TROJ_HUPIGON.GSA

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan deletes the following files:

• %Program Files%\Adobe\Reader 10.0\Esl\AiodLite.dll
• %Program Files%\Adobe\Reader 10.0\Reader\A3DUtils.dll
• %Program Files%\Adobe\Reader 10.0\Reader\ACE.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroBroker.exe
• %Program Files%\Adobe\Reader 10.0\Reader\Acrofx32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32Info.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe
• %Program Files%\Adobe\Reader 10.0\Reader\Adobe.Reader.Dependencies.manifest
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeLinguistic.dll
• %Program Files%\Adobe\Reader 10.0\Reader\adoberfp.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeXMP.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AGM.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini
• %Program Files%\Adobe\Reader 10.0\Reader\ahclient.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\authplay.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AXE8SharedExpat.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AXSLE.dll
• %Program Files%\Adobe\Reader 10.0\Reader\BIB.dll
• %Program Files%\Adobe\Reader 10.0\Reader\BIBUtils.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\ccme_base.dll
• %Program Files%\Adobe\Reader 10.0\Reader\CoolType.dll
• %Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.dll
• %Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.sig
• %Program Files%\Adobe\Reader 10.0\Reader\Eula.exe
• %Program Files%\Adobe\Reader 10.0\Reader\ExtendScript.dll
• %Program Files%\Adobe\Reader 10.0\Reader\icucnv40.dll
• %Program Files%\Adobe\Reader 10.0\Reader\icudt40.dll
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin
• %Program Files%\Adobe\Reader 10.0\Reader\JP2KLib.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\eula.ini
• %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
• %Program Files%\Adobe\Reader 10.0\Reader\logsession.dll
• %Program Files%\Adobe\Reader 10.0\Reader\LogTransport2.exe
• %Program Files%\Adobe\Reader 10.0\Reader\Onix32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlr.dll
• %Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlrShim.exe
• %Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\pe.dll
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Accessibility.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\adobepdf.xdc
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\AdobePDF417.pmp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\DataMatrix.pmp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\QRCode.pmp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroSign.prc
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annots.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Checkers.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DigSig.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\DVA.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\eBook.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\EScript.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\IA32.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\MakeAccessible.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\MCIMPP.mpp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\QuickTime.mpp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\WindowsMedia.mpp
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PDDom.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\PPKLite.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\ReadOutLoud.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\reflow.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SaveAsRTF.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Search.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\SendMail.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Spelling.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Updater.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\weblink.api
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\2d.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\3difr.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX8.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvDX9.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\drvSOFT.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\MyriadCAD.otf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prcr.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\tesselate.x3d
• %Program Files%\Adobe\Reader 10.0\Reader\pmd.cer
• %Program Files%\Adobe\Reader 10.0\Reader\reader_sl.exe
• %Program Files%\Adobe\Reader 10.0\Reader\rt3d.dll
• %Program Files%\Adobe\Reader 10.0\Reader\RTC.der
• %Program Files%\Adobe\Reader 10.0\Reader\ScCore.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Services\DEXShare.spi
• %Program Files%\Adobe\Reader 10.0\Reader\Services\Services.cfg
• %Program Files%\Adobe\Reader 10.0\Reader\SPPlugins\ADMPlugin.apl
• %Program Files%\Adobe\Reader 10.0\Reader\sqlite.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\bl.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\br.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\info.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\main.css
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\rss.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\tl.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\tr.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\trash.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\warning.gif
• %Program Files%\Adobe\Reader 10.0\Reader\ViewerPS.dll
• %Program Files%\Adobe\Reader 10.0\ReadMe.htm
• %Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-H
• %Program Files%\Adobe\Reader 10.0\Resource\CMap\Identity-V
• %Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\AdobePiStd.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Bold.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-BoldOblique.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd-Oblique.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\CourierStd.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Bold.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-BoldIt.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-It.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MinionPro-Regular.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Bold.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-BoldIt.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-It.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\MyriadPro-Regular.otf
• %Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\SY______.PFM
• %Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zx______.pfm
• %Program Files%\Adobe\Reader 10.0\Resource\Font\PFM\zy______.pfm
• %Program Files%\Adobe\Reader 10.0\Resource\Font\SY______.PFB
• %Program Files%\Adobe\Reader 10.0\Resource\Font\ZX______.PFB
• %Program Files%\Adobe\Reader 10.0\Resource\Font\ZY______.PFB
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.fca
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt.hyp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt04.hsp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt32.clx
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\brt55.ths
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can.hyp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can03.ths
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can129.hsp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\can32.clx
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng.hyp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\eng32.clx
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\engphon.env
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.hsp
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa03.ths
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\usa37.hyp
• %Program Files%\Adobe\Reader 10.0\Resource\SaslPrep\SaslPrepProfile_norm_bidi.spp
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
• %Program Files%\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
• %Program Files%\Common Files\Adobe\ARM\1.0\AdobeARM.exe
• %Program Files%\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll
• %Program Files%\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
• %Program Files%\Common Files\Adobe\HelpCfg\en_US\Reader_10.0.helpcfg
• %Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
• %Program Files%\Common Files\Microsoft Shared\DW\1025\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1028\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1031\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1033\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1036\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1040\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1041\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1042\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\2052\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\3082\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\DW20.EXE
• %Program Files%\Common Files\Microsoft Shared\DW\DWDCW20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
• %Program Files%\Common Files\Microsoft Shared\MSInfo\IEFILES5.INF
• %Program Files%\Common Files\Microsoft Shared\MSInfo\IEINFO5.OCX
• %Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
• %Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapi.cpl
• %Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
• %Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
• %Program Files%\Common Files\Microsoft Shared\TextConv\html32.cnv
• %Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
• %Program Files%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc
• %Program Files%\Common Files\Microsoft Shared\TextConv\mswrd832.cnv
• %Program Files%\Common Files\Microsoft Shared\TextConv\write32.wpc
• %Program Files%\Common Files\Microsoft Shared\Triedit\DHTMLED.OCX
• %Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
• %Program Files%\Common Files\Microsoft Shared\VC\msdia100.dll
• %Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
• %Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
• %Program Files%\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033\FPEXT.MSG
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
• %Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
• %Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
• %Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
• %Program Files%\Common Files\Services\bigfoot.bmp
• %Program Files%\Common Files\Services\verisign.bmp
• %Program Files%\Common Files\Services\whowhere.bmp
• %Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\ltts1033.lxa
• %Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033\r1033tts.lxa
• %Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.sdf
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\sam.spd
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
• %Program Files%\Common Files\System\ado\adojavas.inc
• %Program Files%\Common Files\System\ado\adovbs.inc
• %Program Files%\Common Files\System\ado\MDACReadme.htm
• %Program Files%\Common Files\System\ado\msader15.dll
• %Program Files%\Common Files\System\ado\msado15.dll
• %Program Files%\Common Files\System\ado\msado20.tlb
• %Program Files%\Common Files\System\ado\msado21.tlb
• %Program Files%\Common Files\System\ado\msado25.tlb
• %Program Files%\Common Files\System\ado\msado26.tlb
• %Program Files%\Common Files\System\ado\msado27.tlb
• %Program Files%\Common Files\System\ado\msadomd.dll
• %Program Files%\Common Files\System\ado\msador15.dll
• %Program Files%\Common Files\System\ado\msadox.dll
• %Program Files%\Common Files\System\ado\msadrh15.dll
• %Program Files%\Common Files\System\ado\msjro.dll
• %Program Files%\Common Files\System\directdb.dll
• %Program Files%\Common Files\System\msadc\adcjavas.inc
• %Program Files%\Common Files\System\msadc\adcvbs.inc
• %Program Files%\Common Files\System\msadc\handler.reg
• %Program Files%\Common Files\System\msadc\handsafe.reg
• %Program Files%\Common Files\System\msadc\msadce.dll
• %Program Files%\Common Files\System\msadc\msadcer.dll
• %Program Files%\Common Files\System\msadc\msadcf.dll
• %Program Files%\Common Files\System\msadc\msadcfr.dll
• %Program Files%\Common Files\System\msadc\msadco.dll
• %Program Files%\Common Files\System\msadc\msadcor.dll
• %Program Files%\Common Files\System\msadc\msadcs.dll
• %Program Files%\Common Files\System\msadc\msadds.dll
• %Program Files%\Common Files\System\msadc\msaddsr.dll
• %Program Files%\Common Files\System\msadc\msdaprsr.dll
• %Program Files%\Common Files\System\msadc\msdaprst.dll
• %Program Files%\Common Files\System\msadc\msdarem.dll
• %Program Files%\Common Files\System\msadc\msdaremr.dll
• %Program Files%\Common Files\System\msadc\msdfmap.dll
• %Program Files%\Common Files\System\Ole DB\msdadc.dll
• %Program Files%\Common Files\System\Ole DB\msdaenum.dll
• %Program Files%\Common Files\System\Ole DB\msdaer.dll
• %Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
• %Program Files%\Common Files\System\Ole DB\msdaora.dll
• %Program Files%\Common Files\System\Ole DB\msdaorar.dll
• %Program Files%\Common Files\System\Ole DB\msdaosp.dll
• %Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
• %Program Files%\Common Files\System\Ole DB\msdaps.dll
• %Program Files%\Common Files\System\Ole DB\msdasc.dll
• %Program Files%\Common Files\System\Ole DB\msdasql.dll
• %Program Files%\Common Files\System\Ole DB\msdasqlr.dll
• %Program Files%\Common Files\System\Ole DB\msdatl3.dll
• %Program Files%\Common Files\System\Ole DB\msdatt.dll
• %Program Files%\Common Files\System\Ole DB\msdaurl.dll
• %Program Files%\Common Files\System\Ole DB\msxactps.dll
• %Program Files%\Common Files\System\Ole DB\oledb32.dll
• %Program Files%\Common Files\System\Ole DB\oledb32r.dll
• %Program Files%\Common Files\System\Ole DB\oledbjvs.inc
• %Program Files%\Common Files\System\Ole DB\oledbvbs.inc
• %Program Files%\Common Files\System\Ole DB\sqloledb.dll
• %Program Files%\Common Files\System\Ole DB\sqloledb.rll
• %Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
• %Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
• %Program Files%\Common Files\System\Ole DB\sqlxmlx.rll
• %Program Files%\Common Files\System\wab32.dll
• %Program Files%\Common Files\System\wab32res.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwip.dun
• %Program Files%\Internet Explorer\Connection Wizard\icwres.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwx25a.dun
• %Program Files%\Internet Explorer\Connection Wizard\icwx25b.dun
• %Program Files%\Internet Explorer\Connection Wizard\icwx25c.dun
• %Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
• %Program Files%\Internet Explorer\Connection Wizard\isignup.exe
• %Program Files%\Internet Explorer\Connection Wizard\msicw.isp
• %Program Files%\Internet Explorer\Connection Wizard\msn.isp
• %Program Files%\Internet Explorer\Connection Wizard\phone.icw
• %Program Files%\Internet Explorer\Connection Wizard\phone.ver
• %Program Files%\Internet Explorer\Connection Wizard\state.icw
• %Program Files%\Internet Explorer\Connection Wizard\support.icw
• %Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
• %Program Files%\Internet Explorer\HMMAPI.DLL
• %Program Files%\Internet Explorer\iedw.exe
• %Program Files%\Internet Explorer\IEXPLORE.EXE
• %Program Files%\Internet Explorer\MUI\0409\mscorier.dll
• %Program Files%\Internet Explorer\PLUGINS\nppdf32.dll
• %Program Files%\Internet Explorer\SIGNUP\INSTALL.INS
• %Program Files%\Messenger\custsat.dll
• %Program Files%\Messenger\logowin.gif
• %Program Files%\Messenger\lvback.gif
• %Program Files%\Messenger\msgsc.dll
• %Program Files%\Messenger\msgslang.dll
• %Program Files%\Messenger\msmsgs.exe
• %Program Files%\Messenger\newalert.wav
• %Program Files%\Messenger\newemail.wav
• %Program Files%\Messenger\online.wav
• %Program Files%\Messenger\type.wav
• %Program Files%\Messenger\xpmsgr.chm
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_client.xml
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml
• %Program Files%\Movie Maker\moviemk.exe
• %Program Files%\Movie Maker\MUI\0409\moviemk.chm
• %Program Files%\Movie Maker\Shared\Empty.txt
• %Program Files%\Movie Maker\Shared\Filters.xml
• %Program Files%\Movie Maker\Shared\news.png
• %Program Files%\Movie Maker\Shared\paint.png
• %Program Files%\Movie Maker\Shared\Profiles\Blank.txt
• %Program Files%\Movie Maker\Shared\Sample1.jpg
• %Program Files%\Movie Maker\Shared\Sample2.jpg
• %Program Files%\Movie Maker\WMM2AE.dll
• %Program Files%\Movie Maker\WMM2ERES.dll
• %Program Files%\Movie Maker\WMM2EXT.dll
• %Program Files%\Movie Maker\WMM2FILT.dll
• %Program Files%\Movie Maker\WMM2FXA.dll
• %Program Files%\Movie Maker\WMM2FXB.dll
• %Program Files%\Movie Maker\WMM2RES.dll
• %Program Files%\Movie Maker\WMM2RES2.dll
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
• %Program Files%\MSN\MSNCoreFiles\Install\cinfo.xml
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
• %Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
• %Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
• %Program Files%\MSN\MSNCoreFiles\Install\xfp.xml
• %Program Files%\MSN\MSNCoreFiles\OOBE\market.mar
• %Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\signup.mar
• %Program Files%\MSN Gaming Zone\Windows\bckg.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgres.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
• %Program Files%\MSN Gaming Zone\Windows\chkr.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrres.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
• %Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
• %Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtz.dll
• %Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
• %Program Files%\MSN Gaming Zone\Windows\rvse.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
• %Program Files%\MSN Gaming Zone\Windows\shvl.dll
• %Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
• %Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
• %Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
• %Program Files%\MSN Gaming Zone\Windows\zClientm.exe
• %Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
• %Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
• %Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
• %Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
• %Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
• %Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt
• %Program Files%\NetMeeting\Blip.wav
• %Program Files%\NetMeeting\callcont.dll
• %Program Files%\NetMeeting\cb32.exe
• %Program Files%\NetMeeting\conf.exe
• %Program Files%\NetMeeting\confmrsl.dll
• %Program Files%\NetMeeting\dcap32.dll
• %Program Files%\NetMeeting\h323cc.dll
• %Program Files%\NetMeeting\MST120.DLL
• %Program Files%\NetMeeting\MST123.DLL
• %Program Files%\NetMeeting\nac.dll
• %Program Files%\NetMeeting\netmeet.htm
• %Program Files%\NetMeeting\nmas.dll
• %Program Files%\NetMeeting\nmasnt.dll
• %Program Files%\NetMeeting\nmchat.dll
• %Program Files%\NetMeeting\nmcom.dll
• %Program Files%\NetMeeting\nmft.dll
• %Program Files%\NetMeeting\nmoldwb.dll
• %Program Files%\NetMeeting\nmwb.dll
• %Program Files%\NetMeeting\rrcm.dll
• %Program Files%\NetMeeting\TestSnd.wav
• %Program Files%\NetMeeting\wb32.exe
• %Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
• %Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
• %Program Files%\Outlook Express\msimn.exe
• %Program Files%\Outlook Express\msoe.dll
• %Program Files%\Outlook Express\msoe.txt
• %Program Files%\Outlook Express\msoeres.dll
• %Program Files%\Outlook Express\oeimport.dll
• %Program Files%\Outlook Express\oemig50.exe
• %Program Files%\Outlook Express\oemiglib.dll
• %Program Files%\Outlook Express\setup50.exe
• %Program Files%\Outlook Express\wab.exe
• %Program Files%\Outlook Express\wabfind.dll
• %Program Files%\Outlook Express\wabimp.dll
• %Program Files%\Outlook Express\wabmig.exe
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll
• %Program Files%\Windows Media Player\custsat.dll
• %Program Files%\Windows Media Player\migrate.exe
• %Program Files%\Windows Media Player\mplayer2.exe
• %Program Files%\Windows Media Player\mpvis.dll
• %Program Files%\Windows Media Player\npdrmv2.dll
• %Program Files%\Windows Media Player\npdrmv2.zip
• %Program Files%\Windows Media Player\npds.zip
• %Program Files%\Windows Media Player\npdsplay.dll
• %Program Files%\Windows Media Player\npwmsdrm.dll
• %Program Files%\Windows Media Player\setup_wm.exe
• %Program Files%\Windows Media Player\Skins\compact.wmz
• %Program Files%\Windows Media Player\Skins\Revert.wmz
• %Program Files%\Windows Media Player\wmpband.dll
• %Program Files%\Windows Media Player\wmplayer.exe
• %Program Files%\Windows Media Player\wmpns.dll
• %Program Files%\Windows NT\Accessories\mswrd6.wpc
• %Program Files%\Windows NT\Accessories\mswrd8.wpc
• %Program Files%\Windows NT\Accessories\wordpad.exe
• %Program Files%\Windows NT\Accessories\write.wpc
• %Program Files%\Windows NT\dialer.exe
• %Program Files%\Windows NT\htrn_jis.dll
• %Program Files%\Windows NT\hypertrm.exe
• %Program Files%\Windows NT\Pinball\FONT.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.EXE
• %Program Files%\Windows NT\Pinball\PINBALL.MID
• %Program Files%\Windows NT\Pinball\PINBALL2.MID
• %Program Files%\Windows NT\Pinball\SOUND1.WAV
• %Program Files%\Windows NT\Pinball\SOUND104.WAV
• %Program Files%\Windows NT\Pinball\SOUND105.WAV
• %Program Files%\Windows NT\Pinball\SOUND108.WAV
• %Program Files%\Windows NT\Pinball\SOUND111.WAV
• %Program Files%\Windows NT\Pinball\SOUND112.WAV
• %Program Files%\Windows NT\Pinball\SOUND12.WAV
• %Program Files%\Windows NT\Pinball\SOUND13.WAV
• %Program Files%\Windows NT\Pinball\SOUND131.WAV
• %Program Files%\Windows NT\Pinball\SOUND136.WAV
• %Program Files%\Windows NT\Pinball\SOUND14.WAV
• %Program Files%\Windows NT\Pinball\SOUND16.WAV
• %Program Files%\Windows NT\Pinball\SOUND17.WAV
• %Program Files%\Windows NT\Pinball\SOUND18.WAV
• %Program Files%\Windows NT\Pinball\SOUND181.WAV
• %Program Files%\Windows NT\Pinball\SOUND19.WAV
• %Program Files%\Windows NT\Pinball\SOUND20.WAV
• %Program Files%\Windows NT\Pinball\SOUND21.WAV
• %Program Files%\Windows NT\Pinball\SOUND22.WAV
• %Program Files%\Windows NT\Pinball\SOUND24.WAV
• %Program Files%\Windows NT\Pinball\SOUND240.WAV
• %Program Files%\Windows NT\Pinball\SOUND243.WAV
• %Program Files%\Windows NT\Pinball\SOUND25.WAV
• %Program Files%\Windows NT\Pinball\SOUND26.WAV
• %Program Files%\Windows NT\Pinball\SOUND27.WAV
• %Program Files%\Windows NT\Pinball\SOUND28.WAV
• %Program Files%\Windows NT\Pinball\SOUND29.WAV
• %Program Files%\Windows NT\Pinball\SOUND3.WAV
• %Program Files%\Windows NT\Pinball\SOUND30.WAV
• %Program Files%\Windows NT\Pinball\SOUND34.WAV
• %Program Files%\Windows NT\Pinball\SOUND35.WAV
• %Program Files%\Windows NT\Pinball\SOUND36.WAV
• %Program Files%\Windows NT\Pinball\SOUND38.WAV
• %Program Files%\Windows NT\Pinball\SOUND39.WAV
• %Program Files%\Windows NT\Pinball\SOUND4.WAV
• %Program Files%\Windows NT\Pinball\SOUND42.WAV
• %Program Files%\Windows NT\Pinball\SOUND43.WAV
• %Program Files%\Windows NT\Pinball\SOUND45.WAV
• %Program Files%\Windows NT\Pinball\SOUND49.WAV
• %Program Files%\Windows NT\Pinball\SOUND49D.WAV
• %Program Files%\Windows NT\Pinball\SOUND5.WAV
• %Program Files%\Windows NT\Pinball\SOUND50.WAV
• %Program Files%\Windows NT\Pinball\SOUND528.WAV
• %Program Files%\Windows NT\Pinball\SOUND53.WAV
• %Program Files%\Windows NT\Pinball\SOUND54.WAV
• %Program Files%\Windows NT\Pinball\SOUND55.WAV
• %Program Files%\Windows NT\Pinball\SOUND560.WAV
• %Program Files%\Windows NT\Pinball\SOUND563.WAV
• %Program Files%\Windows NT\Pinball\SOUND57.WAV
• %Program Files%\Windows NT\Pinball\SOUND58.WAV
• %Program Files%\Windows NT\Pinball\SOUND6.WAV
• %Program Files%\Windows NT\Pinball\SOUND65.WAV
• %Program Files%\Windows NT\Pinball\SOUND68.WAV
• %Program Files%\Windows NT\Pinball\SOUND7.WAV
• %Program Files%\Windows NT\Pinball\SOUND713.WAV
• %Program Files%\Windows NT\Pinball\SOUND735.WAV
• %Program Files%\Windows NT\Pinball\SOUND8.WAV
• %Program Files%\Windows NT\Pinball\SOUND827.WAV
• %Program Files%\Windows NT\Pinball\SOUND9.WAV
• %Program Files%\Windows NT\Pinball\SOUND999.WAV
• %Program Files%\Windows NT\Pinball\table.bmp
• %Program Files%\Windows NT\Pinball\wavemix.inf
• %Program Files%\WinPcap\install.log
• %Program Files%\WinPcap\rpcapd.exe
• %Program Files%\WinPcap\Uninstall.exe
• %Program Files%\Common Files\Microsoft Shared\MSInfo\ieinfo5.ocx
• %Program Files%\Common Files\Microsoft Shared\Triedit\dhtmled.ocx
• %Program Files%\Common Files\Microsoft Shared\Triedit\triedit.dll
• %Program Files%\Internet Explorer\hmmapi.dll
• %Program Files%\Internet Explorer\iexplore.exe
• %Program Files%\Movie Maker\wmm2ae.dll
• %Program Files%\Movie Maker\wmm2eres.dll
• %Program Files%\Movie Maker\wmm2ext.dll
• %Program Files%\Movie Maker\wmm2filt.dll
• %Program Files%\Movie Maker\wmm2fxa.dll
• %Program Files%\Movie Maker\wmm2fxb.dll
• %Program Files%\Movie Maker\wmm2res.dll
• %Program Files%\Movie Maker\wmm2res2.dll
• %Program Files%\MSN Gaming Zone\Windows\cmnclim.dll
• %Program Files%\MSN Gaming Zone\Windows\cmnresm.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtzres.dll
• %Program Files%\MSN Gaming Zone\Windows\rvseres.dll
• %Program Files%\MSN Gaming Zone\Windows\rvsezm.exe
• %Program Files%\MSN Gaming Zone\Windows\shvlres.dll
• %Program Files%\MSN Gaming Zone\Windows\uniansi.dll
• %Program Files%\MSN Gaming Zone\Windows\zclientm.exe
• %Program Files%\MSN Gaming Zone\Windows\zcorem.dll
• %Program Files%\MSN Gaming Zone\Windows\znetm.dll
• %Program Files%\MSN Gaming Zone\Windows\zonelibm.dll
• %Program Files%\NetMeeting\mst120.dll
• %Program Files%\NetMeeting\mst123.dll
• %Program Files%\Windows NT\Pinball\pinball.exe

(Note: %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).)

It deletes the following folders:

• %Program Files%\Adobe\Reader 10.0\Esl
• %Program Files%\Adobe\Reader 10.0\Reader\AIR
• %Program Files%\Adobe\Reader 10.0\Reader\Browser
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates
• %Program Files%\Adobe\Reader 10.0\Reader\Javascripts
• %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU
• %Program Files%\Adobe\Reader 10.0\Reader\Legal
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d
• %Program Files%\Adobe\Reader 10.0\Reader\Services
• %Program Files%\Adobe\Reader 10.0\Reader\SPPlugins
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker
• %Program Files%\Adobe\Reader 10.0\Reader
• %Program Files%\Adobe\Reader 10.0\Resource\Font\PFM
• %Program Files%\Adobe\Reader 10.0\Resource\Font
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics
• %Program Files%\Adobe\Reader 10.0\Resource\SaslPrep
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport
• %Program Files%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA0000000001}
• %Program Files%\Adobe\Reader 10.0\Setup Files
• %Program Files%\Common Files\Adobe\ARM\1.0
• %Program Files%\Common Files\Adobe\ARM
• %Program Files%\Common Files\Adobe\HelpCfg\en_US
• %Program Files%\Common Files\Adobe\HelpCfg
• %Program Files%\Common Files\Microsoft Shared\DAO
• %Program Files%\Common Files\Microsoft Shared\DW\1025
• %Program Files%\Common Files\Microsoft Shared\DW\1028
• %Program Files%\Common Files\Microsoft Shared\DW\1031
• %Program Files%\Common Files\Microsoft Shared\DW\1033
• %Program Files%\Common Files\Microsoft Shared\DW\1036
• %Program Files%\Common Files\Microsoft Shared\DW\1040
• %Program Files%\Common Files\Microsoft Shared\DW\1041
• %Program Files%\Common Files\Microsoft Shared\DW\1042
• %Program Files%\Common Files\Microsoft Shared\DW\2052
• %Program Files%\Common Files\Microsoft Shared\DW\3082
• %Program Files%\Common Files\Microsoft Shared\DW
• %Program Files%\Common Files\Microsoft Shared\MSInfo
• %Program Files%\Common Files\Microsoft Shared\Speech\1033
• %Program Files%\Common Files\Microsoft Shared\Stationery
• %Program Files%\Common Files\Microsoft Shared\TextConv
• %Program Files%\Common Files\Microsoft Shared\Triedit
• %Program Files%\Common Files\Microsoft Shared\VC
• %Program Files%\Common Files\Microsoft Shared\VGX
• %Program Files%\Common Files\Microsoft Shared\Web Folders
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\admcgi\scripts
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\admisapi\scripts
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bots\vinavbar
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_adm
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_aut
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\servsupp
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut
• %Program Files%\Common Files\MSSoap\Binaries\Resources\1033
• %Program Files%\Common Files\ODBC\Data Sources
• %Program Files%\Common Files\ODBC
• %Program Files%\Common Files\Services
• %Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033
• %Program Files%\Common Files\System\ado
• %Program Files%\Common Files\System\msadc
• %Program Files%\Common Files\System\Ole DB
• %Program Files%\ComPlus Applications
• %Program Files%\Internet Explorer\Connection Wizard
• %Program Files%\Internet Explorer\MUI\0409
• %Program Files%\Internet Explorer\MUI
• %Program Files%\Internet Explorer\PLUGINS
• %Program Files%\Internet Explorer\SIGNUP
• %Program Files%\Messenger
• %Program Files%\microsoft frontpage\version3.0\bin
• %Program Files%\Microsoft.NET\RedistList
• %Program Files%\Microsoft.NET
• %Program Files%\Movie Maker\MUI\0409
• %Program Files%\Movie Maker\MUI
• %Program Files%\Movie Maker\Shared\Profiles
• %Program Files%\Movie Maker\Shared
• %Program Files%\Movie Maker
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
• %Program Files%\MSBuild\Microsoft\Windows Workflow Foundation
• %Program Files%\MSBuild\Microsoft
• %Program Files%\MSBuild
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components
• %Program Files%\MSN\MSNCoreFiles\Install
• %Program Files%\MSN\MSNCoreFiles\OOBE
• %Program Files%\MSN\MSNCoreFiles
• %Program Files%\MSN
• %Program Files%\MSN Gaming Zone\Windows
• %Program Files%\MSXML 6.0\EULA
• %Program Files%\MSXML 6.0
• %Program Files%\NetMeeting
• %Program Files%\Online Services
• %Program Files%\Outlook Express
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5
• %Program Files%\Reference Assemblies\Microsoft\Framework
• %Program Files%\Reference Assemblies\Microsoft
• %Program Files%\Reference Assemblies
• %Program Files%\Uninstall Information
• %Program Files%\Windows Media Player\Icons
• %Program Files%\Windows Media Player\Sample Playlists
• %Program Files%\Windows Media Player\Skins
• %Program Files%\Windows Media Player\Visualizations
• %Program Files%\Windows Media Player
• %Program Files%\Windows NT\Accessories
• %Program Files%\WindowsUpdate
• %Program Files%\WinPcap
• %Program Files%\xerox\nwwia

(Note: %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).)

This report is generated via an automated analysis system.