TROJ_ANOMALY.BBN

2012年10月12日

別名:

Trojan:Win32/Anomaly (Microsoft); Generic.dx!bdf4 (McAfee); Trojan.Gen (Symantec); PAK:UPX (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt)

プラットフォーム:

Windows 2000, Windows XP, Windows Server 2003

危険度:

ダメージ度:

感染力:

感染確認数:

マルウェアタイプ: トロイの木馬型
破壊活動の有無: なし
暗号化:
感染報告の有無: はい

概要

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

詳細

ファイルサイズ 146,432 bytes

タイプ EXE

メモリ常駐なし

発見日 2012年4月19日

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、以下のフォルダを作成します。

%System Root%\ufr_files

(註：%System Root%は、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。)

他のシステム変更

マルウェアは、以下のファイルを削除します。

%Windows%\Help\fxsshare.chm
%Windows%\Help\gen.chm
%Windows%\Help\Glossary.chm
%Windows%\Help\gpedit.chm
%Windows%\Help\hardware.chm
%Windows%\Help\howto.chm
%Windows%\Help\hrtz.chm
%Windows%\Help\hs.chm
%Windows%\Help\hschelp.chm
%Windows%\Help\hypertrm.chm
%Windows%\Help\icwdial.chm
%Windows%\Help\ieakmmc.chm
%Windows%\Help\ieeula.chm
%Windows%\Help\ieos.chm
%Windows%\Help\ieshared.chm
%Windows%\Help\iesupp.chm
%Windows%\Help\iewebhlp.chm
%Windows%\Help\iexplore.chm
%Windows%\Help\iis.chm
%Windows%\Help\iismmc.chm
%Windows%\Help\imgprev.chm
%Windows%\Help\inetres.chm
%Windows%\Help\infrared.chm
%Windows%\Help\input.chm
%Windows%\Help\intellimirror.chm
%Windows%\Help\ipsecconcepts.chm
%Windows%\Help\ipsecsnp.chm
%Windows%\Help\Ipv6.chm
%Windows%\Help\is.chm
%Windows%\Help\isconcepts.chm
%Windows%\Help\ixqlang.htm
%Windows%\Help\joy.chm
%Windows%\Help\key.chm
%Windows%\Help\keyb.chm
%Windows%\Help\keyshort.chm
%Windows%\Help\lang.chm
%Windows%\Help\langbar.chm
%Windows%\Help\license.chm
%Windows%\Help\localsec.chm
%Windows%\Help\lpe.chm
%Windows%\Help\lpeconcepts.chm
%Windows%\Help\magnify.chm
%Windows%\Help\mail.chm
%Windows%\Help\migwiz.htm
%Windows%\Help\migwiz2.htm
%Windows%\Help\misc.chm
%Windows%\Help\mls_trb.chm
%Windows%\Help\mmc.chm
%Windows%\Help\mobsync.chm
%Windows%\Help\mode.chm
%Windows%\Help\mouse.chm
%Windows%\Help\mpconcepts.chm
%Windows%\Help\msconfig.chm
%Windows%\Help\msdasc.chm
%Windows%\Help\mshearts.chm
%Windows%\Help\msinfo32.chm
%Windows%\Help\msmq.chm
%Windows%\Help\msmqconcepts.chm
%Windows%\Help\msoe.chm
%Windows%\Help\msorcl32.chm
%Windows%\Help\mspaint.chm
%Windows%\Help\mstask.chm
%Windows%\Help\mstsc.chm
%Windows%\Help\netcfg.chm
%Windows%\Help\network.chm
%Windows%\Help\newfeat1.chm
%Windows%\Help\newfeat2.chm
%Windows%\Help\newfeat3.chm
%Windows%\Help\newfeat4.chm
%Windows%\Help\newfeat5.chm
%Windows%\Help\nmchat.chm
%Windows%\Help\nmwhiteb.chm
%Windows%\Help\nofts.chm
%Windows%\Help\notepad.chm
%Windows%\Help\ntart.chm
%Windows%\Help\ntbackup.chm
%Windows%\Help\ntchowto.chm
%Windows%\Help\ntcmds.chm
%Windows%\Help\ntdef.chm
%Windows%\Help\nthelp.chm
%Windows%\Help\ntshared.chm
%Windows%\Help\nusrmgr.chm
%Windows%\Help\nwdoc.chm
%Windows%\Help\odbcinst.chm
%Windows%\Help\odbcjet.chm
%Windows%\Help\oe_msgr.chm
%Windows%\Help\offlinefolders.chm
%Windows%\Help\omc.chm
%Windows%\Help\osk.chm
%Windows%\Help\packager.chm
%Windows%\Help\password.chm
%Windows%\Help\phowto.chm
%Windows%\Help\pinball.chm
%Windows%\Help\plyr_err.chm
%Windows%\Help\printfnd.chm
%Windows%\Help\printing.chm
%Windows%\Help\pwrmn.chm
%Windows%\Help\qosconcepts.chm
%Windows%\Help\ratings.chm
%Windows%\Help\rdesktop.chm
%Windows%\Help\reader.chm
%Windows%\Help\recycle.chm
%Windows%\Help\regedit.chm
%Windows%\Help\regopt.chm
%Windows%\Help\remasst.chm
%Windows%\Help\reskit.chm
%Windows%\Help\rktools.chm
%Windows%\Help\rrc.chm
%Windows%\Help\rsm.chm
%Windows%\Help\rsmconcepts.chm
%Windows%\Help\rsop.chm
%Windows%\Help\rsopsnp.chm
%Windows%\Help\rvse.chm
%Windows%\Help\safer.chm
%Windows%\Help\saferconcepts.chm
%Windows%\Help\sc.chm
%Windows%\Help\sce.chm
%Windows%\Help\sceconcepts.chm
%Windows%\Help\scm.chm
%Windows%\Help\scmconcepts.chm
%Windows%\Help\secedit.chm
%Windows%\Help\secsetconcepts.chm
%Windows%\Help\secsettings.chm
%Windows%\Help\sendcmsg.chm
%Windows%\Help\shvl.chm
%Windows%\Help\smlogcfg.chm
%Windows%\Help\sndvol32.chm
%Windows%\Help\sniffpol.dll
%Windows%\Help\snmpconcepts.chm
%Windows%\Help\sol.chm
%Windows%\Help\soundrec.chm
%Windows%\Help\sounds.chm
%Windows%\Help\spad.chm
%Windows%\Help\spconcepts.chm
%Windows%\Help\speech.chm
%Windows%\Help\spider.chm
%Windows%\Help\splash.chm
%Windows%\Help\spolsconcepts.chm
%Windows%\Help\sr_ui.chm
%Windows%\Help\sstub.dll
%Windows%\Help\supp_ed.chm
%Windows%\Help\suptools.chm
%Windows%\Help\sysdm.chm
%Windows%\Help\sysmon.chm
%Windows%\Help\sysprop.chm
%Windows%\Help\sysrestore.chm
%Windows%\Help\system.chm
%Windows%\Help\sys_srv.chm
%Windows%\Help\tapi.chm
%Windows%\Help\taskbar.chm
%Windows%\Help\taskmgr.chm
%Windows%\Help\tcpip.chm
%Windows%\Help\telnet.chm
%Windows%\Help\timesrv.chm
%Windows%\Help\Tours\htmlTour\best_fr.htm
%Windows%\Help\Tours\htmlTour\best_road.htm
%Windows%\Help\Tours\htmlTour\best_road.jpg
%Windows%\Help\Tours\htmlTour\best_road_big.jpg
%Windows%\Help\Tours\htmlTour\best_road_ghost.jpg
%Windows%\Help\Tours\htmlTour\best_robust.htm
%Windows%\Help\Tours\htmlTour\best_robust.jpg
%Windows%\Help\Tours\htmlTour\best_robust_big.jpg
%Windows%\Help\Tours\htmlTour\best_robust_ghost.jpg
%Windows%\Help\Tours\htmlTour\best_secure.htm
%Windows%\Help\Tours\htmlTour\best_secure.jpg
%Windows%\Help\Tours\htmlTour\best_secure_big.jpg
%Windows%\Help\Tours\htmlTour\best_secure_ghost.jpg
%Windows%\Help\Tours\htmlTour\bluearrow.gif
%Windows%\Help\Tours\htmlTour\bot_bar.gif
%Windows%\Help\Tours\htmlTour\connected_data.htm
%Windows%\Help\Tours\htmlTour\connected_data.jpg
%Windows%\Help\Tours\htmlTour\connected_data_big.jpg
%Windows%\Help\Tours\htmlTour\connected_data_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_fr.htm
%Windows%\Help\Tours\htmlTour\connected_multiple.htm
%Windows%\Help\Tours\htmlTour\connected_multiple.jpg
%Windows%\Help\Tours\htmlTour\connected_multiple_big.jpg
%Windows%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_networks.htm
%Windows%\Help\Tours\htmlTour\connected_networks.jpg
%Windows%\Help\Tours\htmlTour\connected_networks_big.jpg
%Windows%\Help\Tours\htmlTour\connected_networks_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard.htm
%Windows%\Help\Tours\htmlTour\connected_wizard.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard_big.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
%Windows%\Help\Tours\htmlTour\control_up.jpg
%Windows%\Help\Tours\htmlTour\default.htm
%Windows%\Help\Tours\htmlTour\desktop_screen_shot.jpg
%Windows%\Help\Tours\htmlTour\desktop_up.jpg
%Windows%\Help\Tours\htmlTour\end_up.jpg
%Windows%\Help\Tours\htmlTour\folder_up.jpg
%Windows%\Help\Tours\htmlTour\footer.htm
%Windows%\Help\Tours\htmlTour\gradient.jpg
%Windows%\Help\Tours\htmlTour\icon_up.jpg
%Windows%\Help\Tours\htmlTour\img004b.jpg
%Windows%\Help\Tours\htmlTour\img014.jpg
%Windows%\Help\Tours\htmlTour\img033.jpg
%Windows%\Help\Tours\htmlTour\img033a.jpg
%Windows%\Help\Tours\htmlTour\img034.jpg
%Windows%\Help\Tours\htmlTour\img040.jpg
%Windows%\Help\Tours\htmlTour\img046.jpg
%Windows%\Help\Tours\htmlTour\img060.jpg
%Windows%\Help\Tours\htmlTour\img068.jpg
%Windows%\Help\Tours\htmlTour\img072.jpg
%Windows%\Help\Tours\htmlTour\img074a.jpg
%Windows%\Help\Tours\htmlTour\img089.jpg
%Windows%\Help\Tours\htmlTour\img100.jpg
%Windows%\Help\Tours\htmlTour\img103.jpg
%Windows%\Help\Tours\htmlTour\img109.jpg
%Windows%\Help\Tours\htmlTour\img110.jpg
%Windows%\Help\Tours\htmlTour\img116.jpg
%Windows%\Help\Tours\htmlTour\img121.jpg
%Windows%\Help\Tours\htmlTour\img123.jpg
%Windows%\Help\Tours\htmlTour\img126.jpg
%Windows%\Help\Tours\htmlTour\img136.jpg
%Windows%\Help\Tours\htmlTour\img149.jpg
%Windows%\Help\Tours\htmlTour\intro_logo.jpg
%Windows%\Help\Tours\htmlTour\logo.jpg
%Windows%\Help\Tours\htmlTour\nav_best.gif
%Windows%\Help\Tours\htmlTour\nav_best_down.gif
%Windows%\Help\Tours\htmlTour\nav_blank.gif
%Windows%\Help\Tours\htmlTour\nav_connected.gif
%Windows%\Help\Tours\htmlTour\nav_connected_down.gif
%Windows%\Help\Tours\htmlTour\nav_gray.gif
%Windows%\Help\Tours\htmlTour\nav_safe_easy.gif
%Windows%\Help\Tours\htmlTour\nav_safe_easy_down.gif
%Windows%\Help\Tours\htmlTour\nav_start_here.gif
%Windows%\Help\Tours\htmlTour\nav_start_here_down.gif
%Windows%\Help\Tours\htmlTour\nav_unlock.gif
%Windows%\Help\Tours\htmlTour\nav_unlock_down.gif
%Windows%\Help\Tours\htmlTour\pen_icon.jpg
%Windows%\Help\Tours\htmlTour\question_icon.jpg
%Windows%\Help\Tours\htmlTour\read_icon.jpg
%Windows%\Help\Tours\htmlTour\safe_better.htm
%Windows%\Help\Tours\htmlTour\safe_easier.htm
%Windows%\Help\Tours\htmlTour\safe_easy_better.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_better_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_faster.htm
%Windows%\Help\Tours\htmlTour\safe_fr.htm
%Windows%\Help\Tours\htmlTour\spacer.gif
%Windows%\Help\Tours\htmlTour\start_control.htm
%Windows%\Help\Tours\htmlTour\start_desktop.htm
%Windows%\Help\Tours\htmlTour\start_ending.htm
%Windows%\Help\Tours\htmlTour\start_files.htm
%Windows%\Help\Tours\htmlTour\start_fr.htm
%Windows%\Help\Tours\htmlTour\start_icons.htm
%Windows%\Help\Tours\htmlTour\start_menu.htm
%Windows%\Help\Tours\htmlTour\start_taskbar.htm
%Windows%\Help\Tours\htmlTour\start_up.jpg
%Windows%\Help\Tours\htmlTour\start_windows.htm
%Windows%\Help\Tours\htmlTour\taskbar_up.jpg
%Windows%\Help\Tours\htmlTour\ul_logo.jpg
%Windows%\Help\Tours\htmlTour\unlock_built.htm
%Windows%\Help\Tours\htmlTour\unlock_built.jpg
%Windows%\Help\Tours\htmlTour\unlock_built_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_built_ghost.jpg
%Windows%\Help\Tours\htmlTour\unlock_fr.htm
%Windows%\Help\Tours\htmlTour\unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\unlock_optimized.jpg
%Windows%\Help\Tours\htmlTour\unlock_optimized_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing.htm
%Windows%\Help\Tours\htmlTour\unlock_playing.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
%Windows%\Help\Tours\htmlTour\window_up.jpg
%Windows%\Help\Tours\mmTour\intro.txt
%Windows%\Help\Tours\mmTour\nav.txt
%Windows%\Help\Tours\mmTour\segment1.txt
%Windows%\Help\Tours\mmTour\segment2.txt
%Windows%\Help\Tours\mmTour\segment3.txt
%Windows%\Help\Tours\mmTour\segment4.txt
%Windows%\Help\Tours\mmTour\segment5.txt
%Windows%\Help\Tours\mmTour\tour.exe
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud1.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud2.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud3.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud4.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud5.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud6.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud7.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud8.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud9.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\contents.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktr.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktrh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapp.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapph.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnt.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cntd.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnth.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoff.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoffh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taon.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taonh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpause.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpauseh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplay.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplayh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogo.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogoh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\tourbg.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\videobg.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\vidsamp.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm1.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm2.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm3.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm4.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm5.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm6.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm7.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm8.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm9.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv
%Windows%\Help\tshoot.chm
%Windows%\Help\tshoot.dll
%Windows%\Help\twclient.chm
%Windows%\Help\update1.chm
%Windows%\Help\usercpl.chm
%Windows%\Help\utilmgr.chm
%Windows%\Help\wab.chm
%Windows%\Help\wbemtest.chm
%Windows%\Help\webpub.chm
%Windows%\Help\whatsnew.chm
%Windows%\Help\winchat.chm
%Windows%\Help\windows.chm
%Windows%\Help\wininstl.chm
%Windows%\Help\winmine.chm
%Windows%\Help\win_dos.chm
%Windows%\Help\wmic.chm
%Windows%\Help\wmifltr.chm
%Windows%\Help\wmplay.chm
%Windows%\Help\wmplayer.chm
%Windows%\Help\wordpad.chm
%Windows%\Help\wpa.chm
%Windows%\Help\wschelp.chm
%Windows%\Help\wscript.chm
%Windows%\Help\wshconcepts.chm
%Windows%\Help\wuau.chm
%Windows%\Help\wuauhelp.chm
%Windows%\hh.exe
%Windows%\ime\mscandui.dll
%Windows%\ime\SOFTKBD.DLL
%Windows%\ime\SPGRMR.dll
%Windows%\ime\SPTIP.dll
%Windows%\inf\unregmp2.exe
%Windows%\Installer\14637f.msi
%Windows%\Installer\2cdb5c.msi
%Windows%\Installer\8b8e65.msi
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe
%Windows%\Installer\{FE2F6A2C-196E-4210-9C04-2B1BC21F07EF}\ARPPRODUCTICON.exe
%Windows%\Media\chimes.wav
%Windows%\Media\chord.wav
%Windows%\Media\ding.wav
%Windows%\Media\notify.wav
%Windows%\Media\recycle.wav
%Windows%\Media\ringin.wav
%Windows%\Media\ringout.wav
%Windows%\Media\start.wav
%Windows%\Media\tada.wav
%Windows%\Media\Windows XP Balloon.wav
%Windows%\Media\Windows XP Battery Critical.wav
%Windows%\Media\Windows XP Battery Low.wav
%Windows%\Media\Windows XP Critical Stop.wav
%Windows%\Media\Windows XP Default.wav
%Windows%\Media\Windows XP Ding.wav
%Windows%\Media\Windows XP Error.wav
%Windows%\Media\Windows XP Exclamation.wav
%Windows%\Media\Windows XP Hardware Fail.wav
%Windows%\Media\Windows XP Hardware Insert.wav
%Windows%\Media\Windows XP Hardware Remove.wav
%Windows%\Media\Windows XP Information Bar.wav
%Windows%\Media\Windows XP Logoff Sound.wav
%Windows%\Media\Windows XP Logon Sound.wav
%Windows%\Media\Windows XP Menu Command.wav
%Windows%\Media\Windows XP Minimize.wav
%Windows%\Media\Windows XP Notify.wav
%Windows%\Media\Windows XP Pop-up Blocked.wav
%Windows%\Media\Windows XP Print complete.wav
%Windows%\Media\Windows XP Recycle.wav
%Windows%\Media\Windows XP Restore.wav
%Windows%\Media\Windows XP Ringin.wav
%Windows%\Media\Windows XP Ringout.wav
%Windows%\Media\Windows XP Shutdown.wav
%Windows%\Media\Windows XP Start.wav
%Windows%\Media\Windows XP Startup.wav
%Windows%\msagent\agentanm.dll
%Windows%\msagent\agentctl.dll
%Windows%\msagent\agentdp2.dll
%Windows%\msagent\agentdpv.dll
%Windows%\msagent\agentmpx.dll
%Windows%\msagent\agentpsh.dll
%Windows%\msagent\agentsr.dll
%Windows%\msagent\agentsvr.exe
%Windows%\msagent\agtintl.dll
%Windows%\msagent\intl\agt0405.dll
%Windows%\msagent\intl\agt0406.dll
%Windows%\msagent\intl\agt0407.dll
%Windows%\msagent\intl\agt0408.dll
%Windows%\msagent\intl\agt0409.dll
%Windows%\msagent\intl\agt040b.dll
%Windows%\msagent\intl\agt040c.dll
%Windows%\msagent\intl\agt040e.dll
%Windows%\msagent\intl\agt0410.dll
%Windows%\msagent\intl\agt0413.dll
%Windows%\msagent\intl\agt0414.dll
%Windows%\msagent\intl\agt0415.dll
%Windows%\msagent\intl\agt0416.dll
%Windows%\msagent\intl\agt0419.dll
%Windows%\msagent\intl\agt041d.dll
%Windows%\msagent\intl\agt041f.dll
%Windows%\msagent\intl\agt0816.dll
%Windows%\msagent\intl\agt0c0a.dll
%Windows%\msagent\mslwvtts.dll
%Windows%\msdfmap.ini
%Windows%\mui\muisetup.exe
%Windows%\NOTEPAD.EXE
%Windows%\ODBCINST.INI
%Windows%\OEWABLog.txt
%Windows%\Offline Web Pages\desktop.ini
%Windows%\pchealth\helpctr\binaries\brpinfo.dll
%Windows%\pchealth\helpctr\binaries\HCAppRes.dll
%Windows%\pchealth\helpctr\binaries\HelpCtr.exe
%Windows%\pchealth\helpctr\binaries\HelpHost.exe
%Windows%\pchealth\helpctr\binaries\HelpSvc.exe
%Windows%\pchealth\helpctr\binaries\HscUpd.exe
%Windows%\pchealth\helpctr\binaries\msconfig.exe
%Windows%\pchealth\helpctr\binaries\msinfo.dll
%Windows%\pchealth\helpctr\binaries\notiflag.exe
%Windows%\pchealth\helpctr\binaries\pchshell.dll
%Windows%\pchealth\helpctr\binaries\pchsvc.dll
%Windows%\pchealth\helpctr\Config\Cntstore.bin
%Windows%\pchealth\helpctr\OfflineCache\index.dat
%Windows%\pchealth\helpctr\PackageStore\SkuStore.bin
%Windows%\pchealth\helpctr\System\blurbs\about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\History.htm
%Windows%\pchealth\helpctr\System\blurbs\Index.htm
%Windows%\pchealth\helpctr\System\blurbs\isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\options.htm
%Windows%\pchealth\helpctr\System\blurbs\searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tools.htm
%Windows%\pchealth\helpctr\System\blurbs\watermark_300x.bmp
%Windows%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
%Windows%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\badurl.htm
%Windows%\pchealth\helpctr\System\errors\connection.htm
%Windows%\pchealth\helpctr\System\errors\indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\notfound.htm
%Windows%\pchealth\helpctr\System\errors\offline.htm
%Windows%\pchealth\helpctr\System\errors\redirect.htm
%Windows%\pchealth\helpctr\System\errors\unreachable.htm
%Windows%\pchealth\helpctr\System\Headlines.htm
%Windows%\pchealth\helpctr\System\HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp
%Windows%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp
%Windows%\pchealth\helpctr\System\images\16x16\compat.bmp
%Windows%\pchealth\helpctr\System\images\16x16\errmsg.bmp
%Windows%\pchealth\helpctr\System\images\16x16\support.bmp
%Windows%\pchealth\helpctr\System\images\16x16\tools.bmp
%Windows%\pchealth\helpctr\System\images\16x16\update.bmp
%System Root%\boot.ini
%System Root%\CONFIG.SYS
%Desktop%.ini
%User Profile%\Internet Explorer\brndlog.txt
%User Profile%\Quick Launch\Launch Internet Explorer Browser.lnk
%User Profile%\Cookies\index.dat
%Application Data%\Microsoft\Internet Explorer\MSIMGSIZ.DAT
%Application Data%\Microsoft\Windows\UsrClass.dat
%User Profile%\History.IE5\index.dat
%User Profile%\MSHist012010121320101220\index.dat
%User Profile%\MSHist012010122720110103\index.dat
%User Profile%\MSHist012011010720110108\index.dat
%User Temp%\dd_vcredistMSI5DA7.txt
%User Temp%\dd_vcredistMSI6BB9.txt
%User Temp%\dd_vcredistUI5DA7.txt
%User Temp%\dd_vcredistUI6BB9.txt
%User Temp%\Perflib_Perfdata_42c.dat
%User Temp%\Perflib_Perfdata_740.dat
%Temporary Internet Files%\Content.IE5\2TPM8950\10[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\16[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\bottom_right3[1].png
%Temporary Internet Files%\Content.IE5\2TPM8950\box01[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\box02[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\box08[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\desktop.ini
%Temporary Internet Files%\Content.IE5\2TPM8950\header00b[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\report_image[1].png
%Temporary Internet Files%\Content.IE5\2TPM8950\table_left3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\10[1].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[4].htm
%Windows%\pchealth\helpctr\System\images\16x16\warning.gif
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp
%Windows%\pchealth\helpctr\System\images\32x32\logo.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp
%Windows%\pchealth\helpctr\System\images\Centers\blue_arrow.gif
%Windows%\pchealth\helpctr\System\images\Centers\Connect.gif
%Windows%\pchealth\helpctr\System\images\Centers\IULogo.gif
%Windows%\pchealth\helpctr\System\images\Centers\Uabrand.gif
%Windows%\pchealth\helpctr\System\images\error.gif
%Windows%\pchealth\helpctr\System\images\Expando\collapsed.gif
%Windows%\pchealth\helpctr\System\images\Expando\endnode.gif
%Windows%\pchealth\helpctr\System\images\Expando\expanded.gif
%Windows%\pchealth\helpctr\System\images\Expando\helpdoc.gif
%Windows%\pchealth\helpctr\System\images\feedback.gif
%Windows%\pchealth\helpctr\System\images\flyout_arrow.gif
%Windows%\pchealth\helpctr\System\images\get_conn.gif
%Windows%\pchealth\helpctr\System\images\icon_articles_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_blank_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_tours_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp
%Windows%\pchealth\helpctr\System\images\info.gif
%Windows%\pchealth\helpctr\System\images\progbar.gif
%Windows%\pchealth\helpctr\System\images\warning.gif
%Windows%\pchealth\helpctr\System\images\wrapperhelp.gif
%Windows%\pchealth\helpctr\System\NetDiag\dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\dglogshelp.htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\box07[1].gif
%Temporary Internet Files%\Content.IE5\4H9MXTT9\desktop.ini
%Temporary Internet Files%\Content.IE5\4H9MXTT9\dropdown[1].jpg
%Temporary Internet Files%\Content.IE5\4H9MXTT9\footer00[1].gif
%Temporary Internet Files%\Content.IE5\4H9MXTT9\header02[1].jpg
%Temporary Internet Files%\Content.IE5\4H9MXTT9\import[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\table_bottom3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\table_top3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\transpix[1].gif
%Temporary Internet Files%\Content.IE5\desktop.ini
%Temporary Internet Files%\Content.IE5\index.dat
%Temporary Internet Files%\Content.IE5\SMCZPN4M\10[1].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\background[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box03[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box04[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box06[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\config[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\desktop.ini
%Temporary Internet Files%\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
%Temporary Internet Files%\Content.IE5\SMCZPN4M\top_right3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[5].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\bottom_left3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\box09[1].gif
%Temporary Internet Files%\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\desktop.ini
%Windows%\pchealth\helpctr\System\panels\AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\blank.htm
%Windows%\pchealth\helpctr\System\panels\Context.htm
%Windows%\pchealth\helpctr\System\panels\firstpage.htm
%Windows%\pchealth\helpctr\System\panels\HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\NavBar.htm
%Windows%\pchealth\helpctr\System\panels\Options.htm
%Windows%\pchealth\helpctr\System\panels\RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Subsite.htm
%Windows%\pchealth\helpctr\System\panels\Topics.htm
%Windows%\pchealth\helpctr\System\rc\rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\ding.wav
%Windows%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
%Temporary Internet Files%\Content.IE5\X9QQH2D9\table_right3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\top_left3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\users[1].png
%Temporary Internet Files%\desktop.ini
%User Profile%\My Music\Sample Music.lnk
%User Profile%\My Pictures\Sample Pictures.lnk
%User Profile%\NTUSER.DAT
%User Profile%\ntuser.ini
%User Profile%\Recent\server.lnk
%User Profile%\Recent\set_hostname.lnk
%User Profile%\Recent\set_server.lnk
%User Profile%\Recent\the_configurator.lnk
%Start Menu%\desktop.ini
%Start Menu%\Programs\Accessories\Accessibility\desktop.ini
%Start Menu%\Programs\Accessories\Accessibility\Magnifier.lnk
%Start Menu%\Programs\Accessories\Accessibility\Narrator.lnk
%Start Menu%\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
%Start Menu%\Programs\Accessories\Accessibility\Utility Manager.lnk
%Start Menu%\Programs\Accessories\Address Book.lnk
%Start Menu%\Programs\Accessories\Command Prompt.lnk
%Start Menu%\Programs\Accessories\desktop.ini
%Start Menu%\Programs\Accessories\Entertainment\desktop.ini
%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
%Start Menu%\Programs\Accessories\Notepad.lnk
%Start Menu%\Programs\Accessories\Program Compatibility Wizard.lnk
%Start Menu%\Programs\Accessories\Synchronize.lnk
%Start Menu%\Programs\Accessories\Tour Windows XP.lnk
%Start Menu%\Programs\Accessories\Windows Explorer.lnk
%Start Menu%\Programs\desktop.ini
%Start Menu%\Programs\Internet Explorer.lnk
%Start Menu%\Programs\Outlook Express.lnk
%Start Menu%\Programs\Remote Assistance.lnk
%User Startup%\desktop.ini
%Start Menu%\Programs\Windows Media Player.lnk
%User Profile%\Templates\excel.xls
%User Profile%\Templates\excel4.xls
%User Profile%\Templates\powerpnt.ppt
%User Profile%\Templates\sndrec.wav
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif
%User Profile%\Templates\winword.doc
%User Profile%\Templates\winword2.doc
%User Profile%\Media Player\DefaultStore_59R.bin
%User Profile%\Media Player\UserMigratedStore_59R.bin
%User Profile%\Pbk\sharedaccess.ini
%User Profile%\Downloader\qmgr0.dat
%User Profile%\Downloader\qmgr1.dat
%User Profile%\User Account Pictures\Administrator.bmp
%User Profile%\Default Pictures\airplane.bmp
%User Profile%\Default Pictures\astronaut.bmp
%User Profile%\Default Pictures\ball.bmp
%User Profile%\Default Pictures\beach.bmp
%User Profile%\Default Pictures\butterfly.bmp
%User Profile%\Default Pictures\car.bmp
%User Profile%\Default Pictures\cat.bmp
%User Profile%\Default Pictures\chess.bmp
%User Profile%\Default Pictures\dirt bike.bmp
%User Profile%\Default Pictures\dog.bmp
%User Profile%\Default Pictures\drip.bmp
%User Profile%\Default Pictures\duck.bmp
%User Profile%\Default Pictures\fish.bmp
%User Profile%\Default Pictures\frog.bmp
%User Profile%\Default Pictures\guitar.bmp
%User Profile%\Default Pictures\horses.bmp
%User Profile%\Default Pictures\kick.bmp
%User Profile%\Default Pictures\lift-off.bmp
%User Profile%\Default Pictures\palm tree.bmp
%User Profile%\Default Pictures\pink flower.bmp
%User Profile%\Default Pictures\red flower.bmp
%User Profile%\Default Pictures\skater.bmp
%User Profile%\Default Pictures\snowflake.bmp
%User Profile%\User Account Pictures\guest.bmp
%User Profile%\User Account Pictures\rsa.bmp
%User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
%User Profile%\Sample Music\New Stories (Highway Blues).wma
%User Profile%\Sample Pictures\Blue hills.jpg
%User Profile%\Sample Pictures\Sunset.jpg
%User Profile%\Sample Pictures\Water lilies.jpg
%User Profile%\Sample Pictures\Winter.jpg
%Start Menu%\Programs\Accessories\Accessibility\Accessibility Wizard.lnk
%Start Menu%\Programs\Accessories\Calculator.lnk
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\alert.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\card.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\cd.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\check.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\chip.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\down.bmp
%Windows%\pchealth\helpctr\System\sysinfo\graphics\drive.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\error.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\gears.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
%Windows%\pchealth\helpctr\System\sysinfo\graphics\info.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\printer.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\system.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\up.bmp
%Windows%\pchealth\helpctr\System\sysinfo\graphics\usb.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\windows.gif
%Windows%\pchealth\helpctr\System\sysinfo\msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif
%Start Menu%\Programs\Accessories\Communications\desktop.ini
%Start Menu%\Programs\Accessories\Communications\HyperTerminal.lnk
%Start Menu%\Programs\Accessories\Communications\Network Connections.lnk
%Start Menu%\Programs\Accessories\Communications\Network Setup Wizard.lnk
%Start Menu%\Programs\Accessories\Communications\New Connection Wizard.lnk
%Start Menu%\Programs\Accessories\Communications\Remote Desktop Connection.lnk
%Start Menu%\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk
%Start Menu%\Programs\Accessories\Entertainment\Sound Recorder.lnk
%Start Menu%\Programs\Accessories\Entertainment\Volume Control.lnk
%Start Menu%\Programs\Accessories\Paint.lnk
%Start Menu%\Programs\Accessories\System Tools\Backup.lnk
%Start Menu%\Programs\Accessories\System Tools\Character Map.lnk
%Start Menu%\Programs\Accessories\System Tools\desktop.ini
%Start Menu%\Programs\Accessories\System Tools\Disk Cleanup.lnk
%Start Menu%\Programs\Accessories\System Tools\Disk Defragmenter.lnk
%Start Menu%\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk
%Start Menu%\Programs\Accessories\System Tools\Scheduled Tasks.lnk
%Start Menu%\Programs\Accessories\System Tools\Security Center.lnk
%Start Menu%\Programs\Accessories\System Tools\System Information.lnk
%Start Menu%\Programs\Accessories\System Tools\System Restore.lnk
%Start Menu%\Programs\Accessories\WordPad.lnk
%Start Menu%\Programs\Administrative Tools\Component Services.lnk
%Start Menu%\Programs\Administrative Tools\Computer Management.lnk
%Start Menu%\Programs\Administrative Tools\Data Sources (ODBC).lnk
%Start Menu%\Programs\Administrative Tools\desktop.ini
%Start Menu%\Programs\Administrative Tools\Event Viewer.lnk
%Start Menu%\Programs\Administrative Tools\Local Security Policy.lnk
%Start Menu%\Programs\Administrative Tools\Performance.lnk
%Start Menu%\Programs\Administrative Tools\Services.lnk
%Start Menu%\Programs\Games\desktop.ini
%Start Menu%\Programs\Games\Freecell.lnk
%Start Menu%\Programs\Games\Hearts.lnk
%Start Menu%\Programs\Games\Internet Backgammon.lnk
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm
%Start Menu%\Programs\Games\Internet Checkers.lnk
%Start Menu%\Programs\Games\Internet Hearts.lnk
%Start Menu%\Programs\Games\Internet Reversi.lnk
%Start Menu%\Programs\Games\Internet Spades.lnk
%Start Menu%\Programs\Games\Minesweeper.lnk
%Start Menu%\Programs\Games\Pinball.lnk
%Start Menu%\Programs\Games\Solitaire.lnk
%Start Menu%\Programs\Games\Spider Solitaire.lnk
%Start Menu%\Programs\MSN.lnk
%Common Startup%\desktop.ini
%Start Menu%\Programs\Windows Messenger.lnk
%Start Menu%\Programs\Windows Movie Maker.lnk
%Start Menu%\Programs\WinPcap\Uninstall WinPcap 4.1.2.lnk
%Start Menu%\Set Program Access and Defaults.lnk
%Start Menu%\Windows Catalog.lnk
%Start Menu%\Windows Update.lnk
%Desktop%\vcredist_x86.exe
%Desktop%\WinPcap_4_1_2.exe
%User Profile%\MSHist012010120620101213\index.dat
%User Profile%\MSHist012010121320101214\index.dat
%Temporary Internet Files%\Content.IE5\2BAREZOP\desktop.ini
%Temporary Internet Files%\Content.IE5\IX09SXE9\desktop.ini
%Temporary Internet Files%\Content.IE5\M94XI96V\desktop.ini
%Temporary Internet Files%\Content.IE5\O7EHUPCN\desktop.ini
%User Temp%\dd_vcredistMSI6806.txt
%User Temp%\dd_vcredistUI6806.txt
%Desktop%\Windows Media Player.lnk
%User Profile%\MSHist012010122820101229\index.dat
%User Profile%\Recent\Local Disk (C).lnk
%User Profile%\Recent\sysprep.lnk
%System Root%\IO.SYS
%System Root%\MSDOS.SYS
%System Root%\pagefile.sys
%Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
%Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
%Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
%Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif
%Windows%\pchealth\UploadLB\Binaries\UploadM.exe
%Windows%\PeerNet\sqldb20.dll
%Windows%\PeerNet\sqlqp20.dll
%Windows%\PeerNet\sqlse20.dll
%Windows%\Prairie Wind.bmp
%Windows%\Prefetch\Layout.ini
%Windows%\regedit.exe
%Windows%\repair\ntuser.dat
%Windows%\Resources\Themes\Luna\Shell\Homestead\shellstyle.dll
%Windows%\Resources\Themes\Luna\Shell\Metallic\shellstyle.dll
%Windows%\Resources\Themes\Luna\Shell\NormalColor\shellstyle.dll
%Windows%\Rhododendron.bmp
%Windows%\River Sumida.bmp
%Windows%\Santa Fe Stucco.bmp
%Windows%\SchedLgU.Txt
%Windows%\setuplog.txt
%Windows%\smscfg.ini
%Windows%\Soap Bubbles.bmp
%Windows%\srchasst\msgr3en.dll
%Windows%\srchasst\srchctls.dll
%Windows%\srchasst\srchui.dll
%System%\AVICAP.DLL
%System%\AVIFILE.DLL
%System%\COMMDLG.DLL
%System%\LZEXPAND.DLL
%System%\MMSYSTEM.DLL
%System%\MSVIDEO.DLL
%System%\OLECLI.DLL
%System%\OLESVR.DLL
%System%\SHELL.DLL
%System%\TAPI.DLL
%System%\VER.DLL
%System%.ini
%System%\1033\dwintl.dll
%System%\6to4svc.dll
%System%\aaaamon.dll
%System%\acctres.dll
%System%\accwiz.exe
%System%\acledit.dll
%System%\aclui.dll
%System%\activeds.dll
%System%\actmovie.exe
%System%\actxprxy.dll
%System%\admparse.dll
%System%\adptif.dll
%System%\adsldp.dll
%System%\adsldpc.dll
%System%\adsmsext.dll
%System%\adsnds.dll
%System%\adsnt.dll
%System%\adsnw.dll
%System%\advapi32.dll
%System%\advpack.dll
%System%\ahui.exe
%System%\alg.exe
%System%\alrsvc.dll
%System%\amstream.dll
%System%\ansi.sys
%System%\apcups.dll
%System%\append.exe
%System%\apphelp.dll
%System%\appmgmts.dll
%System%\appmgr.dll
%System%\arp.exe
%System%\asferror.dll
%System%\asr_fmt.exe
%System%\asr_ldm.exe
%System%\asr_pfu.exe
%System%\asycfilt.dll
%System%\at.exe
%System%\atkctrs.dll
%System%\atl.dll
%System%\atl71.dll
%Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
%Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
%Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
%Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
%Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
%Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
%Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
%Program Files%\Common Files\Services\bigfoot.bmp
%Program Files%\Common Files\Services\verisign.bmp
%Program Files%\Common Files\Services\whowhere.bmp
%Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
%Program Files%\Common Files\System\ado\MDACReadme.htm
%Program Files%\Common Files\System\ado\msader15.dll
%Program Files%\Common Files\System\ado\msado15.dll
%Program Files%\Common Files\System\ado\msadomd.dll
%Program Files%\Common Files\System\ado\msador15.dll
%Program Files%\Common Files\System\ado\msadox.dll
%Program Files%\Common Files\System\ado\msadrh15.dll
%Program Files%\Common Files\System\ado\msjro.dll
%Program Files%\Common Files\System\directdb.dll
%Program Files%\Common Files\System\msadc\msadce.dll
%Program Files%\Common Files\System\msadc\msadcer.dll
%Program Files%\Common Files\System\msadc\msadcf.dll
%Program Files%\Common Files\System\msadc\msadcfr.dll
%Program Files%\Common Files\System\msadc\msadco.dll
%System%\atmadm.exe
%System%\atmfd.dll
%System%\atmlib.dll
%System%\atmpvcno.dll
%System%\atrace.dll
%System%\attrib.exe
%System%\audiosrv.dll
%System%\auditusr.exe
%System%\authz.dll
%System%\autochk.exe
%System%\autoconv.exe
%System%\autodisc.dll
%System%\autofmt.exe
%System%\autolfn.exe
%System%\avicap.dll
%System%\avicap32.dll
%System%\avifil32.dll
%System%\avifile.dll
%System%\avmeter.dll
%System%\avtapi.dll
%System%\avwav.dll
%System%\basesrv.dll
%System%\batmeter.dll
%System%\batt.dll
%System%\bidispl.dll
%System%\bitsprx2.dll
%System%\bitsprx3.dll
%System%\blackbox.dll
%System%\blastcln.exe
%System%\bootcfg.exe
%System%\bootok.exe
%System%\bootvid.dll
%System%\bootvrfy.exe
%System%\browselc.dll
%System%\browser.dll
%System%\browseui.dll
%System%\browsewm.dll
%System%\bthci.dll
%System%\bthserv.dll
%System%\btpanui.dll
%System%\cabinet.dll
%System%\cabview.dll
%System%\cacls.exe
%System%\calc.exe
%System%\camocx.dll
%System%\capesnpn.dll
%System%\cards.dll
%System%\CatRoot2\dberr.txt
%System%\catsrv.dll
%System%\catsrvps.dll
%System%\catsrvut.dll
%System%\ccfgnt.dll
%System%\cdfview.dll
%System%\cdm.dll
%System%\cdmodem.dll
%System%\cdosys.dll
%System%\certcli.dll
%System%\certmgr.dll
%System%\cewmdm.dll
%Program Files%\Common Files\System\msadc\msadcor.dll
%Program Files%\Common Files\System\msadc\msadcs.dll
%Program Files%\Common Files\System\msadc\msadds.dll
%Program Files%\Common Files\System\msadc\msaddsr.dll
%Program Files%\Common Files\System\msadc\msdaprsr.dll
%Program Files%\Common Files\System\msadc\msdaprst.dll
%Program Files%\Common Files\System\msadc\msdarem.dll
%Program Files%\Common Files\System\msadc\msdaremr.dll
%Program Files%\Common Files\System\msadc\msdfmap.dll
%Program Files%\Common Files\System\Ole DB\msdadc.dll
%Program Files%\Common Files\System\Ole DB\msdaenum.dll
%Program Files%\Common Files\System\Ole DB\msdaer.dll
%Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
%Program Files%\Common Files\System\Ole DB\msdaora.dll
%Program Files%\Common Files\System\Ole DB\msdaorar.dll
%Program Files%\Common Files\System\Ole DB\msdaosp.dll
%Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
%Program Files%\Common Files\System\Ole DB\msdaps.dll
%Program Files%\Common Files\System\Ole DB\msdasc.dll
%Program Files%\Common Files\System\Ole DB\msdasql.dll
%Program Files%\Common Files\System\Ole DB\msdasqlr.dll
%Program Files%\Common Files\System\Ole DB\msdatl3.dll
%Program Files%\Common Files\System\Ole DB\msdatt.dll
%Program Files%\Common Files\System\Ole DB\msdaurl.dll
%Program Files%\Common Files\System\Ole DB\msxactps.dll
%Program Files%\Common Files\System\Ole DB\oledb32.dll
%Program Files%\Common Files\System\Ole DB\oledb32r.dll
%Program Files%\Common Files\System\Ole DB\sqloledb.dll
%Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
%Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
%Program Files%\Common Files\System\wab32.dll
%Program Files%\Common Files\System\wab32res.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
%Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
%Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
%System%\cfgbkend.dll
%System%\cfgmgr32.dll
%System%\charmap.exe
%System%\chkdsk.exe
%System%\chkntfs.exe
%System%\ciadmin.dll
%System%\cic.dll
%System%\cidaemon.exe
%System%\ciodm.dll
%System%\cipher.exe
%System%\cisvc.exe
%System%\ckcnv.exe
%System%\clb.dll
%System%\clbcatex.dll
%System%\clbcatq.dll
%System%\cleanmgr.exe
%System%\cliconf.chm
%System%\cliconfg.dll
%System%\cliconfg.exe
%System%\clipbrd.exe
%System%\clipsrv.exe
%System%\clusapi.dll
%System%\cmcfg32.dll
%System%\cmd.exe
%System%\cmdial32.dll
%System%\cmdl32.exe
%System%\cmmon32.exe
%System%\cmpbk32.dll
%System%\cmprops.dll
%System%\cmsetACL.dll
%System%\cmstp.exe
%System%\cmutil.dll
%System%\cnbjmon.dll
%System%\cnetcfg.dll
%System%\cnvfat.dll
%System%\colbact.dll
%System%\Com\comadmin.dll
%System%\Com\comempty.dat
%System%\Com\comrepl.exe
%System%\Com\comrereg.exe
%System%\comaddin.dll
%System%\comcat.dll
%System%\comctl32.dll
%System%\comdlg32.dll
%System%\commdlg.dll
%System%\comp.exe
%System%\compact.exe
%System%\compatUI.dll
%System%\compobj.dll
%System%\compstui.dll
%System%\comrepl.dll
%System%\comres.dll
%System%\comsnap.dll
%System%\comsvcs.dll
%System%\comuid.dll
%System%\config\systemprofile\Application Data\desktop.ini
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
%System%\config\systemprofile\Cookies\index.dat
%System%\config\systemprofile\Desktop\vcredist_x86.exe
%System%\config\systemprofile\Desktop\WinPcap_4_1_2.exe
%System%\config\systemprofile\Favorites\Desktop.ini
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
%System%\config\systemprofile\Local Settings\desktop.ini
%System%\config\systemprofile\Local Settings\History\desktop.ini
%System%\config\systemprofile\Local Settings\History\History.IE5\desktop.ini
%System%\config\systemprofile\Local Settings\History\History.IE5\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010120620101213\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010121320101214\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010122820101229\index.dat
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI5DA7.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI6BB9.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI5DA7.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI6BB9.txt
%System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_42c.dat
%System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_740.dat
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0XIJ0DEZ\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\16[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[3].htm
%Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
%Program Files%\Internet Explorer\Connection Wizard\icwres.dll
%Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
%Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
%Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
%Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
%Program Files%\Internet Explorer\Connection Wizard\isignup.exe
%Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
%Program Files%\Internet Explorer\HMMAPI.DLL
%Program Files%\Internet Explorer\iedw.exe
%Program Files%\Internet Explorer\IEXPLORE.EXE
%Program Files%\Messenger\custsat.dll
%Program Files%\Messenger\logowin.gif
%Program Files%\Messenger\lvback.gif
%Program Files%\Messenger\msgsc.dll
%Program Files%\Messenger\msgslang.dll
%Program Files%\Messenger\msmsgs.exe
%Program Files%\Messenger\newalert.wav
%Program Files%\Messenger\newemail.wav
%Program Files%\Messenger\online.wav
%Program Files%\Messenger\type.wav
%Program Files%\Messenger\xpmsgr.chm
%Program Files%\Movie Maker\moviemk.exe
%Program Files%\Movie Maker\MUI\0409\moviemk.chm
%Program Files%\Movie Maker\Shared\Empty.txt
%Program Files%\Movie Maker\Shared\news.png
%Program Files%\Movie Maker\Shared\paint.png
%Program Files%\Movie Maker\Shared\Profiles\Blank.txt
%Program Files%\Movie Maker\Shared\Sample1.jpg
%Program Files%\Movie Maker\Shared\Sample2.jpg
%Program Files%\Movie Maker\WMM2AE.dll
%Program Files%\Movie Maker\WMM2ERES.dll
%Program Files%\Movie Maker\WMM2EXT.dll
%Program Files%\Movie Maker\WMM2FILT.dll
%Program Files%\Movie Maker\WMM2FXA.dll
%Program Files%\Movie Maker\WMM2FXB.dll
%Program Files%\Movie Maker\WMM2RES.dll
%Program Files%\Movie Maker\WMM2RES2.dll
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\bottom_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box01[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box02[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box08[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\header00b[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\report_image[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\table_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\box07[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\dropdown[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\footer00[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\header02[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\import[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_bottom3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_top3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\transpix[1].gif
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
%Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
%Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
%Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
%Program Files%\MSN Gaming Zone\Windows\bckg.dll
%Program Files%\MSN Gaming Zone\Windows\bckgres.dll
%Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
%Program Files%\MSN Gaming Zone\Windows\chkr.dll
%Program Files%\MSN Gaming Zone\Windows\chkrres.dll
%Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
%Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtz.dll
%Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
%Program Files%\MSN Gaming Zone\Windows\rvse.dll
%Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvl.dll
%Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
%Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
%Program Files%\MSN Gaming Zone\Windows\zClientm.exe
%Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
%Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
%Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
%Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
%Program Files%\NetMeeting\Blip.wav
%Program Files%\NetMeeting\callcont.dll
%Program Files%\NetMeeting\cb32.exe
%Program Files%\NetMeeting\conf.exe
%Program Files%\NetMeeting\confmrsl.dll
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8XQVK9U7\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\K96JWPA7\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OLQ78TEZ\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\background[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box03[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box04[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box06[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\config[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\top_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[5].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\bottom_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\box09[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\table_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\top_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\users[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
%System%\config\systemprofile\My Documents\desktop.ini
%System%\config\systemprofile\My Documents\My Music\Desktop.ini
%System%\config\systemprofile\My Documents\My Music\Sample Music.lnk
%System%\config\systemprofile\My Documents\My Pictures\Desktop.ini
%System%\config\systemprofile\My Documents\My Pictures\Sample Pictures.lnk
%System%\config\systemprofile\NTUSER.DAT
%System%\config\systemprofile\Recent\Desktop.ini
%System%\config\systemprofile\Recent\server.lnk
%System%\config\systemprofile\SendTo\desktop.ini
%System%\config\systemprofile\Start Menu\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Address Book.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini
%Program Files%\NetMeeting\dcap32.dll
%Program Files%\NetMeeting\h323cc.dll
%Program Files%\NetMeeting\MST120.DLL
%Program Files%\NetMeeting\MST123.DLL
%Program Files%\NetMeeting\nac.dll
%Program Files%\NetMeeting\netmeet.htm
%Program Files%\NetMeeting\nmas.dll
%Program Files%\NetMeeting\nmasnt.dll
%Program Files%\NetMeeting\nmchat.dll
%Program Files%\NetMeeting\nmcom.dll
%Program Files%\NetMeeting\nmft.dll
%Program Files%\NetMeeting\nmoldwb.dll
%Program Files%\NetMeeting\nmwb.dll
%Program Files%\NetMeeting\rrcm.dll
%Program Files%\NetMeeting\TestSnd.wav
%Program Files%\NetMeeting\wb32.exe
%Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
%Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
%Program Files%\Outlook Express\msimn.exe
%Program Files%\Outlook Express\msoe.dll
%Program Files%\Outlook Express\msoe.txt
%Program Files%\Outlook Express\msoeres.dll
%Program Files%\Outlook Express\oeimport.dll
%Program Files%\Outlook Express\oemig50.exe
%Program Files%\Outlook Express\oemiglib.dll
%Program Files%\Outlook Express\setup50.exe
%Program Files%\Outlook Express\wab.exe
%Program Files%\Outlook Express\wabfind.dll
%Program Files%\Outlook Express\wabimp.dll
%Program Files%\Outlook Express\wabmig.exe
%Program Files%\Windows Media Player\custsat.dll
%Program Files%\Windows Media Player\migrate.exe
%Program Files%\Windows Media Player\mplayer2.exe
%Program Files%\Windows Media Player\mpvis.dll
%Program Files%\Windows Media Player\npdrmv2.dll
%Program Files%\Windows Media Player\npdrmv2.zip
%Program Files%\Windows Media Player\npds.zip
%Program Files%\Windows Media Player\npdsplay.dll
%Program Files%\Windows Media Player\npwmsdrm.dll
%Program Files%\Windows Media Player\setup_wm.exe
%Program Files%\Windows Media Player\wmpband.dll
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk
%System%\config\systemprofile\Start Menu\Programs\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Internet Explorer.lnk
%System%\config\systemprofile\Start Menu\Programs\Outlook Express.lnk
%System%\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk
%System%\config\systemprofile\Start Menu\Programs\Startup\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk
%System%\config\systemprofile\Templates\excel.xls
%System%\config\systemprofile\Templates\excel4.xls
%System%\config\systemprofile\Templates\powerpnt.ppt
%System%\config\systemprofile\Templates\sndrec.wav
%System%\config\systemprofile\Templates\winword.doc
%System%\config\systemprofile\Templates\winword2.doc
%System%\confmsp.dll
%System%\conime.exe
%System%\console.dll
%System%\control.exe
%System%\convert.exe
%System%\corpol.dll
%System%\country.sys
%System%\credui.dll
%System%\crtdll.dll
%System%\crypt32.dll
%System%\cryptdlg.dll
%System%\cryptdll.dll
%System%\cryptext.dll
%System%\cryptnet.dll
%System%\cryptsvc.dll
%System%\cryptui.dll
%System%\cscdll.dll
%System%\cscript.exe
%System%\cscui.dll
%System%\csrsrv.dll
%System%\csrss.exe
%System%\csseqchk.dll
%System%\ctfmon.exe
%System%\ctl3d32.dll
%System%\ctl3dv2.dll
%Program Files%\Windows Media Player\wmplayer.exe
%Program Files%\Windows Media Player\wmpns.dll
%Program Files%\Windows NT\Accessories\wordpad.exe
%Program Files%\Windows NT\dialer.exe
%Program Files%\Windows NT\htrn_jis.dll
%Program Files%\Windows NT\hypertrm.exe
%Program Files%\Windows NT\Pinball\FONT.DAT
%Program Files%\Windows NT\Pinball\PINBALL.DAT
%Program Files%\Windows NT\Pinball\PINBALL.EXE
%Program Files%\Windows NT\Pinball\SOUND1.WAV
%Program Files%\Windows NT\Pinball\SOUND104.WAV
%Program Files%\Windows NT\Pinball\SOUND105.WAV
%Program Files%\Windows NT\Pinball\SOUND108.WAV
%Program Files%\Windows NT\Pinball\SOUND111.WAV
%Program Files%\Windows NT\Pinball\SOUND112.WAV
%Program Files%\Windows NT\Pinball\SOUND12.WAV
%Program Files%\Windows NT\Pinball\SOUND13.WAV
%Program Files%\Windows NT\Pinball\SOUND131.WAV
%Program Files%\Windows NT\Pinball\SOUND136.WAV
%Program Files%\Windows NT\Pinball\SOUND14.WAV
%Program Files%\Windows NT\Pinball\SOUND16.WAV
%Program Files%\Windows NT\Pinball\SOUND17.WAV
%Program Files%\Windows NT\Pinball\SOUND18.WAV
%Program Files%\Windows NT\Pinball\SOUND181.WAV
%Program Files%\Windows NT\Pinball\SOUND19.WAV
%Program Files%\Windows NT\Pinball\SOUND20.WAV
%Program Files%\Windows NT\Pinball\SOUND21.WAV
%Program Files%\Windows NT\Pinball\SOUND22.WAV
%Program Files%\Windows NT\Pinball\SOUND24.WAV
%Program Files%\Windows NT\Pinball\SOUND240.WAV
%Program Files%\Windows NT\Pinball\SOUND243.WAV
%Program Files%\Windows NT\Pinball\SOUND25.WAV
%Program Files%\Windows NT\Pinball\SOUND26.WAV
%Program Files%\Windows NT\Pinball\SOUND27.WAV
%Program Files%\Windows NT\Pinball\SOUND28.WAV
%Program Files%\Windows NT\Pinball\SOUND29.WAV
%Program Files%\Windows NT\Pinball\SOUND3.WAV
%Program Files%\Windows NT\Pinball\SOUND30.WAV
%Program Files%\Windows NT\Pinball\SOUND34.WAV
%Program Files%\Windows NT\Pinball\SOUND35.WAV
%Program Files%\Windows NT\Pinball\SOUND36.WAV
%Program Files%\Windows NT\Pinball\SOUND38.WAV
%Program Files%\Windows NT\Pinball\SOUND39.WAV
%Program Files%\Windows NT\Pinball\SOUND4.WAV
%Program Files%\Windows NT\Pinball\SOUND42.WAV
%Program Files%\Windows NT\Pinball\SOUND43.WAV
%Program Files%\Windows NT\Pinball\SOUND45.WAV
%Program Files%\Windows NT\Pinball\SOUND49.WAV
%Program Files%\Windows NT\Pinball\SOUND49D.WAV
%Program Files%\Windows NT\Pinball\SOUND5.WAV
%Program Files%\Windows NT\Pinball\SOUND50.WAV
%Program Files%\Windows NT\Pinball\SOUND528.WAV
%Program Files%\Windows NT\Pinball\SOUND53.WAV
%Program Files%\Windows NT\Pinball\SOUND54.WAV
%Program Files%\Windows NT\Pinball\SOUND55.WAV
%Program Files%\Windows NT\Pinball\SOUND560.WAV
%Program Files%\Windows NT\Pinball\SOUND563.WAV
%Program Files%\Windows NT\Pinball\SOUND57.WAV
%Program Files%\Windows NT\Pinball\SOUND58.WAV
%Program Files%\Windows NT\Pinball\SOUND6.WAV
%Program Files%\Windows NT\Pinball\SOUND65.WAV
%Program Files%\Windows NT\Pinball\SOUND68.WAV
%Program Files%\Windows NT\Pinball\SOUND7.WAV
%Program Files%\Windows NT\Pinball\SOUND713.WAV
%Program Files%\Windows NT\Pinball\SOUND735.WAV
%Program Files%\Windows NT\Pinball\SOUND8.WAV
%Program Files%\Windows NT\Pinball\SOUND827.WAV
%Program Files%\Windows NT\Pinball\SOUND9.WAV
%Program Files%\Windows NT\Pinball\SOUND999.WAV
%Program Files%\Windows NT\Pinball\table.bmp
%Program Files%\WinPcap\rpcapd.exe
%Program Files%\WinPcap\Uninstall.exe
%System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-1003\desktop.ini
%System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-500\desktop.ini
%System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt
%System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
%System Root%\vcredist_x86.exe
%Windows%\AppPatch\AcGenral.dll
%Windows%\AppPatch\AcLayers.dll
%Windows%\AppPatch\AcLua.dll
%Windows%\AppPatch\AcSpecfc.dll
%Windows%\AppPatch\AcXtrnal.dll
%Windows%\Blue Lace 16.bmp
%Windows%\bootstat.dat
%Windows%\clock.avi
%Windows%\Coffee Bean.bmp
%Windows%\control.ini
%Windows%\desktop.ini
%Windows%\Downloaded Program Files\desktop.ini
%Windows%\ehome\custsat.dll
%Windows%\explorer.exe
%Windows%\FeatherTexture.bmp
%Windows%\Fonts\arial.ttf
%Windows%\Fonts\arialbd.ttf
%Windows%\Fonts\arialbi.ttf
%Windows%\Fonts\ariali.ttf
%Windows%\Fonts\ariblk.ttf
%Windows%\Fonts\comic.ttf
%Windows%\Fonts\comicbd.ttf
%Windows%\Fonts\cour.ttf
%Windows%\Fonts\courbd.ttf
%Windows%\Fonts\courbi.ttf
%Windows%\Fonts\couri.ttf
%Windows%\Fonts\desktop.ini
%Windows%\Fonts\estre.ttf
%Windows%\Fonts\framd.ttf
%Windows%\Fonts\framdit.ttf
%Windows%\Fonts\gautami.ttf
%Windows%\Fonts\georgia.ttf
%Windows%\Fonts\georgiab.ttf
%Windows%\Fonts\georgiai.ttf
%Windows%\Fonts\georgiaz.ttf
%Windows%\Fonts\impact.ttf
%Windows%\Fonts\kartika.ttf
%Windows%\Fonts\latha.ttf
%Windows%\Fonts\lsans.ttf
%Windows%\Fonts\lsansd.ttf
%Windows%\Fonts\lsansdi.ttf
%Windows%\Fonts\lsansi.ttf
%Windows%\Fonts\lucon.ttf
%Windows%\Fonts\l_10646.ttf
%Windows%\Fonts\mangal.ttf
%Windows%\Fonts\marlett.ttf
%Windows%\Fonts\micross.ttf
%Windows%\Fonts\mvboli.ttf
%Windows%\Fonts\pala.ttf
%Windows%\Fonts\palab.ttf
%Windows%\Fonts\palabi.ttf
%Windows%\Fonts\palai.ttf
%Windows%\Fonts\raavi.ttf
%Windows%\Fonts\shruti.ttf
%Windows%\Fonts\sylfaen.ttf
%Windows%\Fonts\symbol.ttf
%Windows%\Fonts\tahoma.ttf
%Windows%\Fonts\tahomabd.ttf
%Windows%\Fonts\times.ttf
%Windows%\Fonts\timesbd.ttf
%Windows%\Fonts\timesbi.ttf
%Windows%\Fonts\timesi.ttf
%Windows%\Fonts\trebuc.ttf
%Windows%\Fonts\trebucbd.ttf
%Windows%\Fonts\trebucbi.ttf
%Windows%\Fonts\trebucit.ttf
%Windows%\Fonts\tunga.ttf
%Windows%\Fonts\verdana.ttf
%Windows%\Fonts\verdanab.ttf
%Windows%\Fonts\verdanai.ttf
%Windows%\Fonts\verdanaz.ttf
%Windows%\Fonts\vrinda.ttf
%Windows%\Fonts\webdings.ttf
%Windows%\Fonts\wingding.ttf
%Windows%\Gone Fishing.bmp
%Windows%\Greenstone.bmp
%Windows%\Help\access.chm
%Windows%\Help\accessib.chm
%Windows%\Help\acc_dis.chm
%Windows%\Help\aclui.chm
%Windows%\Help\addremov.chm
%Windows%\Help\admtools.chm
%Windows%\Help\apps.chm
%Windows%\Help\apps_sp.chm
%Windows%\Help\article.chm
%Windows%\Help\atm.chm
%Windows%\Help\audit.chm
%Windows%\Help\bckg.chm
%Windows%\Help\blurbs.chm
%Windows%\Help\blutooth.chm
%Windows%\Help\bnts.dll
%Windows%\Help\bootcons.chm
%Windows%\Help\brief.chm
%Windows%\Help\calc.chm
%Windows%\Help\camera.chm
%Windows%\Help\cdmedia.chm
%Windows%\Help\certmgr.chm
%Windows%\Help\charmap.chm
%Windows%\Help\chkr.chm
%Windows%\Help\ciadmin.htm
%Windows%\Help\ciquery.htm
%Windows%\Help\clipbrd.chm
%Windows%\Help\cmconcepts.chm
%Windows%\Help\colormgt.chm
%Windows%\Help\comexp.chm
%Windows%\Help\common.chm
%Windows%\Help\compfldr.chm
%Windows%\Help\compmgmt.chm
%Windows%\Help\conf.chm
%Windows%\Help\conf1.chm
%Windows%\Help\cpanel.chm
%Windows%\Help\cyycoins.chm
%Windows%\Help\cyzcoins.chm
%Windows%\Help\datetime.chm
%Windows%\Help\ddeshare.chm
%Windows%\Help\defrag.chm
%Windows%\Help\devmgr.chm
%Windows%\Help\diagboot.chm
%Windows%\Help\dialer.chm
%Windows%\Help\digiras.chm
%Windows%\Help\diskmgmt.chm
%Windows%\Help\display.chm
%Windows%\Help\dkconcepts.chm
%Windows%\Help\drvvfp.chm
%Windows%\Help\drwtsn32.chm
%Windows%\Help\dskquoui.chm
%Windows%\Help\dxdiag.chm
%Windows%\Help\els.chm
%Windows%\Help\encrypt.chm
%Windows%\Help\eudcedit.chm
%Windows%\Help\evconcepts.chm
%Windows%\Help\filefold.chm
%Windows%\Help\file_srv.chm
%Windows%\Help\find.chm
%Windows%\Help\folderop.chm
%Windows%\Help\fonts.chm
%Windows%\Help\freecell.chm
%Windows%\Help\fxsclnt.chm
%Windows%\Help\fxscover.chm
%System%\d3d8.dll
%System%\d3d8thk.dll
%System%\d3d9.dll
%System%\d3dim.dll
%System%\d3dim700.dll
%System%\d3dpmesh.dll
%System%\d3dramp.dll
%System%\d3drm.dll
%System%\d3dxof.dll
%System%\danim.dll

(註：%Windows%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows9x、Me、XP、Server 2003の場合、"C:\Window"、WindowsNT および 2000の場合、"C:\WINNT" です。. %System Root%は、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。. %Desktop%フォルダは、Windows 98 および MEの場合、通常 "C:\Windows\Profiles\＜ユーザ名＞\デスクトップ" です。 Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\デスクトップ"、Windows 2000、XP、Server 2003の場合は "C:\Documents and Settings\＜ユーザ名＞\デスクトップ" です。. %User Profile% フォルダは、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞"、Windows NTでは、"C:\WINNT\Profiles\＜ユーザ名＞"、Windows 2000, XP, Server 2003の場合は、"C:\Documents and Settings\＜ユーザ名＞" です。. %Application Data%フォルダは、 Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" 、 Windows NTの場合 "C:\WINNT\Profiles\＜ユーザ名＞\Application Data"、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Application Data" です。. %User Temp%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 98 および MEの場合、"C:\Windows\Temp"、Windows NT の場合、"C:\Profiles\＜ユーザー名＞\TEMP"、Windows 2000、XP、Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\TEMP" です。. %Start Menu%フォルダは、通常、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Start Menu" 、Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\Start Menu "、Windows 2000、XP、Server 2003の場合、"C:\Windows\Start Menu" および "C:\Documents and Settings\＜ユーザ名＞\Start Menu " です。. %User Startup%フォルダは、通常、Windows 98 および MEの場合、"C:\Windows\Profiles\＜ユーザ名＞\Start Menu\Programs\Startup" 、Windows NTの場合、"C:\WINNT\Profiles\＜ユーザ名＞\Start Menu\Programs\Startup"、Windows 2000、XP、Server 2003の場合、"C:\Documents and Settings\＜ユーザ名＞\Start Menu\Programs\Startup " です。. %Common Startup%フォルダは、Windows 2000、XP、Server 2003 の場合 "C:\Documents and Settings\All Users\スタートメニュー\プログラム\スタートアップ" 、 Windows NTの場合 "C:\WINNT\Profiles\All Users\プログラム\スタートアップ"、Windows 98 および MEの場合、"C:\Windows\スタートメニュー\プログラム\スタートアップ" です。. %Program Files%は、標準設定では "C:\Program Files" です。. %System%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 98 および MEの場合、"C:\Windows\System"、Windows NT および 2000 の場合、"C:\WinNT\System32"、Windows XP および Server 2003 の場合、"C:\Windows\System32" です。)

作成活動

マルウェアは、以下のファイルを作成します。

%User Temp%\report_18-04-2012_19-31-02-KJLG.bin
%User Temp%\Registry-Grabbing.reg
%User Temp%\18-04-2012_19-31-02-File-Paths.txt
%User Temp%\cleaner.exe
%User Temp%\18-04-2012_19-31-02-Files-Are-Copied.txt
%System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
%System Root%\ufr_files\Registry-Grabbing.reg
%System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt

(註：%User Temp%はWindowsの種類とインストール時の設定などにより異なります。標準設定では、Windows 98 および MEの場合、"C:\Windows\Temp"、Windows NT の場合、"C:\Profiles\＜ユーザー名＞\TEMP"、Windows 2000、XP、Server 2003 の場合、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\TEMP" です。. %System Root%は、標準設定では "C:" です。また、オペレーティングシステムが存在する場所です。)

その他

マルウェアは、以下の不正なWebサイトにアクセスします。

http://whatismyip.{BLOCKED}i.com

このウイルス情報は、自動解析システムにより作成されました。

対応方法

対応検索エンジン: 9.200

手順 1

Windows XP および Windows Server 2003 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

以下のファイルを検索し削除します。

[ 詳細 ]

コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%User Temp%\report_18-04-2012_19-31-02-KJLG.bin
%User Temp%\Registry-Grabbing.reg
%User Temp%\18-04-2012_19-31-02-File-Paths.txt
%User Temp%\cleaner.exe
%User Temp%\18-04-2012_19-31-02-Files-Are-Copied.txt
%System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
%System Root%\ufr_files\Registry-Grabbing.reg
%System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt

手順 3

以下のフォルダを検索し削除します。

[ 詳細 ]

註：このフォルダは、隠しフォルダとして設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%System Root%\ufr_files

手順 4

最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「TROJ_ANOMALY.BBN」と検出したファイルはすべて削除してください。検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

手順 5

以下のファイルをバックアップを用いて修復します。なお、マイクロソフト製品に関連したファイルのみ修復されます。このマルウェア／グレイウェア／スパイウェアが同社製品以外のプログラムをも削除した場合には、該当プログラムを再度インストールする必要があります。

%System Root%\boot.ini
%System Root%\CONFIG.SYS
%Desktop%.ini
%User Profile%\Internet Explorer\brndlog.txt
%User Profile%\Quick Launch\Launch Internet Explorer Browser.lnk
%User Profile%\Cookies\index.dat
%Application Data%\Microsoft\Internet Explorer\MSIMGSIZ.DAT
%Application Data%\Microsoft\Windows\UsrClass.dat
%User Profile%\History.IE5\index.dat
%User Profile%\MSHist012010121320101220\index.dat
%User Profile%\MSHist012010122720110103\index.dat
%User Profile%\MSHist012011010720110108\index.dat
%User Temp%\dd_vcredistMSI5DA7.txt
%User Temp%\dd_vcredistMSI6BB9.txt
%User Temp%\dd_vcredistUI5DA7.txt
%User Temp%\dd_vcredistUI6BB9.txt
%User Temp%\Perflib_Perfdata_42c.dat
%User Temp%\Perflib_Perfdata_740.dat
%Temporary Internet Files%\Content.IE5\2TPM8950\10[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\16[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\2TPM8950\bottom_right3[1].png
%Temporary Internet Files%\Content.IE5\2TPM8950\box01[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\box02[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\box08[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\desktop.ini
%Temporary Internet Files%\Content.IE5\2TPM8950\header00b[1].gif
%Temporary Internet Files%\Content.IE5\2TPM8950\report_image[1].png
%Temporary Internet Files%\Content.IE5\2TPM8950\table_left3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\10[1].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\4H9MXTT9\box07[1].gif
%Temporary Internet Files%\Content.IE5\4H9MXTT9\desktop.ini
%Temporary Internet Files%\Content.IE5\4H9MXTT9\dropdown[1].jpg
%Temporary Internet Files%\Content.IE5\4H9MXTT9\footer00[1].gif
%Temporary Internet Files%\Content.IE5\4H9MXTT9\header02[1].jpg
%Temporary Internet Files%\Content.IE5\4H9MXTT9\import[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\table_bottom3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\table_top3[1].png
%Temporary Internet Files%\Content.IE5\4H9MXTT9\transpix[1].gif
%Temporary Internet Files%\Content.IE5\desktop.ini
%Temporary Internet Files%\Content.IE5\index.dat
%Temporary Internet Files%\Content.IE5\SMCZPN4M\10[1].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\SMCZPN4M\background[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box03[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box04[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\box06[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\config[1].gif
%Temporary Internet Files%\Content.IE5\SMCZPN4M\desktop.ini
%Temporary Internet Files%\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
%Temporary Internet Files%\Content.IE5\SMCZPN4M\top_right3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[1].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[2].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[3].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[4].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\192.168.100[5].htm
%Temporary Internet Files%\Content.IE5\X9QQH2D9\bottom_left3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\box09[1].gif
%Temporary Internet Files%\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\desktop.ini
%Temporary Internet Files%\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
%Temporary Internet Files%\Content.IE5\X9QQH2D9\table_right3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\top_left3[1].png
%Temporary Internet Files%\Content.IE5\X9QQH2D9\users[1].png
%Temporary Internet Files%\desktop.ini
%User Profile%\My Music\Sample Music.lnk
%User Profile%\My Pictures\Sample Pictures.lnk
%User Profile%\NTUSER.DAT
%User Profile%\ntuser.ini
%User Profile%\Recent\server.lnk
%User Profile%\Recent\set_hostname.lnk
%User Profile%\Recent\set_server.lnk
%User Profile%\Recent\the_configurator.lnk
%Start Menu%\desktop.ini
%Start Menu%\Programs\Accessories\Accessibility\desktop.ini
%Start Menu%\Programs\Accessories\Accessibility\Magnifier.lnk
%Start Menu%\Programs\Accessories\Accessibility\Narrator.lnk
%Start Menu%\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
%Start Menu%\Programs\Accessories\Accessibility\Utility Manager.lnk
%Start Menu%\Programs\Accessories\Address Book.lnk
%Start Menu%\Programs\Accessories\Command Prompt.lnk
%Start Menu%\Programs\Accessories\desktop.ini
%Start Menu%\Programs\Accessories\Entertainment\desktop.ini
%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
%Start Menu%\Programs\Accessories\Notepad.lnk
%Start Menu%\Programs\Accessories\Program Compatibility Wizard.lnk
%Start Menu%\Programs\Accessories\Synchronize.lnk
%Start Menu%\Programs\Accessories\Tour Windows XP.lnk
%Start Menu%\Programs\Accessories\Windows Explorer.lnk
%Start Menu%\Programs\desktop.ini
%Start Menu%\Programs\Internet Explorer.lnk
%Start Menu%\Programs\Outlook Express.lnk
%Start Menu%\Programs\Remote Assistance.lnk
%User Startup%\desktop.ini
%Start Menu%\Programs\Windows Media Player.lnk
%User Profile%\Templates\excel.xls
%User Profile%\Templates\excel4.xls
%User Profile%\Templates\powerpnt.ppt
%User Profile%\Templates\sndrec.wav
%User Profile%\Templates\winword.doc
%User Profile%\Templates\winword2.doc
%User Profile%\Media Player\DefaultStore_59R.bin
%User Profile%\Media Player\UserMigratedStore_59R.bin
%User Profile%\Pbk\sharedaccess.ini
%User Profile%\Downloader\qmgr0.dat
%User Profile%\Downloader\qmgr1.dat
%User Profile%\User Account Pictures\Administrator.bmp
%User Profile%\Default Pictures\airplane.bmp
%User Profile%\Default Pictures\astronaut.bmp
%User Profile%\Default Pictures\ball.bmp
%User Profile%\Default Pictures\beach.bmp
%User Profile%\Default Pictures\butterfly.bmp
%User Profile%\Default Pictures\car.bmp
%User Profile%\Default Pictures\cat.bmp
%User Profile%\Default Pictures\chess.bmp
%User Profile%\Default Pictures\dirt bike.bmp
%User Profile%\Default Pictures\dog.bmp
%User Profile%\Default Pictures\drip.bmp
%User Profile%\Default Pictures\duck.bmp
%User Profile%\Default Pictures\fish.bmp
%User Profile%\Default Pictures\frog.bmp
%User Profile%\Default Pictures\guitar.bmp
%User Profile%\Default Pictures\horses.bmp
%User Profile%\Default Pictures\kick.bmp
%User Profile%\Default Pictures\lift-off.bmp
%User Profile%\Default Pictures\palm tree.bmp
%User Profile%\Default Pictures\pink flower.bmp
%User Profile%\Default Pictures\red flower.bmp
%User Profile%\Default Pictures\skater.bmp
%User Profile%\Default Pictures\snowflake.bmp
%User Profile%\User Account Pictures\guest.bmp
%User Profile%\User Account Pictures\rsa.bmp
%User Profile%\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
%User Profile%\Sample Music\New Stories (Highway Blues).wma
%User Profile%\Sample Pictures\Blue hills.jpg
%User Profile%\Sample Pictures\Sunset.jpg
%User Profile%\Sample Pictures\Water lilies.jpg
%User Profile%\Sample Pictures\Winter.jpg
%Start Menu%\Programs\Accessories\Accessibility\Accessibility Wizard.lnk
%Start Menu%\Programs\Accessories\Calculator.lnk
%Start Menu%\Programs\Accessories\Communications\desktop.ini
%Start Menu%\Programs\Accessories\Communications\HyperTerminal.lnk
%Start Menu%\Programs\Accessories\Communications\Network Connections.lnk
%Start Menu%\Programs\Accessories\Communications\Network Setup Wizard.lnk
%Start Menu%\Programs\Accessories\Communications\New Connection Wizard.lnk
%Start Menu%\Programs\Accessories\Communications\Remote Desktop Connection.lnk
%Start Menu%\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk
%Start Menu%\Programs\Accessories\Entertainment\Sound Recorder.lnk
%Start Menu%\Programs\Accessories\Entertainment\Volume Control.lnk
%Start Menu%\Programs\Accessories\Paint.lnk
%Start Menu%\Programs\Accessories\System Tools\Backup.lnk
%Start Menu%\Programs\Accessories\System Tools\Character Map.lnk
%Start Menu%\Programs\Accessories\System Tools\desktop.ini
%Start Menu%\Programs\Accessories\System Tools\Disk Cleanup.lnk
%Start Menu%\Programs\Accessories\System Tools\Disk Defragmenter.lnk
%Start Menu%\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk
%Start Menu%\Programs\Accessories\System Tools\Scheduled Tasks.lnk
%Start Menu%\Programs\Accessories\System Tools\Security Center.lnk
%Start Menu%\Programs\Accessories\System Tools\System Information.lnk
%Start Menu%\Programs\Accessories\System Tools\System Restore.lnk
%Start Menu%\Programs\Accessories\WordPad.lnk
%Start Menu%\Programs\Administrative Tools\Component Services.lnk
%Start Menu%\Programs\Administrative Tools\Computer Management.lnk
%Start Menu%\Programs\Administrative Tools\Data Sources (ODBC).lnk
%Start Menu%\Programs\Administrative Tools\desktop.ini
%Start Menu%\Programs\Administrative Tools\Event Viewer.lnk
%Start Menu%\Programs\Administrative Tools\Local Security Policy.lnk
%Start Menu%\Programs\Administrative Tools\Performance.lnk
%Start Menu%\Programs\Administrative Tools\Services.lnk
%Start Menu%\Programs\Games\desktop.ini
%Start Menu%\Programs\Games\Freecell.lnk
%Start Menu%\Programs\Games\Hearts.lnk
%Start Menu%\Programs\Games\Internet Backgammon.lnk
%Start Menu%\Programs\Games\Internet Checkers.lnk
%Start Menu%\Programs\Games\Internet Hearts.lnk
%Start Menu%\Programs\Games\Internet Reversi.lnk
%Start Menu%\Programs\Games\Internet Spades.lnk
%Start Menu%\Programs\Games\Minesweeper.lnk
%Start Menu%\Programs\Games\Pinball.lnk
%Start Menu%\Programs\Games\Solitaire.lnk
%Start Menu%\Programs\Games\Spider Solitaire.lnk
%Start Menu%\Programs\MSN.lnk
%Common Startup%\desktop.ini
%Start Menu%\Programs\Windows Messenger.lnk
%Start Menu%\Programs\Windows Movie Maker.lnk
%Start Menu%\Programs\WinPcap\Uninstall WinPcap 4.1.2.lnk
%Start Menu%\Set Program Access and Defaults.lnk
%Start Menu%\Windows Catalog.lnk
%Start Menu%\Windows Update.lnk
%Desktop%\vcredist_x86.exe
%Desktop%\WinPcap_4_1_2.exe
%User Profile%\MSHist012010120620101213\index.dat
%User Profile%\MSHist012010121320101214\index.dat
%Temporary Internet Files%\Content.IE5\2BAREZOP\desktop.ini
%Temporary Internet Files%\Content.IE5\IX09SXE9\desktop.ini
%Temporary Internet Files%\Content.IE5\M94XI96V\desktop.ini
%Temporary Internet Files%\Content.IE5\O7EHUPCN\desktop.ini
%User Temp%\dd_vcredistMSI6806.txt
%User Temp%\dd_vcredistUI6806.txt
%Desktop%\Windows Media Player.lnk
%User Profile%\MSHist012010122820101229\index.dat
%User Profile%\Recent\Local Disk (C).lnk
%User Profile%\Recent\sysprep.lnk
%System Root%\IO.SYS
%System Root%\MSDOS.SYS
%System Root%\pagefile.sys
%Program Files%\Common Files\Microsoft Shared\DAO\dao360.dll
%Program Files%\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
%Program Files%\Common Files\Microsoft Shared\Speech\1033\spcplui.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapi.dll
%Program Files%\Common Files\Microsoft Shared\Speech\sapisvr.exe
%Program Files%\Common Files\Microsoft Shared\Stationery\aleabanr.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\amaizrul.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\anabnr2.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\aswrule.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Blank.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Btzhsepa.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\citbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Clear Day.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\fieruled.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Fiesta.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Glacier.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Ivy.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Leaves.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Maize.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Nature.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Network Blitz.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Pie Charts.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\sunbannA.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg
%Program Files%\Common Files\Microsoft Shared\Stationery\Sunflower.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets Bkgrd.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Sweets.htm
%Program Files%\Common Files\Microsoft Shared\Stationery\tech.gif
%Program Files%\Common Files\Microsoft Shared\Stationery\Technical.htm
%Program Files%\Common Files\Microsoft Shared\TextConv\msconv97.dll
%Program Files%\Common Files\Microsoft Shared\Triedit\TRIEDIT.DLL
%Program Files%\Common Files\Microsoft Shared\VC\msdia90.dll
%Program Files%\Common Files\Microsoft Shared\VGX\vgx.dll
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
%Program Files%\Common Files\Microsoft Shared\Web Folders\MSOWS409.DLL
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
%Program Files%\Common Files\MSSoap\Binaries\mssoap1.dll
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033\mssoapr.dll
%Program Files%\Common Files\MSSoap\Binaries\wisc10.dll
%Program Files%\Common Files\Services\bigfoot.bmp
%Program Files%\Common Files\Services\verisign.bmp
%Program Files%\Common Files\Services\whowhere.bmp
%Program Files%\Common Files\SpeechEngines\Microsoft\spcommon.dll
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
%Program Files%\Common Files\System\ado\MDACReadme.htm
%Program Files%\Common Files\System\ado\msader15.dll
%Program Files%\Common Files\System\ado\msado15.dll
%Program Files%\Common Files\System\ado\msadomd.dll
%Program Files%\Common Files\System\ado\msador15.dll
%Program Files%\Common Files\System\ado\msadox.dll
%Program Files%\Common Files\System\ado\msadrh15.dll
%Program Files%\Common Files\System\ado\msjro.dll
%Program Files%\Common Files\System\directdb.dll
%Program Files%\Common Files\System\msadc\msadce.dll
%Program Files%\Common Files\System\msadc\msadcer.dll
%Program Files%\Common Files\System\msadc\msadcf.dll
%Program Files%\Common Files\System\msadc\msadcfr.dll
%Program Files%\Common Files\System\msadc\msadco.dll
%Program Files%\Common Files\System\msadc\msadcor.dll
%Program Files%\Common Files\System\msadc\msadcs.dll
%Program Files%\Common Files\System\msadc\msadds.dll
%Program Files%\Common Files\System\msadc\msaddsr.dll
%Program Files%\Common Files\System\msadc\msdaprsr.dll
%Program Files%\Common Files\System\msadc\msdaprst.dll
%Program Files%\Common Files\System\msadc\msdarem.dll
%Program Files%\Common Files\System\msadc\msdaremr.dll
%Program Files%\Common Files\System\msadc\msdfmap.dll
%Program Files%\Common Files\System\Ole DB\msdadc.dll
%Program Files%\Common Files\System\Ole DB\msdaenum.dll
%Program Files%\Common Files\System\Ole DB\msdaer.dll
%Program Files%\Common Files\System\Ole DB\MSDAIPP.DLL
%Program Files%\Common Files\System\Ole DB\msdaora.dll
%Program Files%\Common Files\System\Ole DB\msdaorar.dll
%Program Files%\Common Files\System\Ole DB\msdaosp.dll
%Program Files%\Common Files\System\Ole DB\MSDAPML.DLL
%Program Files%\Common Files\System\Ole DB\msdaps.dll
%Program Files%\Common Files\System\Ole DB\msdasc.dll
%Program Files%\Common Files\System\Ole DB\msdasql.dll
%Program Files%\Common Files\System\Ole DB\msdasqlr.dll
%Program Files%\Common Files\System\Ole DB\msdatl3.dll
%Program Files%\Common Files\System\Ole DB\msdatt.dll
%Program Files%\Common Files\System\Ole DB\msdaurl.dll
%Program Files%\Common Files\System\Ole DB\msxactps.dll
%Program Files%\Common Files\System\Ole DB\oledb32.dll
%Program Files%\Common Files\System\Ole DB\oledb32r.dll
%Program Files%\Common Files\System\Ole DB\sqloledb.dll
%Program Files%\Common Files\System\Ole DB\sqlsoldb.chm
%Program Files%\Common Files\System\Ole DB\sqlxmlx.dll
%Program Files%\Common Files\System\wab32.dll
%Program Files%\Common Files\System\wab32res.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn.dll
%Program Files%\Internet Explorer\Connection Wizard\icwconn1.exe
%Program Files%\Internet Explorer\Connection Wizard\icwconn2.exe
%Program Files%\Internet Explorer\Connection Wizard\icwdl.dll
%Program Files%\Internet Explorer\Connection Wizard\icwhelp.dll
%Program Files%\Internet Explorer\Connection Wizard\icwres.dll
%Program Files%\Internet Explorer\Connection Wizard\icwrmind.exe
%Program Files%\Internet Explorer\Connection Wizard\icwtutor.exe
%Program Files%\Internet Explorer\Connection Wizard\icwutil.dll
%Program Files%\Internet Explorer\Connection Wizard\inetwiz.exe
%Program Files%\Internet Explorer\Connection Wizard\isignup.exe
%Program Files%\Internet Explorer\Connection Wizard\trialoc.dll
%Program Files%\Internet Explorer\HMMAPI.DLL
%Program Files%\Internet Explorer\iedw.exe
%Program Files%\Internet Explorer\IEXPLORE.EXE
%Program Files%\Messenger\custsat.dll
%Program Files%\Messenger\logowin.gif
%Program Files%\Messenger\lvback.gif
%Program Files%\Messenger\msgsc.dll
%Program Files%\Messenger\msgslang.dll
%Program Files%\Messenger\msmsgs.exe
%Program Files%\Messenger\newalert.wav
%Program Files%\Messenger\newemail.wav
%Program Files%\Messenger\online.wav
%Program Files%\Messenger\type.wav
%Program Files%\Messenger\xpmsgr.chm
%Program Files%\Movie Maker\moviemk.exe
%Program Files%\Movie Maker\MUI\0409\moviemk.chm
%Program Files%\Movie Maker\Shared\Empty.txt
%Program Files%\Movie Maker\Shared\news.png
%Program Files%\Movie Maker\Shared\paint.png
%Program Files%\Movie Maker\Shared\Profiles\Blank.txt
%Program Files%\Movie Maker\Shared\Sample1.jpg
%Program Files%\Movie Maker\Shared\Sample2.jpg
%Program Files%\Movie Maker\WMM2AE.dll
%Program Files%\Movie Maker\WMM2ERES.dll
%Program Files%\Movie Maker\WMM2EXT.dll
%Program Files%\Movie Maker\WMM2FILT.dll
%Program Files%\Movie Maker\WMM2FXA.dll
%Program Files%\Movie Maker\WMM2FXB.dll
%Program Files%\Movie Maker\WMM2RES.dll
%Program Files%\Movie Maker\WMM2RES2.dll
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi
%Program Files%\MSN\MSNCoreFiles\Install\msnms.ico
%Program Files%\MSN\MSNCoreFiles\Install\msnsusii.exe
%Program Files%\MSN\MSNCoreFiles\OOBE\obelog.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemetal.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obemtllc.dll
%Program Files%\MSN\MSNCoreFiles\OOBE\obepopc.dll
%Program Files%\MSN Gaming Zone\Windows\bckg.dll
%Program Files%\MSN Gaming Zone\Windows\bckgres.dll
%Program Files%\MSN Gaming Zone\Windows\bckgzm.exe
%Program Files%\MSN Gaming Zone\Windows\chkr.dll
%Program Files%\MSN Gaming Zone\Windows\chkrres.dll
%Program Files%\MSN Gaming Zone\Windows\chkrzm.exe
%Program Files%\MSN Gaming Zone\Windows\Cmnclim.dll
%Program Files%\MSN Gaming Zone\Windows\Cmnresm.dll
%Program Files%\MSN Gaming Zone\Windows\hrtz.dll
%Program Files%\MSN Gaming Zone\Windows\Hrtzres.dll
%Program Files%\MSN Gaming Zone\Windows\hrtzzm.exe
%Program Files%\MSN Gaming Zone\Windows\rvse.dll
%Program Files%\MSN Gaming Zone\Windows\Rvseres.dll
%Program Files%\MSN Gaming Zone\Windows\Rvsezm.exe
%Program Files%\MSN Gaming Zone\Windows\shvl.dll
%Program Files%\MSN Gaming Zone\Windows\Shvlres.dll
%Program Files%\MSN Gaming Zone\Windows\shvlzm.exe
%Program Files%\MSN Gaming Zone\Windows\UniAnsi.dll
%Program Files%\MSN Gaming Zone\Windows\zClientm.exe
%Program Files%\MSN Gaming Zone\Windows\ZCorem.dll
%Program Files%\MSN Gaming Zone\Windows\zeeverm.dll
%Program Files%\MSN Gaming Zone\Windows\ZNetM.dll
%Program Files%\MSN Gaming Zone\Windows\zoneclim.dll
%Program Files%\MSN Gaming Zone\Windows\zonelibM.dll
%Program Files%\NetMeeting\Blip.wav
%Program Files%\NetMeeting\callcont.dll
%Program Files%\NetMeeting\cb32.exe
%Program Files%\NetMeeting\conf.exe
%Program Files%\NetMeeting\confmrsl.dll
%Program Files%\NetMeeting\dcap32.dll
%Program Files%\NetMeeting\h323cc.dll
%Program Files%\NetMeeting\MST120.DLL
%Program Files%\NetMeeting\MST123.DLL
%Program Files%\NetMeeting\nac.dll
%Program Files%\NetMeeting\netmeet.htm
%Program Files%\NetMeeting\nmas.dll
%Program Files%\NetMeeting\nmasnt.dll
%Program Files%\NetMeeting\nmchat.dll
%Program Files%\NetMeeting\nmcom.dll
%Program Files%\NetMeeting\nmft.dll
%Program Files%\NetMeeting\nmoldwb.dll
%Program Files%\NetMeeting\nmwb.dll
%Program Files%\NetMeeting\rrcm.dll
%Program Files%\NetMeeting\TestSnd.wav
%Program Files%\NetMeeting\wb32.exe
%Program Files%\Online Services\Refer me to more Internet Service Providers.lnk
%Program Files%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk
%Program Files%\Outlook Express\msimn.exe
%Program Files%\Outlook Express\msoe.dll
%Program Files%\Outlook Express\msoe.txt
%Program Files%\Outlook Express\msoeres.dll
%Program Files%\Outlook Express\oeimport.dll
%Program Files%\Outlook Express\oemig50.exe
%Program Files%\Outlook Express\oemiglib.dll
%Program Files%\Outlook Express\setup50.exe
%Program Files%\Outlook Express\wab.exe
%Program Files%\Outlook Express\wabfind.dll
%Program Files%\Outlook Express\wabimp.dll
%Program Files%\Outlook Express\wabmig.exe
%Program Files%\Windows Media Player\custsat.dll
%Program Files%\Windows Media Player\migrate.exe
%Program Files%\Windows Media Player\mplayer2.exe
%Program Files%\Windows Media Player\mpvis.dll
%Program Files%\Windows Media Player\npdrmv2.dll
%Program Files%\Windows Media Player\npdrmv2.zip
%Program Files%\Windows Media Player\npds.zip
%Program Files%\Windows Media Player\npdsplay.dll
%Program Files%\Windows Media Player\npwmsdrm.dll
%Program Files%\Windows Media Player\setup_wm.exe
%Program Files%\Windows Media Player\wmpband.dll
%Program Files%\Windows Media Player\wmplayer.exe
%Program Files%\Windows Media Player\wmpns.dll
%Program Files%\Windows NT\Accessories\wordpad.exe
%Program Files%\Windows NT\dialer.exe
%Program Files%\Windows NT\htrn_jis.dll
%Program Files%\Windows NT\hypertrm.exe
%Program Files%\Windows NT\Pinball\FONT.DAT
%Program Files%\Windows NT\Pinball\PINBALL.DAT
%Program Files%\Windows NT\Pinball\PINBALL.EXE
%Program Files%\Windows NT\Pinball\SOUND1.WAV
%Program Files%\Windows NT\Pinball\SOUND104.WAV
%Program Files%\Windows NT\Pinball\SOUND105.WAV
%Program Files%\Windows NT\Pinball\SOUND108.WAV
%Program Files%\Windows NT\Pinball\SOUND111.WAV
%Program Files%\Windows NT\Pinball\SOUND112.WAV
%Program Files%\Windows NT\Pinball\SOUND12.WAV
%Program Files%\Windows NT\Pinball\SOUND13.WAV
%Program Files%\Windows NT\Pinball\SOUND131.WAV
%Program Files%\Windows NT\Pinball\SOUND136.WAV
%Program Files%\Windows NT\Pinball\SOUND14.WAV
%Program Files%\Windows NT\Pinball\SOUND16.WAV
%Program Files%\Windows NT\Pinball\SOUND17.WAV
%Program Files%\Windows NT\Pinball\SOUND18.WAV
%Program Files%\Windows NT\Pinball\SOUND181.WAV
%Program Files%\Windows NT\Pinball\SOUND19.WAV
%Program Files%\Windows NT\Pinball\SOUND20.WAV
%Program Files%\Windows NT\Pinball\SOUND21.WAV
%Program Files%\Windows NT\Pinball\SOUND22.WAV
%Program Files%\Windows NT\Pinball\SOUND24.WAV
%Program Files%\Windows NT\Pinball\SOUND240.WAV
%Program Files%\Windows NT\Pinball\SOUND243.WAV
%Program Files%\Windows NT\Pinball\SOUND25.WAV
%Program Files%\Windows NT\Pinball\SOUND26.WAV
%Program Files%\Windows NT\Pinball\SOUND27.WAV
%Program Files%\Windows NT\Pinball\SOUND28.WAV
%Program Files%\Windows NT\Pinball\SOUND29.WAV
%Program Files%\Windows NT\Pinball\SOUND3.WAV
%Program Files%\Windows NT\Pinball\SOUND30.WAV
%Program Files%\Windows NT\Pinball\SOUND34.WAV
%Program Files%\Windows NT\Pinball\SOUND35.WAV
%Program Files%\Windows NT\Pinball\SOUND36.WAV
%Program Files%\Windows NT\Pinball\SOUND38.WAV
%Program Files%\Windows NT\Pinball\SOUND39.WAV
%Program Files%\Windows NT\Pinball\SOUND4.WAV
%Program Files%\Windows NT\Pinball\SOUND42.WAV
%Program Files%\Windows NT\Pinball\SOUND43.WAV
%Program Files%\Windows NT\Pinball\SOUND45.WAV
%Program Files%\Windows NT\Pinball\SOUND49.WAV
%Program Files%\Windows NT\Pinball\SOUND49D.WAV
%Program Files%\Windows NT\Pinball\SOUND5.WAV
%Program Files%\Windows NT\Pinball\SOUND50.WAV
%Program Files%\Windows NT\Pinball\SOUND528.WAV
%Program Files%\Windows NT\Pinball\SOUND53.WAV
%Program Files%\Windows NT\Pinball\SOUND54.WAV
%Program Files%\Windows NT\Pinball\SOUND55.WAV
%Program Files%\Windows NT\Pinball\SOUND560.WAV
%Program Files%\Windows NT\Pinball\SOUND563.WAV
%Program Files%\Windows NT\Pinball\SOUND57.WAV
%Program Files%\Windows NT\Pinball\SOUND58.WAV
%Program Files%\Windows NT\Pinball\SOUND6.WAV
%Program Files%\Windows NT\Pinball\SOUND65.WAV
%Program Files%\Windows NT\Pinball\SOUND68.WAV
%Program Files%\Windows NT\Pinball\SOUND7.WAV
%Program Files%\Windows NT\Pinball\SOUND713.WAV
%Program Files%\Windows NT\Pinball\SOUND735.WAV
%Program Files%\Windows NT\Pinball\SOUND8.WAV
%Program Files%\Windows NT\Pinball\SOUND827.WAV
%Program Files%\Windows NT\Pinball\SOUND9.WAV
%Program Files%\Windows NT\Pinball\SOUND999.WAV
%Program Files%\Windows NT\Pinball\table.bmp
%Program Files%\WinPcap\rpcapd.exe
%Program Files%\WinPcap\Uninstall.exe
%System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-1003\desktop.ini
%System Root%\RECYCLER\S-1-5-21-436374069-362288127-839522115-500\desktop.ini
%System Root%\ufr_files\18-04-2012_19-31-02-File-Paths.txt
%System Root%\ufr_files\NO_PWDS_report_18-04-2012_19-31-02-KJLG.bin
%System Root%\vcredist_x86.exe
%Windows%\AppPatch\AcGenral.dll
%Windows%\AppPatch\AcLayers.dll
%Windows%\AppPatch\AcLua.dll
%Windows%\AppPatch\AcSpecfc.dll
%Windows%\AppPatch\AcXtrnal.dll
%Windows%\Blue Lace 16.bmp
%Windows%\bootstat.dat
%Windows%\clock.avi
%Windows%\Coffee Bean.bmp
%Windows%\control.ini
%Windows%\desktop.ini
%Windows%\Downloaded Program Files\desktop.ini
%Windows%\ehome\custsat.dll
%Windows%\explorer.exe
%Windows%\FeatherTexture.bmp
%Windows%\Fonts\arial.ttf
%Windows%\Fonts\arialbd.ttf
%Windows%\Fonts\arialbi.ttf
%Windows%\Fonts\ariali.ttf
%Windows%\Fonts\ariblk.ttf
%Windows%\Fonts\comic.ttf
%Windows%\Fonts\comicbd.ttf
%Windows%\Fonts\cour.ttf
%Windows%\Fonts\courbd.ttf
%Windows%\Fonts\courbi.ttf
%Windows%\Fonts\couri.ttf
%Windows%\Fonts\desktop.ini
%Windows%\Fonts\estre.ttf
%Windows%\Fonts\framd.ttf
%Windows%\Fonts\framdit.ttf
%Windows%\Fonts\gautami.ttf
%Windows%\Fonts\georgia.ttf
%Windows%\Fonts\georgiab.ttf
%Windows%\Fonts\georgiai.ttf
%Windows%\Fonts\georgiaz.ttf
%Windows%\Fonts\impact.ttf
%Windows%\Fonts\kartika.ttf
%Windows%\Fonts\latha.ttf
%Windows%\Fonts\lsans.ttf
%Windows%\Fonts\lsansd.ttf
%Windows%\Fonts\lsansdi.ttf
%Windows%\Fonts\lsansi.ttf
%Windows%\Fonts\lucon.ttf
%Windows%\Fonts\l_10646.ttf
%Windows%\Fonts\mangal.ttf
%Windows%\Fonts\marlett.ttf
%Windows%\Fonts\micross.ttf
%Windows%\Fonts\mvboli.ttf
%Windows%\Fonts\pala.ttf
%Windows%\Fonts\palab.ttf
%Windows%\Fonts\palabi.ttf
%Windows%\Fonts\palai.ttf
%Windows%\Fonts\raavi.ttf
%Windows%\Fonts\shruti.ttf
%Windows%\Fonts\sylfaen.ttf
%Windows%\Fonts\symbol.ttf
%Windows%\Fonts\tahoma.ttf
%Windows%\Fonts\tahomabd.ttf
%Windows%\Fonts\times.ttf
%Windows%\Fonts\timesbd.ttf
%Windows%\Fonts\timesbi.ttf
%Windows%\Fonts\timesi.ttf
%Windows%\Fonts\trebuc.ttf
%Windows%\Fonts\trebucbd.ttf
%Windows%\Fonts\trebucbi.ttf
%Windows%\Fonts\trebucit.ttf
%Windows%\Fonts\tunga.ttf
%Windows%\Fonts\verdana.ttf
%Windows%\Fonts\verdanab.ttf
%Windows%\Fonts\verdanai.ttf
%Windows%\Fonts\verdanaz.ttf
%Windows%\Fonts\vrinda.ttf
%Windows%\Fonts\webdings.ttf
%Windows%\Fonts\wingding.ttf
%Windows%\Gone Fishing.bmp
%Windows%\Greenstone.bmp
%Windows%\Help\access.chm
%Windows%\Help\accessib.chm
%Windows%\Help\acc_dis.chm
%Windows%\Help\aclui.chm
%Windows%\Help\addremov.chm
%Windows%\Help\admtools.chm
%Windows%\Help\apps.chm
%Windows%\Help\apps_sp.chm
%Windows%\Help\article.chm
%Windows%\Help\atm.chm
%Windows%\Help\audit.chm
%Windows%\Help\bckg.chm
%Windows%\Help\blurbs.chm
%Windows%\Help\blutooth.chm
%Windows%\Help\bnts.dll
%Windows%\Help\bootcons.chm
%Windows%\Help\brief.chm
%Windows%\Help\calc.chm
%Windows%\Help\camera.chm
%Windows%\Help\cdmedia.chm
%Windows%\Help\certmgr.chm
%Windows%\Help\charmap.chm
%Windows%\Help\chkr.chm
%Windows%\Help\ciadmin.htm
%Windows%\Help\ciquery.htm
%Windows%\Help\clipbrd.chm
%Windows%\Help\cmconcepts.chm
%Windows%\Help\colormgt.chm
%Windows%\Help\comexp.chm
%Windows%\Help\common.chm
%Windows%\Help\compfldr.chm
%Windows%\Help\compmgmt.chm
%Windows%\Help\conf.chm
%Windows%\Help\conf1.chm
%Windows%\Help\cpanel.chm
%Windows%\Help\cyycoins.chm
%Windows%\Help\cyzcoins.chm
%Windows%\Help\datetime.chm
%Windows%\Help\ddeshare.chm
%Windows%\Help\defrag.chm
%Windows%\Help\devmgr.chm
%Windows%\Help\diagboot.chm
%Windows%\Help\dialer.chm
%Windows%\Help\digiras.chm
%Windows%\Help\diskmgmt.chm
%Windows%\Help\display.chm
%Windows%\Help\dkconcepts.chm
%Windows%\Help\drvvfp.chm
%Windows%\Help\drwtsn32.chm
%Windows%\Help\dskquoui.chm
%Windows%\Help\dxdiag.chm
%Windows%\Help\els.chm
%Windows%\Help\encrypt.chm
%Windows%\Help\eudcedit.chm
%Windows%\Help\evconcepts.chm
%Windows%\Help\filefold.chm
%Windows%\Help\file_srv.chm
%Windows%\Help\find.chm
%Windows%\Help\folderop.chm
%Windows%\Help\fonts.chm
%Windows%\Help\freecell.chm
%Windows%\Help\fxsclnt.chm
%Windows%\Help\fxscover.chm
%Windows%\Help\fxsshare.chm
%Windows%\Help\gen.chm
%Windows%\Help\Glossary.chm
%Windows%\Help\gpedit.chm
%Windows%\Help\hardware.chm
%Windows%\Help\howto.chm
%Windows%\Help\hrtz.chm
%Windows%\Help\hs.chm
%Windows%\Help\hschelp.chm
%Windows%\Help\hypertrm.chm
%Windows%\Help\icwdial.chm
%Windows%\Help\ieakmmc.chm
%Windows%\Help\ieeula.chm
%Windows%\Help\ieos.chm
%Windows%\Help\ieshared.chm
%Windows%\Help\iesupp.chm
%Windows%\Help\iewebhlp.chm
%Windows%\Help\iexplore.chm
%Windows%\Help\iis.chm
%Windows%\Help\iismmc.chm
%Windows%\Help\imgprev.chm
%Windows%\Help\inetres.chm
%Windows%\Help\infrared.chm
%Windows%\Help\input.chm
%Windows%\Help\intellimirror.chm
%Windows%\Help\ipsecconcepts.chm
%Windows%\Help\ipsecsnp.chm
%Windows%\Help\Ipv6.chm
%Windows%\Help\is.chm
%Windows%\Help\isconcepts.chm
%Windows%\Help\ixqlang.htm
%Windows%\Help\joy.chm
%Windows%\Help\key.chm
%Windows%\Help\keyb.chm
%Windows%\Help\keyshort.chm
%Windows%\Help\lang.chm
%Windows%\Help\langbar.chm
%Windows%\Help\license.chm
%Windows%\Help\localsec.chm
%Windows%\Help\lpe.chm
%Windows%\Help\lpeconcepts.chm
%Windows%\Help\magnify.chm
%Windows%\Help\mail.chm
%Windows%\Help\migwiz.htm
%Windows%\Help\migwiz2.htm
%Windows%\Help\misc.chm
%Windows%\Help\mls_trb.chm
%Windows%\Help\mmc.chm
%Windows%\Help\mobsync.chm
%Windows%\Help\mode.chm
%Windows%\Help\mouse.chm
%Windows%\Help\mpconcepts.chm
%Windows%\Help\msconfig.chm
%Windows%\Help\msdasc.chm
%Windows%\Help\mshearts.chm
%Windows%\Help\msinfo32.chm
%Windows%\Help\msmq.chm
%Windows%\Help\msmqconcepts.chm
%Windows%\Help\msoe.chm
%Windows%\Help\msorcl32.chm
%Windows%\Help\mspaint.chm
%Windows%\Help\mstask.chm
%Windows%\Help\mstsc.chm
%Windows%\Help\netcfg.chm
%Windows%\Help\network.chm
%Windows%\Help\newfeat1.chm
%Windows%\Help\newfeat2.chm
%Windows%\Help\newfeat3.chm
%Windows%\Help\newfeat4.chm
%Windows%\Help\newfeat5.chm
%Windows%\Help\nmchat.chm
%Windows%\Help\nmwhiteb.chm
%Windows%\Help\nofts.chm
%Windows%\Help\notepad.chm
%Windows%\Help\ntart.chm
%Windows%\Help\ntbackup.chm
%Windows%\Help\ntchowto.chm
%Windows%\Help\ntcmds.chm
%Windows%\Help\ntdef.chm
%Windows%\Help\nthelp.chm
%Windows%\Help\ntshared.chm
%Windows%\Help\nusrmgr.chm
%Windows%\Help\nwdoc.chm
%Windows%\Help\odbcinst.chm
%Windows%\Help\odbcjet.chm
%Windows%\Help\oe_msgr.chm
%Windows%\Help\offlinefolders.chm
%Windows%\Help\omc.chm
%Windows%\Help\osk.chm
%Windows%\Help\packager.chm
%Windows%\Help\password.chm
%Windows%\Help\phowto.chm
%Windows%\Help\pinball.chm
%Windows%\Help\plyr_err.chm
%Windows%\Help\printfnd.chm
%Windows%\Help\printing.chm
%Windows%\Help\pwrmn.chm
%Windows%\Help\qosconcepts.chm
%Windows%\Help\ratings.chm
%Windows%\Help\rdesktop.chm
%Windows%\Help\reader.chm
%Windows%\Help\recycle.chm
%Windows%\Help\regedit.chm
%Windows%\Help\regopt.chm
%Windows%\Help\remasst.chm
%Windows%\Help\reskit.chm
%Windows%\Help\rktools.chm
%Windows%\Help\rrc.chm
%Windows%\Help\rsm.chm
%Windows%\Help\rsmconcepts.chm
%Windows%\Help\rsop.chm
%Windows%\Help\rsopsnp.chm
%Windows%\Help\rvse.chm
%Windows%\Help\safer.chm
%Windows%\Help\saferconcepts.chm
%Windows%\Help\sc.chm
%Windows%\Help\sce.chm
%Windows%\Help\sceconcepts.chm
%Windows%\Help\scm.chm
%Windows%\Help\scmconcepts.chm
%Windows%\Help\secedit.chm
%Windows%\Help\secsetconcepts.chm
%Windows%\Help\secsettings.chm
%Windows%\Help\sendcmsg.chm
%Windows%\Help\shvl.chm
%Windows%\Help\smlogcfg.chm
%Windows%\Help\sndvol32.chm
%Windows%\Help\sniffpol.dll
%Windows%\Help\snmpconcepts.chm
%Windows%\Help\sol.chm
%Windows%\Help\soundrec.chm
%Windows%\Help\sounds.chm
%Windows%\Help\spad.chm
%Windows%\Help\spconcepts.chm
%Windows%\Help\speech.chm
%Windows%\Help\spider.chm
%Windows%\Help\splash.chm
%Windows%\Help\spolsconcepts.chm
%Windows%\Help\sr_ui.chm
%Windows%\Help\sstub.dll
%Windows%\Help\supp_ed.chm
%Windows%\Help\suptools.chm
%Windows%\Help\sysdm.chm
%Windows%\Help\sysmon.chm
%Windows%\Help\sysprop.chm
%Windows%\Help\sysrestore.chm
%Windows%\Help\system.chm
%Windows%\Help\sys_srv.chm
%Windows%\Help\tapi.chm
%Windows%\Help\taskbar.chm
%Windows%\Help\taskmgr.chm
%Windows%\Help\tcpip.chm
%Windows%\Help\telnet.chm
%Windows%\Help\timesrv.chm
%Windows%\Help\Tours\htmlTour\best_fr.htm
%Windows%\Help\Tours\htmlTour\best_road.htm
%Windows%\Help\Tours\htmlTour\best_road.jpg
%Windows%\Help\Tours\htmlTour\best_road_big.jpg
%Windows%\Help\Tours\htmlTour\best_road_ghost.jpg
%Windows%\Help\Tours\htmlTour\best_robust.htm
%Windows%\Help\Tours\htmlTour\best_robust.jpg
%Windows%\Help\Tours\htmlTour\best_robust_big.jpg
%Windows%\Help\Tours\htmlTour\best_robust_ghost.jpg
%Windows%\Help\Tours\htmlTour\best_secure.htm
%Windows%\Help\Tours\htmlTour\best_secure.jpg
%Windows%\Help\Tours\htmlTour\best_secure_big.jpg
%Windows%\Help\Tours\htmlTour\best_secure_ghost.jpg
%Windows%\Help\Tours\htmlTour\bluearrow.gif
%Windows%\Help\Tours\htmlTour\bot_bar.gif
%Windows%\Help\Tours\htmlTour\connected_data.htm
%Windows%\Help\Tours\htmlTour\connected_data.jpg
%Windows%\Help\Tours\htmlTour\connected_data_big.jpg
%Windows%\Help\Tours\htmlTour\connected_data_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_fr.htm
%Windows%\Help\Tours\htmlTour\connected_multiple.htm
%Windows%\Help\Tours\htmlTour\connected_multiple.jpg
%Windows%\Help\Tours\htmlTour\connected_multiple_big.jpg
%Windows%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_networks.htm
%Windows%\Help\Tours\htmlTour\connected_networks.jpg
%Windows%\Help\Tours\htmlTour\connected_networks_big.jpg
%Windows%\Help\Tours\htmlTour\connected_networks_ghost.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard.htm
%Windows%\Help\Tours\htmlTour\connected_wizard.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard_big.jpg
%Windows%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
%Windows%\Help\Tours\htmlTour\control_up.jpg
%Windows%\Help\Tours\htmlTour\default.htm
%Windows%\Help\Tours\htmlTour\desktop_screen_shot.jpg
%Windows%\Help\Tours\htmlTour\desktop_up.jpg
%Windows%\Help\Tours\htmlTour\end_up.jpg
%Windows%\Help\Tours\htmlTour\folder_up.jpg
%Windows%\Help\Tours\htmlTour\footer.htm
%Windows%\Help\Tours\htmlTour\gradient.jpg
%Windows%\Help\Tours\htmlTour\icon_up.jpg
%Windows%\Help\Tours\htmlTour\img004b.jpg
%Windows%\Help\Tours\htmlTour\img014.jpg
%Windows%\Help\Tours\htmlTour\img033.jpg
%Windows%\Help\Tours\htmlTour\img033a.jpg
%Windows%\Help\Tours\htmlTour\img034.jpg
%Windows%\Help\Tours\htmlTour\img040.jpg
%Windows%\Help\Tours\htmlTour\img046.jpg
%Windows%\Help\Tours\htmlTour\img060.jpg
%Windows%\Help\Tours\htmlTour\img068.jpg
%Windows%\Help\Tours\htmlTour\img072.jpg
%Windows%\Help\Tours\htmlTour\img074a.jpg
%Windows%\Help\Tours\htmlTour\img089.jpg
%Windows%\Help\Tours\htmlTour\img100.jpg
%Windows%\Help\Tours\htmlTour\img103.jpg
%Windows%\Help\Tours\htmlTour\img109.jpg
%Windows%\Help\Tours\htmlTour\img110.jpg
%Windows%\Help\Tours\htmlTour\img116.jpg
%Windows%\Help\Tours\htmlTour\img121.jpg
%Windows%\Help\Tours\htmlTour\img123.jpg
%Windows%\Help\Tours\htmlTour\img126.jpg
%Windows%\Help\Tours\htmlTour\img136.jpg
%Windows%\Help\Tours\htmlTour\img149.jpg
%Windows%\Help\Tours\htmlTour\intro_logo.jpg
%Windows%\Help\Tours\htmlTour\logo.jpg
%Windows%\Help\Tours\htmlTour\nav_best.gif
%Windows%\Help\Tours\htmlTour\nav_best_down.gif
%Windows%\Help\Tours\htmlTour\nav_blank.gif
%Windows%\Help\Tours\htmlTour\nav_connected.gif
%Windows%\Help\Tours\htmlTour\nav_connected_down.gif
%Windows%\Help\Tours\htmlTour\nav_gray.gif
%Windows%\Help\Tours\htmlTour\nav_safe_easy.gif
%Windows%\Help\Tours\htmlTour\nav_safe_easy_down.gif
%Windows%\Help\Tours\htmlTour\nav_start_here.gif
%Windows%\Help\Tours\htmlTour\nav_start_here_down.gif
%Windows%\Help\Tours\htmlTour\nav_unlock.gif
%Windows%\Help\Tours\htmlTour\nav_unlock_down.gif
%Windows%\Help\Tours\htmlTour\pen_icon.jpg
%Windows%\Help\Tours\htmlTour\question_icon.jpg
%Windows%\Help\Tours\htmlTour\read_icon.jpg
%Windows%\Help\Tours\htmlTour\safe_better.htm
%Windows%\Help\Tours\htmlTour\safe_easier.htm
%Windows%\Help\Tours\htmlTour\safe_easy_better.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_better_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
%Windows%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
%Windows%\Help\Tours\htmlTour\safe_faster.htm
%Windows%\Help\Tours\htmlTour\safe_fr.htm
%Windows%\Help\Tours\htmlTour\spacer.gif
%Windows%\Help\Tours\htmlTour\start_control.htm
%Windows%\Help\Tours\htmlTour\start_desktop.htm
%Windows%\Help\Tours\htmlTour\start_ending.htm
%Windows%\Help\Tours\htmlTour\start_files.htm
%Windows%\Help\Tours\htmlTour\start_fr.htm
%Windows%\Help\Tours\htmlTour\start_icons.htm
%Windows%\Help\Tours\htmlTour\start_menu.htm
%Windows%\Help\Tours\htmlTour\start_taskbar.htm
%Windows%\Help\Tours\htmlTour\start_up.jpg
%Windows%\Help\Tours\htmlTour\start_windows.htm
%Windows%\Help\Tours\htmlTour\taskbar_up.jpg
%Windows%\Help\Tours\htmlTour\ul_logo.jpg
%Windows%\Help\Tours\htmlTour\unlock_built.htm
%Windows%\Help\Tours\htmlTour\unlock_built.jpg
%Windows%\Help\Tours\htmlTour\unlock_built_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_built_ghost.jpg
%Windows%\Help\Tours\htmlTour\unlock_fr.htm
%Windows%\Help\Tours\htmlTour\unlock_optimized.htm
%Windows%\Help\Tours\htmlTour\unlock_optimized.jpg
%Windows%\Help\Tours\htmlTour\unlock_optimized_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing.htm
%Windows%\Help\Tours\htmlTour\unlock_playing.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing_big.jpg
%Windows%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
%Windows%\Help\Tours\htmlTour\window_up.jpg
%Windows%\Help\Tours\mmTour\intro.txt
%Windows%\Help\Tours\mmTour\nav.txt
%Windows%\Help\Tours\mmTour\segment1.txt
%Windows%\Help\Tours\mmTour\segment2.txt
%Windows%\Help\Tours\mmTour\segment3.txt
%Windows%\Help\Tours\mmTour\segment4.txt
%Windows%\Help\Tours\mmTour\segment5.txt
%Windows%\Help\Tours\mmTour\tour.exe
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\snd.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud1.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud2.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud3.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud4.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud5.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud6.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud7.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud8.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav\wmpaud9.wav
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt\contents.htm
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktr.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktrh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapp.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapph.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnt.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cntd.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnth.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoff.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoffh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taon.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\taonh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpause.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpauseh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplay.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplayh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogo.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\mplogoh.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\tourbg.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\videobg.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\vidsamp.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm1.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm2.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm3.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm4.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm5.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm6.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm7.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm8.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm9.gif
%Windows%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv
%Windows%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv
%Windows%\Help\tshoot.chm
%Windows%\Help\tshoot.dll
%Windows%\Help\twclient.chm
%Windows%\Help\update1.chm
%Windows%\Help\usercpl.chm
%Windows%\Help\utilmgr.chm
%Windows%\Help\wab.chm
%Windows%\Help\wbemtest.chm
%Windows%\Help\webpub.chm
%Windows%\Help\whatsnew.chm
%Windows%\Help\winchat.chm
%Windows%\Help\windows.chm
%Windows%\Help\wininstl.chm
%Windows%\Help\winmine.chm
%Windows%\Help\win_dos.chm
%Windows%\Help\wmic.chm
%Windows%\Help\wmifltr.chm
%Windows%\Help\wmplay.chm
%Windows%\Help\wmplayer.chm
%Windows%\Help\wordpad.chm
%Windows%\Help\wpa.chm
%Windows%\Help\wschelp.chm
%Windows%\Help\wscript.chm
%Windows%\Help\wshconcepts.chm
%Windows%\Help\wuau.chm
%Windows%\Help\wuauhelp.chm
%Windows%\hh.exe
%Windows%\ime\mscandui.dll
%Windows%\ime\SOFTKBD.DLL
%Windows%\ime\SPGRMR.dll
%Windows%\ime\SPTIP.dll
%Windows%\inf\unregmp2.exe
%Windows%\Installer\14637f.msi
%Windows%\Installer\2cdb5c.msi
%Windows%\Installer\8b8e65.msi
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe
%Windows%\Installer\{FE2F6A2C-196E-4210-9C04-2B1BC21F07EF}\ARPPRODUCTICON.exe
%Windows%\Media\chimes.wav
%Windows%\Media\chord.wav
%Windows%\Media\ding.wav
%Windows%\Media\notify.wav
%Windows%\Media\recycle.wav
%Windows%\Media\ringin.wav
%Windows%\Media\ringout.wav
%Windows%\Media\start.wav
%Windows%\Media\tada.wav
%Windows%\Media\Windows XP Balloon.wav
%Windows%\Media\Windows XP Battery Critical.wav
%Windows%\Media\Windows XP Battery Low.wav
%Windows%\Media\Windows XP Critical Stop.wav
%Windows%\Media\Windows XP Default.wav
%Windows%\Media\Windows XP Ding.wav
%Windows%\Media\Windows XP Error.wav
%Windows%\Media\Windows XP Exclamation.wav
%Windows%\Media\Windows XP Hardware Fail.wav
%Windows%\Media\Windows XP Hardware Insert.wav
%Windows%\Media\Windows XP Hardware Remove.wav
%Windows%\Media\Windows XP Information Bar.wav
%Windows%\Media\Windows XP Logoff Sound.wav
%Windows%\Media\Windows XP Logon Sound.wav
%Windows%\Media\Windows XP Menu Command.wav
%Windows%\Media\Windows XP Minimize.wav
%Windows%\Media\Windows XP Notify.wav
%Windows%\Media\Windows XP Pop-up Blocked.wav
%Windows%\Media\Windows XP Print complete.wav
%Windows%\Media\Windows XP Recycle.wav
%Windows%\Media\Windows XP Restore.wav
%Windows%\Media\Windows XP Ringin.wav
%Windows%\Media\Windows XP Ringout.wav
%Windows%\Media\Windows XP Shutdown.wav
%Windows%\Media\Windows XP Start.wav
%Windows%\Media\Windows XP Startup.wav
%Windows%\msagent\agentanm.dll
%Windows%\msagent\agentctl.dll
%Windows%\msagent\agentdp2.dll
%Windows%\msagent\agentdpv.dll
%Windows%\msagent\agentmpx.dll
%Windows%\msagent\agentpsh.dll
%Windows%\msagent\agentsr.dll
%Windows%\msagent\agentsvr.exe
%Windows%\msagent\agtintl.dll
%Windows%\msagent\intl\agt0405.dll
%Windows%\msagent\intl\agt0406.dll
%Windows%\msagent\intl\agt0407.dll
%Windows%\msagent\intl\agt0408.dll
%Windows%\msagent\intl\agt0409.dll
%Windows%\msagent\intl\agt040b.dll
%Windows%\msagent\intl\agt040c.dll
%Windows%\msagent\intl\agt040e.dll
%Windows%\msagent\intl\agt0410.dll
%Windows%\msagent\intl\agt0413.dll
%Windows%\msagent\intl\agt0414.dll
%Windows%\msagent\intl\agt0415.dll
%Windows%\msagent\intl\agt0416.dll
%Windows%\msagent\intl\agt0419.dll
%Windows%\msagent\intl\agt041d.dll
%Windows%\msagent\intl\agt041f.dll
%Windows%\msagent\intl\agt0816.dll
%Windows%\msagent\intl\agt0c0a.dll
%Windows%\msagent\mslwvtts.dll
%Windows%\msdfmap.ini
%Windows%\mui\muisetup.exe
%Windows%\NOTEPAD.EXE
%Windows%\ODBCINST.INI
%Windows%\OEWABLog.txt
%Windows%\Offline Web Pages\desktop.ini
%Windows%\pchealth\helpctr\binaries\brpinfo.dll
%Windows%\pchealth\helpctr\binaries\HCAppRes.dll
%Windows%\pchealth\helpctr\binaries\HelpCtr.exe
%Windows%\pchealth\helpctr\binaries\HelpHost.exe
%Windows%\pchealth\helpctr\binaries\HelpSvc.exe
%Windows%\pchealth\helpctr\binaries\HscUpd.exe
%Windows%\pchealth\helpctr\binaries\msconfig.exe
%Windows%\pchealth\helpctr\binaries\msinfo.dll
%Windows%\pchealth\helpctr\binaries\notiflag.exe
%Windows%\pchealth\helpctr\binaries\pchshell.dll
%Windows%\pchealth\helpctr\binaries\pchsvc.dll
%Windows%\pchealth\helpctr\Config\Cntstore.bin
%Windows%\pchealth\helpctr\OfflineCache\index.dat
%Windows%\pchealth\helpctr\PackageStore\SkuStore.bin
%Windows%\pchealth\helpctr\System\blurbs\about_support.htm
%Windows%\pchealth\helpctr\System\blurbs\Favorites.htm
%Windows%\pchealth\helpctr\System\blurbs\ftshelp.htm
%Windows%\pchealth\helpctr\System\blurbs\History.htm
%Windows%\pchealth\helpctr\System\blurbs\Index.htm
%Windows%\pchealth\helpctr\System\blurbs\isupport.htm
%Windows%\pchealth\helpctr\System\blurbs\keywordhelp.htm
%Windows%\pchealth\helpctr\System\blurbs\options.htm
%Windows%\pchealth\helpctr\System\blurbs\searchblurb.htm
%Windows%\pchealth\helpctr\System\blurbs\searchtips.htm
%Windows%\pchealth\helpctr\System\blurbs\tools.htm
%Windows%\pchealth\helpctr\System\blurbs\watermark_300x.bmp
%Windows%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm
%Windows%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm
%Windows%\pchealth\helpctr\System\CompatCtr\CompatMode.htm
%Windows%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm
%Windows%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm
%Windows%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
%Windows%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm
%Windows%\pchealth\helpctr\System\errors\badurl.htm
%Windows%\pchealth\helpctr\System\errors\connection.htm
%Windows%\pchealth\helpctr\System\errors\indexfirstlevel.htm
%Windows%\pchealth\helpctr\System\errors\notfound.htm
%Windows%\pchealth\helpctr\System\errors\offline.htm
%Windows%\pchealth\helpctr\System\errors\redirect.htm
%Windows%\pchealth\helpctr\System\errors\unreachable.htm
%Windows%\pchealth\helpctr\System\Headlines.htm
%Windows%\pchealth\helpctr\System\HomePage__DESKTOP.htm
%Windows%\pchealth\helpctr\System\HomePage__SERVER.htm
%Windows%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp
%Windows%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp
%Windows%\pchealth\helpctr\System\images\16x16\compat.bmp
%Windows%\pchealth\helpctr\System\images\16x16\errmsg.bmp
%Windows%\pchealth\helpctr\System\images\16x16\support.bmp
%Windows%\pchealth\helpctr\System\images\16x16\tools.bmp
%Windows%\pchealth\helpctr\System\images\16x16\update.bmp
%Windows%\pchealth\helpctr\System\images\16x16\warning.gif
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp
%Windows%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp
%Windows%\pchealth\helpctr\System\images\32x32\logo.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp
%Windows%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp
%Windows%\pchealth\helpctr\System\images\Centers\blue_arrow.gif
%Windows%\pchealth\helpctr\System\images\Centers\Connect.gif
%Windows%\pchealth\helpctr\System\images\Centers\IULogo.gif
%Windows%\pchealth\helpctr\System\images\Centers\Uabrand.gif
%Windows%\pchealth\helpctr\System\images\error.gif
%Windows%\pchealth\helpctr\System\images\Expando\collapsed.gif
%Windows%\pchealth\helpctr\System\images\Expando\endnode.gif
%Windows%\pchealth\helpctr\System\images\Expando\expanded.gif
%Windows%\pchealth\helpctr\System\images\Expando\helpdoc.gif
%Windows%\pchealth\helpctr\System\images\feedback.gif
%Windows%\pchealth\helpctr\System\images\flyout_arrow.gif
%Windows%\pchealth\helpctr\System\images\get_conn.gif
%Windows%\pchealth\helpctr\System\images\icon_articles_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_blank_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_tours_12x.bmp
%Windows%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp
%Windows%\pchealth\helpctr\System\images\info.gif
%Windows%\pchealth\helpctr\System\images\progbar.gif
%Windows%\pchealth\helpctr\System\images\warning.gif
%Windows%\pchealth\helpctr\System\images\wrapperhelp.gif
%Windows%\pchealth\helpctr\System\NetDiag\dglogs.htm
%Windows%\pchealth\helpctr\System\NetDiag\dglogshelp.htm
%Windows%\pchealth\helpctr\System\panels\AdvSearch.htm
%Windows%\pchealth\helpctr\System\panels\blank.htm
%Windows%\pchealth\helpctr\System\panels\Context.htm
%Windows%\pchealth\helpctr\System\panels\firstpage.htm
%Windows%\pchealth\helpctr\System\panels\HHWrapper.htm
%Windows%\pchealth\helpctr\System\panels\MiniNavBar.htm
%Windows%\pchealth\helpctr\System\panels\NavBar.htm
%Windows%\pchealth\helpctr\System\panels\Options.htm
%Windows%\pchealth\helpctr\System\panels\RemoteHelp.htm
%Windows%\pchealth\helpctr\System\panels\ShareHelp.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Channels.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Favorites.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\History.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Index.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Options.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Search.htm
%Windows%\pchealth\helpctr\System\panels\subpanels\Subsite.htm
%Windows%\pchealth\helpctr\System\panels\Topics.htm
%Windows%\pchealth\helpctr\System\rc\rcRequest.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\ding.wav
%Windows%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\attentioninteraction.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm
%Windows%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\alert.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\card.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\cd.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\check.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\chip.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\down.bmp
%Windows%\pchealth\helpctr\System\sysinfo\graphics\drive.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\error.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\gears.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
%Windows%\pchealth\helpctr\System\sysinfo\graphics\info.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\printer.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\system.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\up.bmp
%Windows%\pchealth\helpctr\System\sysinfo\graphics\usb.gif
%Windows%\pchealth\helpctr\System\sysinfo\graphics\windows.gif
%Windows%\pchealth\helpctr\System\sysinfo\msinfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\RSoP.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysinfomain.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysinfosum.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm
%Windows%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\Learn.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\learnWU.htm
%Windows%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif
%Windows%\pchealth\UploadLB\Binaries\UploadM.exe
%Windows%\PeerNet\sqldb20.dll
%Windows%\PeerNet\sqlqp20.dll
%Windows%\PeerNet\sqlse20.dll
%Windows%\Prairie Wind.bmp
%Windows%\Prefetch\Layout.ini
%Windows%\regedit.exe
%Windows%\repair\ntuser.dat
%Windows%\Resources\Themes\Luna\Shell\Homestead\shellstyle.dll
%Windows%\Resources\Themes\Luna\Shell\Metallic\shellstyle.dll
%Windows%\Resources\Themes\Luna\Shell\NormalColor\shellstyle.dll
%Windows%\Rhododendron.bmp
%Windows%\River Sumida.bmp
%Windows%\Santa Fe Stucco.bmp
%Windows%\SchedLgU.Txt
%Windows%\setuplog.txt
%Windows%\smscfg.ini
%Windows%\Soap Bubbles.bmp
%Windows%\srchasst\msgr3en.dll
%Windows%\srchasst\srchctls.dll
%Windows%\srchasst\srchui.dll
%System%\AVICAP.DLL
%System%\AVIFILE.DLL
%System%\COMMDLG.DLL
%System%\LZEXPAND.DLL
%System%\MMSYSTEM.DLL
%System%\MSVIDEO.DLL
%System%\OLECLI.DLL
%System%\OLESVR.DLL
%System%\SHELL.DLL
%System%\TAPI.DLL
%System%\VER.DLL
%System%.ini
%System%\1033\dwintl.dll
%System%\6to4svc.dll
%System%\aaaamon.dll
%System%\acctres.dll
%System%\accwiz.exe
%System%\acledit.dll
%System%\aclui.dll
%System%\activeds.dll
%System%\actmovie.exe
%System%\actxprxy.dll
%System%\admparse.dll
%System%\adptif.dll
%System%\adsldp.dll
%System%\adsldpc.dll
%System%\adsmsext.dll
%System%\adsnds.dll
%System%\adsnt.dll
%System%\adsnw.dll
%System%\advapi32.dll
%System%\advpack.dll
%System%\ahui.exe
%System%\alg.exe
%System%\alrsvc.dll
%System%\amstream.dll
%System%\ansi.sys
%System%\apcups.dll
%System%\append.exe
%System%\apphelp.dll
%System%\appmgmts.dll
%System%\appmgr.dll
%System%\arp.exe
%System%\asferror.dll
%System%\asr_fmt.exe
%System%\asr_ldm.exe
%System%\asr_pfu.exe
%System%\asycfilt.dll
%System%\at.exe
%System%\atkctrs.dll
%System%\atl.dll
%System%\atl71.dll
%System%\atmadm.exe
%System%\atmfd.dll
%System%\atmlib.dll
%System%\atmpvcno.dll
%System%\atrace.dll
%System%\attrib.exe
%System%\audiosrv.dll
%System%\auditusr.exe
%System%\authz.dll
%System%\autochk.exe
%System%\autoconv.exe
%System%\autodisc.dll
%System%\autofmt.exe
%System%\autolfn.exe
%System%\avicap.dll
%System%\avicap32.dll
%System%\avifil32.dll
%System%\avifile.dll
%System%\avmeter.dll
%System%\avtapi.dll
%System%\avwav.dll
%System%\basesrv.dll
%System%\batmeter.dll
%System%\batt.dll
%System%\bidispl.dll
%System%\bitsprx2.dll
%System%\bitsprx3.dll
%System%\blackbox.dll
%System%\blastcln.exe
%System%\bootcfg.exe
%System%\bootok.exe
%System%\bootvid.dll
%System%\bootvrfy.exe
%System%\browselc.dll
%System%\browser.dll
%System%\browseui.dll
%System%\browsewm.dll
%System%\bthci.dll
%System%\bthserv.dll
%System%\btpanui.dll
%System%\cabinet.dll
%System%\cabview.dll
%System%\cacls.exe
%System%\calc.exe
%System%\camocx.dll
%System%\capesnpn.dll
%System%\cards.dll
%System%\CatRoot2\dberr.txt
%System%\catsrv.dll
%System%\catsrvps.dll
%System%\catsrvut.dll
%System%\ccfgnt.dll
%System%\cdfview.dll
%System%\cdm.dll
%System%\cdmodem.dll
%System%\cdosys.dll
%System%\certcli.dll
%System%\certmgr.dll
%System%\cewmdm.dll
%System%\cfgbkend.dll
%System%\cfgmgr32.dll
%System%\charmap.exe
%System%\chkdsk.exe
%System%\chkntfs.exe
%System%\ciadmin.dll
%System%\cic.dll
%System%\cidaemon.exe
%System%\ciodm.dll
%System%\cipher.exe
%System%\cisvc.exe
%System%\ckcnv.exe
%System%\clb.dll
%System%\clbcatex.dll
%System%\clbcatq.dll
%System%\cleanmgr.exe
%System%\cliconf.chm
%System%\cliconfg.dll
%System%\cliconfg.exe
%System%\clipbrd.exe
%System%\clipsrv.exe
%System%\clusapi.dll
%System%\cmcfg32.dll
%System%\cmd.exe
%System%\cmdial32.dll
%System%\cmdl32.exe
%System%\cmmon32.exe
%System%\cmpbk32.dll
%System%\cmprops.dll
%System%\cmsetACL.dll
%System%\cmstp.exe
%System%\cmutil.dll
%System%\cnbjmon.dll
%System%\cnetcfg.dll
%System%\cnvfat.dll
%System%\colbact.dll
%System%\Com\comadmin.dll
%System%\Com\comempty.dat
%System%\Com\comrepl.exe
%System%\Com\comrereg.exe
%System%\comaddin.dll
%System%\comcat.dll
%System%\comctl32.dll
%System%\comdlg32.dll
%System%\commdlg.dll
%System%\comp.exe
%System%\compact.exe
%System%\compatUI.dll
%System%\compobj.dll
%System%\compstui.dll
%System%\comrepl.dll
%System%\comres.dll
%System%\comsnap.dll
%System%\comsvcs.dll
%System%\comuid.dll
%System%\config\systemprofile\Application Data\desktop.ini
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
%System%\config\systemprofile\Cookies\index.dat
%System%\config\systemprofile\Desktop\vcredist_x86.exe
%System%\config\systemprofile\Desktop\WinPcap_4_1_2.exe
%System%\config\systemprofile\Favorites\Desktop.ini
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
%System%\config\systemprofile\Local Settings\desktop.ini
%System%\config\systemprofile\Local Settings\History\desktop.ini
%System%\config\systemprofile\Local Settings\History\History.IE5\desktop.ini
%System%\config\systemprofile\Local Settings\History\History.IE5\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010120620101213\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010121320101214\index.dat
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012010122820101229\index.dat
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI5DA7.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistMSI6BB9.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI5DA7.txt
%System%\config\systemprofile\Local Settings\Temp\dd_vcredistUI6BB9.txt
%System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_42c.dat
%System%\config\systemprofile\Local Settings\Temp\Perflib_Perfdata_740.dat
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0XIJ0DEZ\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\16[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\bottom_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box01[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box02[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\box08[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\header00b[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\report_image[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\2TPM8950\table_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\box07[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\dropdown[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\footer00[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\header02[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\import[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_bottom3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\table_top3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4H9MXTT9\transpix[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8XQVK9U7\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\K96JWPA7\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OLQ78TEZ\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\10[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\background[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box03[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box04[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\box06[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\config[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\edit_icon_thumb[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SMCZPN4M\top_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[1].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[2].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[3].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[4].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\192.168.100[5].htm
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\bottom_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\box09[1].gif
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\delete_icon_thumb[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\desktop.ini
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\sunbeltlabs_logo[1].jpg
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\table_right3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\top_left3[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\X9QQH2D9\users[1].png
%System%\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini
%System%\config\systemprofile\My Documents\desktop.ini
%System%\config\systemprofile\My Documents\My Music\Desktop.ini
%System%\config\systemprofile\My Documents\My Music\Sample Music.lnk
%System%\config\systemprofile\My Documents\My Pictures\Desktop.ini
%System%\config\systemprofile\My Documents\My Pictures\Sample Pictures.lnk
%System%\config\systemprofile\NTUSER.DAT
%System%\config\systemprofile\Recent\Desktop.ini
%System%\config\systemprofile\Recent\server.lnk
%System%\config\systemprofile\SendTo\desktop.ini
%System%\config\systemprofile\Start Menu\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Address Book.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk
%System%\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk
%System%\config\systemprofile\Start Menu\Programs\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Internet Explorer.lnk
%System%\config\systemprofile\Start Menu\Programs\Outlook Express.lnk
%System%\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk
%System%\config\systemprofile\Start Menu\Programs\Startup\desktop.ini
%System%\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk
%System%\config\systemprofile\Templates\excel.xls
%System%\config\systemprofile\Templates\excel4.xls
%System%\config\systemprofile\Templates\powerpnt.ppt
%System%\config\systemprofile\Templates\sndrec.wav
%System%\config\systemprofile\Templates\winword.doc
%System%\config\systemprofile\Templates\winword2.doc
%System%\confmsp.dll
%System%\conime.exe
%System%\console.dll
%System%\control.exe
%System%\convert.exe
%System%\corpol.dll
%System%\country.sys
%System%\credui.dll
%System%\crtdll.dll
%System%\crypt32.dll
%System%\cryptdlg.dll
%System%\cryptdll.dll
%System%\cryptext.dll
%System%\cryptnet.dll
%System%\cryptsvc.dll
%System%\cryptui.dll
%System%\cscdll.dll
%System%\cscript.exe
%System%\cscui.dll
%System%\csrsrv.dll
%System%\csrss.exe
%System%\csseqchk.dll
%System%\ctfmon.exe
%System%\ctl3d32.dll
%System%\ctl3dv2.dll
%System%\d3d8.dll
%System%\d3d8thk.dll
%System%\d3d9.dll
%System%\d3dim.dll
%System%\d3dim700.dll
%System%\d3dpmesh.dll
%System%\d3dramp.dll
%System%\d3drm.dll
%System%\d3dxof.dll
%System%\danim.dll

ご利用はいかがでしたか？　アンケートにご協力ください