Maker\sonicsptransform.ax
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
%System Root%\Program Files\Internet Explorer\en-US\iexplore.exe.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\release.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png
%System Root%\Program Files\Mozilla Firefox\updated\nssdbm3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\win_hlp.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png
%System Root%\Program Files\Internet Explorer\ie9props.propdesc
%Windows%\Temp\cFC59.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\jsse.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\warning_small.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x86.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
%System Root%\Program Files\Common Files\System\ado\adojavas.inc
%System Root%\Program Files\DVD Maker\Shared\Common.fxh
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv
%System Root%\Program Files\Internet Explorer\en-US\F12.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\precomplete.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklist.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\memctl\vmmemctl.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
%System Root%\Program Files\VMware\VMware Tools\help\index.html.cmsnwned
%System Root%\Program Files\Mozilla Firefox\nssdbm3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\charsets.jar.cmsnwned
%System Root%\excel2k\XLS2KE05.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
%System Root%\Program Files\Common Files\System\ado\msado27.tlb
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.sys.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcjavas.inc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png
%System Root%\Program Files\VMware\VMware Tools\poweroff-vm-default.bat.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv
%System Root%\Program Files\VMware\VMware Tools\suspend-vm-default.bat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\rt.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\README.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui
%Application Data%\0TDUTO~1
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\logging.properties.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\Mso Example Setup File A.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\net.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png
%System Root%\Email and Password List.htm.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
%System Root%\Program Files\Mozilla Firefox\updated\freebl3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png
%System Root%\Program Files\ImDisk\lang.txt.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png
%System Root%\Program Files\DVD Maker\Shared\DissolveAnother.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\cacerts.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp
%System Root%\Program Files\Mozilla Firefox\updater.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\javafx.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png
%System Root%\excel2k\XLS2KE01.xls.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\index.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\chkrzm.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.security.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seeright.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png
%Windows%\Temp\XY1464.tmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.cmsnwned
%System Root%\Program Files\DVD Maker\fieldswitch.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.cmsnwned
%Windows%\Temp\tC94.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png
%System Root%\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png
%Windows%\Temp\0O3AD.tmp
%Windows%\Temp\81743.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.cmsnwned
%System Root%\powerpoint2k\PPT2KE00.pot.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado26.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\calendars.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\install.log.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jce.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv
%System Root%\Program Files\Microsoft Games\Chess\en-US\Chess.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\offset.ax
%System Root%\Program Files\VMware\VMware Tools\help\images\seertup.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png
%System Root%\Program Files\DVD Maker\bod_r.TTF
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\resources.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
%System Root%\Program Files\Mozilla Firefox\update-settings.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\softokn3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
%System Root%\Email and Password List.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\context.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png
%System Root%\Program Files\Mozilla Firefox\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\omni.ja.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\scripts\expand.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.cat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png
%System Root%\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
%System Root%\Program Files\Mozilla Firefox\platform.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
%System Root%\AVScanner.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhsec.htm.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair0.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\excel2k\XLS2KE00.xlt.cmsnwned
%System Root%\Program Files\DVD Maker\rtstreamsink.ax
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
%System Root%\Program Files\VMware\VMware Tools\vmrawdsk.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png
%System Root%\Program Files\Mozilla Firefox\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\css\webworks.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png
%System Root%\Program Files\DVD Maker\rtstreamsource.ax
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png
%System Root%\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png
%System Root%\excel2k\XLS2KE02.xls.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\icudt44l.dat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned
%System Root%\Program Files\Internet Explorer\en-US\F12Tools.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png
%System Root%\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\towwhdir.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\toc.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\ado\msado21.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\soniccolorconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
%System Root%\Program Files\Common Files\System\en-US\wab32res.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File A.txt.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File B.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png
%Application Data%\sBmMbYIc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png
%System Root%\Program Files\VMware\VMware Tools\help\caution_small.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
%System Root%\Program Files\Mozilla Firefox\dependentlibs.list.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\audiodepthconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.sys.cmsnwned
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%Windows%\Temp\M119E4.tmp
%System Root%\Program Files\VMware\VMware Tools\help\images\blank.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\iedvtool.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\wwhpagef.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
%System Root%\Program Files\Common Files\System\Ole DB\oledbjvs.inc
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\install.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\Timeline.cpu.xml
%Windows%\Temp\Yr1453.tmp
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\alinks.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
%All Users Profile%\Microsoft\Windows\DRM\drmstore.hds
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\synonyms.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\Accessible.tlb.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x64.sys.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
%System Root%\Program Files\Internet Explorer\SIGNUP\install.ins.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\en-US\Mahjong.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png
%AppDataLocal%\Microsoft\Media Player\CurrentDatabase_372.wmdb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\sound.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png
%System Root%\Program Files\Common Files\Services\verisign.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\search0.js.cmsnwned
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.cat.cmsnwned
%Windows%\Temp\F9O254.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.cmsnwned
%Windows%\servicing\TrustedInstaller.exe
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Hearts\en-US\Hearts.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\classlist.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png
%Windows%\Temp\2Y253.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png
%System Root%\powerpoint2k\PPT2KE01.ppt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\COPYRIGHT.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.cmsnwned
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
%System Root%\Program Files\Internet Explorer\en-US\networkinspection.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
%System Root%\Program Files\Mozilla Firefox\freebl3.chk.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\handler.reg
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

To manually delete a malware/grayware file from an affected system:

•For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

Open a Windows Explorer window.
- For Windows 7 and Server 2008 (R2) users, click Start>Computer.
- For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
In the Search Computer/This PC input box, type:
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png
%System Root%\excel2k\XLS2KE03.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Content.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui
%System Root%\powerpoint2k\PPT2KE03.ppt.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv
%System Root%\Program Files\Common Files\System\ado\msadomd28.tlb
%System Root%\Program Files\Mozilla Firefox\updated\update-settings.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\dependentlibs.list.cmsnwned
%System Root%\powerpoint2k\PPT2KExx.PPT.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\poweron-vm-default.bat.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
%System Root%\Program Files\Microsoft Games\FreeCell\en-US\FreeCell.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\directshowtap.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\VmUpgradeHelper.bat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png
%System Root%\Program Files\Common Files\System\ado\msadox28.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\title.js.cmsnwned
%System Root%\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\omni.ja.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\resume-vm-default.bat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
%System Root%\Program Files\Common Files\System\Ole DB\oledbvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.inf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\plugin.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\seertlow.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png
%System Root%\Program Files\Mozilla Firefox\uninstall\uninstall.log.cmsnwned
%System Root%\powerpoint2k\PPT2KE04.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\crashreporter.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png
%System Root%\powerpoint2k\PPT2KE05.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
%System Root%\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png
%System Root%\excel2k\XLS2KE04.xls.cmsnwned
%System Root%\Program Files\DVD Maker\SecretST.TTF
%System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
%Windows%\Temp\UOC95.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
%System Root%\Program Files\Internet Explorer\images\bing.ico
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png
%Windows%\Temp\M21742.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgzm.exe.mui.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.cat.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png
%System Root%\Program Files\Internet Explorer\en-US\F12Resources.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.lnk.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcvbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv
%Windows%\Temp\HD3AE.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\meta-index.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
%Windows%\Temp\FpFC5A.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png
%System Root%\Program Files\Mozilla Firefox\updated\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\currency.data.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png
%System Root%\Program Files\DVD Maker\Shared\Parity.fx
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3dmp.sys.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\vm-support.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Mozilla Firefox\xul.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair1.js
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\topics.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\images\collapse.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.inf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png
%System Root%\powerpoint2k\PPT2KE02.ppt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
%System Root%\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\css\GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
%System Root%\Program Files\VMware\VMware Tools\open_source_licenses.txt.cmsnwned
%All Users Profile%\Microsoft\Windows\DRM\v3ks.sec
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png
%System Root%\Program Files\Common Files\System\ado\adovbs.inc
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\eula.rtf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\updater.ini.cmsnwned
%Windows%\Temp\UFC58.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
%System Root%\Program Files\Mozilla Firefox\plugin-container.exe.sig.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado28.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
%System Root%\set_hostname.vbs.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
%System Root%\Program Files\Common Files\System\ado\msado25.tlb
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\crashreporter.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\platform.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\DVDMaker.exe.mui
%System Root%\Program Files\Common Files\System\ado\msado20.tlb
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\images\seebttm.gif.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\files.js.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.png
%System Root%\Program Files\VMware\VMware Tools\VMControlPanel.cpl.cmsnwned
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\en-US\SpiderSolitaire.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png
%System Root%\Program Files\Mozilla Firefox\Accessible.tlb.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\management.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
%Application Data%\0TdUtO3ApJ17
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
%System Root%\Program Files\Common Files\System\msadc\handsafe.reg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.cmsnwned
%System Root%\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\tzmappings.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\softokn3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
%System Root%\Program Files\DVD Maker\Shared\DissolveNoise.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.cmsnwned
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.inf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png
%System Root%\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Internet Explorer\en-US\ieinstal.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\shvlzm.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Eurosti.TTF
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\uninstall.log.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.cmsnwned
%System Root%\Program Files\Microsoft Games\Minesweeper\en-US\Minesweeper.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe:0
%System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
%System Root%\Program Files\Microsoft Games\Solitaire\en-US\Solitaire.exe.mui.cmsnwned
%System Root%\excel2k\XLS2KExx.xls.cmsnwned
%System Root%\Program Files\DVD Maker\en-US\OmdProject.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\Welcome.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png
%System Root%\Program Files\DVD Maker\Shared\Filters.xml
%System Root%\Program Files\VMware\VMware Tools\help\images\expanded.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\precomplete.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
%System Root%\Program Files\Mozilla Firefox\firefox.exe.sig.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\content-types.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\javaws.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png
%System Root%\Program Files\Mozilla Firefox\updated\install.log.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.png
%System Root%\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\sqloledb.rll
%System Root%\Program Files\Mozilla Firefox\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
%System Root%\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Email and Password List.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seelflow.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png
%System Root%\Program Files\Java\jre1.8.0_144\LICENSE.cmsnwned
%Windows%\Temp\I0u19E3.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.cat.cmsnwned
%System Root%\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png
%System Root%\Email and Password List.vbs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv
%System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
%System Root%\Program Files\DVD Maker\sonicsptransform.ax
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
%System Root%\Program Files\Internet Explorer\en-US\iexplore.exe.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\release.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.inf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png
%System Root%\Program Files\Mozilla Firefox\updated\nssdbm3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\win_hlp.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png
%System Root%\Program Files\Internet Explorer\ie9props.propdesc
%Windows%\Temp\cFC59.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\jsse.jar.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\warning_small.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x86.sys.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
%System Root%\Program Files\Common Files\System\ado\adojavas.inc
%System Root%\Program Files\DVD Maker\Shared\Common.fxh
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv
%System Root%\Program Files\Internet Explorer\en-US\F12.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\precomplete.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklist.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\memctl\vmmemctl.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
%System Root%\Program Files\VMware\VMware Tools\help\index.html.cmsnwned
%System Root%\Program Files\Mozilla Firefox\nssdbm3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\charsets.jar.cmsnwned
%System Root%\excel2k\XLS2KE05.xls.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
%System Root%\Program Files\Common Files\System\ado\msado27.tlb
%System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.sys.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\adcjavas.inc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png
%System Root%\Program Files\VMware\VMware Tools\poweroff-vm-default.bat.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv
%System Root%\Program Files\VMware\VMware Tools\suspend-vm-default.bat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\rt.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\README.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui
%Application Data%\0TDUTO~1
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
%System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\logging.properties.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\Mso Example Setup File A.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\net.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png
%System Root%\Email and Password List.htm.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
%System Root%\Program Files\Mozilla Firefox\updated\freebl3.chk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png
%System Root%\Program Files\ImDisk\lang.txt.cmsnwned
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png
%System Root%\Program Files\DVD Maker\Shared\DissolveAnother.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\cacerts.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp
%System Root%\Program Files\Mozilla Firefox\updater.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\javafx.properties.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png
%System Root%\excel2k\XLS2KE01.xls.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.cat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\index.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
%System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\chkrzm.exe.mui.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
%System Root%\Program Files\VMware\VMware Tools\help\GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.security.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\help\images\seeright.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png
%Windows%\Temp\XY1464.tmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.cmsnwned
%System Root%\Program Files\DVD Maker\fieldswitch.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.cmsnwned
%Windows%\Temp\tC94.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png
%System Root%\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png
%Windows%\Temp\0O3AD.tmp
%Windows%\Temp\81743.tmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
%System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.cmsnwned
%System Root%\powerpoint2k\PPT2KE00.pot.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned
%System Root%\Program Files\Common Files\System\ado\msado26.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\calendars.properties.cmsnwned
%System Root%\Program Files\Mozilla Firefox\install.log.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\jce.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv
%System Root%\Program Files\Microsoft Games\Chess\en-US\Chess.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\offset.ax
%System Root%\Program Files\VMware\VMware Tools\help\images\seertup.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png
%System Root%\Program Files\DVD Maker\bod_r.TTF
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png
%System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\resources.jar.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
%System Root%\Program Files\Mozilla Firefox\update-settings.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\softokn3.chk.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
%System Root%\Email and Password List.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\context.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png
%System Root%\Program Files\Mozilla Firefox\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\omni.ja.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\scripts\expand.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.cat.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png
%System Root%\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
%System Root%\Program Files\Mozilla Firefox\platform.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
%System Root%\AVScanner.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhsec.htm.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair0.js.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv
%System Root%\Program Files\Mozilla Firefox\updated\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png
%System Root%\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
%System Root%\excel2k\XLS2KE00.xlt.cmsnwned
%System Root%\Program Files\DVD Maker\rtstreamsink.ax
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
%System Root%\Program Files\VMware\VMware Tools\vmrawdsk.sys.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\blocklist.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png
%System Root%\Program Files\Mozilla Firefox\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\VMware\VMware Tools\help\css\webworks.css.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png
%System Root%\Program Files\DVD Maker\rtstreamsource.ax
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png
%System Root%\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png
%System Root%\excel2k\XLS2KE02.xls.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\icudt44l.dat.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned
%System Root%\Program Files\Internet Explorer\en-US\F12Tools.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png
%System Root%\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\towwhdir.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\toc.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
%System Root%\Program Files\Common Files\System\ado\msado21.tlb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\soniccolorconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
%System Root%\Program Files\Common Files\System\en-US\wab32res.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File A.txt.cmsnwned
%System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File B.txt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png
%Application Data%\sBmMbYIc
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_150.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png
%System Root%\Program Files\VMware\VMware Tools\help\caution_small.png.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
%System Root%\Program Files\Mozilla Firefox\dependentlibs.list.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\defaults\pref\channel-prefs.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\audiodepthconverter.ax
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png
%System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.sys.cmsnwned
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
%Windows%\Temp\M119E4.tmp
%System Root%\Program Files\VMware\VMware Tools\help\images\blank.gif.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png
%System Root%\Program Files\Internet Explorer\en-US\iedvtool.dll.mui
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\wwhpagef.js.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
%System Root%\Program Files\Common Files\System\Ole DB\oledbjvs.inc
%System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\install.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png
%System Root%\Program Files\Internet Explorer\Timeline.cpu.xml
%Windows%\Temp\Yr1453.tmp
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\alinks.js.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
%All Users Profile%\Microsoft\Windows\DRM\drmstore.hds
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\synonyms.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv
%System Root%\Program Files\Mozilla Firefox\updated\Accessible.tlb.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x64.sys.cmsnwned
%System Root%\Program Files\VMware\VMware Tools\help\GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
%System Root%\Program Files\Internet Explorer\SIGNUP\install.ins.cmsnwned
%System Root%\Program Files\Microsoft Games\Mahjong\en-US\Mahjong.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png
%AppDataLocal%\Microsoft\Media Player\CurrentDatabase_372.wmdb
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Mozilla Firefox\updated\uninstall\shortcuts_log.ini.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png.cmsnwned
%System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\application.ini.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
%System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.policy.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\lib\sound.properties.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png
%System Root%\Program Files\Common Files\Services\verisign.bmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv
%System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\search0.js.cmsnwned
%System Root%\Program Files\Microsoft Games\Chess\ChessMCE.lnk.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\Mozilla Firefox\updated\browser\crashreporter-override.ini.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp
%System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.cat.cmsnwned
%Windows%\Temp\F9O254.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv
%System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.cmsnwned
%Windows%\servicing\TrustedInstaller.exe
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
%System Root%\Program Files\Microsoft Games\Hearts\en-US\Hearts.exe.mui.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png
%System Root%\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp
%System Root%\Program Files\Java\jre1.8.0_144\lib\classlist.cmsnwned
%System Root%\Program Files\Mozilla Firefox\browser\omni.ja.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png
%Windows%\Temp\2Y253.tmp
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png
%System Root%\powerpoint2k\PPT2KE01.ppt.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png
%System Root%\Program Files\VMware\VMware Tools\help\GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png
%System Root%\Program Files\Java\jre1.8.0_144\COPYRIGHT.cmsnwned
%System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.cmsnwned
%System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
%System Root%\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf.cmsnwned
%System Root%\Program Files\Mozilla Firefox\updated\firefox.VisualElementsManifest.xml.cmsnwned
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png
%System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv
%System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
%System Root%\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
%System Root%\Program Files\Internet Explorer\en-US\networkinspection.dll.mui
%System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
%System Root%\Program Files\Mozilla Firefox\freebl3.chk.cmsnwned
%System Root%\Program Files\Common Files\System\msadc\handler.reg
%System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.cmsnwned
%System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
%System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui
Once located, select the file then press SHIFT+DELETE to delete it.
*Note: Read the following Microsoft page if these steps do not work on Windows 7 and Windows Server 2008 (R2).

Step 6

Search and delete this folder

[ Learn More ]

Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.

%Windows%\ServiceProfiles\NetworkService\AppData\Local\Microsoft

Step 7

Scan your computer with your Trend Micro product to delete files detected as Ransom.Win32.ICRYPT.SMGC.hp. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information:

Step 8

Restore encrypted files from backup.

Did this description help? Tell us how we did.

Ransom.Win32.ICRYPT.SMGC.hp

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

Ransom.Win32.ICRYPT.SMGC.hp

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific