TROJ_SCAR.NXAC

2016年10月6日

プラットフォーム:

Windows

危険度:

ダメージ度:

感染力:

感染確認数:

マルウェアタイプ: トロイの木馬型
破壊活動の有無: なし
暗号化:
感染報告の有無: はい

概要

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

詳細

ファイルサイズ 2,224,128 bytes

タイプ EXE

メモリ常駐はい

発見日 2016年10月6日

侵入方法

マルウェアは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

マルウェアは、感染したコンピュータ内に以下のように自身のコピーを作成します。

%System Root%\calender\{malware file name}

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

マルウェアは、以下のフォルダを作成します。

%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.. %User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞" です。.)

自動実行方法

マルウェアは、自身のコピーがWindows起動時に自動実行されるよう以下のレジストリ値を追加します。

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
PNDClndr = "%System Root%\calender\{malware file name}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
PNDClndr = "%System Root%\Calender\PNDClndr4.exe"

他のシステム変更

マルウェアは、以下のフォルダを削除します。

%User Profile%\Replicate\Security
%User Profile%\10.0\Replicate
%User Profile%\Acrobat\10.0
%User Profile%\Adobe\Acrobat
%User Profile%\Setup\{AC76BA86-7AD7-1033-7B44-AA0000000001}
%User Profile%\Adobe\Setup
%User Profile%\Application Data\Adobe
%User Profile%\DSS\MachineKeys
%User Profile%\Crypto\DSS
%User Profile%\RSA\MachineKeys
%User Profile%\RSA\S-1-5-18
%User Profile%\Microsoft\HTML Help
%User Profile%\Microsoft\Media Index
%User Profile%\Microsoft\Media Player
%User Profile%\Connections\Cm
%User Profile%\Connections\Pbk
%User Profile%\Network\Connections
%User Profile%\Microsoft\Network
%User Profile%\User Account Pictures\Default Pictures
%User Profile%\Microsoft\User Account Pictures
%User Profile%\Application Data
%User Profile%\My Music\My Playlists
%User Profile%\My Music\Sample Music
%User Profile%\Sample Playlists\0008044E
%User Profile%\My Music\Sample Playlists
%User Profile%\Documents\My Music
%User Profile%\My Pictures\Sample Pictures
%User Profile%\Documents\My Pictures
%User Profile%\Documents\My Videos
%User Profile%\Documents
%User Profile%\DRM
%Start Menu%\Programs\Accessories\Accessibility
%Start Menu%\Programs\Accessories\Communications
%Start Menu%\Programs\Accessories\Entertainment
%Start Menu%\Programs\Accessories\System Tools
%Start Menu%\Programs\Accessories
%Start Menu%\Programs\Administrative Tools
%Start Menu%\Programs\Games
%Start Menu%\Programs\WinPcap
%Start Menu%\Programs
%User Profile%\Templates
%System Root%\Documents and Settings\All Users
%User Profile%\Microsoft\Internet Explorer
%User Profile%\Cookies
%Application Data%\Microsoft\Media Player
%Application Data%\Microsoft\Windows Media\9.0
%Application Data%\Microsoft\Windows Media
%Application Data%\Microsoft
%User Profile%\History\History.IE5
%User Profile%\Local Settings\History
%Temporary Internet Files%\Content.IE5\09RWHJQN
%Temporary Internet Files%\Content.IE5\BVLBNMKH
%Temporary Internet Files%\Content.IE5\ZDGZNKA5
%Temporary Internet Files%\Content.IE5\ZSGKJKO6
%Temporary Internet Files%\Content.IE5
%User Profile%\Local Settings
%User Profile%\My Documents
%User Profile%\NetHood
%User Profile%\PrintHood
%User Profile%\Recent
%User Profile%\SendTo
%System Root%\Documents and Settings\Default User
%User Profile%\Credentials\S-1-5-19
%User Profile%\Microsoft\Credentials
%Application Data%\Microsoft\Credentials\S-1-5-19
%Application Data%\Microsoft\Credentials
%Application Data%\Microsoft\Windows
%Temporary Internet Files%\Content.IE5\246FT6TD
%Temporary Internet Files%\Content.IE5\9STOYKO4
%Temporary Internet Files%\Content.IE5\NF72HY20
%Temporary Internet Files%\Content.IE5\PHOM4UYK
%System Root%\Documents and Settings\LocalService
%User Profile%\Credentials\S-1-5-20
%Application Data%\Microsoft\Credentials\S-1-5-20
%System Root%\Documents and Settings\NetworkService
%User Profile%\Identities\{8A24C031-62FE-4BF5-94F0-BFD4FBCD674B}
%User Profile%\Application Data\Identities
%User Profile%\Credentials\S-1-5-21-1645522239-1292428093-682003330-1003
%User Profile%\Internet Explorer\Quick Launch
%User Profile%\Microsoft\MMC
%User Profile%\Windows\Themes
%User Profile%\Microsoft\Windows
%Favorites%\Links
%Application Data%\Microsoft\CD Burning
%Application Data%\Microsoft\Credentials\S-1-5-21-1645522239-1292428093-682003330-1003
%Application Data%\Microsoft\Internet Explorer
%User Profile%\History.IE5\MSHist012013061320130614
%User Temp%\Microsoft .NET Framework 4 Setup_4.0.30319
%User Temp%\Microsoft Visual C++ 2010 x86 Redistributable Setup_10.0.30319
%User Temp%\{835818DD-220C-4ABD-946E-0D8660B95E29}
%User Profile%\My Documents\My Music
%User Profile%\My Documents\My Pictures
%System Root%\Documents and Settings\Wilbert
%System Root%\Documents and Settings
%Program Files%\Adobe\Reader 10.0\Esl
%Program Files%\Adobe\Reader 10.0\Reader\AIR
%Program Files%\Adobe\Reader 10.0\Reader\Browser
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates\ENU
%Program Files%\Adobe\Reader 10.0\Reader\IDTemplates
%Program Files%\Adobe\Reader 10.0\Reader\Javascripts
%Program Files%\Adobe\Reader 10.0\Reader\Legal\ENU
%Program Files%\Adobe\Reader 10.0\Reader\Legal
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Annotations
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d\prc
%Program Files%\Adobe\Reader 10.0\Reader\plug_ins3d
%Program Files%\Adobe\Reader 10.0\Reader\Services
%Program Files%\Adobe\Reader 10.0\Reader\SPPlugins
%Program Files%\Adobe\Reader 10.0\Reader\Tracker
%Program Files%\Adobe\Reader 10.0\Reader
%Program Files%\Adobe\Reader 10.0\Resource\CMap
%Program Files%\Adobe\Reader 10.0\Resource\Font\PFM
%Program Files%\Adobe\Reader 10.0\Resource\Font
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics\Providers
%Program Files%\Adobe\Reader 10.0\Resource\Linguistics
%Program Files%\Adobe\Reader 10.0\Resource\SaslPrep
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode
%Program Files%\Adobe\Reader 10.0\Resource\TypeSupport
%Program Files%\Adobe\Reader 10.0\Resource
%Program Files%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA0000000001}
%Program Files%\Adobe\Reader 10.0\Setup Files
%Program Files%\Adobe\Reader 10.0
%Program Files%\Adobe
%Program Files%\Common Files\Adobe\Acrobat\ActiveX
%Program Files%\Common Files\Adobe\Acrobat
%Program Files%\Common Files\Adobe\ARM\1.0
%Program Files%\Common Files\Adobe\ARM
%Program Files%\Common Files\Adobe\HelpCfg\en_US
%Program Files%\Common Files\Adobe\HelpCfg
%Program Files%\Common Files\Adobe
%Program Files%\Common Files\Microsoft Shared\DAO
%Program Files%\Common Files\Microsoft Shared\DW\1025
%Program Files%\Common Files\Microsoft Shared\DW\1028
%Program Files%\Common Files\Microsoft Shared\DW\1031
%Program Files%\Common Files\Microsoft Shared\DW\1033
%Program Files%\Common Files\Microsoft Shared\DW\1036
%Program Files%\Common Files\Microsoft Shared\DW\1040
%Program Files%\Common Files\Microsoft Shared\DW\1041
%Program Files%\Common Files\Microsoft Shared\DW\1042
%Program Files%\Common Files\Microsoft Shared\DW\2052
%Program Files%\Common Files\Microsoft Shared\DW\3082
%Program Files%\Common Files\Microsoft Shared\DW
%Program Files%\Common Files\Microsoft Shared\MSInfo
%Program Files%\Common Files\Microsoft Shared\Speech\1033
%Program Files%\Common Files\Microsoft Shared\Speech
%Program Files%\Common Files\Microsoft Shared\Stationery
%Program Files%\Common Files\Microsoft Shared\TextConv
%Program Files%\Common Files\Microsoft Shared\Triedit
%Program Files%\Common Files\Microsoft Shared\VC
%Program Files%\Common Files\Microsoft Shared\VGX
%Program Files%\Common Files\Microsoft Shared\Web Folders
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admcgi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admcgi
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admisapi\scripts
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\admisapi
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin\1033
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bin
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bots\vinavbar
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\bots
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi\_vti_aut
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\isapi
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\servsupp
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut
%Program Files%\Common Files\Microsoft Shared\web server extensions\40\_vti_bin
%Program Files%\Common Files\Microsoft Shared\web server extensions\40
%Program Files%\Common Files\Microsoft Shared\web server extensions
%Program Files%\Common Files\Microsoft Shared
%Program Files%\Common Files\MSSoap\Binaries\Resources\1033
%Program Files%\Common Files\MSSoap\Binaries\Resources
%Program Files%\Common Files\MSSoap\Binaries
%Program Files%\Common Files\MSSoap
%Program Files%\Common Files\ODBC\Data Sources
%Program Files%\Common Files\ODBC
%Program Files%\Common Files\Services
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon\1033
%Program Files%\Common Files\SpeechEngines\Microsoft\Lexicon
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS\1033
%Program Files%\Common Files\SpeechEngines\Microsoft\TTS
%Program Files%\Common Files\SpeechEngines\Microsoft
%Program Files%\Common Files\SpeechEngines
%Program Files%\Common Files\System\ado
%Program Files%\Common Files\System\msadc
%Program Files%\Common Files\System\Ole DB
%Program Files%\Common Files\System
%Program Files%\Common Files
%Program Files%\ComPlus Applications
%Program Files%\Internet Explorer\Connection Wizard
%Program Files%\Internet Explorer\MUI\0409
%Program Files%\Internet Explorer\MUI
%Program Files%\Internet Explorer\PLUGINS
%Program Files%\Internet Explorer\SIGNUP
%Program Files%\Internet Explorer
%Program Files%\Messenger
%Program Files%\microsoft frontpage\version3.0\bin
%Program Files%\microsoft frontpage\version3.0
%Program Files%\microsoft frontpage
%Program Files%\Microsoft.NET\RedistList
%Program Files%\Microsoft.NET
%Program Files%\Movie Maker\MUI\0409
%Program Files%\Movie Maker\MUI
%Program Files%\Movie Maker\Shared\Profiles
%Program Files%\Movie Maker\Shared
%Program Files%\Movie Maker
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5
%Program Files%\MSBuild\Microsoft\Windows Workflow Foundation
%Program Files%\MSBuild\Microsoft
%Program Files%\MSBuild
%Program Files%\MSN\MSNCoreFiles\Install\MSN9Components
%Program Files%\MSN\MSNCoreFiles\Install
%Program Files%\MSN\MSNCoreFiles\OOBE
%Program Files%\MSN\MSNCoreFiles
%Program Files%\MSN
%Program Files%\MSN Gaming Zone\Windows
%Program Files%\MSN Gaming Zone
%Program Files%\MSXML 6.0\EULA
%Program Files%\MSXML 6.0
%Program Files%\NetMeeting
%Program Files%\Online Services
%Program Files%\Outlook Express
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.0
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList
%Program Files%\Reference Assemblies\Microsoft\Framework\v3.5
%Program Files%\Reference Assemblies\Microsoft\Framework
%Program Files%\Reference Assemblies\Microsoft
%Program Files%\Reference Assemblies
%Program Files%\Uninstall Information
%Program Files%\Windows Media Player\Icons
%Program Files%\Windows Media Player\Sample Playlists
%Program Files%\Windows Media Player\Skins
%Program Files%\Windows Media Player\Visualizations
%Program Files%\Windows Media Player
%Program Files%\Windows NT\Accessories
%Program Files%\Windows NT\Pinball
%Program Files%\Windows NT
%Program Files%\WindowsUpdate
%Program Files%\WinPcap
%Program Files%\xerox\nwwia
%Program Files%\xerox
%System Root%\System Volume Information
%Windows%\$MSI31Uninstall_KB893803v2$\spuninst
%Windows%\$MSI31Uninstall_KB893803v2$
%Windows%\$NtUninstallWIC$\spuninst
%Windows%\$NtUninstallWIC$
%Windows%\addins
%Windows%\AppPatch
%Windows%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_32\CustomMarshalers
%Windows%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_32\ISymWrapper
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc
%Windows%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_32\mscorlib
%Windows%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_32\PresentationCore
%Windows%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_32\System.Data
%Windows%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_32\System.Data.OracleClient
%Windows%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_32\System.EnterpriseServices
%Windows%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_32\System.Printing
%Windows%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_32\System.Transactions
%Windows%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_32\System.Web
%Windows%\assembly\GAC_32
%Windows%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Accessibility
%Windows%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\AspNetMMCExt
%Windows%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\cscompmgd
%Windows%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\IEExecRemote
%Windows%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\IEHost
%Windows%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\IIEHost
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Engine
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Framework
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5
%Windows%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.JScript
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\Microsoft_VsaVb
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationBuildTasks
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationCFFRasterizer
%Windows%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationFramework
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationFramework.Aero
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationFramework.Classic
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationFramework.Luna
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationFramework.Royale
%Windows%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\PresentationUI
%Windows%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\ReachFramework
%Windows%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\SMDiagnostics
%Windows%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\sysglobl
%Windows%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System
%Windows%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.AddIn
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.AddIn.Contract
%Windows%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Configuration
%Windows%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Configuration.Install
%Windows%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Core
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Data.DataSetExtensions
%Windows%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Data.Linq
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Data.SqlXml
%Windows%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Deployment
%Windows%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Design
%Windows%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.DirectoryServices
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.DirectoryServices.Protocols
%Windows%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Drawing
%Windows%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Drawing.Design
%Windows%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.IdentityModel
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.IdentityModel.Selectors
%Windows%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.IO.Log
%Windows%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Management
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Management.Instrumentation
%Windows%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Messaging
%Windows%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Net
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Runtime.Remoting
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap
%Windows%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Security
%Windows%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.ServiceModel
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Install
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.ServiceModel.WasHosting
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.ServiceModel.Web
%Windows%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.ServiceProcess
%Windows%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Speech
%Windows%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Web.Extensions
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Web.Extensions.Design
%Windows%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Web.Mobile
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Web.RegularExpressions
%Windows%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a
%Windows%\assembly\GAC_MSIL\System.Web.Services
%Windows%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Windows.Forms
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Windows.Presentation
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Workflow.Activities
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Workflow.ComponentModel
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.Workflow.Runtime
%Windows%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\System.WorkflowServices
%Windows%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Xml
%Windows%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089
%Windows%\assembly\GAC_MSIL\System.Xml.Linq
%Windows%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\UIAutomationClient
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\UIAutomationClientsideProviders
%Windows%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\UIAutomationProvider
%Windows%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\UIAutomationTypes
%Windows%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\WindowsBase
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35
%Windows%\assembly\GAC_MSIL\WindowsFormsIntegration
%Windows%\assembly\GAC_MSIL
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622
%Windows%\assembly\NativeImages_v2.0.50727_32\Accessibility
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b
%Windows%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\bb3c2f59a821abc54f420f3a9e051d6a
%Windows%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281
%Windows%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80
%Windows%\assembly\NativeImages_v2.0.50727_32\dfsvc
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\d097b5a3c886d0c3b053f46b7a310501
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\1cfe3ed0c5b5f63d49185967fa4bfe17
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b853ec09162fa93757d7bbb0d5435f4e
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\19fcf0383bc2340da2d15e1370ef0990
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\da5206e4c016dbdb944957d0046d7869
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\b3b62fe820b416515420a6ec17b247c3
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e3dce636e798c53ec2b44d1d4aadb850
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f3902a808549b40d648206c9303f2788
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\e674ba75a514e00b26329e212da938e0
%Windows%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild\aa99ebdd26e5d493fec18b1714458782
%Windows%\assembly\NativeImages_v2.0.50727_32\MSBuild
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655
%Windows%\assembly\NativeImages_v2.0.50727_32\mscorlib
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ab2b2664932688ae7c8e0bd9d10448ef
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3df824565150953afd560ca20237b881
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore\011f8e31d197b4ccb6a61c2267a38e5c
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationCore
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\4ce7fd62d4107fbe996ab305eb21ee6a
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36c6cfd5d4e80d5c548f823b2bbf5457
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3f18bff5107c9a8accae6c248fdf3c2e
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\60421dda88800b14dc101ed9dca422fe
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\81d2540bc1c18190d0431d9a61bee65b
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9df61ec7aad39fe0bac82139cd84e5e5
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI\6d2716a55eb8ce6fc4cbf83f3ab329e3
%Windows%\assembly\NativeImages_v2.0.50727_32\PresentationUI
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework\840c64bba900a6ed333ca39e63a9ca3b
%Windows%\assembly\NativeImages_v2.0.50727_32\ReachFramework
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\feac66e81309d67b48f7a9f4cb98f7c8
%Windows%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\169ba2fe1a4d87ede3ab8dd3d44d867e
%Windows%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\a098c66aa40d958878f3f5344e6ae1a4
%Windows%\assembly\NativeImages_v2.0.50727_32\SMSvcHost
%Windows%\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a
%Windows%\assembly\NativeImages_v2.0.50727_32\System
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn\514e98c9aa203a2983cbf329753cb9c3
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\eeb4d1669350e6eb17e48b867655aeba
%Windows%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Configuration
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core\11a9cf08e5bb06e0770b2b6bbe06df39
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Core
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c014bb2f4ee4bf27c65ce1d1d78d750c
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\b764aeb88006085c9cc4202662de94f6
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Deployment
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Design
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11892d4e65aaa4f475af5608b9497007
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d
%Windows%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56
%Windows%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\492d16599426c7ab35ad2c499a9d4ae6
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\bdd94a4c46e4424787dfed9381196cb3
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e1e6aa5272543f1d9dad98be897b693e
%Windows%\assembly\NativeImages_v2.0.50727_32\System.IO.Log
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management\29c7192327cf3999961560bf3a3995c6
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\0c0688825a79e72951210318eef63c82
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Management.I#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net\3cefb375df4f668badf6dc74f3288960
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Net
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing\f94fbbe7d7c6e76d02cd9fb94ee8d910
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Printing
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e27527e67611d8acc0d8dff6d286af23
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Security
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\350903c091629396c08742c996c1caba
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\b500bb89ae2cc514f4b1c34e5fa26d75
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9
%Windows%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech\d4147c99010667b5c547fcfc56ed7bd5
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Speech
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Transactions
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1e0ce08988c4cd1659caa7981b4c60fc
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e53994294a9806e82eec3da5a92df440
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Web.Services
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\fbcb343f14b7a8940d8cd2cb41d6d23a
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\9798b3ba448ba7d5f1dd70a8a1fb7562
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\575dad1c0dc9d035acbab10846802ce0
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9d89b57d703aefe4938b45f8b398d378
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\4b5a5ae7e0127bc7198e25e642a93657
%Windows%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\0e1c79174260c4e2bf159a2cc1d77338
%Windows%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq
%Windows%\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13.tmp
%Windows%\assembly\NativeImages_v2.0.50727_32\Temp
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2e5aa36c753a605bdefb97ab83e8806
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\ae395b4b568f0d71fec35e3902a46a99
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\9e249f5c0ef3e391c5aec1f9da805519
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\46e3ec015dd7b25d5ddc185534458122
%Windows%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase\0703021437c2ec71213a6b701771be86
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsBase
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b7c202147607f93463ead99e743c78b9
%Windows%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig\13f498f606b7cb97c086eea149b8c872
%Windows%\assembly\NativeImages_v2.0.50727_32\WsatConfig
%Windows%\assembly\NativeImages_v2.0.50727_32
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701
%Windows%\assembly\NativeImages_v4.0.30319_32\Accessibility
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9
%Windows%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f
%Windows%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\d2574c8ae333ff959be2e0d83121ad10
%Windows%\assembly\NativeImages_v4.0.30319_32\CustomMarshalers
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735
%Windows%\assembly\NativeImages_v4.0.30319_32\dfsvc
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\3bfb841477d28ca866b91211f50199bb
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\837fa037ca302e7432ea9913ae453e70
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\7cfd4a64a95807ee7cb6ae50cfabd93c
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\11ef4be6ee227fce3725d6df534297a4
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\8973265600edd2135ecf5e369a087dfb
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b384b96460ad28697e8990e56b0234d8
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\08b2c2639708ab20748653185d6b67be
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5f595338c63c2fdb5a171760c29d5bcf
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9952f66fc592ffc21b024803c8c955fd
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\17921c875097ce0f638aa81a59093d3a
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2eef2f34c0295f1fe5d6d4441f9e790b
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\edcde6e8ccca7996c2e1ad40bd0f2758
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\552a460a8bcf608aecc6418db0d40216
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\6a8da5dd61b1fcfed27f84047a3e2bad
%Windows%\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild\aa25092606e5e9826db7a7bd0adb9b2b
%Windows%\assembly\NativeImages_v4.0.30319_32\MSBuild
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea
%Windows%\assembly\NativeImages_v4.0.30319_32\mscorlib
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\d0e67f49781c157069bc3298454354bd
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationCore
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI\15578874ee1464dc6a3545d4be842e59
%Windows%\assembly\NativeImages_v4.0.30319_32\PresentationUI
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework\42f0e1a4e3081c50503d74ebc0540a60
%Windows%\assembly\NativeImages_v4.0.30319_32\ReachFramework
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4d2a51c03b27e615ff9f1c430f2014ba
%Windows%\assembly\NativeImages_v4.0.30319_32\SMDiagnostics
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost\38f0d77629891e7808424103aaef0728
%Windows%\assembly\NativeImages_v4.0.30319_32\SMSvcHost
%Windows%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3
%Windows%\assembly\NativeImages_v4.0.30319_32\System
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities\931ad0783c03deb967760d5c2387274a
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\607df7a11c3334146664bc74130bc38f
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.C#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8594d07d18330843968d649ed6ef6166
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.D#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\a57e34a36f38a007aa24f1bd07a167ab
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Activities.P#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn\767e70aec1ffb52f95c2b07c08fa0781
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\5c87f21925d5a61059ee68cef72841f4
%Windows%\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuratio#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Configuration
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Core
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\caecc65b5c0ede0fe0d55b9f48ada80f
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\642a7b3d47828fb0070a55cfeb58f42b
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\7bab044e648dfea461b73dc898150539
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\db33744fb49e77c7233adb50f07fe62a
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\685c7df1332a74aaa899f2bdb3beabc3
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\ec884cc78d6c5bb67bc2c819b1f00ee5
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Service#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services\62f067f8572551df931b3ee6493383d7
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.Services
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment\90fd7fc9fbf5f4eed9135996b515a38a
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Deployment
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Design
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device\36342e6024e2844502d0bdaa9d30971a
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Device
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\46a7f51ef1a9d917598b96f7a758a459
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5166bf93ac5239837c9c92b58d183ea6
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\7f4419b6f829a2485d83b3c3e7b26a97
%Windows%\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Dynamic
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\8b6e9d6171aad3561263ce2cd05c57df
%Windows%\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\386f41f744eedacd1517c8a15750a48b
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9eac876f58a3ebca8878b8654efdc817
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IdentityModel
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log\150da10324f2811a48da58d3496bbe10
%Windows%\assembly\NativeImages_v4.0.30319_32\System.IO.Log
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8b5fe7aff54a7aed07287257a9b8e420
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Management.I#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ab3e80af8e5e95a5a62092cc9293c91
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Messaging
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net\dd5c866d2462dd913ed0a0287396aa50
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Net
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Numerics
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing\eb9369fc9393d29afe51e45cb49aa4be
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Printing
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\565496636c549f7f72fff7db554685b6
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\f3989d3e9cb8904e4edf23ede5adb6c1
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Security
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\2ac3fd2abc9bb5eab553ef8e44ca77ca
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\51c60db370e050d9cdcac17060aaac53
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\52481fccddb053768631c640d5059d4b
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76a5d670ce969c0c65a905b7303d4bbf
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9e32918462a2d0c786fbf21a873cc358
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c3831eb95ccf3904bab81a97a9b08ed3
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dbf07cb14b4dcc210cdf8b5d90a12a56
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\6e7f1bdc845816dfc797f8002b76b5e8
%Windows%\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech\61a931da70f8078539a51cef3888d02d
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Speech
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions\dd9dbf82e44454689976a49a9e4ddb6d
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Transactions
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web\a70842538614699d690561ef5f43598b
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\0d2eb147f2b4b13af1141810688e2d5f
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\02068ef9dafba3308b13444b8f4e5940
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8fbe244f1f9ad9ce887c125bae44a50b
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\9df99ed350ef0a43fbcc1b9e586f1c7f
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\569a7210fae634e8827a1bd805922540
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\a1d43a413800a3fa024cba9161c34c44
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0d511c8f1da06cc18f2da9b593042841
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\c69974f79eb0c96357fbf031df6d8ed0
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\0f643b7bd4525c3165733f6988bdbfe2
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\2e2096834f67f11a362be1e5c0da4d54
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\c7b1290bb35d3e3c53d20e5928c9fa73
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\770e21411a66352a12b5d3f1e47e972e
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9484262c4f1cfaace92aa9d1fee76025
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Routing
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services\149f2dcb9c9706e592d1980a945850c2
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Web.Services
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\4cb0c81cca997d9fbecda9a1824f2fdb
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\9cf13572472dc2efe8f3b7c2ab6198d3
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\18419dd13ced512c5f8dc15a79a601eb
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9bbefd2263d8f2169ab3695798208293
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\544e73a3f3f2daea050f03e4c94e9a6d
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\467bcaca5f4d2914922f62772ea4ea7d
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\be049b8fe1bf23daab7e76159a7e00dd
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\ad9facc364268611cc4ca65f77caeddd
%Windows%\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\70c840dc13aae2e1323b13d7b27030ae
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369
%Windows%\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq
%Windows%\assembly\NativeImages_v4.0.30319_32\Temp
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ece129234f9ba9ad856d0e77e4849137
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClient
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\5904383f7c86f1374a14198872dfa7d8
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610
%Windows%\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsBase
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cc063533b04f9420d1aa571a36d1fabd
%Windows%\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig\3c0d21e75c9a48aba6fba3ddff0fcf39
%Windows%\assembly\NativeImages_v4.0.30319_32\WsatConfig
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\4daf91c66e01c3dd92b239feacaa8245
%Windows%\assembly\NativeImages_v4.0.30319_32\XamlBuildTask
%Windows%\assembly\NativeImages_v4.0.30319_32
%Windows%\assembly\temp
%Windows%\assembly\tmp
%Windows%\assembly
%Windows%\Config
%Windows%\Connection Wizard
%Windows%\Cursors
%Windows%\Debug\UserMode
%Windows%\Debug
%Windows%\Downloaded Program Files
%Windows%\Driver Cache\i386
%Windows%\Driver Cache
%Windows%\ehome
%Windows%\Fonts
%Windows%\Help\Tours\htmlTour
%Windows%\Help\Tours\mmTour
%Windows%\Help\Tours\WindowsMediaPlayer\Audio\Wav
%Windows%\Help\Tours\WindowsMediaPlayer\Audio
%Windows%\Help\Tours\WindowsMediaPlayer\Cnt
%Windows%\Help\Tours\WindowsMediaPlayer\Css
%Windows%\Help\Tours\WindowsMediaPlayer\Img\Btn
%Windows%\Help\Tours\WindowsMediaPlayer\Img\WMarks
%Windows%\Help\Tours\WindowsMediaPlayer\Img
%Windows%\Help\Tours\WindowsMediaPlayer\Scr
%Windows%\Help\Tours\WindowsMediaPlayer\Video
%Windows%\Help\Tours\WindowsMediaPlayer
%Windows%\Help\Tours
%Windows%\Help
%Windows%\ime\chsime\applets
%Windows%\ime\chsime
%Windows%\ime\CHTIME\Applets
%Windows%\ime\CHTIME
%Windows%\ime\imejp\applets
%Windows%\ime\imejp
%Windows%\ime\imejp98
%Windows%\ime\imjp8_1\applets
%Windows%\ime\imjp8_1
%Windows%\ime\imkr6_1\applets
%Windows%\ime\imkr6_1\dicts
%Windows%\ime\imkr6_1
%Windows%\ime\shared\res
%Windows%\ime\shared
%Windows%\ime
%Windows%\inf
%Windows%\Installer\$PatchCache$\Managed\17400AB28230347339DBAF1833357A38\3.1.21022
%Windows%\Installer\$PatchCache$\Managed\17400AB28230347339DBAF1833357A38
%Windows%\Installer\$PatchCache$\Managed\1F3B805BA42A0C233B0158879691FE82\2.1.21022
%Windows%\Installer\$PatchCache$\Managed\1F3B805BA42A0C233B0158879691FE82
%Windows%\Installer\$PatchCache$\Managed
%Windows%\Installer\$PatchCache$
%Windows%\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
%Windows%\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}
%Windows%\Installer\{86881A12-7D42-4E3F-8181-6E316E4929EB}
%Windows%\Installer\{AC76BA86-7AD7-1033-7B44-AA0000000001}
%Windows%\Installer
%Windows%\java\classes
%Windows%\java\trustlib
%Windows%\java
%Windows%\Media
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\CustomMarshalers
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\ISymWrapper
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_32\mscorlib
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_32\PresentationCore
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_32\System.Printing
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_32\System.Transactions
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_32\System.Web
%Windows%\Microsoft.NET\assembly\GAC_32
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Accessibility
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\sysglobl
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Core
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Device
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Net
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Security
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Speech
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089
%Windows%\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsBase
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35
%Windows%\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask
%Windows%\Microsoft.NET\assembly\GAC_MSIL
%Windows%\Microsoft.NET\assembly
%Windows%\Microsoft.NET\Framework\v1.0.3705
%Windows%\Microsoft.NET\Framework\v1.1.4322
%Windows%\Microsoft.NET\Framework\v2.0.50727\1033
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Data
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_GlobalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Permissions
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Roles
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Users
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security
%Windows%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG\Browsers
%Windows%\Microsoft.NET\Framework\v2.0.50727\CONFIG
%Windows%\Microsoft.NET\Framework\v2.0.50727\MSBuild
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI\0409
%Windows%\Microsoft.NET\Framework\v2.0.50727\MUI
%Windows%\Microsoft.NET\Framework\v2.0.50727\RedistList
%Windows%\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files
%Windows%\Microsoft.NET\Framework\v2.0.50727
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI\0409
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\MUI
%Windows%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\EN
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL
%Windows%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation
%Windows%\Microsoft.NET\Framework\v3.0\WPF\en-us
%Windows%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer
%Windows%\Microsoft.NET\Framework\v3.0\WPF
%Windows%\Microsoft.NET\Framework\v3.0
%Windows%\Microsoft.NET\Framework\v3.5\1033
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\Logs
%Windows%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5
%Windows%\Microsoft.NET\Framework\v3.5\MOF
%Windows%\Microsoft.NET\Framework\v3.5\MSBuild
%Windows%\Microsoft.NET\Framework\v3.5\SQL\EN
%Windows%\Microsoft.NET\Framework\v3.5\SQL
%Windows%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation
%Windows%\Microsoft.NET\Framework\v3.5
%Windows%\Microsoft.NET\Framework\v4.0.30319\1033
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Data
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_GlobalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Permissions
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Roles
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Users
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\App_LocalResources
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security
%Windows%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config\Browsers
%Windows%\Microsoft.NET\Framework\v4.0.30319\Config
%Windows%\Microsoft.NET\Framework\v4.0.30319\MOF
%Windows%\Microsoft.NET\Framework\v4.0.30319\MSBuild
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI\0409
%Windows%\Microsoft.NET\Framework\v4.0.30319\MUI
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Client
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Graphics
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Extended
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Graphics
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended
%Windows%\Microsoft.NET\Framework\v4.0.30319\SetupCache
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL\en
%Windows%\Microsoft.NET\Framework\v4.0.30319\SQL
%Windows%\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\en-US
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF\Fonts
%Windows%\Microsoft.NET\Framework\v4.0.30319\WPF
%Windows%\Microsoft.NET\Framework\v4.0.30319
%Windows%\Microsoft.NET\Framework
%Windows%\Microsoft.NET
%Windows%\msagent\chars
%Windows%\msagent\intl
%Windows%\msagent
%Windows%\msapps\msinfo
%Windows%\msapps
%Windows%\mui
%Windows%\Offline Web Pages
%Windows%\pchealth\ERRORREP\QHEADLES
%Windows%\pchealth\ERRORREP\QSIGNOFF
%Windows%\pchealth\ERRORREP
%Windows%\pchealth\helpctr\BATCH
%Windows%\pchealth\helpctr\binaries
%Windows%\pchealth\helpctr\Config\Cache
%Windows%\pchealth\helpctr\Config\CheckPoint
%Windows%\pchealth\helpctr\Config
%Windows%\pchealth\helpctr\Database
%Windows%\pchealth\helpctr\DataColl
%Windows%\pchealth\helpctr\HelpFiles
%Windows%\pchealth\helpctr\Indices
%Windows%\pchealth\helpctr\InstalledSKUs
%Windows%\pchealth\helpctr\Logs
%Windows%\pchealth\helpctr\OfflineCache\Professional_32#0409
%Windows%\pchealth\helpctr\OfflineCache
%Windows%\pchealth\helpctr\PackageStore
%Windows%\pchealth\helpctr\System\blurbs
%Windows%\pchealth\helpctr\System\CompatCtr
%Windows%\pchealth\helpctr\System\css
%Windows%\pchealth\helpctr\System\DFS
%Windows%\pchealth\helpctr\System\dialogs
%Windows%\pchealth\helpctr\System\DVDUpgrd
%Windows%\pchealth\helpctr\System\ErrMsg
%Windows%\pchealth\helpctr\System\errors
%Windows%\pchealth\helpctr\System\images\16x16
%Windows%\pchealth\helpctr\System\images\24x24
%Windows%\pchealth\helpctr\System\images\32x32
%Windows%\pchealth\helpctr\System\images\48x48
%Windows%\pchealth\helpctr\System\images\Centers
%Windows%\pchealth\helpctr\System\images\Expando
%Windows%\pchealth\helpctr\System\images
%Windows%\pchealth\helpctr\System\NetDiag
%Windows%\pchealth\helpctr\System\panels\subpanels
%Windows%\pchealth\helpctr\System\panels
%Windows%\pchealth\helpctr\System\rc
%Windows%\pchealth\helpctr\System\Remote Assistance\Common
%Windows%\pchealth\helpctr\System\Remote Assistance\Css
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Client
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Common
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction\Server
%Windows%\pchealth\helpctr\System\Remote Assistance\Interaction
%Windows%\pchealth\helpctr\System\Remote Assistance
%Windows%\pchealth\helpctr\System\scripts
%Windows%\pchealth\helpctr\System\sysinfo\graphics\33x16pie
%Windows%\pchealth\helpctr\System\sysinfo\graphics\47x24pie
%Windows%\pchealth\helpctr\System\sysinfo\graphics
%Windows%\pchealth\helpctr\System\sysinfo
%Windows%\pchealth\helpctr\System\UpdateCtr
%Windows%\pchealth\helpctr\System
%Windows%\pchealth\helpctr\System_OEM
%Windows%\pchealth\helpctr\Temp
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance
%Windows%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US
%Windows%\pchealth\helpctr\Vendors
%Windows%\pchealth\helpctr
%Windows%\pchealth\UploadLB\Binaries
%Windows%\pchealth\UploadLB\Config
%Windows%\pchealth\UploadLB
%Windows%\pchealth
%Windows%\PeerNet
%Windows%\Prefetch
%Windows%\Provisioning\Schemas
%Windows%\Provisioning
%Windows%\pss
%Windows%\Registration\CRMLog
%Windows%\Registration
%Windows%\repair
%Windows%\Resources\Themes\Luna\Shell\Homestead
%Windows%\Resources\Themes\Luna\Shell\Metallic
%Windows%\Resources\Themes\Luna\Shell\NormalColor
%Windows%\Resources\Themes\Luna\Shell
%Windows%\Resources\Themes\Luna
%Windows%\Resources\Themes
%Windows%\Resources
%Windows%\security\Database
%Windows%\security\logs
%Windows%\security\templates
%Windows%\security
%Windows%\SoftwareDistribution\DataStore\Logs
%Windows%\SoftwareDistribution\DataStore
%Windows%\SoftwareDistribution\Download
%Windows%\SoftwareDistribution\EventCache
%Windows%\SoftwareDistribution\SelfUpdate
%Windows%\SoftwareDistribution
%Windows%\srchasst\chars
%Windows%\srchasst\mui\0409
%Windows%\srchasst\mui
%Windows%\srchasst
%System%\1025
%System%\1028
%System%\1031
%System%\1033
%System%\1037
%System%\1041
%System%\1042
%System%\1054
%System%\2052
%System%\3076
%System%\3com_dmi
%System%\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
%System%\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
%System%\CatRoot
%System%\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
%System%\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
%System%\CatRoot2
%System%\Com
%System%\config\systemprofile\Application Data\Microsoft\Internet Explorer
%System%\config\systemprofile\Application Data\Microsoft\Media Player
%System%\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates
%System%\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs
%System%\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs
%System%\config\systemprofile\Application Data\Microsoft\SystemCertificates\My
%System%\config\systemprofile\Application Data\Microsoft\SystemCertificates
%System%\config\systemprofile\Application Data\Microsoft
%System%\config\systemprofile\Application Data
%System%\config\systemprofile\Cookies
%System%\config\systemprofile\Desktop
%System%\config\systemprofile\Favorites
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0
%System%\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media
%System%\config\systemprofile\Local Settings\Application Data\Microsoft
%System%\config\systemprofile\Local Settings\Application Data
%System%\config\systemprofile\Local Settings\History\History.IE5\MSHist012011101620111017
%System%\config\systemprofile\Local Settings\History\History.IE5
%System%\config\systemprofile\Local Settings\History
%System%\config\systemprofile\Local Settings\Temp
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\28YE50EE
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8B98T9M7
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PTX100DX
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\T024QSIS
%System%\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5
%System%\config\systemprofile\Local Settings\Temporary Internet Files
%System%\config\systemprofile\Local Settings
%System%\config\systemprofile\My Documents
%System%\config\systemprofile\NetHood
%System%\config\systemprofile\PrintHood
%System%\config\systemprofile\Recent
%System%\config\systemprofile\SendTo
%System%\config\systemprofile\Start Menu\Programs\Accessories\Accessibility
%System%\config\systemprofile\Start Menu\Programs\Accessories\Entertainment
%System%\config\systemprofile\Start Menu\Programs\Accessories
%System%\config\systemprofile\Start Menu\Programs\Startup
%System%\config\systemprofile\Start Menu\Programs
%System%\config\systemprofile\Start Menu
%System%\config\systemprofile\Templates
%System%\config\systemprofile
%System%\config
%System%\dhcp
%System%\DirectX\Dinput
%System%\DirectX
%System%\dllcache
%System%\drivers\disdn
%System%\drivers\etc
%System%\drivers
%System%\en-us
%System%\export
%System%\GroupPolicy\Machine
%System%\GroupPolicy\User
%System%\GroupPolicy
%System%\ias
%System%\icsxml
%System%\IME\CINTLGNT
%System%\IME\PINTLGNT
%System%\IME\TINTLGNT
%System%\IME
%System%\inetsrv
%System%\Macromed\Flash
%System%\Macromed
%System%\Microsoft\Protect\S-1-5-18\User
%System%\Microsoft\Protect\S-1-5-18
%System%\Microsoft\Protect
%System%\Microsoft
%System%\MsDtc\Trace
%System%\MsDtc
%System%\mui\0009
%System%\mui\0401
%System%\mui\0402
%System%\mui\0404
%System%\mui\0405
%System%\mui\0406
%System%\mui\0407
%System%\mui\0408
%System%\mui\0409
%System%\mui\040b
%System%\mui\040C
%System%\mui\040D
%System%\mui\040e
%System%\mui\0410
%System%\mui\0411
%System%\mui\0412
%System%\mui\0413
%System%\mui\0414
%System%\mui\0415
%System%\mui\0416
%System%\mui\0418
%System%\mui\0419
%System%\mui\041a
%System%\mui\041b
%System%\mui\041D
%System%\mui\041e
%System%\mui\041f
%System%\mui\0424
%System%\mui\0425
%System%\mui\0426
%System%\mui\0427
%System%\mui\0804
%System%\mui\0816
%System%\mui\0C0A
%System%\mui\dispspec
%System%\mui
%System%\npp
%System%\oobe\actsetup
%System%\oobe\error
%System%\oobe\html\dslmain
%System%\oobe\html\iconnect
%System%\oobe\html\ispsgnup
%System%\oobe\html\isptype
%System%\oobe\html\mouse\images
%System%\oobe\html\mouse
%System%\oobe\html\oemcust
%System%\oobe\html\oemhw
%System%\oobe\html\oemreg
%System%\oobe\html\sconnect
%System%\oobe\html
%System%\oobe\icserror
%System%\oobe\images
%System%\oobe\isperror
%System%\oobe\regerror
%System%\oobe\sample
%System%\oobe\setup
%System%\oobe
%System%\ras
%System%\ReinstallBackups\0000\DriverFiles
%System%\ReinstallBackups\0000
%System%\ReinstallBackups\0001\DriverFiles\i386
%System%\ReinstallBackups\0001\DriverFiles
%System%\ReinstallBackups\0001
%System%\ReinstallBackups\0002\DriverFiles
%System%\ReinstallBackups\0002
%System%\ReinstallBackups\0003\DriverFiles
%System%\ReinstallBackups\0003
%System%\ReinstallBackups\0004\DriverFiles
%System%\ReinstallBackups\0004
%System%\ReinstallBackups
%System%\Restore
%System%\Setup
%System%\ShellExt
%System%\spool\drivers\color
%System%\spool\drivers\w32x86\3\temp
%System%\spool\drivers\w32x86\3
%System%\spool\drivers\w32x86
%System%\spool\drivers
%System%\spool\PRINTERS
%System%\spool\prtprocs\w32x86
%System%\spool\prtprocs\x64
%System%\spool\prtprocs
%System%\spool\XPSEP\amd64\amd64
%System%\spool\XPSEP\amd64
%System%\spool\XPSEP\i386\i386
%System%\spool\XPSEP\i386
%System%\spool\XPSEP
%System%\spool
%System%\usmt
%System%\wbem\AutoRecover
%System%\wbem\Logs
%System%\wbem\mof\bad
%System%\wbem\mof\good
%System%\wbem\mof
%System%\wbem\Performance
%System%\wbem\Repository\FS
%System%\wbem\Repository
%System%\wbem\snmp
%System%\wbem\xml
%System%\wbem
%System%\wins
%System%\xircom
%System%\XPSViewer\en-us
%System%\XPSViewer
%Windows%\Tasks
%Windows%\twain_32
%Windows%\Web\printers\images
%Windows%\Web\printers
%Windows%\Web\Wallpaper
%Windows%\Web
%Windows%\WinSxS\InstallTemp
%Windows%\WinSxS\Manifests
%Windows%\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e
%Windows%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5
%Windows%\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac
%Windows%\WinSxS\Policies\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_x-ww_a0111510
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_x-ww_362e60dd
%Windows%\WinSxS\Policies\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_x-ww_c7b7206f
%Windows%\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775
%Windows%\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3
%Windows%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_x-ww_9e7eb501
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_x-ww_b7353f75
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_x-ww_b8438ace
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_x-ww_4ee8bb30
%Windows%\WinSxS\Policies\x86_policy.9.0.Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_x-ww_6ad67377
%Windows%\WinSxS\Policies
%Windows%\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2
%Windows%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd
%Windows%\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2
%Windows%\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e
%Windows%\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03
%Windows%\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943
%Windows%\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1
%Windows%\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
%Windows%\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a
%Windows%\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13
%Windows%\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95
%Windows%\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0
%Windows%\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790
%Windows%\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492
%Windows%\WinSxS

(註：%User Profile% フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞" です。.. %Start Menu%フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Windows\Start Menu" または "C:\Documents and Settings\＜ユーザ名＞\Start Menu"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu" です。.. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.. %Application Data%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Roaming" です。.. %Temporary Internet Files%フォルダは、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザ名＞\Local Settings\Temporary Internet Files"、Windows Vista および 7 の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Microsoft\Windows\Temporary Internet Files" です。. %Favorites%フォルダは、Windows 2000、XP および Server 2003 の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Favorites"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\Favorites" です。.. %User Temp%フォルダは、ユーザの一時フォルダで、Windows 2000、XP および Server 2003 の場合、通常、"C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"、Windows Vista 、 7 、8、8.1 、Server 2008 および Server 2012の場合、"C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。.. %Program Files%フォルダは、プログラムファイルのフォルダで、いずれのオペレーティングシステム(OS)でも通常、 "C:\Program Files"、64bitのOS上で32bitのアプリケーションを実行している場合、 "C:\Program Files (x86)" です。.. %Windows%フォルダは、Windowsが利用するフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows" です。.. %System%フォルダは、システムフォルダで、いずれのオペレーティングシステム(OS)でも通常、"C:\Windows\System32" です。.)

マルウェアは、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows NT\CurrentVersion\AppCompatFlags\
Layers

マルウェアは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows NT\CurrentVersion\AppCompatFlags\
Layers
{malware path and file name} = "RUNASADMIN"

作成活動

マルウェアは、以下のファイルを作成します。

%System Root%\_pndclndr.ini
%System Root%\Calender\4.cab
%System Root%\Calender\pndclndr4.exe

(註：%System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

その他

マルウェアは、以下の不正なWebサイトにアクセスします。

{BLOCKED}0.1
{BLOCKED}.224.150
{BLOCKED}132.126
{BLOCKED}.71.9
{BLOCKED}.216.127

このウイルス情報は、自動解析システムにより作成されました。

対応方法

対応検索エンジン: 9.8

手順 1

Windows XP、Windows Vista および Windows 7 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

Windowsをセーフモードで再起動します。

[ 詳細 ]

セーフモードでの起動：

• Windows 2000 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows XP の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows Server 2003 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「Windows 拡張オプションメニュー」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows Vista、Windows 7 および Windows Server 2008 の場合：

コンピュータを起動させます。
「Windows **** を起動しています・・・」のメッセージが表示されている間に［F8］を押します。
「詳細ブートオプション」が表示されるので、［↓］［↑］キーを使って［セーフモード］を選択し、［Enter］を押します。

• Windows 8、8.1 および Server 2012の場合：

画面の右上隅へマウスポインタを移動し、[チャーム]バーを表示します。
マウスで、[設定]－[PC設定の変更]を選択します。
左側のパネルで、[全般]を選択します。
右側のパネルで、[PCの起動をカスタマイズする]が表示されるまで下にスクロールし、[今すぐ再起動]をクリック。コンピュータが再起動するまで待ちます。
[オプションの選択]メニューで、[トラブルシューティング]－[詳細オプション]－[スタートアップ設定]－[再起動]をクリックします。
[スタートアップ設定]メニューで、[4]キーを押し、「4）セーフモードを有効にする」を選択します。

手順 3

不明なレジストリキーを削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

In HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
- Layers

手順 4

このレジストリ値を削除します。

[ 詳細 ]

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- PNDClndr = "%System Root%\calender\{malware file name}"

In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- PNDClndr = "%System Root%\Calender\PNDClndr4.exe"

In HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
- {malware path and file name} = "RUNASADMIN"

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]

コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%System Root%\_pndclndr.ini
%System Root%\Calender\4.cab
%System Root%\Calender\pndclndr4.exe

手順 6

以下のフォルダを検索し削除します。

[ 詳細 ]

フォルダが隠しフォルダ属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。

%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs

このマルウェアまたはアドウェア等が作成したフォルダの削除：

Windows 2000、XP および Server 2003 の場合：

[スタート]-[検索]-[ファイルとフォルダすべて]を選択します。
[ファイル名のすべてまたは一部]に、以下のフォルダ名を入力してください。
%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs
[探す場所]の一覧から[マイコンピュータ]を選択し、[検索]を押します。
検索が終了したら、フォルダを選択し、SHIFT+DELETE を押します。これにより、フォルダが完全に削除されます。
残りのフォルダに対して、このマルウェアまたはアドウェア等が作成したフォルダの削除の手順 2.）から 4.）を繰り返してください。
%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs

註：ファイル名の入力欄のタイトルは、Windowsのバージョンによって異なります。（例：ファイルやフォルダ名の検索の場合やファイル名のすべてまたは一部での検索）

Windows Vista、7、Server 2008、8、8.1 および Server 2012 の場合：

Windowsエクスプローラ画面を開きます。
- Windows Vista、7 および Server 2008 の場合：
  - [スタート]-[コンピューター]を選択します。
- Windows 8、8.1 および Server 2012 の場合：
  - 画面の左隅を右クリックし、[エクスプローラー]を選択します。
[コンピューターの検索]に、以下を入力します。
%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs
検索が終了したら、そのファイルを選択し、SHIFT+DELETE を押します。これにより、フォルダが完全に削除されます。
残りのフォルダに対して、このマルウェアまたはアドウェア等が作成したフォルダの削除の手順 2.）から 3.）を繰り返してください。
%System Root%\Calender
%User Profile%\My\Certificates
%User Profile%\SystemCertificates\My
%User Profile%\Microsoft\SystemCertificates
%User Profile%\My\CRLs
%User Profile%\My\CTLs

註：Windows 7 において上記の手順が正しく行われない場合、マイクロソフトのWebサイトをご確認ください。

手順 7

コンピュータを通常モードで再起動し、最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、「TROJ_SCAR.NXAC」と検出したファイルの検索を実行してください。検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。

ご利用はいかがでしたか？　アンケートにご協力ください