TROJ_MAILFIND.CE

2013年5月9日

別名:

Hacktool.Spammer (Symantec); Trojan-Mailfinder.Win32.Agent.f (Kaspersky); Hacktool.Spammer (Sunbelt); Trojan horse SpamTool.AE (AVG)

プラットフォーム:

Windows 2000, Windows XP, Windows Server 2003

危険度:

ダメージ度:

感染力:

感染確認数:

マルウェアタイプ:
トロイの木馬型
破壊活動の有無:
なし
暗号化:
感染報告の有無 :
はい

概要

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

詳細

ファイルサイズ 51,712 bytes

タイプ EXE

メモリ常駐なし

発見日 2013年5月9日

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、以下のフォルダを作成します。

Finished

他のシステム変更

マルウェアは、以下のファイルを削除します。

%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm

(註：%Program Files%フォルダは、Windows 2000、Server 2003、XP (32ビット)、通常 Vista (32ビット) および 7 (32ビット) の場合、通常 "C:\Program Files"、Windows XP (64ビット)、Vista (64ビット) および 7 (64ビット) の場合、通常 "C:\Program Files (x86)" です。. %Windows%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では、"C:\Windows" です。. %System%フォルダはWindowsの種類とインストール時の設定などにより異なります。標準設定では "C:\Windows\System32" です。)

作成活動

マルウェアは、以下のファイルを作成します。

Emails.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm

このウイルス情報は、自動解析システムにより作成されました。

対応方法

対応検索エンジン: 9.300

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

以下のファイルを検索し削除します。

[ 詳細 ]

コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

Emails.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm

マルウェアのコンポーネントファイルの削除：

Windows 2000、XP および Server 2003 の場合：

[スタート]-[検索]-[ファイルとフォルダすべて]を選択します。
[ファイル名のすべてまたは一部]に以下のファイル名を入力してください。
Emails.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm
[探す場所]の一覧から[マイコンピュータ]を選択し、[検索]を押します。
検索が終了したら、ファイルを選択し、SHIFT+DELETE を押します。これにより、ファイルが完全に削除されます。
残りのファイルに対して、マルウェアのコンポーネントファイルの削除の手順 2.）から4 .）を繰り返してください。

Windows Vista および 7 の場合：

[スタート]をクリックします。
[プログラムとファイルの検索]に、以下を入力します。
Emails.txt
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm
検索が終了したら、ファイルを選択し、SHIFT+DELETE を押します。これにより、ファイルが完全に削除されます。
残りのファイルに対して、マルウェアのコンポーネントファイルの削除の手順 2.）から 3.）を繰り返してください。
註：Windows 7 において上記の手順が正しく行われない場合、マイクロソフトのWebサイトをご確認ください。

手順 3

以下のフォルダを検索し削除します。

[ 詳細 ]

註：このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

Finished

手順 4

最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「TROJ_MAILFIND.CE」と検出したファイルはすべて削除してください。検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 5

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア／グレイウェア／スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU\tmp_license.html
%Program Files%\Adobe\Reader 10.0\tmp_ReadMe.htm
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_CA.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_GB_EURO.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US.txt
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\tmp_DisplayLanguageNames.en_US_POSIX.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_symbol.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\tmp_zdingbat.txt
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CENTEURO.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CORPCHAR.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CROATIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_CYRILLIC.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_GREEK.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ICELAND.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_ROMANIAN.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_SYMBOL.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_TURKISH.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\tmp_UKRAINE.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1250.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1251.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1252.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1253.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1254.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1257.TXT
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\tmp_CP1258.TXT
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tmp_Technical.htm
%Program Files%\Common Files\System\ado\tmp_MDACReadme.htm
%Program Files%\Movie Maker\Shared\tmp_Empty.txt
%Program Files%\Movie Maker\Shared\Profiles\tmp_Blank.txt
%Program Files%\MSXML 6.0\EULA\tmp_License_MSXML6_ENU.txt
%Program Files%\NetMeeting\tmp_netmeet.htm
%Program Files%\Outlook Express\tmp_msoe.txt
%Windows%\Help\tmp_ciadmin.htm
%Windows%\Help\tmp_ciquery.htm
%Windows%\Help\tmp_ixqlang.htm
%Windows%\Help\tmp_migwiz.htm
%Windows%\Help\tmp_migwiz2.htm
%Windows%\Help\Tours\htmlTour\tmp_best_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_best_road.htm
%Windows%\Help\Tours\htmlTour\tmp_best_robust.htm
%Windows%\Help\Tours\htmlTour\tmp_best_secure.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_data.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_multiple.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_networks.htm
%Windows%\Help\Tours\htmlTour\tmp_connected_wizard.htm
%Windows%\Help\Tours\htmlTour\tmp_default.htm
%Windows%\Help\Tours\htmlTour\tmp_footer.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_better.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_easier.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_faster.htm
%Windows%\Help\Tours\htmlTour\tmp_safe_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_control.htm
%Windows%\Help\Tours\htmlTour\tmp_start_desktop.htm
%Windows%\Help\Tours\htmlTour\tmp_start_ending.htm
%Windows%\Help\Tours\htmlTour\tmp_start_files.htm
%Windows%\Help\Tours\htmlTour\tmp_start_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_start_icons.htm
%Windows%\Help\Tours\htmlTour\tmp_start_menu.htm
%Windows%\Help\Tours\htmlTour\tmp_start_taskbar.htm
%Windows%\Help\Tours\htmlTour\tmp_start_windows.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_built.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_fr.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\tmp_unlock_playing.htm
%Windows%\Help\Tours\mmTour\tmp_intro.txt
%Windows%\Help\Tours\mmTour\tmp_nav.txt
%Windows%\Help\Tours\mmTour\tmp_segment1.txt
%Windows%\Help\Tours\mmTour\tmp_segment2.txt
%Windows%\Help\Tours\mmTour\tmp_segment3.txt
%Windows%\Help\Tours\mmTour\tmp_segment4.txt
%Windows%\Help\Tours\mmTour\tmp_segment5.txt
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\tmp_snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\tmp_contents.htm
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs\tmp_dd_dotnetfx35error.txt
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\tmp_DHtmlHeader.html
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\tmp_DHtmlHeader.html
%Windows%\tmp_ntbtlog.txt
%Windows%\tmp_OEWABLog.txt
%Windows%\pchealth\helpctr\System\blurbs\tmp_about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_History.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_Index.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_options.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_tools.htm
%Windows%\pchealth\helpctr\System\blurbs\tmp_windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\tmp_LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\tmp_dvdupgrd.htm
%Windows%\pchealth\helpctr\System\ErrMsg\tmp_ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_badurl.htm
%Windows%\pchealth\helpctr\System\errors\tmp_connection.htm
%Windows%\pchealth\helpctr\System\errors\tmp_indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\tmp_notfound.htm
%Windows%\pchealth\helpctr\System\errors\tmp_offline.htm
%Windows%\pchealth\helpctr\System\errors\tmp_redirect.htm
%Windows%\pchealth\helpctr\System\errors\tmp_unreachable.htm
%Windows%\pchealth\helpctr\System\tmp_Headlines.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\tmp_HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\tmp_dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\tmp_blank.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Context.htm
%Windows%\pchealth\helpctr\System\panels\tmp_firstpage.htm
%Windows%\pchealth\helpctr\System\panels\tmp_HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\tmp_MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_NavBar.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\tmp_RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\tmp_ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\tmp_Subsite.htm
%Windows%\pchealth\helpctr\System\panels\tmp_Topics.htm
%Windows%\pchealth\helpctr\System\rc\tmp_rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\tmp_setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\tmp_VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\tmp_TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\tmp_rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\tmp_sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\tmp_updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\tmp_pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\tmp_RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\tmp_rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\tmp_ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\tmp_UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\tmp_rcstatus.htm
%Windows%\tmp_SchedLgU.Txt
%System%\CatRoot2\tmp_dberr.txt
%System%\drivers\tmp_gmreadme.txt
%System%\tmp_eula.txt
%System%\tmp_h323log.txt
%System%\oobe\actsetup\tmp_actconn.htm
%System%\oobe\actsetup\tmp_actdone.htm
%System%\oobe\actsetup\tmp_activ.htm
%System%\oobe\actsetup\tmp_activerr.htm
%System%\oobe\actsetup\tmp_activsvc.htm
%System%\oobe\actsetup\tmp_actlan.htm
%System%\oobe\actsetup\tmp_adeskerr.htm
%System%\oobe\actsetup\tmp_adrdyreg.htm
%System%\oobe\actsetup\tmp_apolicy.htm
%System%\oobe\actsetup\tmp_aprvcyms.htm
%System%\oobe\actsetup\tmp_areg1.htm
%System%\oobe\actsetup\tmp_aregdial.htm
%System%\oobe\actsetup\tmp_aregdone.htm
%System%\oobe\actsetup\tmp_ausrinfo.htm
%System%\oobe\tmp_actshell.htm
%System%\oobe\tmp_dtsgnup.htm
%System%\oobe\error\tmp_cnncterr.htm
%System%\oobe\error\tmp_dialtone.htm
%System%\oobe\error\tmp_hndshake.htm
%System%\oobe\error\tmp_isp2busy.htm
%System%\oobe\error\tmp_noanswer.htm
%System%\oobe\error\tmp_pberr.htm
%System%\oobe\error\tmp_pulse.htm
%System%\oobe\error\tmp_toobusy.htm
%System%\oobe\html\dslmain\tmp_dslmain.htm
%System%\oobe\html\dslmain\tmp_dsl_a.htm
%System%\oobe\html\dslmain\tmp_dsl_b.htm
%System%\oobe\html\iconnect\tmp_icntlast.htm
%System%\oobe\html\iconnect\tmp_iconnect.htm
%System%\oobe\html\isptype\tmp_isptype.htm
%System%\oobe\html\mouse\tmp_mouse.htm
%System%\oobe\html\mouse\tmp_mouse_a.htm
%System%\oobe\html\mouse\tmp_mouse_b.htm
%System%\oobe\html\mouse\tmp_mouse_c.htm
%System%\oobe\html\mouse\tmp_mouse_d.htm
%System%\oobe\html\mouse\tmp_mouse_e.htm
%System%\oobe\html\mouse\tmp_mouse_f.htm
%System%\oobe\html\mouse\tmp_mouse_g.htm
%System%\oobe\html\mouse\tmp_mouse_h.htm
%System%\oobe\html\mouse\tmp_mouse_i.htm
%System%\oobe\html\mouse\tmp_mouse_j.htm
%System%\oobe\html\mouse\tmp_mouse_k.htm
%System%\oobe\html\sconnect\tmp_scntlast.htm
%System%\oobe\html\sconnect\tmp_sconnect.htm
%System%\oobe\icserror\tmp_icsdc.htm
%System%\oobe\isperror\tmp_ispcnerr.htm
%System%\oobe\isperror\tmp_ispdtone.htm
%System%\oobe\isperror\tmp_isphdshk.htm
%System%\oobe\isperror\tmp_ispins.htm
%System%\oobe\isperror\tmp_ispnoanw.htm
%System%\oobe\isperror\tmp_isppberr.htm
%System%\oobe\isperror\tmp_ispphbsy.htm
%System%\oobe\isperror\tmp_ispsbusy.htm
%System%\oobe\regerror\tmp_rcnterr.htm
%System%\oobe\regerror\tmp_rdtone.htm
%System%\oobe\regerror\tmp_rhndshk.htm
%System%\oobe\regerror\tmp_rnoansw.htm
%System%\oobe\regerror\tmp_rnomdm.htm
%System%\oobe\regerror\tmp_rpberr.htm
%System%\oobe\regerror\tmp_rpulse.htm
%System%\oobe\regerror\tmp_rtoobusy.htm
%System%\oobe\setup\tmp_acterror.htm
%System%\oobe\setup\tmp_activate.htm
%System%\oobe\setup\tmp_act_plcy.htm
%System%\oobe\setup\tmp_autoupdt.htm
%System%\oobe\setup\tmp_au_plcy.htm
%System%\oobe\setup\tmp_badeula.htm
%System%\oobe\setup\tmp_badpkey.htm
%System%\oobe\setup\tmp_compname.htm
%System%\oobe\setup\tmp_dialup.htm
%System%\oobe\setup\tmp_drdyisp.htm
%System%\oobe\setup\tmp_drdymig.htm
%System%\oobe\setup\tmp_drdyoem.htm
%System%\oobe\setup\tmp_drdyref.htm
%System%\oobe\setup\tmp_dtiwait.htm
%System%\oobe\setup\tmp_fini.htm
%System%\oobe\setup\tmp_hnwprmpt.htm
%System%\oobe\setup\tmp_iconn.htm
%System%\oobe\setup\tmp_ics.htm
%System%\oobe\setup\tmp_ident1.htm
%System%\oobe\setup\tmp_ident2.htm
%System%\oobe\setup\tmp_isp.htm
%System%\oobe\setup\tmp_ispwait.htm
%System%\oobe\setup\tmp_jndomain.htm
%System%\oobe\setup\tmp_jndom_a.htm
%System%\oobe\setup\tmp_keybd.htm
%System%\oobe\setup\tmp_keybdcmt.htm
%System%\oobe\setup\tmp_migdial.htm
%System%\oobe\setup\tmp_miglist.htm
%System%\oobe\setup\tmp_migpage.htm
%System%\oobe\setup\tmp_neweula.htm
%System%\oobe\setup\tmp_neweula2.htm
%System%\oobe\setup\tmp_oempriv.htm
%System%\oobe\setup\tmp_Oobedisc.htm
%System%\oobe\setup\tmp_prodkey.htm
%System%\oobe\setup\tmp_prvcyms.htm
%System%\oobe\setup\tmp_refdial.htm
%System%\oobe\setup\tmp_reg1.htm
%System%\oobe\setup\tmp_reg3.htm
%System%\oobe\setup\tmp_regdial.htm
%System%\oobe\setup\tmp_security.htm
%System%\oobe\setup\tmp_timezone.htm
%System%\oobe\setup\tmp_username.htm
%System%\oobe\setup\tmp_welcome.htm
%System%\oobe\tmp_updshell.htm
%Windows%\Web\printers\tmp_ipp_0001.asp
%Windows%\Web\printers\tmp_ipp_0002.asp
%Windows%\Web\printers\tmp_ipp_0003.asp
%Windows%\Web\printers\tmp_ipp_0004.asp
%Windows%\Web\printers\tmp_ipp_0005.asp
%Windows%\Web\printers\tmp_ipp_0006.asp
%Windows%\Web\printers\tmp_ipp_0007.asp
%Windows%\Web\printers\tmp_ipp_0010.asp
%Windows%\Web\printers\tmp_ipp_0013.asp
%Windows%\Web\printers\tmp_ipp_0014.asp
%Windows%\Web\printers\tmp_ipp_0015.asp
%Windows%\Web\printers\tmp_page1.asp
%Windows%\Web\tmp_tip.htm

ご利用はいかがでしたか？　アンケートにご協力ください

TROJ_MAILFIND.CE

概要

詳細

対応方法

リソース

サポート

会社概要

東京本社

TROJ_MAILFIND.CE

概要

詳細

対応方法

リソース

サポート

会社概要

東京本社

The Americas

Asia Pacific

Europe, Middle East & Africa