Ransom.Win32.ICRYPT.SMGC.hp

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

It drops files as ransom note.

Arrival Details

This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Ransomware drops the following copies of itself into the affected system:

• %Application Data%\0TDUTO~1:bin
• %Application Data%\sBmMbYI%System Root%bin
• %Program Files%\Microsoft Office\Office12\GrooveAuditService.exe

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Roaming on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).)

It adds the following processes:

• %Application Data%\sBmMbYI%System Root%bin %User Temp%\a5242cf2d2a800334cc1fa8f8aa74f6f8251568c.dat
• %System%\vssadmin.exe Delete Shadows /All /Quiet
• %System%\diskshadow.exe /s %User Temp%\QAD9C.tmp
• %System%\takeown.exe /F %System%\msiexec.exe
• %System%\icacls.exe %System%\msiexec.exe /reset
• %System%\takeown.exe /F %Windows%\servicing\TrustedInstaller.exe
• %System%\icacls.exe %Windows%\servicing\TrustedInstaller.exe /reset
• "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"
• %Windows%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
• %System%\svchost.exe -k LocalServiceAndNoImpersonation
• %Windows%\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
• %System%\sppsvc.exe
• "%System Root%\Program Files\Windows Media Player\wmpnetwk.exe"
• %Application Data%\0TDUTO~1:bin
• %System%\diskshadow.exe /s %Windows%\TEMP\UFC58.tmp
• %System%\arp.exe -a
• %System%\nslookup.exe 192.168.44.1
• %System%\nslookup.exe 192.168.44.2
• %System%\nslookup.exe 192.168.44.255
• %System%\nslookup.exe 224.0.0.22
• %System%\nslookup.exe 224.0.0.252
• %System%\net.exe view igmp.mcast.net

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local\Temp on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).)

It creates the following folders:

• %Windows%\ServiceProfiles\NetworkService\AppData\Local\Microsoft

(Note: %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.)

Autostart Technique

This Ransomware registers itself as a system service to ensure its automatic execution at every system startup by adding the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe /V"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"

Other System Modifications

This Ransomware adds the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ObjectName = "LocalSystem"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
DependOnService = "rpcss"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
RequiredPrivileges = "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
RequiredPrivileges = ""

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ObjectName = "NT AUTHORITY\LocalService"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
DependOnService = "rpcss"

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
DependOnService = ""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\NetworkList\
Nla\Cache\Intranet
{89BCDCB3-5725-45A2-94AB-2D6B641209B0} = "\x00PV\xbcl%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
cval = "0"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ObjectName = "LocalSystem"

(Note: The default value data of the said registry entry is LocalSystem.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
DependOnService = "rpcss"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\msiserver
ImagePath = "%System%\msiexec.exe"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ObjectName = "LocalSystem"

(Note: The default value data of the said registry entry is NT AUTHORITY\LocalService.)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
services\Microsoft Office Groove Audit Service
ImagePath = "%Program Files%\Microsoft Office\Office12\GrooveAuditService.exe"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
RFC1156Agent\CurrentVersion\Parameters
TrapPollTimeMilliSecs = "15000"

(Note: The default value data of the said registry entry is 3a98.)

Dropping Routine

This Ransomware drops the following files:

• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png
• %System Root%\excel2k\XLS2KE03.xls.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\Content.xml
• %System Root%\Program Files\Common Files\System\msadc\en-US\msdaremr.dll.mui
• %System Root%\powerpoint2k\PPT2KE03.ppt.cmsnwned
• %System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.lnk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv
• %System Root%\Program Files\Common Files\System\ado\msadomd28.tlb
• %System Root%\Program Files\Mozilla Firefox\updated\update-settings.ini.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\management-agent.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\dependentlibs.list.cmsnwned
• %System Root%\powerpoint2k\PPT2KExx.PPT.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\poweron-vm-default.bat.cmsnwned
• %System Root%\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml
• %System Root%\Program Files\Microsoft Games\FreeCell\en-US\FreeCell.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\directshowtap.ax
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png
• %System Root%\Program Files\VMware\VMware Tools\VmUpgradeHelper.bat.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\1047x576black.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\PYCC.pf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png
• %System Root%\Program Files\Common Files\System\ado\msadox28.tlb
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\title.js.cmsnwned
• %System Root%\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui
• %System Root%\Program Files\Mozilla Firefox\updated\omni.ja.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\cursors.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png
• %System Root%\Program Files\VMware\VMware Tools\resume-vm-default.bat.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.sys.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\delete.avi
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\vignettemask25.png
• %System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
• %System Root%\Program Files\Common Files\System\Ole DB\oledbvbs.inc
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png
• %System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.inf.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\localedata.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\LINEAR_RGB.pf.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\plugin.jar.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\images\seertlow.gif.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jfxrt.jar.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\xul.dll.sig.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png
• %System Root%\Program Files\Mozilla Firefox\uninstall\uninstall.log.cmsnwned
• %System Root%\powerpoint2k\PPT2KE04.ppt.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansDemiBold.ttf.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\crashreporter.ini.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssve.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_ButtonGraphic.png
• %System Root%\powerpoint2k\PPT2KE05.ppt.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkNoDrop32x32.gif.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.inf.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui
• %System Root%\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png
• %System Root%\excel2k\XLS2KE04.xls.cmsnwned
• %System Root%\Program Files\DVD Maker\SecretST.TTF
• %System Root%\Program Files\Microsoft Games\Mahjong\MahjongMCE.png
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned
• %System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.cmsnwned
• %System Root%\Program Files\Common Files\System\Ole DB\sqlxmlx.rll
• %Windows%\Temp\UOC95.tmp
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml
• %System Root%\Program Files\Internet Explorer\images\bing.ico
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png
• %Windows%\Temp\M21742.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\jaccess.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-over-DOT.png
• %System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgzm.exe.mui.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search.js.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\pagecurl.png
• %System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.cat.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\GreenBubbles.jpg
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiItalic.ttf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png
• %System Root%\Program Files\Internet Explorer\en-US\F12Resources.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\tzdb.dat.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_ca.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground_PAL.wmv
• %System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.lnk.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\fonts\TwemojiMozilla.ttf.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned
• %System Root%\Program Files\Common Files\System\msadc\adcvbs.inc
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv
• %Windows%\Temp\HD3AE.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-delete.avi
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\meta-index.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_sv.properties.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_TW.properties.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi
• %Windows%\Temp\FpFC5A.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png
• %System Root%\Program Files\Mozilla Firefox\updated\plugin-container.exe.sig.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\currency.data.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png
• %System Root%\Program Files\DVD Maker\Shared\Parity.fx
• %System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3dmp.sys.cmsnwned
• %System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.cat.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\vm-support.vbs.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg
• %System Root%\Program Files\Mozilla Firefox\updated\browser\features\formautofill@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyNoDrop32x32.gif.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\xul.dll.sig.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair1.js
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport_PAL.wmv
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\topics.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-next-static.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat
• %System Root%\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\highlight.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\th-TH\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\menu_style_default_Thumbnail.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_VideoInset.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\HandPrints.jpg
• %System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_150.png.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\images\collapse.gif.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_rightarrow.png
• %System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.lnk.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.inf.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.sys.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\travel.png
• %System Root%\powerpoint2k\PPT2KE02.ppt.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunmscapi.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mshwLatin.dll.mui
• %System Root%\Program Files\DVD Maker\en-US\WMM2CLIP.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_de.properties.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\css\GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipBand.dll.mui
• %System Root%\Program Files\VMware\VMware Tools\open_source_licenses.txt.cmsnwned
• %All Users Profile%\Microsoft\Windows\DRM\v3ks.sec
• %System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.inf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png
• %System Root%\Program Files\Common Files\System\ado\adovbs.inc
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\access-bridge-64.jar.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\GoldRing.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunjce_provider.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Internet Explorer\en-US\eula.rtf
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\updater.ini.cmsnwned
• %Windows%\Temp\UFC58.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Dot.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml
• %System Root%\Program Files\Mozilla Firefox\plugin-container.exe.sig.cmsnwned
• %System Root%\Program Files\Common Files\System\ado\msado28.tlb
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ko.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui
• %System Root%\set_hostname.vbs.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols.xml
• %System Root%\Program Files\Common Files\System\ado\msado25.tlb
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_fr.properties.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv
• %System Root%\Program Files\Mozilla Firefox\updated\crashreporter.ini.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\platform.ini.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\zipfs.jar.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\firefox.exe.sig.cmsnwned
• %System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrus.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash@2x.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\en-US\DVDMaker.exe.mui
• %System Root%\Program Files\Common Files\System\ado\msado20.tlb
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_specialocc_Thumbnail.bmp
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jfr.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\flavormap.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\VMware\VMware Tools\help\images\seebttm.gif.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\files.js.cmsnwned
• %System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.png
• %System Root%\Program Files\VMware\VMware Tools\VMControlPanel.cpl.cmsnwned
• %System Root%\Program Files\Microsoft Games\SpiderSolitaire\en-US\SpiderSolitaire.exe.mui.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveNoDrop32x32.gif.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hr-HR\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png
• %System Root%\Program Files\Mozilla Firefox\Accessible.tlb.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\management\management.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg
• %Application Data%\0TdUtO3ApJ17
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\US_export_policy.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\pl-PL\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ja-jp-sym.xml
• %System Root%\Program Files\Common Files\System\msadc\handsafe.reg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_MoveDrop32x32.gif.cmsnwned
• %System Root%\Program Files\Common Files\System\ado\en-US\msader15.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\tzmappings.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_it.properties.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\softokn3.chk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonIcon.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\dnsns.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm
• %System Root%\Program Files\DVD Maker\Shared\DissolveNoise.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_ja.properties.cmsnwned
• %System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.inf.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ja-jp.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png
• %System Root%\Program Files\Internet Explorer\en-US\jsdbgui.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Internet Explorer\en-US\ieinstal.exe.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui
• %System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\shvlzm.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Eurosti.TTF
• %System Root%\Program Files\Mozilla Firefox\updated\uninstall\uninstall.log.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\invalid32x32.gif.cmsnwned
• %System Root%\Program Files\Microsoft Games\Minesweeper\en-US\Minesweeper.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\pushplaysubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png
• %System Root%\Program Files\Java\jre1.8.0_144\bin\javacpl.cpl.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml
• %Program Files%\Microsoft Office\Office12\GrooveAuditService.exe:0
• %System Root%\Program Files\Microsoft Games\Hearts\HeartsMCE.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_2.emf
• %System Root%\Program Files\Microsoft Games\Solitaire\en-US\Solitaire.exe.mui.cmsnwned
• %System Root%\excel2k\XLS2KExx.xls.cmsnwned
• %System Root%\Program Files\DVD Maker\en-US\OmdProject.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\Welcome.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png
• %System Root%\Program Files\DVD Maker\Shared\Filters.xml
• %System Root%\Program Files\VMware\VMware Tools\help\images\expanded.gif.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui
• %System Root%\Program Files\Mozilla Firefox\precomplete.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg
• %System Root%\Program Files\Mozilla Firefox\firefox.exe.sig.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\content-types.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\javaws.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_btn-back-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\kor-kor.xml
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\hijrah-config-umalqura.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png
• %System Root%\Program Files\Mozilla Firefox\updated\install.log.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.png
• %System Root%\Program Files\Microsoft Games\Purble Place\en-US\PurblePlace.exe.mui.cmsnwned
• %System Root%\Program Files\Common Files\System\Ole DB\sqloledb.rll
• %System Root%\Program Files\Mozilla Firefox\browser\blocklist.xml.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm
• %System Root%\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js.cmsnwned
• %System Root%\Email and Password List.txt.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv
• %System Root%\Program Files\VMware\VMware Tools\help\images\seelflow.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-background.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png
• %System Root%\Program Files\Java\jre1.8.0_144\LICENSE.cmsnwned
• %Windows%\Temp\I0u19E3.tmp
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg
• %System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\vm3d.cat.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720_480shadow.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-over-select.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-previous-static.png
• %System Root%\Email and Password List.vbs.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\mainscroll.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11-lic.gif.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Hand Prints.htm
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv
• %System Root%\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaireMCE.lnk.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Graph.emf
• %System Root%\Program Files\DVD Maker\sonicsptransform.ax
• %System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\default.jfc.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui
• %System Root%\Program Files\Internet Explorer\en-US\iexplore.exe.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\release.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_es.properties.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.inf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_glass_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png
• %System Root%\Program Files\Mozilla Firefox\updated\nssdbm3.chk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\sk-SK\tipresx.dll.mui
• %System Root%\Program Files\VMware\VMware Tools\win_hlp.zip.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png
• %System Root%\Program Files\Internet Explorer\ie9props.propdesc
• %Windows%\Temp\cFC59.tmp
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsplk.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jsse.jar.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\warning_small.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG_PAL.wmv
• %System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x86.sys.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui
• %System Root%\Program Files\Common Files\System\ado\adojavas.inc
• %System Root%\Program Files\DVD Maker\Shared\Common.fxh
• %System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.lnk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png
• %System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv
• %System Root%\Program Files\Internet Explorer\en-US\F12.dll.mui
• %System Root%\Program Files\Mozilla Firefox\updated\precomplete.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\amd64\jvm.cfg.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklist.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_70.png.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png
• %System Root%\Program Files\VMware\VMware Tools\Drivers\memctl\vmmemctl.sys.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\White_Chocolate.jpg
• %System Root%\Program Files\VMware\VMware Tools\help\index.html.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\nssdbm3.chk.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\sRGB.pf.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_pt_BR.properties.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\TipTsf.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\header-background.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\charsets.jar.cmsnwned
• %System Root%\excel2k\XLS2KE05.xls.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\baseAltGr_rtl.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml
• %System Root%\Program Files\Common Files\System\ado\msado27.tlb
• %System Root%\Program Files\VMware\VMware Tools\Drivers\mouse\vmmouse.sys.cmsnwned
• %System Root%\Program Files\Common Files\System\msadc\adcjavas.inc
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png
• %System Root%\Program Files\VMware\VMware Tools\poweroff-vm-default.bat.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\blacklisted.certs.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv
• %System Root%\Program Files\VMware\VMware Tools\suspend-vm-default.bat.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaSansRegular.ttf.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\rt.jar.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\README.txt.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\meta-index.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml
• %System Root%\Program Files\Common Files\System\msadc\en-US\msadcfr.dll.mui
• %Application Data%\0TDUTO~1
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui
• %System Root%\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-TW\tipresx.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\logging.properties.cmsnwned
• %System Root%\Program Files\Microsoft Office\Office12\Mso Example Setup File A.txt.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\javaws.policy.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\net.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\TitleButtonSubpicture.png
• %System Root%\Email and Password List.htm.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_buttongraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\uk-UA\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Month_Calendar.emf
• %System Root%\Program Files\Mozilla Firefox\updated\freebl3.chk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png
• %System Root%\Program Files\ImDisk\lang.txt.cmsnwned
• %System Root%\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui
• %System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png
• %System Root%\Program Files\DVD Maker\Shared\DissolveAnother.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\cacerts.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp
• %System Root%\Program Files\Mozilla Firefox\updater.ini.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui
• %System Root%\Program Files\Common Files\System\msadc\en-US\msadcor.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web\webbase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunec.jar.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\javafx.properties.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\203x8subpicture.png
• %System Root%\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\cldrdata.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Java\jre1.8.0_144\bin\server\classes.jsa.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png
• %System Root%\excel2k\XLS2KE01.xls.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\Drivers\pvscsi\pvscsi.cat.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\index.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png
• %System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\manifest.json.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg
• %System Root%\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\chkrzm.exe.mui.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.password.template.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.security.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv
• %System Root%\Program Files\VMware\VMware Tools\help\images\seeright.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png
• %Windows%\Temp\XY1464.tmp
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_LinkDrop32x32.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\fieldswitch.ax
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\psfontj2d.properties.cmsnwned
• %Windows%\Temp\tC94.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_notes-txt-background.png
• %System Root%\Program Files\Mozilla Firefox\uninstall\shortcuts_log.ini.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png
• %System Root%\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash_11@2x-lic.gif.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jfr\profile.jfc.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\decorative_rule.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png
• %Windows%\Temp\0O3AD.tmp
• %Windows%\Temp\81743.tmp
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat
• %System Root%\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.cmsnwned
• %System Root%\powerpoint2k\PPT2KE00.pot.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\GRAY.pf.cmsnwned
• %System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.VisualBasic.Targets
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned
• %System Root%\Program Files\Common Files\System\ado\msado26.tlb
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_right.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_performance_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\accessibility.properties.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\images\cursors\win32_CopyDrop32x32.gif.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\calendars.properties.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\install.log.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jce.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.htm
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Internet Explorer\en-US\DiagnosticsTap.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_CN.properties.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv
• %System Root%\Program Files\Microsoft Games\Chess\en-US\Chess.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\offset.ax
• %System Root%\Program Files\VMware\VMware Tools\help\images\seertup.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_VideoInset.png
• %System Root%\Program Files\DVD Maker\bod_r.TTF
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png
• %System Root%\Program Files\Mozilla Firefox\updated\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotslightoverlay.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\resources.jar.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm
• %System Root%\Program Files\Mozilla Firefox\update-settings.ini.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\browser\crashreporter-override.ini.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\softokn3.chk.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\bin\server\Xusage.txt.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml
• %System Root%\Email and Password List.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages.properties.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\context.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_buttongraphic.png
• %System Root%\Program Files\Mozilla Firefox\omni.ja.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\omni.ja.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\scripts\expand.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_RGB6_PAL.wmv
• %System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3ndis6.cat.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png
• %System Root%\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-image-mask.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Subpicture1.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml
• %System Root%\Program Files\Mozilla Firefox\platform.ini.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\ShapeCollector.exe.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shades of Blue.htm
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground_PAL.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IpsMigrationPlugin.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterRegular.ttf.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsita.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml
• %System Root%\AVScanner.ini.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsrom.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhsec.htm.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\pairs\pair0.js.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\psfont.properties.ja.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\sunpkcs11.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv
• %System Root%\Program Files\Mozilla Firefox\updated\browser\features\screenshots@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\photoedge_selectionsubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Microsoft Games\Purble Place\PurblePlaceMCE.png
• %System Root%\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi.cmsnwned
• %System Root%\excel2k\XLS2KE00.xlt.cmsnwned
• %System Root%\Program Files\DVD Maker\rtstreamsink.ax
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsesp.xml
• %System Root%\Program Files\VMware\VMware Tools\vmrawdsk.sys.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\blocklist.xml.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png
• %System Root%\Program Files\Mozilla Firefox\application.ini.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\VMware\VMware Tools\help\css\webworks.css.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png
• %System Root%\Program Files\DVD Maker\rtstreamsource.ax
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaTypewriterBold.ttf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu\oskmenubase.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\photograph.png
• %System Root%\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\Workflow.Targets
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Cave_Drawings.gif
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\management\snmp.acl.template.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\management\jmxremote.access.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-changjei.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png
• %System Root%\excel2k\XLS2KE02.xls.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\messages_zh_HK.properties.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\icudt44l.dat.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned
• %System Root%\Program Files\Internet Explorer\en-US\F12Tools.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png
• %System Root%\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\towwhdir.js.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\toc.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightDemiBold.ttf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\15x15dot.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Small_News.jpg
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipshrv.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui
• %System Root%\Program Files\Common Files\System\ado\msado21.tlb
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_ButtonGraphic.png
• %System Root%\Program Files\Microsoft Games\Chess\ChessMCE.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\soniccolorconverter.ax
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg
• %System Root%\Program Files\Common Files\System\en-US\wab32res.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jfxswt.jar.cmsnwned
• %System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File A.txt.cmsnwned
• %System Root%\Program Files\Microsoft Office\Office12\1033\Mso Example Intl Setup File B.txt.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png
• %Application Data%\sBmMbYIc
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\jvm.hprof.txt.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\local_policy.jar.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.bfc.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui
• %System Root%\Program Files\Mozilla Firefox\updated\browser\VisualElements\VisualElements_150.png.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\content-foreground.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png
• %System Root%\Program Files\VMware\VMware Tools\help\caution_small.png.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat
• %System Root%\Program Files\Mozilla Firefox\dependentlibs.list.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv
• %System Root%\Program Files\Mozilla Firefox\updated\defaults\pref\channel-prefs.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\colorcycle.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png
• %System Root%\Program Files\DVD Maker\audiodepthconverter.ax
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\15x15dot.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png
• %System Root%\Program Files\Common Files\VMware\Drivers\vmci\vmci.sys.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll.sig.cmsnwned
• %Windows%\Temp\M119E4.tmp
• %System Root%\Program Files\VMware\VMware Tools\help\images\blank.gif.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png
• %System Root%\Program Files\Internet Explorer\en-US\iedvtool.dll.mui
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightItalic.ttf.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\wwhpagef.js.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptb.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwrlatinlm.dat
• %System Root%\Program Files\Common Files\System\Ole DB\oledbjvs.inc
• %System Root%\Program Files\Common Files\VMware\Drivers\wddm_video\install.txt.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png
• %System Root%\Program Files\Internet Explorer\Timeline.cpu.xml
• %Windows%\Temp\Yr1453.tmp
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\alinks.js.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png
• %System Root%\Program Files\Common Files\Microsoft Shared\MSInfo\en-US\msinfo32.exe.mui
• %All Users Profile%\Microsoft\Windows\DRM\drmstore.hds
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_content-background.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\splash.gif.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\deploy\ffjcext.zip.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\common\synonyms.xml.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv
• %System Root%\Program Files\Mozilla Firefox\updated\Accessible.tlb.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\VMware\VMware Tools\Drivers\vmxnet3\vmxnet3n61x64.sys.cmsnwned
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml
• %System Root%\Program Files\Internet Explorer\SIGNUP\install.ins.cmsnwned
• %System Root%\Program Files\Microsoft Games\Mahjong\en-US\Mahjong.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png
• %AppDataLocal%\Microsoft\Media Player\CurrentDatabase_372.wmdb
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsNotesBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fonts\LucidaBrightRegular.ttf.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Mozilla Firefox\updated\uninstall\shortcuts_log.ini.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\fontconfig.properties.src.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\browser\VisualElements\VisualElements_70.png.cmsnwned
• %System Root%\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\application.ini.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipscsy.xml
• %System Root%\Program Files\Java\jre1.8.0_144\lib\security\java.policy.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_scrapbook_Thumbnail.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\background.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\lib\sound.properties.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png
• %System Root%\Program Files\Common Files\Services\verisign.bmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv
• %System Root%\Program Files\VMware\VMware Tools\help\wwhdata\js\search\search0.js.cmsnwned
• %System Root%\Program Files\Microsoft Games\Chess\ChessMCE.lnk.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\Mozilla Firefox\updated\browser\crashreporter-override.ini.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\ext\nashorn.jar.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp
• %System Root%\Program Files\VMware\VMware Tools\Drivers\audio\vmaudio.cat.cmsnwned
• %Windows%\Temp\F9O254.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv
• %System Root%\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets.cmsnwned
• %Windows%\servicing\TrustedInstaller.exe
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\de-DE\tipresx.dll.mui
• %System Root%\Program Files\Microsoft Games\Hearts\en-US\Hearts.exe.mui.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-highlight.png
• %System Root%\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp
• %System Root%\Program Files\Java\jre1.8.0_144\lib\classlist.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\browser\omni.ja.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png
• %Windows%\Temp\2Y253.tmp
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png
• %System Root%\powerpoint2k\PPT2KE01.ppt.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png
• %System Root%\Program Files\VMware\VMware Tools\help\GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png
• %System Root%\Program Files\Java\jre1.8.0_144\COPYRIGHT.cmsnwned
• %System Root%\Program Files\Java\jre1.8.0_144\lib\cmm\CIEXYZ.pf.cmsnwned
• %System Root%\Program Files\Microsoft Games\FreeCell\FreeCellMCE.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-correct.avi
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\rtscom.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Postage_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Scene_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground.wmv
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIconSubpi.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui
• %System Root%\Program Files\Mozilla Firefox\fonts\TwemojiMozilla.ttf.cmsnwned
• %System Root%\Program Files\Mozilla Firefox\updated\firefox.VisualElementsManifest.xml.cmsnwned
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_ButtonGraphic.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-background.png
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png
• %System Root%\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv
• %System Root%\Program Files\Java\jre1.8.0_144\THIRDPARTYLICENSEREADME.txt.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\ipschs.xml
• %System Root%\Program Files\Internet Explorer\en-US\networkinspection.dll.mui
• %System Root%\Program Files\Common Files\Microsoft Shared\Stationery\Shorthand.emf
• %System Root%\Program Files\Mozilla Firefox\freebl3.chk.cmsnwned
• %System Root%\Program Files\Common Files\System\msadc\handler.reg
• %System Root%\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.cmsnwned
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main.xml
• %System Root%\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui

(Note: %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %All Users Profile% is the common user's profile folder, which is usually C:\Documents and Settings\All Users on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\ProgramData on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit). . %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Roaming on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).. %AppDataLocal% is the Local Application Data folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Application Data on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).)

Other Details

This Ransomware connects to the following possibly malicious URL:

• http://2.{BLOCKED}{BLOCKED}.168.192.in-addr.arpa
• http://22.{BLOCKED}0.{BLOCKED}0.224.in-addr.arpa
• http://252.{BLOCKED}0.{BLOCKED}0.224.in-addr.arpa

It deletes itself after execution.

Ransomware Routine

This Ransomware drops the following file(s) as ransom note:

• AVScanner.ini.cmsnwned_readme
• Email and Password List.htm.cmsnwned_readme
• Email and Password List.js.cmsnwned_readme
• Email and Password List.txt.cmsnwned_readme
• Email and Password List.vbs.cmsnwned_readme
• set_hostname.vbs.cmsnwned_readme
• $IC8HJH8.zip.cmsnwned_readme
• XLS2KE00.xlt.cmsnwned_readme
• XLS2KE01.xls.cmsnwned_readme
• XLS2KE02.xls.cmsnwned_readme
• XLS2KE03.xls.cmsnwned_readme
• XLS2KE04.xls.cmsnwned_readme
• XLS2KE05.xls.cmsnwned_readme
• XLS2KExx.xls.cmsnwned_readme
• ExcelLR.cab.cmsnwned_readme
• ExcelMUI.msi.cmsnwned_readme
• ExcelMUI.xml.cmsnwned_readme
• Setup.xml.cmsnwned_readme
• PowerPointMUI.msi.cmsnwned_readme
• PowerPointMUI.xml.cmsnwned_readme
• PptLR.cab.cmsnwned_readme
• PublisherMUI.msi.cmsnwned_readme
• PublisherMUI.xml.cmsnwned_readme
• PubLR.cab.cmsnwned_readme
• OutlkLR.cab.cmsnwned_readme
• OutlookMUI.msi.cmsnwned_readme
• OutlookMUI.xml.cmsnwned_readme
• WordLR.cab.cmsnwned_readme
• WordMUI.msi.cmsnwned_readme
• WordMUI.xml.cmsnwned_readme
• Proofing.msi.cmsnwned_readme
• Proofing.xml.cmsnwned_readme
• Proof.cab.cmsnwned_readme
• Proof.msi.cmsnwned_readme
• Proof.xml.cmsnwned_readme
• EnterpriseWW.msi.cmsnwned_readme
• EnterpriseWW.xml.cmsnwned_readme
• EnterWW.cab.cmsnwned_readme
• ID_00030.DPC.cmsnwned_readme
• Office64WW.msi.cmsnwned_readme
• Office64WW.xml.cmsnwned_readme
• OWOW64WW.cab.cmsnwned_readme
• InfLR.cab.cmsnwned_readme
• InfoPathMUI.msi.cmsnwned_readme
• InfoPathMUI.xml.cmsnwned_readme
• OneNoteMUI.msi.cmsnwned_readme
• OneNoteMUI.xml.cmsnwned_readme
• OnoteLR.cab.cmsnwned_readme
• GrooveMUISet.msi.cmsnwned_readme
• GrooveMUISet.xml.cmsnwned_readme
• GrooveLR.cab.cmsnwned_readme
• GrooveMUI.msi.cmsnwned_readme
• GrooveMUI.xml.cmsnwned_readme
• branding.xml.cmsnwned_readme
• Microsoft.VC80.CRT.manifest.cmsnwned_readme
• OfficeLR.cab.cmsnwned_readme
• OfficeMUI.msi.cmsnwned_readme
• OfficeMUI.xml.cmsnwned_readme
• OfficeMUISet.msi.cmsnwned_readme
• OfficeMUISet.xml.cmsnwned_readme
• pss10r.chm.cmsnwned_readme
• setup.chm.cmsnwned_readme
• ShellUI.MST.cmsnwned_readme
• Office64MUI.msi.cmsnwned_readme
• Office64MUI.xml.cmsnwned_readme
• Office64MUISet.msi.cmsnwned_readme
• Office64MUISet.xml.cmsnwned_readme
• OWOW64LR.cab.cmsnwned_readme
• AccessMUISet.msi.cmsnwned_readme
• AccessMUISet.xml.cmsnwned_readme
• AccessMUI.msi.cmsnwned_readme
• AccessMUI.xml.cmsnwned_readme
• AccLR.cab.cmsnwned_readme
• PPT2KE00.pot.cmsnwned_readme
• PPT2KE01.ppt.cmsnwned_readme
• PPT2KE02.ppt.cmsnwned_readme
• PPT2KE03.ppt.cmsnwned_readme
• PPT2KE04.ppt.cmsnwned_readme
• PPT2KE05.ppt.cmsnwned_readme
• PPT2KExx.PPT.cmsnwned_readme
• vmci.cat.cmsnwned_readme
• vmci.inf.cmsnwned_readme
• vmci.sys.cmsnwned_readme
• install.txt.cmsnwned_readme
• vm3d.cat.cmsnwned_readme
• vm3d.inf.cmsnwned_readme
• vm3dmp.sys.cmsnwned_readme
• lang.txt.cmsnwned_readme
• install.ins.cmsnwned_readme
• COPYRIGHT.cmsnwned_readme
• LICENSE.cmsnwned_readme
• README.txt.cmsnwned_readme
• release.cmsnwned_readme
• THIRDPARTYLICENSEREADME-JAVAFX.txt.cmsnwned_readme
• THIRDPARTYLICENSEREADME.txt.cmsnwned_readme
• Welcome.html.cmsnwned_readme
• javacpl.cpl.cmsnwned_readme
• classes.jsa.cmsnwned_readme
• Xusage.txt.cmsnwned_readme
• accessibility.properties.cmsnwned_readme
• calendars.properties.cmsnwned_readme
• charsets.jar.cmsnwned_readme
• classlist.cmsnwned_readme
• content-types.properties.cmsnwned_readme
• currency.data.cmsnwned_readme
• deploy.jar.cmsnwned_readme
• flavormap.properties.cmsnwned_readme
• fontconfig.bfc.cmsnwned_readme
• fontconfig.properties.src.cmsnwned_readme
• hijrah-config-umalqura.properties.cmsnwned_readme
• javafx.properties.cmsnwned_readme
• javaws.jar.cmsnwned_readme
• jce.jar.cmsnwned_readme
• jfr.jar.cmsnwned_readme
• jfxswt.jar.cmsnwned_readme
• jsse.jar.cmsnwned_readme
• jvm.hprof.txt.cmsnwned_readme
• logging.properties.cmsnwned_readme
• management-agent.jar.cmsnwned_readme
• meta-index.cmsnwned_readme
• net.properties.cmsnwned_readme
• plugin.jar.cmsnwned_readme
• psfont.properties.ja.cmsnwned_readme
• psfontj2d.properties.cmsnwned_readme
• resources.jar.cmsnwned_readme
• rt.jar.cmsnwned_readme
• sound.properties.cmsnwned_readme
• tzdb.dat.cmsnwned_readme
• tzmappings.cmsnwned_readme
• jvm.cfg.cmsnwned_readme
• CIEXYZ.pf.cmsnwned_readme
• GRAY.pf.cmsnwned_readme
• LINEAR_RGB.pf.cmsnwned_readme
• PYCC.pf.cmsnwned_readme
• sRGB.pf.cmsnwned_readme
• ffjcext.zip.cmsnwned_readme
• messages.properties.cmsnwned_readme
• messages_de.properties.cmsnwned_readme
• messages_es.properties.cmsnwned_readme
• messages_fr.properties.cmsnwned_readme
• messages_it.properties.cmsnwned_readme
• messages_ja.properties.cmsnwned_readme
• messages_ko.properties.cmsnwned_readme
• messages_pt_BR.properties.cmsnwned_readme
• messages_sv.properties.cmsnwned_readme
• messages_zh_CN.properties.cmsnwned_readme
• messages_zh_HK.properties.cmsnwned_readme
• messages_zh_TW.properties.cmsnwned_readme
• splash.gif.cmsnwned_readme
• splash@2x.gif.cmsnwned_readme
• splash_11-lic.gif.cmsnwned_readme
• splash_11@2x-lic.gif.cmsnwned_readme
• access-bridge-64.jar.cmsnwned_readme
• cldrdata.jar.cmsnwned_readme
• dnsns.jar.cmsnwned_readme
• jaccess.jar.cmsnwned_readme
• jfxrt.jar.cmsnwned_readme
• localedata.jar.cmsnwned_readme
• nashorn.jar.cmsnwned_readme
• sunec.jar.cmsnwned_readme
• sunjce_provider.jar.cmsnwned_readme
• sunmscapi.jar.cmsnwned_readme
• sunpkcs11.jar.cmsnwned_readme
• zipfs.jar.cmsnwned_readme
• LucidaBrightDemiBold.ttf.cmsnwned_readme
• LucidaBrightDemiItalic.ttf.cmsnwned_readme
• LucidaBrightItalic.ttf.cmsnwned_readme
• LucidaBrightRegular.ttf.cmsnwned_readme
• LucidaSansDemiBold.ttf.cmsnwned_readme
• LucidaSansRegular.ttf.cmsnwned_readme
• LucidaTypewriterBold.ttf.cmsnwned_readme
• LucidaTypewriterRegular.ttf.cmsnwned_readme
• cursors.properties.cmsnwned_readme
• invalid32x32.gif.cmsnwned_readme
• win32_CopyDrop32x32.gif.cmsnwned_readme
• win32_CopyNoDrop32x32.gif.cmsnwned_readme
• win32_LinkDrop32x32.gif.cmsnwned_readme
• win32_LinkNoDrop32x32.gif.cmsnwned_readme
• win32_MoveDrop32x32.gif.cmsnwned_readme
• win32_MoveNoDrop32x32.gif.cmsnwned_readme
• default.jfc.cmsnwned_readme
• profile.jfc.cmsnwned_readme
• jmxremote.access.cmsnwned_readme
• jmxremote.password.template.cmsnwned_readme
• management.properties.cmsnwned_readme
• snmp.acl.template.cmsnwned_readme
• blacklist.cmsnwned_readme
• blacklisted.certs.cmsnwned_readme
• cacerts.cmsnwned_readme
• java.policy.cmsnwned_readme
• java.security.cmsnwned_readme
• javaws.policy.cmsnwned_readme
• local_policy.jar.cmsnwned_readme
• US_export_policy.jar.cmsnwned_readme
• ChessMCE.lnk.cmsnwned_readme
• Chess.exe.mui.cmsnwned_readme
• FreeCellMCE.lnk.cmsnwned_readme
• FreeCell.exe.mui.cmsnwned_readme
• HeartsMCE.lnk.cmsnwned_readme
• Hearts.exe.mui.cmsnwned_readme
• MahjongMCE.lnk.cmsnwned_readme
• Mahjong.exe.mui.cmsnwned_readme
• Minesweeper.exe.mui.cmsnwned_readme
• MoreGames.dll.mui.cmsnwned_readme
• bckgRes.dll.mui.cmsnwned_readme
• bckgzm.exe.mui.cmsnwned_readme
• ChkrRes.dll.mui.cmsnwned_readme
• chkrzm.exe.mui.cmsnwned_readme
• ShvlRes.dll.mui.cmsnwned_readme
• shvlzm.exe.mui.cmsnwned_readme
• PurblePlaceMCE.lnk.cmsnwned_readme
• PurblePlace.exe.mui.cmsnwned_readme
• SolitaireMCE.lnk.cmsnwned_readme
• Solitaire.exe.mui.cmsnwned_readme
• SpiderSolitaireMCE.lnk.cmsnwned_readme
• SpiderSolitaire.exe.mui.cmsnwned_readme
• Mso Example Setup File A.txt.cmsnwned_readme
• Mso Example Intl Setup File A.txt.cmsnwned_readme
• Mso Example Intl Setup File B.txt.cmsnwned_readme
• Accessible.tlb.cmsnwned_readme
• application.ini.cmsnwned_readme
• crashreporter.ini.cmsnwned_readme
• dependentlibs.list.cmsnwned_readme
• firefox.exe.sig.cmsnwned_readme
• firefox.VisualElementsManifest.xml.cmsnwned_readme
• freebl3.chk.cmsnwned_readme
• install.log.cmsnwned_readme
• nssdbm3.chk.cmsnwned_readme
• omni.ja.cmsnwned_readme
• platform.ini.cmsnwned_readme
• plugin-container.exe.sig.cmsnwned_readme
• precomplete.cmsnwned_readme
• softokn3.chk.cmsnwned_readme
• update-settings.ini.cmsnwned_readme
• updater.ini.cmsnwned_readme
• xul.dll.sig.cmsnwned_readme
• blocklist.xml.cmsnwned_readme
• crashreporter-override.ini.cmsnwned_readme
• formautofill@mozilla.org.xpi.cmsnwned_readme
• screenshots@mozilla.org.xpi.cmsnwned_readme
• webcompat-reporter@mozilla.org.xpi.cmsnwned_readme
• webcompat@mozilla.org.xpi.cmsnwned_readme
• VisualElements_150.png.cmsnwned_readme
• VisualElements_70.png.cmsnwned_readme
• channel-prefs.js.cmsnwned_readme
• TwemojiMozilla.ttf.cmsnwned_readme
• clearkey.dll.sig.cmsnwned_readme
• manifest.json.cmsnwned_readme
• shortcuts_log.ini.cmsnwned_readme
• uninstall.log.cmsnwned_readme
• Workflow.Targets.cmsnwned_readme
• Workflow.VisualBasic.Targets.cmsnwned_readme
• WinFXList.xml.cmsnwned_readme
• FrameworkList.xml.cmsnwned_readme
• icudt44l.dat.cmsnwned_readme
• open_source_licenses.txt.cmsnwned_readme
• poweroff-vm-default.bat.cmsnwned_readme
• poweron-vm-default.bat.cmsnwned_readme
• resume-vm-default.bat.cmsnwned_readme
• suspend-vm-default.bat.cmsnwned_readme
• vm-support.vbs.cmsnwned_readme
• VMControlPanel.cpl.cmsnwned_readme
• vmrawdsk.sys.cmsnwned_readme
• VmUpgradeHelper.bat.cmsnwned_readme
• win_hlp.zip.cmsnwned_readme
• vmaudio.cat.cmsnwned_readme
• vmaudio.inf.cmsnwned_readme
• vmaudio.sys.cmsnwned_readme
• vmmemctl.sys.cmsnwned_readme
• vmmouse.cat.cmsnwned_readme
• vmmouse.inf.cmsnwned_readme
• vmmouse.sys.cmsnwned_readme
• pvscsi.cat.cmsnwned_readme
• pvscsi.inf.cmsnwned_readme
• pvscsi.sys.cmsnwned_readme
• caution_small.png.cmsnwned_readme
• vmxnet3ndis6.inf.cmsnwned_readme
• GUID-0BD592B1-A300-4C09-808A-BB447FAE2C2A.html.cmsnwned_readme
• vmxnet3ndis6.cat.cmsnwned_readme
• vmxnet3n61x64.sys.cmsnwned_readme
• vmxnet3n61x86.sys.cmsnwned_readme
• GUID-14D1E2BE-8CE5-411A-A02C-B00A6940FBAD.html.cmsnwned_readme
• GUID-20195825-7E66-4106-B3E6-74001DF94A09.html.cmsnwned_readme
• GUID-151025AE-6641-428B-9818-5E06916543F3.html.cmsnwned_readme
• GUID-2D52EA83-C33F-47FA-9C6E-9E6443EA0CB2.html.cmsnwned_readme
• GUID-35D8817F-5193-4315-AAF9-575CBDEE1B8F.html.cmsnwned_readme
• GUID-6994A5F9-B62B-4BF1-99D8-E325874A4C7A.html.cmsnwned_readme
• GUID-7F59A4E0-2B6D-4430-9C25-B6F17C4DE510.html.cmsnwned_readme
• GUID-7F9CD622-B66C-40D4-82D4-50FF23BD36EE.html.cmsnwned_readme
• GUID-87CDBAF9-171C-4CA2-973E-A3EC03A38C71.html.cmsnwned_readme
• GUID-A024460D-28A4-4541-B6BB-CFA1A31D9CE9.html.cmsnwned_readme
• GUID-A113A508-788B-4871-86A4-0D8C987FE4D9.html.cmsnwned_readme
• GUID-DE30092C-D613-4978-A68B-C0642B828909.html.cmsnwned_readme
• GUID-F8FE08FF-BCE2-4796-8B85-41A31070073A.html.cmsnwned_readme
• GUID-FB7FA658-7622-4680-BD9F-7A6670C12794.html.cmsnwned_readme
• index.html.cmsnwned_readme
• warning_small.gif.cmsnwned_readme
• wwhsec.htm.cmsnwned_readme
• GUID-0FB09365-74C8-4874-8DCF-9F3719AB8796.css.cmsnwned_readme
• webworks.css.cmsnwned_readme
• blank.gif.cmsnwned_readme
• collapse.gif.cmsnwned_readme
• expanded.gif.cmsnwned_readme
• seebttm.gif.cmsnwned_readme
• seelflow.gif.cmsnwned_readme
• seeright.gif.cmsnwned_readme
• seertlow.gif.cmsnwned_readme
• seertup.gif.cmsnwned_readme
• expand.js.cmsnwned_readme
• alinks.js.cmsnwned_readme
• context.js.cmsnwned_readme
• files.js.cmsnwned_readme
• synonyms.xml.cmsnwned_readme
• title.js.cmsnwned_readme
• topics.js.cmsnwned_readme
• towwhdir.js.cmsnwned_readme
• wwhpagef.js.cmsnwned_readme
• index.js.cmsnwned_readme
• search.js.cmsnwned_readme
• toc.js.cmsnwned_readme
• search0.js.cmsnwned_readme
• pair0.js.cmsnwned_readme

This report is generated via an automated analysis system.