TROJ_CRYPGUL.B

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、以下のフォルダを作成します。

• %System Root%\tempfiles

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

他のシステム変更

マルウェアは、以下のファイルを削除します。

• %User Profile%\Sample Pictures\Blue hills.jpg
• %User Profile%\Sample Pictures\Sunset.jpg
• %User Profile%\Sample Pictures\Water lilies.jpg
• %User Profile%\Sample Pictures\Winter.jpg
• %User Profile%\Internet Explorer\brndlog.txt
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
• %User Profile%\Templates\excel.xls
• %User Profile%\Templates\excel4.xls
• %User Profile%\Templates\powerpnt.ppt
• %User Profile%\Templates\winword.doc
• %User Profile%\Templates\winword2.doc
• %Temporary Internet Files%\Content.IE5\6HMNM5GF\twgj[1].jpg
• %User Temp%\dd_depcheck_NETFX_EXP_35.txt
• %User Temp%\dd_dotnetfx35error.txt
• %User Temp%\dd_dotnetfx35install.txt
• %User Temp%\dd_dotNetFx40_Full_x86_x64_decompression_log.txt
• %User Temp%\dd_MSXML6_MSI0686.txt
• %User Temp%\dd_netfx20MSI7F16.txt
• %User Temp%\dd_netfx20UI7F16.txt
• %User Temp%\dd_NET_Framework20_Setup06A7.txt
• %User Temp%\dd_NET_Framework30_Setup0775.txt
• %User Temp%\dd_NET_Framework35_MSI07B9.txt
• %User Temp%\dd_RGB9RAST_x86.msi0683.txt
• %User Temp%\dd_vcredistMSI3CAA.txt
• %User Temp%\dd_vcredistMSI7C21.txt
• %User Temp%\dd_vcredistUI3CAA.txt
• %User Temp%\dd_vcredistUI7C21.txt
• %User Temp%\dd_wcf_CA_smci_20111017_044900_062.txt
• %User Temp%\dd_wcf_retCA29BA.txt
• %User Temp%\dd_WIC.txt
• %User Temp%\dd_XPS.txt
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Core_x86.msi.txt
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Extended_x86.msi.txt
• %User Temp%\Microsoft Visual C++ 2010 x86 Redistributable Setup_20111020_000954642-MSI_vc_red.msi.txt
• %User Temp%\uxeventlog.txt
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf
• %Program Files%\Adobe\Reader 10.0\Reader\pmd.cer
• %Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_client.xml
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml
• %Program Files%\Movie Maker\Shared\Empty.txt
• %Program Files%\Movie Maker\Shared\Filters.xml
• %Program Files%\Movie Maker\Shared\Profiles\Blank.txt
• %Program Files%\Movie Maker\Shared\Sample1.jpg
• %Program Files%\Movie Maker\Shared\Sample2.jpg
• %Program Files%\MSN\MSNCoreFiles\Install\cinfo.xml
• %Program Files%\MSN\MSNCoreFiles\Install\xfp.xml
• %Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt
• %Program Files%\Outlook Express\msoe.txt
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml
• %Program Files%\Windows Media Player\npdrmv2.zip
• %Program Files%\Windows Media Player\npds.zip
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.txt
• %Windows%\$NtUninstallWIC$\spuninst\spuninst.txt
• %Windows%\Help\Tours\htmlTour\best_road.jpg
• %Windows%\Help\Tours\htmlTour\best_road_big.jpg
• %Windows%\Help\Tours\htmlTour\best_road_ghost.jpg
• %Windows%\Help\Tours\htmlTour\best_robust.jpg
• %Windows%\Help\Tours\htmlTour\best_robust_big.jpg
• %Windows%\Help\Tours\htmlTour\best_robust_ghost.jpg
• %Windows%\Help\Tours\htmlTour\best_secure.jpg
• %Windows%\Help\Tours\htmlTour\best_secure_big.jpg
• %Windows%\Help\Tours\htmlTour\best_secure_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_data.jpg
• %Windows%\Help\Tours\htmlTour\connected_data_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_data_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_multiple.jpg
• %Windows%\Help\Tours\htmlTour\connected_multiple_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_networks_ghost.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard_big.jpg
• %Windows%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
• %Windows%\Help\Tours\htmlTour\control_up.jpg
• %Windows%\Help\Tours\htmlTour\desktop_screen_shot.jpg
• %Windows%\Help\Tours\htmlTour\desktop_up.jpg
• %Windows%\Help\Tours\htmlTour\end_up.jpg
• %Windows%\Help\Tours\htmlTour\folder_up.jpg
• %Windows%\Help\Tours\htmlTour\gradient.jpg
• %Windows%\Help\Tours\htmlTour\icon_up.jpg
• %Windows%\Help\Tours\htmlTour\img004b.jpg
• %Windows%\Help\Tours\htmlTour\img014.jpg
• %Windows%\Help\Tours\htmlTour\img033.jpg
• %Windows%\Help\Tours\htmlTour\img033a.jpg
• %Windows%\Help\Tours\htmlTour\img034.jpg
• %Windows%\Help\Tours\htmlTour\img040.jpg
• %Windows%\Help\Tours\htmlTour\img046.jpg
• %Windows%\Help\Tours\htmlTour\img060.jpg
• %Windows%\Help\Tours\htmlTour\img068.jpg
• %Windows%\Help\Tours\htmlTour\img072.jpg
• %Windows%\Help\Tours\htmlTour\img074a.jpg
• %Windows%\Help\Tours\htmlTour\img089.jpg
• %Windows%\Help\Tours\htmlTour\img100.jpg
• %Windows%\Help\Tours\htmlTour\img103.jpg
• %Windows%\Help\Tours\htmlTour\img109.jpg
• %Windows%\Help\Tours\htmlTour\img110.jpg
• %Windows%\Help\Tours\htmlTour\img116.jpg
• %Windows%\Help\Tours\htmlTour\img121.jpg
• %Windows%\Help\Tours\htmlTour\img123.jpg
• %Windows%\Help\Tours\htmlTour\img126.jpg
• %Windows%\Help\Tours\htmlTour\img136.jpg
• %Windows%\Help\Tours\htmlTour\img149.jpg
• %Windows%\Help\Tours\htmlTour\intro_logo.jpg
• %Windows%\Help\Tours\htmlTour\logo.jpg
• %Windows%\Help\Tours\htmlTour\pen_icon.jpg
• %Windows%\Help\Tours\htmlTour\question_icon.jpg
• %Windows%\Help\Tours\htmlTour\read_icon.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_better.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_better_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
• %Windows%\Help\Tours\htmlTour\start_up.jpg
• %Windows%\Help\Tours\htmlTour\taskbar_up.jpg
• %Windows%\Help\Tours\htmlTour\ul_logo.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_built_ghost.jpg
• %Windows%\Help\Tours\htmlTour\unlock_optimized.jpg
• %Windows%\Help\Tours\htmlTour\unlock_optimized_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing_big.jpg
• %Windows%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
• %Windows%\Help\Tours\htmlTour\window_up.jpg
• %Windows%\Help\Tours\mmTour\intro.txt
• %Windows%\Help\Tours\mmTour\nav.txt
• %Windows%\Help\Tours\mmTour\segment1.txt
• %Windows%\Help\Tours\mmTour\segment2.txt
• %Windows%\Help\Tours\mmTour\segment3.txt
• %Windows%\Help\Tours\mmTour\segment4.txt
• %Windows%\Help\Tours\mmTour\segment5.txt
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
• %Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\FrameworkList.xml
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1025.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1028.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1029.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1030.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1031.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1032.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1033.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1035.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1036.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1037.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1038.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1040.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1041.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1042.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1043.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1044.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1045.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1046.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1049.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1053.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1055.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.2052.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.2070.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.3082.rtf
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\dd_dotnetfx35error.txt
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\dd_dotnetfx35install.txt
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
• %Windows%\Microsoft.NET\Framework\v4.0.30319\Config\NetFx40_IIS_schema_update.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\ParameterInfo.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\UiInfo.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Strings.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\eula.rtf
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\LocalizedData.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\ParameterInfo.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\UiInfo.xml
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Strings.xml
• %Windows%\OEWABLog.txt
• %Windows%\pchealth\helpctr\Config\dataspec.xml
• %Windows%\pchealth\helpctr\Config\SAFStore.xml
• %Windows%\pchealth\helpctr\Config\sereg.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_1.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_10.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_11.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_12.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_13.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_14.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_15.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_2.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_3.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_4.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_5.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_6.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_7.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_8.xml
• %Windows%\pchealth\helpctr\DataColl\CollectedData_9.xml
• %Windows%\pchealth\helpctr\DataColl\history_db.xml
• %Windows%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
• %Windows%\pchealth\helpctr\System\panels\MiniNavBar.xml
• %Windows%\pchealth\helpctr\System\panels\NavBar.xml
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAURA.xml
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
• %Windows%\pchealth\helpctr\System\sysinfo\loc_strings.xml
• %Windows%\pchealth\helpctr\System\sysinfo\msinfo.xml
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml
• %Windows%\pchealth\UploadLB\Config\config.xml
• %Windows%\setuplog.txt
• %Windows%\srchasst\mui\0409\charchsr.xml
• %Windows%\srchasst\mui\0409\charctxt.xml
• %Windows%\srchasst\mui\0409\error.xml
• %Windows%\srchasst\mui\0409\finish.xml
• %Windows%\srchasst\mui\0409\indxsvc.xml
• %Windows%\srchasst\mui\0409\inetfind.xml
• %Windows%\srchasst\mui\0409\inetopts.xml
• %Windows%\srchasst\mui\0409\inetpref.xml
• %Windows%\srchasst\mui\0409\inetsrch.xml
• %Windows%\srchasst\mui\0409\intents.xml
• %Windows%\srchasst\mui\0409\intro.xml
• %Windows%\srchasst\mui\0409\lcladv.xml
• %Windows%\srchasst\mui\0409\lcladvd.xml
• %Windows%\srchasst\mui\0409\lcladvdf.xml
• %Windows%\srchasst\mui\0409\lcladvmm.xml
• %Windows%\srchasst\mui\0409\lclcomp.xml
• %Windows%\srchasst\mui\0409\lcldate.xml
• %Windows%\srchasst\mui\0409\lcldocs.xml
• %Windows%\srchasst\mui\0409\lclkwrds.xml
• %Windows%\srchasst\mui\0409\lcllook.xml
• %Windows%\srchasst\mui\0409\lclmm.xml
• %Windows%\srchasst\mui\0409\lclmode.xml
• %Windows%\srchasst\mui\0409\lclother.xml
• %Windows%\srchasst\mui\0409\lclprog.xml
• %Windows%\srchasst\mui\0409\lclrfine.xml
• %Windows%\srchasst\mui\0409\lclsize.xml
• %Windows%\srchasst\mui\0409\lclsrch.xml
• %Windows%\srchasst\mui\0409\lcltechy.xml
• %System%\CatRoot2\dberr.txt
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
• %System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML
• %System%\config\systemprofile\Templates\excel.xls
• %System%\config\systemprofile\Templates\excel4.xls
• %System%\config\systemprofile\Templates\powerpnt.ppt
• %System%\config\systemprofile\Templates\winword.doc
• %System%\config\systemprofile\Templates\winword2.doc
• %System%\drivers\gmreadme.txt
• %System%\eula.txt
• %System%\ias\dnary.mdb
• %System%\ias\ias.mdb
• %System%\icsxml\cmnicfg.xml
• %System%\icsxml\ipcfg.xml
• %System%\icsxml\osinfo.xml
• %System%\icsxml\potscfg.xml
• %System%\icsxml\pppcfg.xml
• %System%\oobe\html\mouse\images\bulzano.jpg
• %System%\oobe\html\mouse\images\bulzanom.jpg
• %System%\oobe\html\mouse\images\heidelb.jpg
• %System%\oobe\html\mouse\images\heidelbm.jpg
• %System%\oobe\html\mouse\images\paris.jpg
• %System%\oobe\html\mouse\images\parism.jpg
• %System%\oobe\html\mouse\images\pisa.jpg
• %System%\oobe\html\mouse\images\pisam.jpg
• %System%\oobe\html\mouse\images\prague.jpg
• %System%\oobe\html\mouse\images\praguem.jpg
• %System%\oobe\html\mouse\images\tyrol.jpg
• %System%\oobe\html\mouse\images\tyrolm.jpg
• %System%\oobe\html\mouse\images\venice.jpg
• %System%\oobe\html\mouse\images\venicem.jpg
• %System%\oobe\html\mouse\images\verona.jpg
• %System%\oobe\html\mouse\images\veronam.jpg
• %System%\oobe\images\backdown.jpg
• %System%\oobe\images\backoff.jpg
• %System%\oobe\images\backover.jpg
• %System%\oobe\images\backup.jpg
• %System%\oobe\images\mslogo.jpg
• %System%\oobe\images\newbtm1.jpg
• %System%\oobe\images\newbtm8.jpg
• %System%\oobe\images\newmark1.jpg
• %System%\oobe\images\newmark8.jpg
• %System%\oobe\images\newtop1.jpg
• %System%\oobe\images\newtop8.jpg
• %System%\oobe\images\nextdown.jpg
• %System%\oobe\images\nextoff.jpg
• %System%\oobe\images\nextover.jpg
• %System%\oobe\images\nextup.jpg
• %System%\oobe\images\oemcoa.jpg
• %System%\oobe\images\skipdown.jpg
• %System%\oobe\images\skipoff.jpg
• %System%\oobe\images\skipover.jpg
• %System%\oobe\images\skipup.jpg
• %System%\oobe\images\wpaback.jpg
• %System%\oobe\images\wpabtm.jpg
• %System%\oobe\images\wpaflag.jpg
• %System%\oobe\images\wpakey.jpg
• %System%\oobe\images\wpatop.jpg
• %System%\Restore\filelist.xml
• %System%\wbem\xsl-mappings.xml
• %System%\XPSViewer\XPSViewerManifest.xml
• %Windows%\Web\Wallpaper\Ascent.jpg
• %Windows%\Web\Wallpaper\Autumn.jpg
• %Windows%\Web\Wallpaper\Azul.jpg
• %Windows%\Web\Wallpaper\Crystal.jpg
• %Windows%\Web\Wallpaper\Follow.jpg
• %Windows%\Web\Wallpaper\Friend.jpg
• %Windows%\Web\Wallpaper\Home.jpg
• %Windows%\Web\Wallpaper\Moon flower.jpg
• %Windows%\Web\Wallpaper\Peace.jpg
• %Windows%\Web\Wallpaper\Power.jpg
• %Windows%\Web\Wallpaper\Purple flower.jpg
• %Windows%\Web\Wallpaper\Radiance.jpg
• %Windows%\Web\Wallpaper\Red moon desert.jpg
• %Windows%\Web\Wallpaper\Ripple.jpg
• %Windows%\Web\Wallpaper\Stonehenge.jpg
• %Windows%\Web\Wallpaper\Tulips.jpg
• %Windows%\Web\Wallpaper\Vortec space.jpg
• %Windows%\Web\Wallpaper\Wind.jpg
• %Windows%\Web\Wallpaper\Windows XP.jpg

(註：%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞" です。.. %Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。.. %Temporary Internet Files%フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞\Local Settings\Temporary Internet Files"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Microsoft\Windows\Temporary Internet Files" です。. %User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。.. %Program Files%フォルダは、プログラムファイルのフォルダで、いずれのオペレーティングシステム(OS)でも通常、 "C:\Program Files"、64bitのOS上で32bitのアプリケーションを実行している場合、 "C:\Program Files (x86)" です。.. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.)

作成活動

マルウェアは、以下のファイルを作成します。

• %System Root%\tempfiles\vers
• tmpgr.wer
• %User Profile%\Sample Pictures\Blue hills.jpg.0ooo
• %User Profile%\Sample Pictures\!@Information about your files10025
• %User Profile%\Sample Pictures\Sunset.jpg.0ooo
• %User Profile%\Sample Pictures\Water lilies.jpg.0ooo
• %User Profile%\Sample Pictures\Winter.jpg.0ooo
• %User Profile%\Internet Explorer\brndlog.txt.0ooo
• %User Profile%\Internet Explorer\!@Information about your files10025
• %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.0ooo
• %Application Data%\Microsoft\Windows Media\9.0\!@Information about your files10025
• %User Profile%\Templates\excel.xls.0ooo
• %User Profile%\Templates\!@Information about your files10025
• %User Profile%\Templates\excel4.xls.0ooo
• %User Profile%\Templates\powerpnt.ppt.0ooo
• %User Profile%\Templates\winword.doc.0ooo
• %User Profile%\Templates\winword2.doc.0ooo
• %Temporary Internet Files%\Content.IE5\6HMNM5GF\twgj[1].jpg.0ooo
• %Temporary Internet Files%\Content.IE5\6HMNM5GF\!@Information about your files10025
• %User Temp%\dd_depcheck_NETFX_EXP_35.txt.0ooo
• %User Temp%\!@Information about your files10025
• %User Temp%\dd_dotnetfx35error.txt.0ooo
• %User Temp%\dd_dotnetfx35install.txt.0ooo
• %User Temp%\dd_dotNetFx40_Full_x86_x64_decompression_log.txt.0ooo
• %User Temp%\dd_MSXML6_MSI0686.txt.0ooo
• %User Temp%\dd_netfx20MSI7F16.txt.0ooo
• %User Temp%\dd_netfx20UI7F16.txt.0ooo
• %User Temp%\dd_NET_Framework20_Setup06A7.txt.0ooo
• %User Temp%\dd_NET_Framework30_Setup0775.txt.0ooo
• %User Temp%\dd_NET_Framework35_MSI07B9.txt.0ooo
• %User Temp%\dd_RGB9RAST_x86.msi0683.txt.0ooo
• %User Temp%\dd_vcredistMSI3CAA.txt.0ooo
• %User Temp%\dd_vcredistMSI7C21.txt.0ooo
• %User Temp%\dd_vcredistUI3CAA.txt.0ooo
• %User Temp%\dd_vcredistUI7C21.txt.0ooo
• %User Temp%\dd_wcf_CA_smci_20111017_044900_062.txt.0ooo
• %User Temp%\dd_wcf_retCA29BA.txt.0ooo
• %User Temp%\dd_WIC.txt.0ooo
• %User Temp%\dd_XPS.txt.0ooo
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Core_x86.msi.txt.0ooo
• %User Temp%\Microsoft .NET Framework 4 Setup_20111016_234618578-MSI_netfx_Extended_x86.msi.txt.0ooo
• %User Temp%\Microsoft Visual C++ 2010 x86 Redistributable Setup_20111020_000954642-MSI_vc_red.msi.txt.0ooo
• %User Temp%\uxeventlog.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\AdobeID.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\DefaultID.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\PDFSigQFormalRep.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\Dynamic.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\SignHere.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\Words.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Reader\pmd.cer.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\ENUtxt.pdf.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_CA.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\!@Information about your files10025
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT.0ooo
• %Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\!@Information about your files10025
• %Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg.0ooo
• %Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg.0ooo
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_client.xml.0ooo
• %Program Files%\Microsoft.NET\RedistList\!@Information about your files10025
• %Program Files%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml.0ooo
• %Program Files%\Movie Maker\Shared\Empty.txt.0ooo
• %Program Files%\Movie Maker\Shared\!@Information about your files10025
• %Program Files%\Movie Maker\Shared\Filters.xml.0ooo
• %Program Files%\Movie Maker\Shared\Profiles\Blank.txt.0ooo
• %Program Files%\Movie Maker\Shared\Profiles\!@Information about your files10025
• %Program Files%\Movie Maker\Shared\Sample1.jpg.0ooo
• %Program Files%\Movie Maker\Shared\Sample2.jpg.0ooo
• %Program Files%\MSN\MSNCoreFiles\Install\cinfo.xml.0ooo
• %Program Files%\MSN\MSNCoreFiles\Install\!@Information about your files10025
• %Program Files%\MSN\MSNCoreFiles\Install\xfp.xml.0ooo
• %Program Files%\MSXML 6.0\EULA\License_MSXML6_ENU.txt.0ooo
• %Program Files%\MSXML 6.0\EULA\!@Information about your files10025
• %Program Files%\Outlook Express\msoe.txt.0ooo
• %Program Files%\Outlook Express\!@Information about your files10025
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.0ooo
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\!@Information about your files10025
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\WinFXList.xml.0ooo
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\!@Information about your files10025
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml.0ooo
• %Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\!@Information about your files10025
• %Program Files%\Windows Media Player\npdrmv2.zip.0ooo
• %Program Files%\Windows Media Player\!@Information about your files10025
• %Program Files%\Windows Media Player\npds.zip.0ooo
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.txt.0ooo
• %Windows%\$MSI31Uninstall_KB893803v2$\spuninst\!@Information about your files10025
• %Windows%\$NtUninstallWIC$\spuninst\spuninst.txt.0ooo
• %Windows%\$NtUninstallWIC$\spuninst\!@Information about your files10025
• %Windows%\Help\Tours\htmlTour\best_road.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\!@Information about your files10025
• %Windows%\Help\Tours\htmlTour\best_road_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_road_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_robust.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_robust_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_robust_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_secure.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_secure_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\best_secure_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_data.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_data_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_data_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_multiple.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_multiple_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_multiple_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_networks.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_networks_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_networks_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_wizard.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_wizard_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\connected_wizard_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\control_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\desktop_screen_shot.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\desktop_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\end_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\folder_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\gradient.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\icon_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img004b.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img014.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img033.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img033a.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img034.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img040.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img046.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img060.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img068.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img072.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img074a.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img089.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img100.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img103.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img109.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img110.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img116.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img121.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img123.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img126.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img136.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\img149.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\intro_logo.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\logo.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\pen_icon.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\question_icon.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\read_icon.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_better.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_better_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_easier.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_faster.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\start_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\taskbar_up.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\ul_logo.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_built.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_built_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_built_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_optimized.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_optimized_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_playing.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_playing_big.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\unlock_playing_ghost.jpg.0ooo
• %Windows%\Help\Tours\htmlTour\window_up.jpg.0ooo
• %Windows%\Help\Tours\mmTour\intro.txt.0ooo
• %Windows%\Help\Tours\mmTour\!@Information about your files10025
• %Windows%\Help\Tours\mmTour\nav.txt.0ooo
• %Windows%\Help\Tours\mmTour\segment1.txt.0ooo
• %Windows%\Help\Tours\mmTour\segment2.txt.0ooo
• %Windows%\Help\Tours\mmTour\segment3.txt.0ooo
• %Windows%\Help\Tours\mmTour\segment4.txt.0ooo
• %Windows%\Help\Tours\mmTour\segment5.txt.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\FrameworkList.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1025.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1028.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1029.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1030.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1031.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1032.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1033.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1035.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1036.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1037.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1038.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1040.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1041.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1042.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1043.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1044.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1045.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1046.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1049.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1053.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.1055.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.2052.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.2070.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\eula.3082.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\dd_dotnetfx35error.txt.0ooo
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\dd_dotnetfx35install.txt.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\GroupedProviders.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\Config\NetFx40_IIS_schema_update.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\Config\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\ParameterInfo.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client\UiInfo.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Strings.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\eula.rtf.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\LocalizedData.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\ParameterInfo.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\!@Information about your files10025
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended\UiInfo.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Strings.xml.0ooo
• %Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\!@Information about your files10025
• %Windows%\OEWABLog.txt.0ooo
• %Windows%\!@Information about your files10025
• %Windows%\pchealth\helpctr\Config\dataspec.xml.0ooo
• %Windows%\pchealth\helpctr\Config\!@Information about your files10025
• %Windows%\pchealth\helpctr\Config\SAFStore.xml.0ooo
• %Windows%\pchealth\helpctr\Config\sereg.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_1.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\!@Information about your files10025
• %Windows%\pchealth\helpctr\DataColl\CollectedData_10.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_11.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_12.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_13.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_14.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_15.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_2.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_3.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_4.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_5.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_6.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_7.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_8.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\CollectedData_9.xml.0ooo
• %Windows%\pchealth\helpctr\DataColl\history_db.xml.0ooo
• %Windows%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg.0ooo
• %Windows%\pchealth\helpctr\System\DVDUpgrd\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\panels\MiniNavBar.xml.0ooo
• %Windows%\pchealth\helpctr\System\panels\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\panels\NavBar.xml.0ooo
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml.0ooo
• %Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml.0ooo
• %Windows%\pchealth\helpctr\System\Remote Assistance\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml.0ooo
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml.0ooo
• %Windows%\pchealth\helpctr\System\Remote Assistance\RAURA.xml.0ooo
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg.0ooo
• %Windows%\pchealth\helpctr\System\sysinfo\graphics\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\sysinfo\loc_strings.xml.0ooo
• %Windows%\pchealth\helpctr\System\sysinfo\!@Information about your files10025
• %Windows%\pchealth\helpctr\System\sysinfo\msinfo.xml.0ooo
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml.0ooo
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\!@Information about your files10025
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml.0ooo
• %Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml.0ooo
• %Windows%\pchealth\UploadLB\Config\config.xml.0ooo
• %Windows%\pchealth\UploadLB\Config\!@Information about your files10025
• %Windows%\setuplog.txt.0ooo
• %Windows%\srchasst\mui\0409\charchsr.xml.0ooo
• %Windows%\srchasst\mui\0409\!@Information about your files10025
• %Windows%\srchasst\mui\0409\charctxt.xml.0ooo
• %Windows%\srchasst\mui\0409\error.xml.0ooo
• %Windows%\srchasst\mui\0409\finish.xml.0ooo
• %Windows%\srchasst\mui\0409\indxsvc.xml.0ooo
• %Windows%\srchasst\mui\0409\inetfind.xml.0ooo
• %Windows%\srchasst\mui\0409\inetopts.xml.0ooo
• %Windows%\srchasst\mui\0409\inetpref.xml.0ooo
• %Windows%\srchasst\mui\0409\inetsrch.xml.0ooo
• %Windows%\srchasst\mui\0409\intents.xml.0ooo
• %Windows%\srchasst\mui\0409\intro.xml.0ooo
• %Windows%\srchasst\mui\0409\lcladv.xml.0ooo
• %Windows%\srchasst\mui\0409\lcladvd.xml.0ooo
• %Windows%\srchasst\mui\0409\lcladvdf.xml.0ooo
• %Windows%\srchasst\mui\0409\lcladvmm.xml.0ooo
• %Windows%\srchasst\mui\0409\lclcomp.xml.0ooo
• %Windows%\srchasst\mui\0409\lcldate.xml.0ooo
• %Windows%\srchasst\mui\0409\lcldocs.xml.0ooo
• %Windows%\srchasst\mui\0409\lclkwrds.xml.0ooo
• %Windows%\srchasst\mui\0409\lcllook.xml.0ooo
• %Windows%\srchasst\mui\0409\lclmm.xml.0ooo
• %Windows%\srchasst\mui\0409\lclmode.xml.0ooo
• %Windows%\srchasst\mui\0409\lclother.xml.0ooo
• %Windows%\srchasst\mui\0409\lclprog.xml.0ooo
• %Windows%\srchasst\mui\0409\lclrfine.xml.0ooo
• %Windows%\srchasst\mui\0409\lclsize.xml.0ooo
• %Windows%\srchasst\mui\0409\lclsrch.xml.0ooo
• %Windows%\srchasst\mui\0409\lcltechy.xml.0ooo
• %System%\CatRoot2\dberr.txt.0ooo
• %System%\CatRoot2\!@Information about your files10025
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt.0ooo
• %System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\!@Information about your files10025
• %System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML.0ooo
• %System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\!@Information about your files10025
• %System%\config\systemprofile\Templates\excel.xls.0ooo
• %System%\config\systemprofile\Templates\!@Information about your files10025
• %System%\config\systemprofile\Templates\excel4.xls.0ooo
• %System%\config\systemprofile\Templates\powerpnt.ppt.0ooo
• %System%\config\systemprofile\Templates\winword.doc.0ooo
• %System%\config\systemprofile\Templates\winword2.doc.0ooo
• %System%\drivers\gmreadme.txt.0ooo
• %System%\drivers\!@Information about your files10025
• %System%\eula.txt.0ooo
• %System%\!@Information about your files10025
• %System%\ias\dnary.mdb.0ooo
• %System%\ias\!@Information about your files10025
• %System%\ias\ias.mdb.0ooo
• %System%\icsxml\cmnicfg.xml.0ooo
• %System%\icsxml\!@Information about your files10025
• %System%\icsxml\ipcfg.xml.0ooo
• %System%\icsxml\osinfo.xml.0ooo
• %System%\icsxml\potscfg.xml.0ooo
• %System%\icsxml\pppcfg.xml.0ooo
• %System%\oobe\html\mouse\images\bulzano.jpg.0ooo
• %System%\oobe\html\mouse\images\!@Information about your files10025
• %System%\oobe\html\mouse\images\bulzanom.jpg.0ooo
• %System%\oobe\html\mouse\images\heidelb.jpg.0ooo
• %System%\oobe\html\mouse\images\heidelbm.jpg.0ooo
• %System%\oobe\html\mouse\images\paris.jpg.0ooo
• %System%\oobe\html\mouse\images\parism.jpg.0ooo
• %System%\oobe\html\mouse\images\pisa.jpg.0ooo
• %System%\oobe\html\mouse\images\pisam.jpg.0ooo
• %System%\oobe\html\mouse\images\prague.jpg.0ooo
• %System%\oobe\html\mouse\images\praguem.jpg.0ooo
• %System%\oobe\html\mouse\images\tyrol.jpg.0ooo
• %System%\oobe\html\mouse\images\tyrolm.jpg.0ooo
• %System%\oobe\html\mouse\images\venice.jpg.0ooo
• %System%\oobe\html\mouse\images\venicem.jpg.0ooo
• %System%\oobe\html\mouse\images\verona.jpg.0ooo
• %System%\oobe\html\mouse\images\veronam.jpg.0ooo
• %System%\oobe\images\backdown.jpg.0ooo
• %System%\oobe\images\!@Information about your files10025
• %System%\oobe\images\backoff.jpg.0ooo
• %System%\oobe\images\backover.jpg.0ooo
• %System%\oobe\images\backup.jpg.0ooo
• %System%\oobe\images\mslogo.jpg.0ooo
• %System%\oobe\images\newbtm1.jpg.0ooo
• %System%\oobe\images\newbtm8.jpg.0ooo
• %System%\oobe\images\newmark1.jpg.0ooo
• %System%\oobe\images\newmark8.jpg.0ooo
• %System%\oobe\images\newtop1.jpg.0ooo
• %System%\oobe\images\newtop8.jpg.0ooo
• %System%\oobe\images\nextdown.jpg.0ooo
• %System%\oobe\images\nextoff.jpg.0ooo
• %System%\oobe\images\nextover.jpg.0ooo
• %System%\oobe\images\nextup.jpg.0ooo
• %System%\oobe\images\oemcoa.jpg.0ooo
• %System%\oobe\images\skipdown.jpg.0ooo
• %System%\oobe\images\skipoff.jpg.0ooo
• %System%\oobe\images\skipover.jpg.0ooo
• %System%\oobe\images\skipup.jpg.0ooo
• %System%\oobe\images\wpaback.jpg.0ooo
• %System%\oobe\images\wpabtm.jpg.0ooo
• %System%\oobe\images\wpaflag.jpg.0ooo
• %System%\oobe\images\wpakey.jpg.0ooo
• %System%\oobe\images\wpatop.jpg.0ooo
• %System%\Restore\filelist.xml.0ooo
• %System%\Restore\!@Information about your files10025
• %System%\wbem\xsl-mappings.xml.0ooo
• %System%\wbem\!@Information about your files10025
• %System%\XPSViewer\XPSViewerManifest.xml.0ooo
• %System%\XPSViewer\!@Information about your files10025
• %Windows%\Web\Wallpaper\Ascent.jpg.0ooo
• %Windows%\Web\Wallpaper\!@Information about your files10025
• %Windows%\Web\Wallpaper\Autumn.jpg.0ooo
• %Windows%\Web\Wallpaper\Azul.jpg.0ooo
• %Windows%\Web\Wallpaper\Crystal.jpg.0ooo
• %Windows%\Web\Wallpaper\Follow.jpg.0ooo
• %Windows%\Web\Wallpaper\Friend.jpg.0ooo
• %Windows%\Web\Wallpaper\Home.jpg.0ooo
• %Windows%\Web\Wallpaper\Moon flower.jpg.0ooo
• %Windows%\Web\Wallpaper\Peace.jpg.0ooo
• %Windows%\Web\Wallpaper\Power.jpg.0ooo
• %Windows%\Web\Wallpaper\Purple flower.jpg.0ooo
• %Windows%\Web\Wallpaper\Radiance.jpg.0ooo
• %Windows%\Web\Wallpaper\Red moon desert.jpg.0ooo
• %Windows%\Web\Wallpaper\Ripple.jpg.0ooo
• %Windows%\Web\Wallpaper\Stonehenge.jpg.0ooo
• %Windows%\Web\Wallpaper\Tulips.jpg.0ooo
• %Windows%\Web\Wallpaper\Vortec space.jpg.0ooo
• %Windows%\Web\Wallpaper\Wind.jpg.0ooo
• %Windows%\Web\Wallpaper\Windows XP.jpg.0ooo
• %System Root%\tempfiles\soundvision.exe

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.. %User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞" です。.. %Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。.. %Temporary Internet Files%フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞\Local Settings\Temporary Internet Files"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Microsoft\Windows\Temporary Internet Files" です。. %User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。.. %Program Files%フォルダは、プログラムファイルのフォルダで、いずれのオペレーティングシステム(OS)でも通常、 "C:\Program Files"、64bitのOS上で32bitのアプリケーションを実行している場合、 "C:\Program Files (x86)" です。.. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.)

その他

マルウェアは、以下の不正なWebサイトにアクセスします。

• http://www.{BLOCKED}ud.ru
• {BLOCKED}58.42

このウイルス情報は、自動解析システムにより作成されました。