TSPY_EMOTET.SML3

2020年6月15日

別名:

Trojan-FNLT!6B3CAFA8DE55 (McAfee); Trojan-Ransom.Win32.Purgen.fs (Kaspersky); Mal/Ransom-FN (Sophos)

プラットフォーム:

Windows

危険度:

ダメージ度:

感染力:

感染確認数:

システムへの影響:

情報漏えい:

マルウェアタイプ:
スパイウェア/情報窃取型
破壊活動の有無:
なし
暗号化:
感染報告の有無 :
はい

概要

スパイウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

詳細

ファイルサイズ 454,656 bytes

タイプ EXE

メモリ常駐はい

発見日 2020年6月15日

侵入方法

スパイウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

スパイウェアは、以下のプロセスを追加します。

"{malware file path and name}"
"%Windows%\SysWOW64\cmd.exe" /C type "%User Temp%\915A41~1.EXE" > "%Application Data%\VLJBFD~1\8h17FGUP.exe"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\ggEEnDeb.exe" && "%User Temp%\ggEEnDeb.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "START" "60000"
"%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" gKEspDYJe3AY5KGi
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\hulJU4pI.cmd"
"%User Temp%\ggEEnDeb.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "START" "60000"
%System%\PING.EXE ping -n 3 localhost
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%Application Data%\MICROS~1\1olaxNII.exe" && "%Application Data%\MICROS~1\1olaxNII.exe" "%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" "%AppDataLocal%\Microsoft\byjejor4.exe" 1
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%AppDataLocal%\MICROS~1\byjejor4.exe" && "%AppDataLocal%\MICROS~1\byjejor4.exe" "%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" "%Application Data%\Microsoft\1olaxNII.exe" 2
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\zj0u7v3U.exe" && "%User Temp%\zj0u7v3U.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "LOCAL_04A30450FA939473" "60000"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\VoqC6xar.exe" && "%User Temp%\VoqC6xar.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "WIN_6.1_64|ADMIN_YES|INT_4" "60000"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\In0OGmO5.exe" && "%User Temp%\In0OGmO5.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "3859_NEAR_4GB" "60000"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\VHsssEwQ.exe" && "%User Temp%\VHsssEwQ.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "DELSHC" "60000"
"%Windows%\SysWOW64\WMIC.exe" process call create "cmd.exe /c vssadmin.exe delete shadows /all /quiet & bcdedit.exe /set {default} recoveryenabled no & bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures"
"%Windows%\SysWOW64\cmd.exe" /C vssadmin.exe delete shadows /all /quiet
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Users\{username}\MICROS~1\OFFICE\DATA\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\test\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Users\{username}\MICROS~1\RAC\PUBLIS~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Users\{username}\MICROS~1\RAC\STATED~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\excel2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%Desktop%\excel2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%User Profile%\DOCUME~1\excel2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Users\Public\DOCUME~1\excel2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "F:\data\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%Desktop%\word2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%User Profile%\DOCUME~1\word2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Users\Public\DOCUME~1\word2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\word2k\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "F:\data\photos\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\test\IMGHDR~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "F:\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\$Recycle.Bin\S-1-5-~2\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%User Profile%\DOCUME~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\POWERP~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\bz2.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\bz2.pyd"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\DLLs\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\pyexpat.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\pyexpat.pyd"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\select.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\select.pyd"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\_ctypes.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\_ctypes.pyd"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\_hashlib.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\_hashlib.pyd"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\_socket.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\_socket.pyd"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\DLLs\_ssl.pyd" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\DLLs\_ssl.pyd"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\include\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\VLJBFD~1\8h17FGUP.exe" > "%User Temp%\9ida9Bkm.exe" && "%User Temp%\9ida9Bkm.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "100_OK" "60000"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\bsddb\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\bsddb\test\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\Lib\bsddb\test\__init__.py" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\Lib\bsddb\test\__init__.py"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\compiler\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\ctypes\macholib\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\ctypes\test\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\ctypes\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\curses\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\DISTUT~1\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\DISTUT~1\command\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\DISTUT~1\tests\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\email\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\email\mime\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\Lib\email\mime\__init__.py" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\Lib\email\mime\__init__.py"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\email\test\data\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\email\test\!WhatHappenedWithMyFiles!.rtf"
"%Windows%\SysWOW64\cmd.exe" /C CACLS "%System Root%\Python27\Lib\email\test\__init__.py" /E /G %USERNAME%:F /C & ATTRIB -R -A -H "%System Root%\Python27\Lib\email\test\__init__.py"
"%Windows%\SysWOW64\cmd.exe" /C type "%Application Data%\!WHATH~1.RTF" > "%System Root%\Python27\Lib\ENCODI~1\!WhatHappenedWithMyFiles!.rtf"
"%Application Data%\MICROS~1\1olaxNII.exe" "%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" "%AppDataLocal%\Microsoft\byjejor4.exe" 1
"%AppDataLocal%\MICROS~1\byjejor4.exe" "%Application Data%\vljbFDQFKCjA\8h17FGUP.exe" "%Application Data%\Microsoft\1olaxNII.exe" 2
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\pcbclWWz.cmd"
"%User Temp%\zj0u7v3U.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "LOCAL_04A30450FA939473" "60000"
"%User Temp%\VoqC6xar.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "WIN_6.1_64|ADMIN_YES|INT_4" "60000"
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\JELhMVvR.cmd"
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\dPXpJcQY.cmd"
"%User Temp%\In0OGmO5.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "3859_NEAR_4GB" "60000"
"%User Temp%\VHsssEwQ.exe" "%Application Data%\vljbFDQFKCjA\" "gKEspDYJe3AY5KGi" "DELSHC" "60000"
%System%\cacls.exe CACLS "%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf"
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\rlRVevks.cmd"
"%Windows%\SysWOW64\cmd.exe" /C "%Application Data%\vljbFDQFKCjA\WVo4MQCQ.cmd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\bz2.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\bz2.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\pyexpat.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\pyexpat.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\select.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\select.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\_ctypes.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\_ctypes.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\_hashlib.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\_hashlib.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\_socket.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\_socket.pyd"
%System%\cacls.exe CACLS "%System Root%\Python27\DLLs\_ssl.pyd" /E /G {username}:F /C
%System%\attrib.exe ATTRIB -R -A -H "%System Root%\Python27\DLLs\_ssl.pyd"

(註：%Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local" です。. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.. %Desktop%フォルダは、現在ログオンしているユーザのデスクトップです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Desktop" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\Desktop" です。. %User Profile%フォルダは、現在ログオンしているユーザのプロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞" です。)

スパイウェアは、以下のフォルダを作成します。

%Application Data%\vljbFDQFKCjA

自動実行方法

スパイウェアは、Windows起動時に自動実行されるよう＜User Startup＞フォルダ内に以下のファイルを作成します。

%User Startup%\8h17FGUP.lnk

(註：%User Startup%フォルダは、現在ログオンしているユーザのスタートアップフォルダです。Windows 98およびMEの場合、通常 "C:\Windows\Profiles\＜ユーザ名＞\Start Menu\Programs\Startup" です。Windows NTの場合、通常 "C:\WINNT\Profiles\＜ユーザ名＞\Start Menu\Programs\Startup" です。Windows 2003(32-bit)、XP、2000(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Start Menu\Programs\Startup" です。Windows Vista、7、8、 8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup" です。)

他のシステム変更

スパイウェアは、以下のファイルを改変します。

%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\Python27\Lib\base64.py
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\include\timefuncs.h
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\excel2k\XLS2KE05.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h

スパイウェアは、以下のファイルを削除します。

%User Temp%\VoqC6xar.exe
%User Temp%\zj0u7v3U.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\In0OGmO5.exe
%User Temp%\ggEEnDeb.exe

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。)

作成活動

スパイウェアは、以下のファイルを作成します。

%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\compiler\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\email\mime\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\powerpoint2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%System Root%\Python27\DLLs\_ctypes.pyd
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\email\mime\__init__.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\Python27\DLLs\!WhatHappenedWithMyFiles!.rtf
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\encodings\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
{Removable Drive}\data\photos\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Users\All Users\Microsoft\RAC\StateData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\test\!WhatHappenedWithMyFiles!.rtf
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\ctypes\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\macholib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\base64.py
%System Root%\Users\Public\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Python27\Lib\curses\!WhatHappenedWithMyFiles!.rtf
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Users\All Users\Microsoft\RAC\StateData\RacDatabase.sdf
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\email\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%System Root%\word2k\!WhatHappenedWithMyFiles!.rtf
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%Application Data%\04A30450FA939473.pek
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\Lib\email\test\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\distutils\command\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%Application Data%\04A30450FA939473.sek
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%Application Data%\vljbFDQFKCjA\hulJU4pI.cmd
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%Application Data%\vljbFDQFKCjA\dPXpJcQY.cmd
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\Lib\email\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\DLLs\_hashlib.pyd
%User Profile%\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Users\Public\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\bsddb\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\DLLs\pyexpat.pyd
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\email\test\__init__.py
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\ctypes\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%All Users Profile%\Microsoft\Windows\Start Menu\Programs\Startup\8h17FGUP.lnk
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\Lib\bsddb\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%User Profile%\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\DLLs\_ssl.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%Application Data%\vljbFDQFKCjA\JELhMVvR.cmd
%System Root%\Python27\Lib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%Application Data%\vljbFDQFKCjA\rlRVevks.cmd
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%Application Data%\vljbFDQFKCjA\WVo4MQCQ.cmd
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%Application Data%\!WhatHappenedWithMyFiles!.rtf
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%Application Data%\vljbFDQFKCjA\pcbclWWz.cmd
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%System Root%\Python27\Lib\distutils\tests\!WhatHappenedWithMyFiles!.rtf
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%User Profile%\Documents\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
{Removable Drive}\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\Lib\distutils\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\DLLs\select.pyd
%System Root%\Python27\include\timefuncs.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%Application Data%\gKEspDYJe3AY5KGi.ast
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\Lib\encodings\cp1257.py
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\DLLs\bz2.pyd
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%Desktop%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%Desktop%\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
{Removable Drive}\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\DLLs\_socket.pyd
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%System Root%\excel2k\XLS2KE05.xls
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\OPA12.BAK
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\Lib\test\imghdrdata\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h
%User Temp%\In0OGmO5.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\zj0u7v3U.exe
%Application Data%\vljbFDQFKCjA\8h17FGUP.exe
%Application Data%\Microsoft\1olaxNII.exe
%AppDataLocal%\Microsoft\byjejor4.exe
%User Temp%\ggEEnDeb.exe
%User Temp%\VoqC6xar.exe

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.. %Desktop%フォルダは、現在ログオンしているユーザのデスクトップです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Desktop" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\Desktop" です。. %User Profile%フォルダは、現在ログオンしているユーザのプロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %All Users Profile%フォルダは、ユーザの共通プロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\All Users” です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\ProgramData” です。. %User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local" です。)

その他

スパイウェアは、以下の不正なWebサイトにアクセスします。

http://zerozeroze.{BLOCKED}p.swtest.ru

このウイルス情報は、自動解析システムにより作成されました。

対応方法

対応検索エンジン: 9.850

手順 1

Windows 7、Windows 8、Windows 8.1、および Windows 10 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

Windowsをセーフモードで再起動します。

[ 詳細 ]

セーフモードでの起動：

• Windows 2000 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows XP の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows Server 2003 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows Vista、Windows 7 および Windows Server 2008 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「詳細ブートオプション」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows 8、8.1 および Server 2012の場合：

画面の右上隅へマウスポインタを移動し、[チャーム]バーを表示します。
マウスで、[設定]－[PC設定の変更]を選択します。
左側のパネルで、[全般]を選択します。
右側のパネルで、[PCの起動をカスタマイズする]が表示されるまで下にスクロールし、[今すぐ再起動]をクリック。コンピュータが再起動するまで待ちます。
[オプションの選択]メニューで、[トラブルシューティング]－[詳細オプション]－[スタートアップ設定]－[再起動]をクリックします。
[スタートアップ設定]メニューで、[4]キーを押し、「4）セーフモードを有効にする」を選択します。

手順 3

「TSPY_EMOTET.SML3」で検出したファイル名を確認し、そのファイルを終了します。

[ 詳細 ]

すべての実行中プロセスが、Windows のタスクマネージャに表示されない場合があります。この場合、"Process Explorer" などのツールを使用しマルウェアのファイルを終了してください。"Process Explorer" については、こちらをご参照下さい。
検出ファイルが、Windows のタスクマネージャまたは "Process Explorer" に表示されるものの、削除できない場合があります。この場合、コンピュータをセーフモードで再起動してください。
セーフモードについては、こちらをご参照下さい。
検出ファイルがタスクマネージャ上で表示されない場合、次の手順にお進みください。

手順 4

以下のファイルを検索し削除します。

[ 詳細 ]

コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\compiler\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\email\mime\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\powerpoint2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%System Root%\Python27\DLLs\_ctypes.pyd
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\email\mime\__init__.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\Python27\DLLs\!WhatHappenedWithMyFiles!.rtf
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\encodings\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
{Removable Drive}\data\photos\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Users\All Users\Microsoft\RAC\StateData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\test\!WhatHappenedWithMyFiles!.rtf
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\ctypes\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\macholib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\base64.py
%System Root%\Users\Public\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Python27\Lib\curses\!WhatHappenedWithMyFiles!.rtf
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Users\All Users\Microsoft\RAC\StateData\RacDatabase.sdf
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\email\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%System Root%\word2k\!WhatHappenedWithMyFiles!.rtf
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%Application Data%\04A30450FA939473.pek
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\Lib\email\test\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\distutils\command\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%Application Data%\04A30450FA939473.sek
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%Application Data%\vljbFDQFKCjA\hulJU4pI.cmd
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%Application Data%\vljbFDQFKCjA\dPXpJcQY.cmd
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\Lib\email\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\DLLs\_hashlib.pyd
%User Profile%\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Users\Public\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\bsddb\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\DLLs\pyexpat.pyd
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\email\test\__init__.py
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\ctypes\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%All Users Profile%\Microsoft\Windows\Start Menu\Programs\Startup\8h17FGUP.lnk
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\Lib\bsddb\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%User Profile%\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\DLLs\_ssl.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%Application Data%\vljbFDQFKCjA\JELhMVvR.cmd
%System Root%\Python27\Lib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%Application Data%\vljbFDQFKCjA\rlRVevks.cmd
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%Application Data%\vljbFDQFKCjA\WVo4MQCQ.cmd
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%Application Data%\!WhatHappenedWithMyFiles!.rtf
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%Application Data%\vljbFDQFKCjA\pcbclWWz.cmd
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%System Root%\Python27\Lib\distutils\tests\!WhatHappenedWithMyFiles!.rtf
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%User Profile%\Documents\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
{Removable Drive}\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\Lib\distutils\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\DLLs\select.pyd
%System Root%\Python27\include\timefuncs.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%Application Data%\gKEspDYJe3AY5KGi.ast
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\Lib\encodings\cp1257.py
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\DLLs\bz2.pyd
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%Desktop%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%Desktop%\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
{Removable Drive}\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\DLLs\_socket.pyd
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%System Root%\excel2k\XLS2KE05.xls
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\OPA12.BAK
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\Lib\test\imghdrdata\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h
%User Temp%\In0OGmO5.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\zj0u7v3U.exe
%Application Data%\vljbFDQFKCjA\8h17FGUP.exe
%Application Data%\Microsoft\1olaxNII.exe
%AppDataLocal%\Microsoft\byjejor4.exe
%User Temp%\ggEEnDeb.exe
%User Temp%\VoqC6xar.exe

マルウェアのコンポーネントファイルの削除：

Windows 2000、XP および Server 2003 の場合：

[スタート]-[検索]-[ファイルとフォルダすべて]を選択します。
[ファイル名のすべてまたは一部]に以下のファイル名を入力してください。
%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\compiler\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\email\mime\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\powerpoint2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%System Root%\Python27\DLLs\_ctypes.pyd
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\email\mime\__init__.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\Python27\DLLs\!WhatHappenedWithMyFiles!.rtf
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\encodings\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
{Removable Drive}\data\photos\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Users\All Users\Microsoft\RAC\StateData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\test\!WhatHappenedWithMyFiles!.rtf
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\ctypes\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\macholib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\base64.py
%System Root%\Users\Public\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Python27\Lib\curses\!WhatHappenedWithMyFiles!.rtf
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Users\All Users\Microsoft\RAC\StateData\RacDatabase.sdf
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\email\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%System Root%\word2k\!WhatHappenedWithMyFiles!.rtf
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%Application Data%\04A30450FA939473.pek
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\Lib\email\test\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\distutils\command\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%Application Data%\04A30450FA939473.sek
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%Application Data%\vljbFDQFKCjA\hulJU4pI.cmd
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%Application Data%\vljbFDQFKCjA\dPXpJcQY.cmd
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\Lib\email\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\DLLs\_hashlib.pyd
%User Profile%\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Users\Public\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\bsddb\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\DLLs\pyexpat.pyd
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\email\test\__init__.py
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\ctypes\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%All Users Profile%\Microsoft\Windows\Start Menu\Programs\Startup\8h17FGUP.lnk
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\Lib\bsddb\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%User Profile%\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\DLLs\_ssl.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%Application Data%\vljbFDQFKCjA\JELhMVvR.cmd
%System Root%\Python27\Lib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%Application Data%\vljbFDQFKCjA\rlRVevks.cmd
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%Application Data%\vljbFDQFKCjA\WVo4MQCQ.cmd
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%Application Data%\!WhatHappenedWithMyFiles!.rtf
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%Application Data%\vljbFDQFKCjA\pcbclWWz.cmd
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%System Root%\Python27\Lib\distutils\tests\!WhatHappenedWithMyFiles!.rtf
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%User Profile%\Documents\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
{Removable Drive}\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\Lib\distutils\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\DLLs\select.pyd
%System Root%\Python27\include\timefuncs.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%Application Data%\gKEspDYJe3AY5KGi.ast
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\Lib\encodings\cp1257.py
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\DLLs\bz2.pyd
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%Desktop%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%Desktop%\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
{Removable Drive}\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\DLLs\_socket.pyd
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%System Root%\excel2k\XLS2KE05.xls
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\OPA12.BAK
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\Lib\test\imghdrdata\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h
%User Temp%\In0OGmO5.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\zj0u7v3U.exe
%Application Data%\vljbFDQFKCjA\8h17FGUP.exe
%Application Data%\Microsoft\1olaxNII.exe
%AppDataLocal%\Microsoft\byjejor4.exe
%User Temp%\ggEEnDeb.exe
%User Temp%\VoqC6xar.exe
[探す場所]の一覧から[マイコンピュータ]を選択し、[検索]を押します。
検索が終了したら、ファイルを選択し、SHIFT+DELETE を押します。これにより、ファイルが完全に削除されます。
註：ファイル名の入力欄のタイトルは、Windowsのバージョンによって異なります。（例：ファイルやフォルダ名の検索の場合やファイル名のすべてまたは一部での検索）

Windows Vista、7、Server 2008、8、8.1 および Server 2012 の場合：

Windowsエクスプローラ画面を開きます。
- Windows Vista、7 および Server 2008 の場合：
  - [スタート]-[コンピューター]を選択します。
- Windows 8、8.1 および Server 2012 の場合：
  - 画面の左隅を右クリックし、[エクスプローラー]を選択します。
[コンピューターの検索]に、以下を入力します。
%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\compiler\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\email\mime\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\RacWmiDatabase.sdf
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\powerpoint2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%System Root%\Python27\DLLs\_ctypes.pyd
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\email\mime\__init__.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\Python27\DLLs\!WhatHappenedWithMyFiles!.rtf
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\encodings\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
{Removable Drive}\data\photos\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Users\All Users\Microsoft\RAC\StateData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%System Root%\Users\All Users\Microsoft\RAC\PublishedData\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\test\!WhatHappenedWithMyFiles!.rtf
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\ctypes\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\macholib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\base64.py
%System Root%\Users\Public\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Python27\Lib\curses\!WhatHappenedWithMyFiles!.rtf
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Users\All Users\Microsoft\RAC\StateData\RacDatabase.sdf
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\email\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%System Root%\word2k\!WhatHappenedWithMyFiles!.rtf
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%Application Data%\04A30450FA939473.pek
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\Lib\email\test\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\distutils\command\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%Application Data%\04A30450FA939473.sek
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%Application Data%\vljbFDQFKCjA\hulJU4pI.cmd
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%Application Data%\vljbFDQFKCjA\dPXpJcQY.cmd
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\Lib\email\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\DLLs\_hashlib.pyd
%User Profile%\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Users\Public\Documents\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\bsddb\test\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\DLLs\pyexpat.pyd
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\email\test\__init__.py
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\ctypes\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%All Users Profile%\Microsoft\Windows\Start Menu\Programs\Startup\8h17FGUP.lnk
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\Lib\bsddb\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%User Profile%\Documents\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\DLLs\_ssl.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%Application Data%\vljbFDQFKCjA\JELhMVvR.cmd
%System Root%\Python27\Lib\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%Application Data%\vljbFDQFKCjA\rlRVevks.cmd
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%Application Data%\vljbFDQFKCjA\WVo4MQCQ.cmd
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%Application Data%\!WhatHappenedWithMyFiles!.rtf
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%Application Data%\vljbFDQFKCjA\pcbclWWz.cmd
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%System Root%\Python27\Lib\distutils\tests\!WhatHappenedWithMyFiles!.rtf
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%User Profile%\Documents\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
{Removable Drive}\data\!WhatHappenedWithMyFiles!.rtf
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\Lib\distutils\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\DLLs\select.pyd
%System Root%\Python27\include\timefuncs.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%Application Data%\gKEspDYJe3AY5KGi.ast
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\Lib\encodings\cp1257.py
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\DLLs\bz2.pyd
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%Desktop%\excel2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%Desktop%\word2k\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
{Removable Drive}\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\DLLs\_socket.pyd
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%System Root%\excel2k\XLS2KE05.xls
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Users\All Users\Microsoft\OFFICE\DATA\OPA12.BAK
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\Lib\test\imghdrdata\!WhatHappenedWithMyFiles!.rtf
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h
%User Temp%\In0OGmO5.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\zj0u7v3U.exe
%Application Data%\vljbFDQFKCjA\8h17FGUP.exe
%Application Data%\Microsoft\1olaxNII.exe
%AppDataLocal%\Microsoft\byjejor4.exe
%User Temp%\ggEEnDeb.exe
%User Temp%\VoqC6xar.exe
ファイルが表示されたら、そのファイルを選択し、SHIFT+DELETE を押します。これにより、ファイルが完全に削除されます。
註：Windows 7 において上記の手順が正しく行われない場合、マイクロソフトのWebサイトをご確認ください。

手順 5

以下のフォルダを検索し削除します。

[ 詳細 ]

註：このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%Application Data%\vljbFDQFKCjA

手順 6

コンピュータを通常モードで再起動し、最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、「TSPY_EMOTET.SML3」と検出したファイルの検索を実行してください。検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 7

以下のファイルをバックアップを用いて修復します。マイクロソフト製品に関連したファイルのみに修復されます。このマルウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

%System Root%\Python27\Lib\email\test\data\msg_04.txt
%System Root%\Python27\Lib\test\imghdrdata\python.jpg
%System Root%\Python27\include\patchlevel.h
%System Root%\Python27\Lib\distutils\tests\__init__.py
%System Root%\Python27\Lib\asynchat.py
%System Root%\Python27\Lib\distutils\version.py
%System Root%\Users\Public\Documents\word2k\DOC2KE04.doc
%Desktop%\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\ctypes\test\test_unicode.py
%System Root%\Python27\Lib\distutils\tests\test_file_util.py
%System Root%\Python27\Lib\distutils\tests\test_register.py
%System Root%\Python27\Lib\email\charset.py
%System Root%\Python27\Lib\binhex.py
%System Root%\Python27\Lib\ctypes\test\test_checkretval.py
%Desktop%\excel2k\XLS2KE04.xls
%System Root%\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\argparse.py
%System Root%\Python27\Lib\email\test\data\msg_25.txt
%System Root%\Python27\Lib\encodings\cp1255.py
%System Root%\Python27\Lib\bsddb\test\test_dbtables.py
%System Root%\Python27\Lib\cookielib.pyc
%System Root%\Python27\Lib\email\test\data\msg_15.txt
%System Root%\Python27\Lib\ctypes\test\test_parameters.py
%System Root%\Python27\Lib\ctypes\test\test_pointers.py
%System Root%\Python27\Lib\test\zipdir.zip
%System Root%\Python27\Lib\distutils\tests\test_build.py
%System Root%\Python27\Lib\bsddb\test\test_db.py
%System Root%\Python27\Lib\ctypes\test\test_values.py
%System Root%\Python27\Lib\email\iterators.pyc
%System Root%\Python27\Lib\distutils\tests\test_util.py
%System Root%\Python27\Lib\encodings\charmap.py
%System Root%\Python27\Lib\distutils\tests\test_install_headers.py
%User Profile%\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\codeop.py
%System Root%\Python27\Lib\compiler\consts.py
%System Root%\Python27\include\token.h
%System Root%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\command\install_headers.py
%System Root%\Python27\Lib\Cookie.py
%System Root%\Python27\Lib\distutils\command\bdist_wininst.py
%System Root%\Python27\DLLs\_ctypes_test.pyd
%System Root%\Python27\Lib\compiler\symbols.py
%Desktop%\excel2k\XLS2KExx.xls
%System Root%\Python27\DLLs\_tkinter.pyd
%System Root%\Python27\Lib\cgitb.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_dumb.py
%System Root%\powerpoint2k\PPT2KE00.pot
%System Root%\Python27\Lib\ctypes\test\test_struct_fields.py
%System Root%\Python27\Lib\email\mime\message.py
%System Root%\Python27\Lib\copy.py
%System Root%\Python27\Lib\distutils\cmd.pyc
%System Root%\powerpoint2k\PPT2KE05.ppt
%System Root%\Python27\Lib\compileall.py
%System Root%\excel2k\XLS2KE03.xls
%System Root%\Users\Public\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\email\_parseaddr.pyc
%System Root%\Python27\Lib\distutils\command\check.py
%System Root%\Python27\Lib\email\feedparser.pyc
%System Root%\Python27\Lib\distutils\dep_util.pyc
%System Root%\Python27\Lib\ctypes\test\test_unaligned_structures.py
%Desktop%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\colorsys.py
%System Root%\Python27\Lib\email\utils.py
%System Root%\Python27\Lib\ctypes\macholib\dylib.py
%System Root%\Python27\Lib\atexit.py
%System Root%\Python27\Lib\ctypes\test\test_repr.py
%System Root%\Python27\Lib\anydbm.py
%System Root%\Users\Public\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\encodings\cp1252.pyc
%System Root%\Python27\Lib\ctypes\wintypes.py
%System Root%\Python27\Lib\ctypes\test\test_returnfuncptrs.py
%System Root%\Python27\include\classobject.h
%User Profile%\Documents\excel2k\XLS2KExx.xls
%System Root%\Python27\Lib\encodings\aliases.pyc
%System Root%\Python27\Lib\dis.py
%System Root%\Python27\DLLs\_msi.pyd
%System Root%\Python27\Lib\distutils\config.pyc
%System Root%\Python27\Lib\compiler\ast.py
%System Root%\Python27\Lib\csv.pyc
%System Root%\Python27\include\bufferobject.h
%System Root%\Python27\Lib\ctypes\test\test_buffers.py
%Desktop%\AAljoOV.jpg
%System Root%\Python27\include\enumobject.h
%System Root%\Python27\include\rangeobject.h
%System Root%\Python27\include\fileobject.h
%User Profile%\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\email\test\data\msg_11.txt
%System Root%\Python27\include\bytes_methods.h
%System Root%\Python27\Lib\aifc.py
%System Root%\Python27\Lib\distutils\__init__.pyc
%System Root%\Python27\Lib\argparse.pyc
%System Root%\Python27\Lib\email\mime\__init__.pyc
%System Root%\Python27\Lib\distutils\tests\test_core.py
%System Root%\Python27\Lib\distutils\tests\test_build_py.py
%System Root%\Python27\Lib\bsddb\test\test_get_none.py
%System Root%\Python27\Lib\email\test\data\msg_05.txt
%System Root%\Python27\Lib\ConfigParser.py
%System Root%\Python27\Lib\Bastion.py
%System Root%\Python27\Lib\ctypes\test\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_16.txt
%System Root%\Python27\Lib\base64.py
%System Root%\Python27\include\pyctype.h
%System Root%\Python27\Lib\distutils\debug.pyc
%System Root%\Python27\include\setobject.h
%System Root%\Python27\Lib\distutils\archive_util.py
%System Root%\Python27\include\code.h
%Desktop%\Transmag.doc
%System Root%\Python27\DLLs\_elementtree.pyd
%System Root%\Python27\include\pyfpe.h
{Removable Drive}\data\photos\long_exposure.jpg
%System Root%\Python27\Lib\bisect.py
%System Root%\Python27\include\dictobject.h
%System Root%\Python27\Lib\distutils\sysconfig.py
%System Root%\Python27\include\funcobject.h
%System Root%\Python27\Lib\ctypes\macholib\dyld.py
%System Root%\Python27\Lib\email\test\data\msg_26.txt
%System Root%\Python27\include\codecs.h
%System Root%\Python27\Lib\distutils\tests\test_msvc9compiler.py
%System Root%\Python27\Lib\distutils\command\build_py.py
%System Root%\Python27\Lib\compiler\pycodegen.py
%System Root%\Users\Public\Documents\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\compiler\misc.py
%User Profile%\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\distutils\dist.pyc
%System Root%\Python27\Lib\BaseHTTPServer.pyc
%System Root%\Python27\Lib\distutils\tests\test_config.py
%System Root%\Python27\Lib\base64.pyc
%System Root%\word2k\DOC2KExx.doc
%System Root%\Python27\Lib\ctypes\util.pyc
%System Root%\Python27\Lib\distutils\tests\test_install_data.py
%System Root%\excel2k\XLS2KE02.xls
%System Root%\Python27\Lib\email\test\data\msg_31.txt
%System Root%\Python27\include\warnings.h
%System Root%\Python27\Lib\dummy_thread.py
%System Root%\Python27\include\eval.h
%System Root%\Python27\Lib\distutils\cygwinccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_cast.py
%System Root%\Python27\Lib\ctypes\test\test_macholib.py
%System Root%\Python27\Lib\cmd.py
%System Root%\Python27\Lib\email\test\data\msg_24.txt
%Desktop%\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build_ext.py
%Desktop%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\macholib\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_dep_util.py
%Desktop%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\util.py
%System Root%\Python27\Lib\email\base64mime.pyc
%System Root%\Python27\DLLs\_bsddb.pyd
%System Root%\Python27\Lib\compileall.pyc
%System Root%\Python27\Lib\email\utils.pyc
%System Root%\Python27\Lib\email\feedparser.py
%System Root%\Python27\Lib\encodings\aliases.py
%System Root%\powerpoint2k\PPT2KE02.ppt
%System Root%\Python27\Lib\encodings\cp1256.py
%System Root%\Python27\Lib\copy_reg.pyc
%System Root%\Python27\Lib\distutils\msvccompiler.py
%System Root%\Python27\Lib\distutils\tests\test_bdist_msi.py
%System Root%\Python27\Lib\email\test\data\msg_30.txt
{Removable Drive}\wlines.zip
%System Root%\Python27\Lib\ctypes\test\test_find.py
%System Root%\excel2k\XLS2KE00.xlt
%System Root%\Python27\Lib\distutils\dir_util.pyc
%System Root%\Python27\include\py_curses.h
%System Root%\Python27\Lib\email\test\test_email_torture.py
%System Root%\Python27\Lib\encodings\cp1026.py
%System Root%\Python27\include\pyerrors.h
%System Root%\Python27\Lib\ctypes\test\test_sizes.py
%System Root%\Python27\Lib\calendar.pyc
%System Root%\Python27\include\pgen.h
%System Root%\Python27\Lib\distutils\tests\support.py
%System Root%\Python27\include\longintrepr.h
%System Root%\Python27\include\complexobject.h
%System Root%\Python27\include\objimpl.h
%System Root%\Python27\Lib\distutils\tests\test_install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_sysconfig.py
%System Root%\Python27\Lib\encodings\cp037.py
%System Root%\Python27\Lib\email\test\data\msg_21.txt
%System Root%\Python27\Lib\email\mime\nonmultipart.py
%System Root%\Python27\Lib\email\test\data\msg_10.txt
%System Root%\Python27\include\frameobject.h
%System Root%\Python27\DLLs\_sqlite3.pyd
{Removable Drive}\data\dolist.txt
%System Root%\Python27\Lib\cgi.py
%System Root%\Python27\Lib\distutils\command\build.pyc
%System Root%\Python27\Lib\email\mime\base.py
%System Root%\Python27\Lib\email\test\data\msg_33.txt
%System Root%\Python27\Lib\curses\textpad.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\commands.py
%System Root%\Python27\Lib\ctypes\test\test_errno.py
%System Root%\Python27\include\modsupport.h
%System Root%\Python27\Lib\antigravity.py
%System Root%\Python27\Lib\bsddb\__init__.py
%System Root%\Python27\Lib\calendar.py
%System Root%\Python27\Lib\distutils\cmd.py
%System Root%\Python27\Lib\dbhash.py
%System Root%\Python27\Lib\email\test\data\msg_46.txt
%System Root%\Users\Public\Documents\excel2k\XLS2KE02.xls
%System Root%\Python27\include\sliceobject.h
%System Root%\Python27\include\cellobject.h
%System Root%\Python27\Lib\distutils\tests\test_build_clib.py
%System Root%\Python27\include\pystate.h
%System Root%\Python27\Lib\distutils\tests\test_check.py
%System Root%\powerpoint2k\PPT2KE01.ppt
%System Root%\Python27\Lib\email\errors.pyc
%System Root%\Python27\Lib\curses\panel.py
%System Root%\Python27\Lib\ctypes\test\test_callbacks.py
%System Root%\Python27\Lib\BaseHTTPServer.py
%System Root%\Python27\Lib\encodings\base64_codec.py
%System Root%\Python27\include\genobject.h
%System Root%\Python27\Lib\email\test\test_email_codecs_renamed.py
%System Root%\Python27\include\intrcheck.h
%System Root%\Python27\DLLs\_multiprocessing.pyd
%System Root%\powerpoint2k\PPT2KE04.ppt
%System Root%\Python27\Lib\cookielib.py
%System Root%\Python27\Lib\distutils\versionpredicate.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\dbtables.py
%System Root%\Python27\Lib\encodings\cp1254.py
%System Root%\Python27\Lib\bsddb\test\test_sequence.py
%System Root%\Python27\DLLs\_testcapi.pyd
%System Root%\Python27\include\cStringIO.h
%System Root%\Python27\Lib\distutils\command\install_lib.py
%System Root%\Python27\Lib\distutils\tests\test_text_file.py
%System Root%\Python27\Lib\bsddb\test\test_thread.py
%User Profile%\Documents\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\ctypes\test\test_arrays.py
%System Root%\Python27\Lib\bsddb\test\test_join.py
%System Root%\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\dbutils.py
%System Root%\Python27\Lib\distutils\errors.pyc
%System Root%\Python27\Lib\ctypes\test\test_prototypes.py
%System Root%\Python27\Lib\ctypes\test\test_objects.py
%System Root%\Python27\Lib\compiler\syntax.py
%System Root%\Python27\Lib\distutils\tests\test_cmd.py
%System Root%\Python27\Lib\distutils\extension.pyc
%System Root%\Python27\Lib\distutils\tests\test_bdist.py
%System Root%\Python27\Lib\bsddb\test\test_recno.py
%System Root%\Python27\Lib\distutils\tests\test_config_cmd.py
%System Root%\Python27\Lib\email\test\data\msg_17.txt
%System Root%\Python27\include\symtable.h
%Desktop%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_35.txt
%System Root%\Python27\include\abstract.h
%System Root%\Python27\include\compile.h
%System Root%\Python27\Lib\ctypes\test\test_slicing.py
%System Root%\Python27\Lib\distutils\tests\test_ccompiler.py
%System Root%\Python27\Lib\email\test\data\msg_29.txt
%System Root%\Python27\Lib\email\test\data\msg_45.txt
%System Root%\Python27\Lib\email\test\data\msg_22.txt
%System Root%\Python27\include\pystrcmp.h
%System Root%\Python27\Lib\distutils\tests\test_spawn.py
%System Root%\Python27\Lib\Cookie.pyc
%System Root%\Python27\Lib\distutils\command\build_scripts.py
%System Root%\Python27\Lib\email\test\data\msg_20.txt
%System Root%\powerpoint2k\PPT2KE03.ppt
%System Root%\Python27\include\Python-ast.h
%System Root%\Python27\Lib\encodings\ascii.pyc
%System Root%\Python27\include\grammar.h
%System Root%\Python27\include\structmember.h
%System Root%\Python27\Lib\decimal.pyc
%System Root%\Python27\Lib\ctypes\test\test_byteswap.py
%System Root%\Python27\Lib\compiler\transformer.py
%System Root%\Python27\Lib\distutils\core.py
%System Root%\Python27\Lib\email\mime\text.py
%System Root%\Python27\Lib\ctypes\test\test_simplesubclasses.py
%System Root%\Python27\Lib\email\test\data\audiotest.au
%System Root%\Python27\Lib\distutils\log.pyc
%System Root%\Python27\Lib\distutils\errors.py
%System Root%\Python27\Lib\distutils\tests\test_archive_util.py
%System Root%\Python27\Lib\bsddb\test\test_distributed_transactions.py
%System Root%\word2k\DOC2KE04.doc
%System Root%\Python27\Lib\curses\has_key.py
%System Root%\Python27\Lib\email\iterators.py
%System Root%\Python27\include\pymem.h
%System Root%\Python27\Lib\distutils\dep_util.py
%System Root%\Python27\Lib\distutils\tests\test_dir_util.py
%System Root%\Python27\Lib\distutils\tests\test_install.py
%System Root%\Python27\Lib\encodings\cp1140.py
%System Root%\Python27\Lib\distutils\debug.py
%System Root%\Python27\include\listobject.h
%System Root%\Python27\Lib\codecs.py
%System Root%\Python27\Lib\email\__init__.py
%System Root%\Python27\include\traceback.h
%System Root%\Python27\Lib\bdb.py
%System Root%\Python27\Lib\distutils\fancy_getopt.pyc
%System Root%\Python27\Lib\asyncore.py
%System Root%\Python27\Lib\distutils\sysconfig.pyc
%System Root%\Python27\Lib\csv.py
%System Root%\Python27\Lib\email\test\data\msg_03.txt
%System Root%\Python27\Lib\cProfile.py
%System Root%\Python27\Lib\compiler\future.py
%System Root%\Python27\Lib\distutils\core.pyc
%System Root%\Python27\Lib\email\generator.py
%System Root%\Python27\Lib\email\test\data\msg_44.txt
%System Root%\Python27\include\graminit.h
%System Root%\Python27\Lib\ctypes\test\test_loading.py
%System Root%\Python27\Lib\email\test\data\msg_18.txt
%System Root%\Python27\include\structseq.h
%System Root%\Python27\Lib\ctypes\test\test_init.py
%System Root%\Python27\Lib\ctypes\test\test_incomplete.py
%System Root%\Python27\include\opcode.h
%System Root%\Python27\Lib\encodings\cp1251.py
%System Root%\Python27\Lib\ctypes\test\test_bitfields.py
%System Root%\Python27\include\marshal.h
%System Root%\Python27\Lib\ctypes\test\test_wintypes.py
%System Root%\Python27\Lib\email\quoprimime.py
%System Root%\Python27\include\asdl.h
%System Root%\Python27\include\pyarena.h
%System Root%\Python27\Lib\email\test\data\msg_27.txt
%System Root%\Python27\Lib\ctypes\__init__.pyc
%System Root%\Python27\Lib\ctypes\macholib\framework.py
%System Root%\Python27\include\weakrefobject.h
%Desktop%\word2k\DOC2KE01.doc
%System Root%\Python27\Lib\distutils\tests\test_dist.py
%System Root%\Python27\Lib\distutils\command\sdist.py
%System Root%\Python27\Lib\ast.py
%System Root%\Python27\Lib\email\test\test_email_renamed.py
%User Profile%\Documents\excel2k\XLS2KE04.xls
%System Root%\Python27\Lib\bsddb\test\test_associate.py
%System Root%\Python27\Lib\encodings\big5hkscs.py
%System Root%\Python27\Lib\email\test\data\msg_12a.txt
%System Root%\Python27\DLLs\unicodedata.pyd
%System Root%\Python27\Lib\abc.pyc
%System Root%\Python27\Lib\ctypes\test\test_strings.py
%System Root%\Python27\Lib\ctypes\test\test_frombuffer.py
%System Root%\Python27\Lib\distutils\command\__init__.py
%System Root%\Python27\Lib\email\test\data\msg_07.txt
%System Root%\Python27\include\tupleobject.h
%System Root%\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\bsddb\db.py
%System Root%\Python27\Lib\ctypes\test\test_varsize_struct.py
%System Root%\Python27\include\boolobject.h
%System Root%\Python27\Lib\ctypes\test\test_numbers.py
%System Root%\Python27\Lib\doctest.py
%System Root%\Python27\Lib\distutils\__init__.py
%System Root%\Python27\include\intobject.h
%System Root%\Python27\Lib\encodings\cp1250.py
%System Root%\Python27\Lib\distutils\command\register.py
%System Root%\Python27\Lib\email\test\data\msg_42.txt
%System Root%\Python27\Lib\distutils\tests\setuptools_build_ext.py
%System Root%\Python27\Lib\ctypes\test\test_as_parameter.py
%System Root%\Python27\Lib\distutils\filelist.py
%System Root%\Python27\Lib\email\mime\audio.py
%System Root%\Python27\Lib\bsddb\test\test_basics.py
%System Root%\Python27\Lib\email\test\data\msg_06.txt
%System Root%\Python27\Lib\bsddb\test\test_lock.py
%System Root%\Python27\include\pygetopt.h
%System Root%\Python27\Lib\ctypes\util.py
%System Root%\Python27\Lib\email\test\data\msg_23.txt
%System Root%\Python27\include\pydebug.h
%System Root%\Python27\Lib\email\test\data\msg_37.txt
%System Root%\Python27\Lib\bsddb\test\test_all.py
%System Root%\Python27\Lib\encodings\cp1252.py
%System Root%\Users\Public\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\distutils\command\build.py
%System Root%\Python27\DLLs\winsound.pyd
%System Root%\Python27\Lib\ctypes\_endian.pyc
%System Root%\Python27\Lib\bsddb\test\test_compat.py
%System Root%\Python27\Lib\distutils\util.pyc
%System Root%\Python27\Lib\email\test\data\msg_02.txt
%System Root%\$Recycle.Bin\S-1-5-21-2407829820-1079796033-203259571-500\$IC8HJH8.zip
{Removable Drive}\data\photos\stunning.jpg
%System Root%\Python27\Lib\code.py
%System Root%\Python27\include\bytesobject.h
%System Root%\Python27\Lib\distutils\tests\test_versionpredicate.py
%System Root%\Python27\Lib\email\errors.py
%Desktop%\word2k\DOC2KExx.doc
%User Profile%\Documents\word2k\DOC2KE03.doc
%System Root%\Python27\Lib\compiler\__init__.py
%System Root%\Python27\Lib\compiler\visitor.py
%System Root%\Python27\Lib\distutils\spawn.pyc
%System Root%\Python27\include\ucnhash.h
%System Root%\Python27\Lib\email\test\data\msg_14.txt
%System Root%\Python27\Lib\distutils\tests\test_bdist_rpm.py
%System Root%\Python27\Lib\cgi.pyc
%System Root%\Python27\Lib\curses\ascii.py
%System Root%\Python27\Lib\ctypes\test\test_keeprefs.py
%System Root%\Python27\Lib\email\test\data\msg_40.txt
%System Root%\Python27\Lib\distutils\tests\test_clean.py
%System Root%\Python27\Lib\distutils\command\install.pyc
%System Root%\Python27\Lib\distutils\command\install_data.py
%User Profile%\Documents\word2k\DOC2KE01.doc
%System Root%\Python27\include\longobject.h
%System Root%\Python27\Lib\distutils\version.pyc
%System Root%\Python27\Lib\distutils\spawn.py
%System Root%\Python27\Lib\email\test\data\msg_34.txt
%System Root%\Python27\Lib\distutils\tests\test_version.py
%System Root%\Python27\Lib\email\base64mime.py
%System Root%\Python27\Lib\email\charset.pyc
%System Root%\Python27\Lib\ctypes\test\test_anon.py
%System Root%\Python27\Lib\email\test\data\msg_13.txt
%System Root%\Python27\include\bytearrayobject.h
%System Root%\Users\Public\Documents\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\email\test\data\msg_41.txt
%System Root%\Python27\Lib\difflib.py
%System Root%\Python27\Lib\chunk.py
%System Root%\powerpoint2k\PPT2KExx.PPT
%User Profile%\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\dis.pyc
%System Root%\Python27\Lib\encodings\cp1253.py
%System Root%\Python27\Lib\compiler\pyassem.py
%System Root%\Python27\Lib\ctypes\test\test_libc.py
%System Root%\Python27\Lib\distutils\command\bdist_rpm.py
%System Root%\word2k\DOC2KE03.doc
%System Root%\Python27\include\object.h
%System Root%\Python27\Lib\distutils\tests\setuptools_extension.py
%System Root%\Python27\Lib\contextlib.pyc
{Removable Drive}\data\tmp.doc
%System Root%\Python27\Lib\dummy_threading.py
%System Root%\Python27\Lib\ctypes\test\test_funcptr.py
%Desktop%\excel2k\XLS2KE03.xls
%System Root%\Python27\Lib\ctypes\test\test_memfunctions.py
%System Root%\Python27\Lib\bsddb\test\test_compare.py
%System Root%\Python27\Lib\distutils\command\clean.py
%System Root%\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\email\test\data\msg_09.txt
%System Root%\Python27\Lib\distutils\archive_util.pyc
%System Root%\Python27\Lib\email\parser.py
%System Root%\Python27\Lib\distutils\command\bdist.py
%System Root%\Email and Password List.txt
%System Root%\Python27\Lib\email\_parseaddr.py
%System Root%\Python27\include\descrobject.h
%System Root%\Python27\Lib\ctypes\test\test_cfuncs.py
%System Root%\Python27\include\bitset.h
%System Root%\Python27\Lib\collections.pyc
%System Root%\Python27\Lib\distutils\command\bdist_dumb.py
%System Root%\Python27\Lib\distutils\dist.py
%System Root%\Python27\Lib\curses\__init__.py
%System Root%\Python27\Lib\distutils\tests\test_filelist.py
%System Root%\Python27\Lib\bsddb\dbobj.py
%System Root%\Users\Public\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\include\errcode.h
%System Root%\Python27\Lib\bsddb\test\test_misc.py
%System Root%\Python27\Lib\email\mime\application.py
%System Root%\Python27\Lib\distutils\bcppcompiler.py
%System Root%\Python27\Lib\atexit.pyc
%System Root%\Python27\include\import.h
%System Root%\Python27\Lib\distutils\tests\test_sdist.py
%System Root%\Python27\Lib\distutils\unixccompiler.py
%System Root%\Python27\Lib\bsddb\test\test_replication.py
%System Root%\Python27\include\floatobject.h
%System Root%\Python27\include\ceval.h
%User Profile%\Documents\excel2k\XLS2KE05.xls
%System Root%\Python27\Lib\bsddb\test\test_fileid.py
%System Root%\Python27\include\timefuncs.h
%System Root%\Python27\Lib\bsddb\test\test_pickle.py
%System Root%\Users\Public\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\bsddb\test\test_early_close.py
%System Root%\Python27\Lib\email\test\data\msg_43.txt
%System Root%\Python27\Lib\encodings\ascii.py
%System Root%\Python27\Lib\distutils\command\__init__.pyc
%System Root%\Python27\Lib\DocXMLRPCServer.py
%System Root%\Python27\Lib\copy_reg.py
%System Root%\Python27\Lib\email\test\data\msg_08.txt
%System Root%\Python27\Lib\distutils\extension.py
%User Profile%\Documents\word2k\DOC2KE02.doc
%System Root%\Python27\Lib\email\test\data\msg_36.txt
%System Root%\Python27\include\pycapsule.h
%System Root%\Python27\Lib\ctypes\wintypes.pyc
%System Root%\Python27\Lib\distutils\msvc9compiler.py
%System Root%\Python27\Lib\email\encoders.pyc
%System Root%\Python27\Lib\distutils\dir_util.py
%System Root%\Python27\Lib\decimal.py
%System Root%\Python27\include\pystrtod.h
%User Profile%\Documents\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\ctypes\test\test_pickling.py
%System Root%\Python27\include\memoryobject.h
%System Root%\Python27\include\pymath.h
%System Root%\Python27\Lib\distutils\tests\test_build_scripts.py
%System Root%\Python27\Lib\ctypes\test\test_internals.py
%System Root%\Python27\Lib\distutils\tests\test_upload.py
%System Root%\Python27\Lib\ctypes\test\runtests.py
%System Root%\Python27\Lib\bsddb\test\test_dbenv.py
%System Root%\Python27\include\Python.h
%System Root%\Python27\include\methodobject.h
%System Root%\Python27\Lib\bsddb\dbshelve.py
%System Root%\Python27\Lib\audiodev.py
%System Root%\Python27\Lib\ctypes\test\test_refcounts.py
%System Root%\Python27\include\node.h
%System Root%\Python27\Lib\email\test\data\msg_39.txt
%System Root%\Python27\include\iterobject.h
%System Root%\Python27\Lib\email\test\data\msg_32.txt
%System Root%\Python27\include\sysmodule.h
%System Root%\Python27\Lib\dircache.py
%System Root%\Python27\Lib\distutils\command\install_egg_info.py
%System Root%\Python27\include\datetime.h
%System Root%\Python27\Lib\encodings\bz2_codec.py
%System Root%\Python27\include\pymacconfig.h
%System Root%\Python27\Lib\bisect.pyc
%System Root%\Python27\Lib\distutils\text_file.py
%System Root%\Python27\Lib\email\test\data\msg_12.txt
%System Root%\Python27\Lib\email\test\test_email_codecs.py
%System Root%\Python27\Lib\copy.pyc
%System Root%\Python27\include\dtoa.h
%System Root%\Python27\Lib\distutils\tests\test_install_scripts.py
%System Root%\Python27\Lib\distutils\config.py
%System Root%\Python27\Lib\distutils\file_util.pyc
%System Root%\Python27\Lib\bsddb\test\test_dbshelve.py
%System Root%\Python27\Lib\ctypes\test\test_structures.py
%System Root%\Python27\include\ast.h
%System Root%\Python27\Lib\CGIHTTPServer.py
%System Root%\Python27\Lib\ctypes\test\test_functions.py
%System Root%\Python27\Lib\distutils\fancy_getopt.py
%System Root%\Python27\Lib\distutils\command\upload.py
%System Root%\Python27\Lib\distutils\command\install_scripts.py
%System Root%\Python27\Lib\email\header.py
%System Root%\excel2k\XLS2KE01.xls
%System Root%\Python27\Lib\distutils\log.py
%System Root%\Python27\Lib\email\quoprimime.pyc
%System Root%\Python27\Lib\email\test\data\msg_19.txt
%System Root%\Python27\Lib\encodings\big5.py
%System Root%\Python27\Lib\bsddb\test\test_dbobj.py
%System Root%\Python27\Lib\ctypes\test\test_array_in_pointer.py
%System Root%\Users\Public\Documents\word2k\DOC2KE05.doc
%System Root%\Python27\Lib\distutils\command\build_clib.py
%System Root%\Python27\include\pgenheaders.h
%System Root%\Python27\Lib\dumbdbm.py
%System Root%\Python27\Lib\bsddb\test\test_queue.py
%System Root%\Python27\include\stringobject.h
%System Root%\Python27\Lib\distutils\tests\test_bdist_wininst.py
%System Root%\Python27\include\pythread.h
%System Root%\Python27\Lib\email\message.py
%System Root%\Python27\Lib\contextlib.py
%System Root%\Python27\Lib\ctypes\test\test_random_things.py
%System Root%\Python27\include\moduleobject.h
%System Root%\Python27\Lib\curses\wrapper.py
%System Root%\Python27\Lib\distutils\tests\test_build_ext.py
%System Root%\Python27\Lib\encodings\cp1006.py
%System Root%\Python27\include\parsetok.h
%System Root%\Python27\Lib\ctypes\test\test_delattr.py
%System Root%\Python27\Lib\ctypes\test\test_pep3118.py
%System Root%\Python27\Lib\ctypes\test\test_stringptr.py
%System Root%\Python27\Lib\email\test\data\msg_38.txt
%System Root%\Python27\Lib\distutils\ccompiler.py
%System Root%\Python27\Lib\ctypes\test\test_python_api.py
%System Root%\Python27\Lib\distutils\emxccompiler.py
%System Root%\Python27\Lib\collections.py
%System Root%\Python27\Lib\ctypes\__init__.py
%System Root%\Python27\include\cobject.h
%System Root%\Python27\include\osdefs.h
%System Root%\Python27\Lib\bsddb\test\test_cursor_pget_bug.py
%System Root%\Python27\Lib\email\parser.pyc
%System Root%\Python27\Lib\test\185test.db
%Desktop%\excel2k\XLS2KE01.xls
%System Root%\excel2k\XLS2KE05.xls
%System Root%\Python27\include\pythonrun.h
%System Root%\Python27\Lib\email\encoders.py
%System Root%\Python27\Lib\email\test\data\msg_01.txt
%System Root%\Python27\Lib\email\mime\multipart.py
%System Root%\Python27\Lib\distutils\command\config.py
%System Root%\Python27\Lib\distutils\command\bdist_msi.py
%System Root%\Python27\Lib\distutils\tests\Setup.sample
%System Root%\Python27\include\pyconfig.h
%System Root%\Python27\Lib\abc.py
%System Root%\Python27\Lib\ConfigParser.pyc
%System Root%\Python27\include\pyport.h
%System Root%\Python27\Lib\ctypes\test\test_win32.py
%System Root%\Python27\Lib\distutils\command\install.py
%System Root%\Python27\Lib\email\test\test_email.py
%User Profile%\Documents\fp_18.0.0.203_archive.zip
%System Root%\Python27\Lib\codecs.pyc
%System Root%\Python27\Lib\ctypes\_endian.py
%System Root%\Python27\Lib\bsddb\dbrecio.py
%System Root%\Python27\Lib\email\__init__.pyc
%System Root%\Python27\include\pymactoolbox.h
%System Root%\Python27\Lib\email\message.pyc
%System Root%\Python27\Lib\distutils\tests\test_unixccompiler.py
%System Root%\Python27\Lib\distutils\file_util.py
%System Root%\Python27\Lib\email\test\data\msg_28.txt
%System Root%\Python27\Lib\email\mime\image.py
%System Root%\Python27\include\unicodeobject.h
%System Root%\Python27\include\metagrammar.h
%System Root%\Python27\include\pyexpat.h

手順 8

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア／グレイウェア／スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

%User Temp%\VoqC6xar.exe
%User Temp%\zj0u7v3U.exe
%User Temp%\VHsssEwQ.exe
%User Temp%\In0OGmO5.exe
%User Temp%\ggEEnDeb.exe

ご利用はいかがでしたか？　アンケートにご協力ください

TSPY_EMOTET.SML3

概要

詳細

対応方法

リソース

サポート

会社概要

東京本社

TSPY_EMOTET.SML3

概要

詳細

対応方法

リソース

サポート

会社概要

東京本社

The Americas

Asia Pacific

Europe, Middle East & Africa