TROJ_KRYPTIK.KUV

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan deletes the following files:

• %System Root%\boot.ini
• %System Root%\CONFIG.SYS
• %User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\ABCPY.INI
• %User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\AcroRead.msi
• %User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\setup.exe
• %User Profile%\{AC76BA86-7AD7-1033-7B44-AA0000000001}\Setup.ini
• %Desktop%.ini
• %User Profile%\Media Player\DefaultStore_59R.bin
• %User Profile%\Media Player\UserMigratedStore_59R.bin
• %User Profile%\Pbk\sharedaccess.ini
• %User Profile%\Default Pictures\airplane.bmp
• %User Profile%\Default Pictures\astronaut.bmp
• %User Profile%\Default Pictures\ball.bmp
• %User Profile%\Default Pictures\beach.bmp
• %User Profile%\Default Pictures\butterfly.bmp
• %User Profile%\Default Pictures\car.bmp
• %User Profile%\Default Pictures\cat.bmp
• %User Profile%\Default Pictures\chess.bmp
• %User Profile%\Default Pictures\dirt bike.bmp
• %User Profile%\Default Pictures\dog.bmp
• %User Profile%\Default Pictures\drip.bmp
• %User Profile%\Default Pictures\duck.bmp
• %User Profile%\Default Pictures\fish.bmp
• %User Profile%\Default Pictures\frog.bmp
• %User Profile%\Default Pictures\guitar.bmp
• %User Profile%\Default Pictures\horses.bmp
• %User Profile%\Default Pictures\kick.bmp
• %User Profile%\Default Pictures\lift-off.bmp
• %User Profile%\Default Pictures\palm tree.bmp
• %User Profile%\Default Pictures\pink flower.bmp
• %User Profile%\Default Pictures\red flower.bmp
• %User Profile%\Default Pictures\skater.bmp
• %User Profile%\Default Pictures\snowflake.bmp
• %User Profile%\User Account Pictures\guest.bmp
• %User Profile%\User Account Pictures\Wilbert.bmp
• %User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
• %User Profile%\Sample Music\New Stories (Highway Blues).wma
• %User Profile%\Sample Pictures\Blue hills.jpg
• %User Profile%\Sample Pictures\Sunset.jpg
• %User Profile%\Sample Pictures\Water lilies.jpg
• %User Profile%\Sample Pictures\Winter.jpg
• %Start Menu%\desktop.ini
• %Start Menu%\Programs\Accessories\Accessibility\Accessibility Wizard.lnk
• %Start Menu%\Programs\Accessories\Accessibility\desktop.ini
• %Start Menu%\Programs\Accessories\Calculator.lnk
• %Start Menu%\Programs\Accessories\Communications\desktop.ini
• %Start Menu%\Programs\Accessories\Communications\HyperTerminal.lnk
• %Start Menu%\Programs\Accessories\Communications\Network Connections.lnk
• %Start Menu%\Programs\Accessories\Communications\Network Setup Wizard.lnk
• %Start Menu%\Programs\Accessories\Communications\New Connection Wizard.lnk
• %Start Menu%\Programs\Accessories\Communications\Remote Desktop Connection.lnk
• %Start Menu%\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk
• %Start Menu%\Programs\Accessories\desktop.ini
• %Start Menu%\Programs\Accessories\Entertainment\desktop.ini
• %Start Menu%\Programs\Accessories\Entertainment\Sound Recorder.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Volume Control.lnk
• %Start Menu%\Programs\Accessories\Paint.lnk
• %Start Menu%\Programs\Accessories\System Tools\Backup.lnk
• %Start Menu%\Programs\Accessories\System Tools\Character Map.lnk
• %Start Menu%\Programs\Accessories\System Tools\desktop.ini
• %Start Menu%\Programs\Accessories\System Tools\Disk Cleanup.lnk
• %Start Menu%\Programs\Accessories\System Tools\Disk Defragmenter.lnk
• %Start Menu%\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk
• %Start Menu%\Programs\Accessories\System Tools\Scheduled Tasks.lnk
• %Start Menu%\Programs\Accessories\System Tools\Security Center.lnk
• %Start Menu%\Programs\Accessories\System Tools\System Information.lnk
• %Start Menu%\Programs\Accessories\System Tools\System Restore.lnk
• %Start Menu%\Programs\Accessories\WordPad.lnk
• %Start Menu%\Programs\Administrative Tools\Component Services.lnk
• %Start Menu%\Programs\Administrative Tools\Computer Management.lnk
• %Start Menu%\Programs\Administrative Tools\Data Sources (ODBC).lnk
• %Start Menu%\Programs\Administrative Tools\desktop.ini
• %Start Menu%\Programs\Administrative Tools\Event Viewer.lnk
• %Start Menu%\Programs\Administrative Tools\Local Security Policy.lnk
• %Start Menu%\Programs\Administrative Tools\Performance.lnk
• %Start Menu%\Programs\Administrative Tools\Services.lnk
• %Start Menu%\Programs\Adobe Reader X.lnk
• %Start Menu%\Programs\desktop.ini
• %Start Menu%\Programs\Games\desktop.ini
• %Start Menu%\Programs\Games\Freecell.lnk
• %Start Menu%\Programs\Games\Hearts.lnk
• %Start Menu%\Programs\Games\Internet Backgammon.lnk
• %Start Menu%\Programs\Games\Internet Checkers.lnk
• %Start Menu%\Programs\Games\Internet Hearts.lnk
• %Start Menu%\Programs\Games\Internet Reversi.lnk
• %Start Menu%\Programs\Games\Internet Spades.lnk
• %Start Menu%\Programs\Games\Minesweeper.lnk
• %Start Menu%\Programs\Games\Pinball.lnk
• %Start Menu%\Programs\Games\Solitaire.lnk
• %Start Menu%\Programs\Games\Spider Solitaire.lnk
• %Start Menu%\Programs\MSN.lnk
• %Common Startup%\desktop.ini
• %Start Menu%\Programs\Windows Messenger.lnk
• %Start Menu%\Programs\Windows Movie Maker.lnk
• %Start Menu%\Programs\WinPcap\Uninstall WinPcap 4.1.2.lnk
• %Start Menu%\Set Program Access and Defaults.lnk
• %Start Menu%\Windows Catalog.lnk
• %Start Menu%\Windows Update.lnk
• %User Profile%\Internet Explorer\brndlog.txt
• %User Profile%\Cookies\index.dat
• %User Profile%\History.IE5\index.dat
• %Temporary Internet Files%\Content.IE5\09RWHJQN\desktop.ini
• %Temporary Internet Files%\Content.IE5\BVLBNMKH\desktop.ini
• %Temporary Internet Files%\Content.IE5\desktop.ini
• %Temporary Internet Files%\Content.IE5\index.dat
• %Temporary Internet Files%\Content.IE5\ZDGZNKA5\desktop.ini
• %Temporary Internet Files%\Content.IE5\ZSGKJKO6\desktop.ini
• %Temporary Internet Files%\desktop.ini
• %User Profile%\NTUSER.DAT
• %Start Menu%\Programs\Accessories\Accessibility\Magnifier.lnk
• %Start Menu%\Programs\Accessories\Accessibility\Narrator.lnk
• %Start Menu%\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
• %Start Menu%\Programs\Accessories\Accessibility\Utility Manager.lnk
• %Start Menu%\Programs\Accessories\Command Prompt.lnk
• %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
• %Start Menu%\Programs\Accessories\Notepad.lnk
• %Start Menu%\Programs\Accessories\Program Compatibility Wizard.lnk
• %Start Menu%\Programs\Accessories\Synchronize.lnk
• %Start Menu%\Programs\Accessories\Tour Windows XP.lnk
• %Start Menu%\Programs\Accessories\Windows Explorer.lnk
• %Start Menu%\Programs\Remote Assistance.lnk
• %User Startup%\desktop.ini
• %Start Menu%\Programs\Windows Media Player.lnk
• %User Profile%\Templates\excel.xls
• %User Profile%\Templates\excel4.xls
• %User Profile%\Templates\powerpnt.ppt
• %User Profile%\Templates\sndrec.wav
• %User Profile%\Templates\winword.doc
• %User Profile%\Templates\winword2.doc
• %Application Data%\FontCache3.0.0.0.dat
• %Application Data%\Microsoft\Windows\UsrClass.dat
• %Temporary Internet Files%\Content.IE5\246FT6TD\desktop.ini
• %Temporary Internet Files%\Content.IE5\9STOYKO4\desktop.ini
• %Temporary Internet Files%\Content.IE5\NF72HY20\desktop.ini
• %Temporary Internet Files%\Content.IE5\PHOM4UYK\desktop.ini
• %User Profile%\ntuser.ini
• %User Profile%\Quick Launch\Launch Internet Explorer Browser.lnk
• %Application Data%\Microsoft\Internet Explorer\MSIMGSIZ.DAT
• %Application Data%\Microsoft\Wallpaper1.bmp
• %User Temp%\dd_depcheck_NETFX_EXP_35.txt
• %User Temp%\dd_dotnetfx35error.txt
• %User Temp%\dd_dotnetfx35install.txt
• %User Temp%\dd_dotNetFx40_Full_x86_x64_decompression_log.txt
• %User Temp%\dd_MSXML6_MSI0686.txt
• %User Temp%\dd_netfx20MSI7F16.txt
• %User Temp%\dd_netfx20UI7F16.txt
• %User Temp%\dd_NET_Framework20_Setup06A7.txt
• %User Temp%\dd_NET_Framework30_Setup0775.txt
• %User Temp%\dd_NET_Framework35_MSI07B9.txt
• %User Temp%\dd_RGB9RAST_x86.msi0683.txt
• %User Temp%\dd_vcredistMSI7C21.txt
• %User Temp%\dd_vcredistUI7C21.txt
• %User Temp%\dd_wcf_CA_smci_20111017_044900_062.txt
• %User Temp%\dd_wcf_retCA29BA.txt
• %User Temp%\dd_WIC.txt
• %User Temp%\dd_XPS.txt
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Core_x86.msi.txt
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Extended_x86.msi.txt
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578.html
• %User Temp%\Microsoft Visual C++ 2010 x86 Redistributable Setup_20111020_000954642-MSI_vc_red.msi.txt
• %User Temp%\Microsoft Visual C++ 2010 x86 Redistributable Setup_20111020_000954642.html
• %User Temp%\uxeventlog.txt
• %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_left3[1].png
• %Temporary Internet Files%\Content.IE5\09RWHJQN\bottom_right3[1].png
• %Temporary Internet Files%\Content.IE5\09RWHJQN\box02[1].gif
• %Temporary Internet Files%\Content.IE5\09RWHJQN\top_left3[1].png
• %Temporary Internet Files%\Content.IE5\BVLBNMKH\box04[1].gif
• %Temporary Internet Files%\Content.IE5\BVLBNMKH\box08[1].gif
• %Temporary Internet Files%\Content.IE5\BVLBNMKH\header00b[1].gif
• %Temporary Internet Files%\Content.IE5\BVLBNMKH\table_bottom3[1].png
• %Temporary Internet Files%\Content.IE5\ZDGZNKA5\background[1].gif
• %Temporary Internet Files%\Content.IE5\ZDGZNKA5\box06[1].gif
• %Temporary Internet Files%\Content.IE5\ZDGZNKA5\table_right3[1].png
• %Temporary Internet Files%\Content.IE5\ZDGZNKA5\top_right3[1].png
• %Temporary Internet Files%\Content.IE5\ZSGKJKO6\footer00[1].gif
• %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_left3[1].png
• %Temporary Internet Files%\Content.IE5\ZSGKJKO6\table_top3[1].png
• %User Profile%\My Music\Sample Music.lnk
• %User Profile%\My Pictures\Sample Pictures.lnk
• %Start Menu%\Programs\Accessories\Address Book.lnk
• %Start Menu%\Programs\Internet Explorer.lnk
• %Start Menu%\Programs\Outlook Express.lnk
• %System Root%\IO.SYS
• %System Root%\MSDOS.SYS
• %System Root%\pagefile.sys
• %Program Files%\Adobe\Reader 10.0\Esl\AiodLite.dll
• %Program Files%\Adobe\Reader 10.0\Reader\A3DUtils.dll
• %Program Files%\Adobe\Reader 10.0\Reader\ACE.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroBroker.exe
• %Program Files%\Adobe\Reader 10.0\Reader\Acrofx32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AcroRd32Info.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AcroTextExtractor.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeLinguistic.dll
• %Program Files%\Adobe\Reader 10.0\Reader\adoberfp.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AdobeXMP.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AGM.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AGMGPUOptIn.ini
• %Program Files%\Adobe\Reader 10.0\Reader\ahclient.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\authplay.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AXE8SharedExpat.dll
• %Program Files%\Adobe\Reader 10.0\Reader\AXSLE.dll
• %Program Files%\Adobe\Reader 10.0\Reader\BIB.dll
• %Program Files%\Adobe\Reader 10.0\Reader\BIBUtils.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\ccme_base.dll
• %Program Files%\Adobe\Reader 10.0\Reader\CoolType.dll
• %Program Files%\Adobe\Reader 10.0\Reader\cryptocme2.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Eula.exe
• %Program Files%\Adobe\Reader 10.0\Reader\ExtendScript.dll
• %Program Files%\Adobe\Reader 10.0\Reader\icucnv40.dll
• %Program Files%\Adobe\Reader 10.0\Reader\icudt40.dll
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\Javascripts\JSByteCodeWin.bin
• %Program Files%\Adobe\Reader 10.0\Reader\JP2KLib.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\eula.ini
• %Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\license.html
• %Program Files%\Adobe\Reader 10.0\Reader\logsession.dll
• %Program Files%\Adobe\Reader 10.0\Reader\LogTransport2.exe
• %Program Files%\Adobe\Reader 10.0\Reader\Onix32.dll
• %Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlr.dll
• %Program Files%\Adobe\Reader 10.0\Reader\PDFPrevHndlrShim.exe
• %Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\pe.dll
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\pmd.cer
• %Program Files%\Adobe\Reader 10.0\Reader\reader_sl.exe
• %Program Files%\Adobe\Reader 10.0\Reader\rt3d.dll
• %Program Files%\Adobe\Reader 10.0\Reader\ScCore.dll
• %Program Files%\Adobe\Reader 10.0\Reader\sqlite.dll
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\add_reviewer.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\bl.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\br.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\create_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\distribute_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_all.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\email_initiator.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\ended_review_or_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\end_review.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_distributed.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_received.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\forms_super.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\form_responses.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\info.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\open_original_form.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\pdf.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviewers.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_joined.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_sent.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\reviews_super.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_browser.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_email.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_same_reviewers.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\review_shared.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\rss.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_issue.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_lg.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\server_ok.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\stop_collection_data.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\submission_history.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\tl.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\tr.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\trash.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInAcrobat.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOffNotificationInTray.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInAcrobat.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\turnOnNotificationInTray.gif
• %Program Files%\Adobe\Reader 10.0\Reader\Tracker\warning.gif
• %Program Files%\Adobe\Reader 10.0\Reader\ViewerPS.dll
• %Program Files%\Adobe\Reader 10.0\ReadMe.htm
• %Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll
• %Program Files%\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
• %Program Files%\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
• %Program Files%\Common Files\Adobe\ARM\1.0\AdobeARM.exe
• %Program Files%\Common Files\Adobe\ARM\1.0\AdobeExtractFiles.dll
• %Program Files%\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
• %Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
• %Program Files%\Common Files\Microsoft Shared\DW\1025\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1028\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1031\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1033\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1036\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1040\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1041\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\1042\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\2052\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\3082\DWINTL20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\DW20.EXE
• %Program Files%\Common Files\Microsoft Shared\DW\DWDCW20.DLL
• %Program Files%\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
• %Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
• %Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
• %Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
• %Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
• %Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
• %Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
• %Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
• %Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
• %Program Files%\Common Files\Microsoft Shared\VC\msdia100.dll
• %Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
• %Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
• %Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
• %Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
• %Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
• %Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
• %Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
• %Program Files%\Common Files\Services\bigfoot.bmp
• %Program Files%\Common Files\Services\verisign.bmp
• %Program Files%\Common Files\Services\whowhere.bmp
• %Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
• %Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
• %Program Files%\Common Files\System\ado\MDACReadme.htm
• %Program Files%\Common Files\System\ado\msader15.dll
• %Program Files%\Common Files\System\ado\msado15.dll
• %Program Files%\Common Files\System\ado\msadomd.dll
• %Program Files%\Common Files\System\ado\msador15.dll
• %Program Files%\Common Files\System\ado\msadox.dll
• %Program Files%\Common Files\System\ado\msadrh15.dll
• %Program Files%\Common Files\System\ado\msjro.dll
• %Program Files%\Common Files\System\directdb.dll
• %Program Files%\Common Files\System\msadc\msadce.dll
• %Program Files%\Common Files\System\msadc\msadcer.dll
• %Program Files%\Common Files\System\msadc\msadcf.dll
• %Program Files%\Common Files\System\msadc\msadcfr.dll
• %Program Files%\Common Files\System\msadc\msadco.dll
• %Program Files%\Common Files\System\msadc\msadcor.dll
• %Program Files%\Common Files\System\msadc\msadcs.dll
• %Program Files%\Common Files\System\msadc\msadds.dll
• %Program Files%\Common Files\System\msadc\msaddsr.dll
• %Program Files%\Common Files\System\msadc\msdaprsr.dll
• %Program Files%\Common Files\System\msadc\msdaprst.dll
• %Program Files%\Common Files\System\msadc\msdarem.dll
• %Program Files%\Common Files\System\msadc\msdaremr.dll
• %Program Files%\Common Files\System\msadc\msdfmap.dll
• %Program Files%\Common Files\System\Ole DB\msdadc.dll
• %Program Files%\Common Files\System\Ole DB\msdaenum.dll
• %Program Files%\Common Files\System\Ole DB\msdaer.dll
• %Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
• %Program Files%\Common Files\System\Ole DB\msdaora.dll
• %Program Files%\Common Files\System\Ole DB\msdaorar.dll
• %Program Files%\Common Files\System\Ole DB\msdaosp.dll
• %Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
• %Program Files%\Common Files\System\Ole DB\msdaps.dll
• %Program Files%\Common Files\System\Ole DB\msdasc.dll
• %Program Files%\Common Files\System\Ole DB\msdasql.dll
• %Program Files%\Common Files\System\Ole DB\msdasqlr.dll
• %Program Files%\Common Files\System\Ole DB\msdatl3.dll
• %Program Files%\Common Files\System\Ole DB\msdatt.dll
• %Program Files%\Common Files\System\Ole DB\msdaurl.dll
• %Program Files%\Common Files\System\Ole DB\msxactps.dll
• %Program Files%\Common Files\System\Ole DB\oledb32.dll
• %Program Files%\Common Files\System\Ole DB\oledb32r.dll
• %Program Files%\Common Files\System\Ole DB\sqloledb.dll
• %Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
• %Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
• %Program Files%\Common Files\System\wab32.dll
• %Program Files%\Common Files\System\wab32res.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwres.dll
• %Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
• %Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
• %Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
• %Program Files%\Internet Explorer\Connection Wizard\isignup.exe
• %Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
• %Program Files%\Internet Explorer\HMMAPI.DLL
• %Program Files%\Internet Explorer\iedw.exe
• %Program Files%\Internet Explorer\IEXPLORE.EXE
• %Program Files%\Internet Explorer\MUI\0409\mscorier.dll
• %Program Files%\Internet Explorer\PLUGINS\nppdf32.dll
• %Program Files%\Messenger\custsat.dll
• %Program Files%\Messenger\logowin.gif
• %Program Files%\Messenger\lvback.gif
• %Program Files%\Messenger\msgsc.dll
• %Program Files%\Messenger\msgslang.dll
• %Program Files%\Messenger\msmsgs.exe
• %Program Files%\Messenger\newalert.wav
• %Program Files%\Messenger\newemail.wav
• %Program Files%\Messenger\online.wav
• %Program Files%\Messenger\type.wav
• %Program Files%\Messenger\xpmsgr.chm
• %Program Files%\Movie Maker\moviemk.exe
• %Program Files%\Movie Maker\MUI\0409\moviemk.chm
• %Program Files%\Movie Maker\Shared\Empty.txt
• %Program Files%\Movie Maker\Shared\news.png
• %Program Files%\Movie Maker\Shared\paint.png
• %Program Files%\Movie Maker\Shared\Profiles\Blank.txt
• %Program Files%\Movie Maker\Shared\Sample1.jpg
• %Program Files%\Movie Maker\Shared\Sample2.jpg
• %Program Files%\Movie Maker\WMM2AE.dll
• %Program Files%\Movie Maker\WMM2ERES.dll
• %Program Files%\Movie Maker\WMM2EXT.dll
• %Program Files%\Movie Maker\WMM2FILT.dll
• %Program Files%\Movie Maker\WMM2FXA.dll
• %Program Files%\Movie Maker\WMM2FXB.dll
• %Program Files%\Movie Maker\WMM2RES.dll
• %Program Files%\Movie Maker\WMM2RES2.dll
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
• %Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
• %Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
• %Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
• %Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
• %Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
• %Program Files%\MSN Gaming Zone\Windows\bckg.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgres.dll
• %Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
• %Program Files%\MSN Gaming Zone\Windows\chkr.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrres.dll
• %Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
• %Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
• %Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtz.dll
• %Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
• %Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
• %Program Files%\MSN Gaming Zone\Windows\rvse.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
• %Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
• %Program Files%\MSN Gaming Zone\Windows\shvl.dll
• %Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
• %Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
• %Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
• %Program Files%\MSN Gaming Zone\Windows\zClientm.exe
• %Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
• %Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
• %Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
• %Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
• %Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
• %Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt
• %Program Files%\NetMeeting\Blip.wav
• %Program Files%\NetMeeting\callcont.dll
• %Program Files%\NetMeeting\cb32.exe
• %Program Files%\NetMeeting\conf.exe
• %Program Files%\NetMeeting\confmrsl.dll
• %Program Files%\NetMeeting\dcap32.dll
• %Program Files%\NetMeeting\h323cc.dll
• %Program Files%\NetMeeting\MST120.DLL
• %Program Files%\NetMeeting\MST123.DLL
• %Program Files%\NetMeeting\nac.dll
• %Program Files%\NetMeeting\netmeet.htm
• %Program Files%\NetMeeting\nmas.dll
• %Program Files%\NetMeeting\nmasnt.dll
• %Program Files%\NetMeeting\nmchat.dll
• %Program Files%\NetMeeting\nmcom.dll
• %Program Files%\NetMeeting\nmft.dll
• %Program Files%\NetMeeting\nmoldwb.dll
• %Program Files%\NetMeeting\nmwb.dll
• %Program Files%\NetMeeting\rrcm.dll
• %Program Files%\NetMeeting\TestSnd.wav
• %Program Files%\NetMeeting\wb32.exe
• %Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
• %Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
• %Program Files%\Outlook Express\msimn.exe
• %Program Files%\Outlook Express\msoe.dll
• %Program Files%\Outlook Express\msoe.txt
• %Program Files%\Outlook Express\msoeres.dll
• %Program Files%\Outlook Express\oeimport.dll
• %Program Files%\Outlook Express\oemig50.exe
• %Program Files%\Outlook Express\oemiglib.dll
• %Program Files%\Outlook Express\setup50.exe
• %Program Files%\Outlook Express\wab.exe
• %Program Files%\Outlook Express\wabfind.dll
• %Program Files%\Outlook Express\wabimp.dll
• %Program Files%\Outlook Express\wabmig.exe
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationBuildTasks.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationCore.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Aero.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Classic.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Luna.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\PresentationFramework.Royale.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\ReachFramework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IdentityModel.Selectors.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Printing.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Speech.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Activities.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.Runtime.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClient.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationTypes.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsBase.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WindowsFormsIntegration.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Conversion.v3.5.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Engine.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Framework.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.Build.Utilities.v3.5.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.Contract.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.AddIn.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.DataSetExtensions.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Management.Instrumentation.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Net.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.ServiceModel.Web.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.Design.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll
• %Program Files%\Windows Media Player\custsat.dll
• %Program Files%\Windows Media Player\migrate.exe
• %Program Files%\Windows Media Player\mplayer2.exe
• %Program Files%\Windows Media Player\mpvis.dll
• %Program Files%\Windows Media Player\npdrmv2.dll
• %Program Files%\Windows Media Player\npdrmv2.zip
• %Program Files%\Windows Media Player\npds.zip
• %Program Files%\Windows Media Player\npdsplay.dll
• %Program Files%\Windows Media Player\npwmsdrm.dll
• %Program Files%\Windows Media Player\setup_wm.exe
• %Program Files%\Windows Media Player\wmpband.dll
• %Program Files%\Windows Media Player\wmplayer.exe
• %Program Files%\Windows Media Player\wmpns.dll
• %Program Files%\Windows NT\Accessories\wordpad.exe
• %Program Files%\Windows NT\dialer.exe
• %Program Files%\Windows NT\htrn_jis.dll
• %Program Files%\Windows NT\hypertrm.exe
• %Program Files%\Windows NT\Pinball\FONT.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.DAT
• %Program Files%\Windows NT\Pinball\PINBALL.EXE
• %Program Files%\Windows NT\Pinball\SOUND1.WAV
• %Program Files%\Windows NT\Pinball\SOUND104.WAV
• %Program Files%\Windows NT\Pinball\SOUND105.WAV
• %Program Files%\Windows NT\Pinball\SOUND108.WAV
• %Program Files%\Windows NT\Pinball\SOUND111.WAV
• %Program Files%\Windows NT\Pinball\SOUND112.WAV
• %Program Files%\Windows NT\Pinball\SOUND12.WAV
• %Program Files%\Windows NT\Pinball\SOUND13.WAV
• %Program Files%\Windows NT\Pinball\SOUND131.WAV
• %Program Files%\Windows NT\Pinball\SOUND136.WAV
• %Program Files%\Windows NT\Pinball\SOUND14.WAV
• %Program Files%\Windows NT\Pinball\SOUND16.WAV
• %Program Files%\Windows NT\Pinball\SOUND17.WAV
• %Program Files%\Windows NT\Pinball\SOUND18.WAV
• %Program Files%\Windows NT\Pinball\SOUND181.WAV
• %Program Files%\Windows NT\Pinball\SOUND19.WAV
• %Program Files%\Windows NT\Pinball\SOUND20.WAV
• %Program Files%\Windows NT\Pinball\SOUND21.WAV
• %Program Files%\Windows NT\Pinball\SOUND22.WAV
• %Program Files%\Windows NT\Pinball\SOUND24.WAV
• %Program Files%\Windows NT\Pinball\SOUND240.WAV
• %Program Files%\Windows NT\Pinball\SOUND243.WAV
• %Program Files%\Windows NT\Pinball\SOUND25.WAV
• %Program Files%\Windows NT\Pinball\SOUND26.WAV
• %Program Files%\Windows NT\Pinball\SOUND27.WAV
• %Program Files%\Windows NT\Pinball\SOUND28.WAV
• %Program Files%\Windows NT\Pinball\SOUND29.WAV
• %Program Files%\Windows NT\Pinball\SOUND3.WAV
• %Program Files%\Windows NT\Pinball\SOUND30.WAV
• %Program Files%\Windows NT\Pinball\SOUND34.WAV
• %Program Files%\Windows NT\Pinball\SOUND35.WAV
• %Program Files%\Windows NT\Pinball\SOUND36.WAV
• %Program Files%\Windows NT\Pinball\SOUND38.WAV
• %Program Files%\Windows NT\Pinball\SOUND39.WAV
• %Program Files%\Windows NT\Pinball\SOUND4.WAV
• %Program Files%\Windows NT\Pinball\SOUND42.WAV
• %Program Files%\Windows NT\Pinball\SOUND43.WAV
• %Program Files%\Windows NT\Pinball\SOUND45.WAV
• %Program Files%\Windows NT\Pinball\SOUND49.WAV
• %Program Files%\Windows NT\Pinball\SOUND49D.WAV
• %Program Files%\Windows NT\Pinball\SOUND5.WAV
• %Program Files%\Windows NT\Pinball\SOUND50.WAV
• %Program Files%\Windows NT\Pinball\SOUND528.WAV
• %Program Files%\Windows NT\Pinball\SOUND53.WAV
• %Program Files%\Windows NT\Pinball\SOUND54.WAV
• %Program Files%\Windows NT\Pinball\SOUND55.WAV
• %Program Files%\Windows NT\Pinball\SOUND560.WAV
• %Program Files%\Windows NT\Pinball\SOUND563.WAV
• %Program Files%\Windows NT\Pinball\SOUND57.WAV
• %Program Files%\Windows NT\Pinball\SOUND58.WAV
• %Program Files%\Windows NT\Pinball\SOUND6.WAV
• %Program Files%\Windows NT\Pinball\SOUND65.WAV
• %Program Files%\Windows NT\Pinball\SOUND68.WAV
• %Program Files%\Windows NT\Pinball\SOUND7.WAV
• %Program Files%\Windows NT\Pinball\SOUND713.WAV
• %Program Files%\Windows NT\Pinball\SOUND735.WAV
• %Program Files%\Windows NT\Pinball\SOUND8.WAV
• %Program Files%\Windows NT\Pinball\SOUND827.WAV
• %Program Files%\Windows NT\Pinball\SOUND9.WAV
• %Program Files%\Windows NT\Pinball\SOUND999.WAV
• %Program Files%\Windows NT\Pinball\table.bmp
• %Program Files%\WinPcap\rpcapd.exe
• %Program Files%\WinPcap\Uninstall.exe
• %Windows%\$MSI31Uninstall_KB893803v2$\msi.dll
• %Windows%\$MSI31Uninstall_KB893803v2$\msiexec.exe
• %Windows%\$MSI31Uninstall_KB893803v2$\msihnd.dll
• %Windows%\$MSI31Uninstall_KB893803v2$\msimsg.dll
• %Windows%\$MSI31Uninstall_KB893803v2$\msisip.dll
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.txt
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\updspapi.dll
• %Windows%\$NtUninstallWIC$\spuninst\spuninst.exe
• %Windows%\$NtUninstallWIC$\spuninst\spuninst.txt
• %Windows%\$NtUninstallWIC$\spuninst\updspapi.dll
• %Windows%\AppPatch\AcGenral.dll
• %Windows%\AppPatch\AcLayers.dll
• %Windows%\AppPatch\AcLua.dll
• %Windows%\AppPatch\AcSpecfc.dll
• %Windows%\AppPatch\AcXtrnal.dll
• %Windows%\assembly\Desktop.ini
• %Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
• %Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
• %Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
• %Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
• %Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
• %Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
• %Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
• %Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
• %Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
• %Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
• %Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
• %Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
• %Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
• %Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
• %Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
• %Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
• %Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
• %Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
• %Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
• %Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
• %Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
• %Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
• %Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
• %Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
• %Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
• %Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
• %Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
• %Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
• %Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
• %Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
• %Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
• %Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
• %Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
• %Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
• %Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
• %Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
• %Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
• %Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
• %Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
• %Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
• %Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
• %Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
• %Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
• %Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
• %Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
• %Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
• %Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
• %Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
• %Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
• %Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
• %Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
• %Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
• %Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
• %Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
• %Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
• %Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
• %Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
• %Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
• %Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
• %Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
• %Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
• %Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
• %Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
• %Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
• %Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
• %Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
• %Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
• %Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
• %Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
• %Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
• %Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
• %Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
• %Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
• %Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
• %Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
• %Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
• %Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
• %Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
• %Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
• %Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
• %Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
• %Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
• %Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
• %Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a\ComSvcConfig.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\index61.dat
• %Windows%\assembly\NativeImages_v2.0.50727_32\index62.dat
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501\Microsoft.Build.Conversion.v3.5.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17\Microsoft.Build.Engine.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e\Microsoft.Build.Framework.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990\Microsoft.Build.Tasks.v3.5.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869\Microsoft.Build.Utilities.v3.5.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3\Microsoft.JScript.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850\Microsoft.Transactions.Bridge.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788\Microsoft.Transactions.Bridge.Dtc.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0\Microsoft.Vsa.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782\MSBuild.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef\PresentationBuildTasks.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881\PresentationCFFRasterizer.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c\PresentationCore.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a\PresentationFontCache.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457\PresentationFramework.Aero.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e\PresentationFramework.Luna.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe\PresentationFramework.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b\PresentationFramework.Royale.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5\PresentationFramework.Classic.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3\PresentationUI.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b\ReachFramework.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8\ServiceModelReg.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e\SMDiagnostics.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4\SMSvcHost.ni.exe
• %Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3\System.AddIn.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba\System.AddIn.Contract.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
• %Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39\System.Core.ni.dll

(Note: %System Root% is the root folder, which is usually C:\. It is also where the operating system is located.. %User Profile% is the current user's profile folder, which is usually C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003, or C:\Users\{user name} on Windows Vista and 7.. %Desktop% is the current user's desktop, which is usually C:\Documents and Settings\{User Name}\Desktop on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\Desktop on Windows Vista and 7.. %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista and 7.. %Common Startup% is the system's shared Startup folder, which is usually C:\Documents and Settings\All Users\Start Menu\Programs\Startup on Windows 2000, XP, and Server 2003.. %Temporary Internet Files% is the Temporary Internet Files folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temporary Internet Files on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Microsoft\Windows\Temporary Internet Files on Windows Vista and 7.. %User Startup% is the current user's Startup folder, which is usually C:\Windows\Profiles\{user name}\Start Menu\Programs\Startup on Windows 98 and ME, C:\WINNT\Profiles\{user name}\Start Menu\Programs\Startup on Windows NT, and C:\Documents and Settings\{User name}\Start Menu\Programs\Startup.. %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.. %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).. %Windows% is the Windows folder, which is usually C:\Windows.)

This report is generated via an automated analysis system.