Trojan.Siggen18.12605

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'

Creates or modifies the following files

%WINDIR%\win.ini

Sets the following service settings

[<HKLM>\System\CurrentControlSet\Services\TNullFilter] 'Start' = '00000000'
[<HKLM>\System\CurrentControlSet\Services\TNullFilter] 'ImagePath' = 'system32\DRIVERS\TNullFilter.sys'
[<HKLM>\System\CurrentControlSet\Services\.Winhlpsvr] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\.Winhlpsvr] 'ImagePath' = '"%CommonProgramFiles(x86)%\System\winrdgv3.exe"'
[<HKLM>\System\CurrentControlSet\Services\TFsfltdrv] 'ImagePath' = '<DRIVERS>\tfsfltdrv.sys'
[<HKLM>\System\CurrentControlSet\Services\TsdEncrypt] 'Start' = '00000000'
[<HKLM>\System\CurrentControlSet\Services\TsdEncrypt] 'ImagePath' = 'system32\drivers\TsdEncrypt.sys'
[<HKLM>\System\CurrentControlSet\Services\TVDisk] 'ImagePath' = 'System32\drivers\TVDisk.sys'
[<HKLM>\System\CurrentControlSet\Services\IPNPF] 'ImagePath' = 'system32\drivers\IPNPF.sys'
[<HKLM>\System\CurrentControlSet\Services\TermService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\TSafeDisk] 'ImagePath' = 'System32\drivers\TSDDrv64.sys'
[<HKLM>\System\CurrentControlSet\Services\TIjtdrv] 'Start' = '00000001'
[<HKLM>\System\CurrentControlSet\Services\TIjtdrv] 'ImagePath' = 'System32\Drivers\TIjtdrv64.sys'
[<HKLM>\System\CurrentControlSet\Services\THlpDrv] 'Start' = '00000001'
[<HKLM>\System\CurrentControlSet\Services\THlpDrv] 'ImagePath' = 'System32\Drivers\THlpDrv64.sys'
[<HKLM>\SYSTEM\CurrentControlSet\Services\IPNPF] 'Start' = '00000001'

Creates the following services

'TNullFilter' system32\DRIVERS\TNullFilter.sys
'.Winhlpsvr' "%CommonProgramFiles(x86)%\System\winrdgv3.exe"
'.Winhlpsvr' %CommonProgramFiles(x86)%\System\winrdgv3.exe
'TFsfltdrv' <DRIVERS>\tfsfltdrv.sys
'TsdEncrypt' <DRIVERS>\TsdEncrypt.sys
'TVDisk' System32\drivers\TVDisk.sys
'IPNPF' system32\drivers\IPNPF.sys
'TSafeDisk' System32\drivers\TSDDrv64.sys
'TIjtdrv' System32\Drivers\TIjtdrv64.sys
'THlpDrv' System32\Drivers\THlpDrv64.sys

Malicious functions

Injects code into

the following system processes:

<SYSTEM32>\svchost.exe

the following user processes:

iexplore.exe

Installs hooks to intercept notifications

on keystrokes:

Handler for all processes: %WINDIR%\SysWOW64\thooksv3.dll
Handler for all processes: <SYSTEM32>\thooksv364.dll

Hooks functions

in browsers

iexplore.exe process, wininet.dll module
firefox.exe process, wininet.dll module

Registers file system filter

[<HKLM>\System\CurrentControlSet\Services\TNullFilter] 'Group' = 'FSFilter Compression'
[<HKLM>\System\CurrentControlSet\Services\TsdEncrypt] 'Group' = 'FSFilter Encryption'

Modifies settings of Windows Internet Explorer

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'

Modifies file system

Creates the following files

%TEMP%\agentinstall\installation.log
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\windows-1255.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\iso-8859-8.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\iso-8859-7.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\greek.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\koi8-r.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\bulgarian.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90msp-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90msp-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\83pv-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78ms-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78ms-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\adobe-japan1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns1-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns1-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-6
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-3
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-johab-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\adobe-korea1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\shift-jis.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\iso-2022-jp.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\euc-jp.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\wp-symbol
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-johab-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\iso-2022-kr.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\hiragana
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\hankaku
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-6
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-3
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\nwp-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\nwp-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\katakana
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\roman
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\big5ascii.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-h
D:\fa7f7502cb2427332df078\en\wusetup.exe.mui
D:\fa7f7502cb2427332df078\en\wuau.adm
D:\fa7f7502cb2427332df078\en\eula.rtf
D:\fa7f7502cb2427332df078\el\wusetup.exe.mui
D:\fa7f7502cb2427332df078\el\wuau.adm
D:\fa7f7502cb2427332df078\el\eula.rtf
D:\fa7f7502cb2427332df078\de\wusetup.exe.mui
D:\fa7f7502cb2427332df078\de\wuau.adm
D:\fa7f7502cb2427332df078\de\eula.rtf
D:\fa7f7502cb2427332df078\da\wusetup.exe.mui
D:\fa7f7502cb2427332df078\da\wuau.adm
D:\fa7f7502cb2427332df078\da\eula.rtf
D:\fa7f7502cb2427332df078\cs\wusetup.exe.mui
D:\fa7f7502cb2427332df078\cs\wuau.adm
D:\fa7f7502cb2427332df078\cs\eula.rtf
D:\fa7f7502cb2427332df078\ar\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ar\wuau.adm
D:\fa7f7502cb2427332df078\es\eula.rtf
D:\fa7f7502cb2427332df078\es\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ko\eula.rtf
D:\fa7f7502cb2427332df078\fi\eula.rtf
D:\fa7f7502cb2427332df078\ja\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ja\wuau.adm
D:\fa7f7502cb2427332df078\ja\eula.rtf
D:\fa7f7502cb2427332df078\it\wusetup.exe.mui
D:\fa7f7502cb2427332df078\it\wuau.adm
D:\fa7f7502cb2427332df078\it\eula.rtf
D:\fa7f7502cb2427332df078\hu\wusetup.exe.mui
D:\fa7f7502cb2427332df078\hu\wuau.adm
D:\fa7f7502cb2427332df078\hu\eula.rtf
D:\fa7f7502cb2427332df078\he\wusetup.exe.mui
D:\fa7f7502cb2427332df078\he\wuau.adm
D:\fa7f7502cb2427332df078\he\eula.rtf
D:\fa7f7502cb2427332df078\fr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\fr\wuau.adm
D:\fa7f7502cb2427332df078\fr\eula.rtf
D:\fa7f7502cb2427332df078\fi\wusetup.exe.mui
D:\fa7f7502cb2427332df078\fi\wuau.adm
D:\fa7f7502cb2427332df078\ar\eula.rtf
D:\fa7f7502cb2427332df078\es\wuau.adm
D:\fa7f7502cb2427332df078\wow64\wuweb.dll
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_it
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_fr
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_es
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_en
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_de
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_sv
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_it
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_fr
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_es
%WINDIR%\syswow64\bakrdgv3.sys_2tmp
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wups.dll
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_sv
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_it
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_fr
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_es
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_en
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_de
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll
<SYSTEM32>\funcextv64.dll_2tmp
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_zhtw
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_sv
D:\fa7f7502cb2427332df078\wow64\wups2.dll
D:\fa7f7502cb2427332df078\ko\wuau.adm
D:\fa7f7502cb2427332df078\ko\wusetup.exe.mui
D:\fa7f7502cb2427332df078\nl\eula.rtf
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-3
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\iso-2022-cn.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\gbk.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\euc-cn.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\adobe-cns1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\adobe-gb1.cidtounicode
D:\fa7f7502cb2427332df078\ru\wuau.adm
D:\fa7f7502cb2427332df078\ru\eula.rtf
D:\fa7f7502cb2427332df078\ptbr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ptbr\wuau.adm
D:\fa7f7502cb2427332df078\ptbr\eula.rtf
D:\fa7f7502cb2427332df078\pt\wusetup.exe.mui
D:\fa7f7502cb2427332df078\pt\wuau.adm
D:\fa7f7502cb2427332df078\pt\eula.rtf
D:\fa7f7502cb2427332df078\pl\wusetup.exe.mui
D:\fa7f7502cb2427332df078\pl\wuau.adm
D:\fa7f7502cb2427332df078\pl\eula.rtf
D:\fa7f7502cb2427332df078\no\wusetup.exe.mui
D:\fa7f7502cb2427332df078\no\wuau.adm
D:\fa7f7502cb2427332df078\no\eula.rtf
D:\fa7f7502cb2427332df078\nl\wusetup.exe.mui
D:\fa7f7502cb2427332df078\nl\wuau.adm
D:\fa7f7502cb2427332df078\sv\eula.rtf
D:\fa7f7502cb2427332df078\sv\wuau.adm
D:\fa7f7502cb2427332df078\ru\wusetup.exe.mui
D:\fa7f7502cb2427332df078\sv\wusetup.exe.mui
%WINDIR%\syswow64\tks\newtemp\contentmatch.dll
D:\fa7f7502cb2427332df078\tr\eula.rtf
%WINDIR%\syswow64\tks\newtemp\tksframe32.dll
%WINDIR%\temp\udd9b95.tmp
%WINDIR%\temp\udd9b65.tmp
%WINDIR%\syswow64\ocular\msolbase2.dat
%WINDIR%\syswow64\ocular\oagent.ini
%WINDIR%\syswow64\ipwpacket.dll_2tmp
%WINDIR%\syswow64\ippacket.dll_2tmp
D:\fa7f7502cb2427332df078\$shtdwn$.req
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\big5.unicodemap
D:\fa7f7502cb2427332df078\zhtw\wusetup.exe.mui
D:\fa7f7502cb2427332df078\zhtw\wuau.adm
D:\fa7f7502cb2427332df078\zhtw\eula.rtf
D:\fa7f7502cb2427332df078\zhcn\wusetup.exe.mui
D:\fa7f7502cb2427332df078\zhcn\wuau.adm
D:\fa7f7502cb2427332df078\zhcn\eula.rtf
D:\fa7f7502cb2427332df078\tr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\tr\wuau.adm
%WINDIR%\syswow64\ippcap.dll_2tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-v_tmp
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set2eed.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\readme
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-1_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-0_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\adobe-korea1.cidtounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\shift-jis.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\iso-2022-jp.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\euc-jp.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\wp-symbol_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2c_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-hw-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hiragana_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-6_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-5_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-4_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-3_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-1_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-0_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hankaku_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\katakana_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\roman_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\iso-2022-kr.unicodemap_tmp
%WINDIR%\syswow64\ocular\tsafedoc\tsdexceptionfile.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdchangerightuseridend.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdurgencywarr.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdocbakguid.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdchangerightuseridnew.dat
%WINDIR%\syswow64\ocular\tsafedoc\commonbakdoc.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdoc.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\commonscanbaksdwait.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdusbkeyusedlog.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdoc2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\commonscanbaksdupload.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdusbkeylog.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdurgencywarr2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\commonbaksdwait.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsduserandugrounp.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdosm.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdui.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdusbkeyclasslib.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\commonbaksdupload.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdofflinewarr3.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdbakwait2.dat
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set2d85.tmp
%WINDIR%\syswow64\ocular\msoapphash4.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdlogonsetting\smart_tsdlogonsetting_2d7db504-0a25-9018-4207-69625d251673
%WINDIR%\syswow64\ocular\tsafedoc\tsdlogonsetting\tsdlogonsetting_2d7db504-0a25-9018-4207-69625d251673.dat
C:\tpacket7\tpacket7.cat
C:\tpacket7\tpacket7.inf
C:\tpacket7\tpacket7.sys
%WINDIR%\syswow64\ocular\msodhash3.dat
%WINDIR%\temp\udded9f.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\latin2.unicodemap
%WINDIR%\temp\udddfb9.tmp
%WINDIR%\temp\uddd472.tmp
%WINDIR%\temp\uddd461.tmp
%WINDIR%\syswow64\ocular\msudiskinfo_send2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsusercfg\tsdusercfg_0.dat
%WINDIR%\syswow64\ocular\oeaviewer.e32
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsddecryptuseridnew.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdbakgo2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdoso.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdoutgouseridend.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsbakdoc2.dat
%WINDIR%\syswow64\tks\zlib1.dll_tmp
%WINDIR%\syswow64\tks\xmemss.dll_tmp
%WINDIR%\syswow64\tks\tksframe32.dll_tmp
%WINDIR%\syswow64\tks\tksdoc32.dll_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\iso-8859-9.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-thai\tis-620.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-thai\thai.nametounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-thai\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-thai\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\latin2.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-korean\readme_tmp
%WINDIR%\syswow64\winoacsgw.dll
%WINDIR%\syswow64\onacagent.exe
%WINDIR%\syswow64\winoacnac.dll
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdscanbakwait.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdusbkeylib.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsddecryptuseridend.dat
%WINDIR%\syswow64\ocular\tsafedoc\objectrelation.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdarea.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdoutgouseridnew.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdbakgo.dat
%WINDIR%\syswow64\ocular\tsafedoc\roledata.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdbakwait.dat
%WINDIR%\syswow64\ocular\tsafedoc\encryptdisk\encryptdiskinfo.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdurgencywarr3.dat
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-h_tmp
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdonlinepoldelayuseridend.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdofflinewarr2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsareq\tsdonlinepoldelayuseridnew.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdlogonlog.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdlocalbakwait.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsusercfg\tsdsysofps2.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdbaksdlog\tsdscanbakgo.dat
%WINDIR%\syswow64\ocular\tsafedoc\tsdsoftware.dat
%WINDIR%\syswow64\ocular\tsafedoc\approvalflow.dat
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_en
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-5_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-4_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-3_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-1_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-0_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\adobe-gb1.cidtounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\gbk.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\euc-cn.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2c_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-v_tmp
%WINDIR%\syswow64\tks\libxml2-2.dll_tmp
%WINDIR%\syswow64\tks\newtemp\libglib-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgobject-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgsf-1-114.dll
%WINDIR%\syswow64\tks\newtemp\libiconv-2.dll
%WINDIR%\syswow64\tks\newtemp\libintl-8.dll
%WINDIR%\syswow64\tks\newtemp\libstdc++-6.dll
%WINDIR%\syswow64\tks\newtemp\libxml2-2.dll
%WINDIR%\syswow64\tks\newtemp\xmemss.dll
%WINDIR%\syswow64\tks\newtemp\tksdoc32.dll
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\iso-8859-9.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\thai.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\tis-620.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\libgmodule-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgio-2.0-0.dll
%WINDIR%\syswow64\tks\libintl-8.dll_tmp
%WINDIR%\syswow64\tks\newtemp\libgcc_s_dw2-1.dll
%WINDIR%\syswow64\tks\libiconv-2.dll_tmp
%WINDIR%\syswow64\tks\libgsf-1-114.dll_tmp
%WINDIR%\syswow64\tks\libgobject-2.0-0.dll_tmp
%WINDIR%\syswow64\tks\libgmodule-2.0-0.dll_tmp
%WINDIR%\syswow64\tks\libglib-2.0-0.dll_tmp
%WINDIR%\syswow64\tks\libgio-2.0-0.dll_tmp
%WINDIR%\syswow64\tks\libgcc_s_dw2-1.dll_tmp
%WINDIR%\syswow64\tks\libdllwv2.dll_tmp
%WINDIR%\syswow64\tks\icuuc57.dll_tmp
%WINDIR%\syswow64\tks\icuin57.dll_tmp
%WINDIR%\syswow64\tks\icudt57.dll_tmp
%WINDIR%\syswow64\tks\contentmatch.dll_tmp
%WINDIR%\syswow64\tks\newtemp\zlib1.dll
%WINDIR%\syswow64\tks\newtemp\icudt57.dll
%WINDIR%\syswow64\tks\newtemp\icuin57.dll
%WINDIR%\syswow64\tks\newtemp\icuuc57.dll
%WINDIR%\syswow64\tks\newtemp\libdllwv2.dll
%WINDIR%\syswow64\tks\libstdc++-6.dll_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\iso-2022-cn.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\iso-8859-8.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-greek\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-greek\iso-8859-7.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-greek\greek.nametounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-greek\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\koi8-r.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\bulgarian.nametounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\readme_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\windows-1255.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\83pv-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2c_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\adobe-japan1.cidtounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\add-to-xpdfrc_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2c_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-6_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-5_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-4_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-3_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-1_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-0_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5ascii.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5.unicodemap_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\adobe-cns1.cidtounicode_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-v_tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\add-to-xpdfrc
%WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-ucs2_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-v_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-h_tmp
%WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-h_tmp
%WINDIR%\temp\uddf415.tmp
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_de
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ru
%ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp.bak00119deb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp.bak00119e0d
%ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp.bak00119e53
%ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp.bak00119e78
%ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp.bak00119f28
%ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp.bak00119fd9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp.bak0011a0d0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp.bak0011a1eb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp.bak0011a232
%ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp.bak0011a256
%ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp.bak0011a278
%ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp.bak0011a2e2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp.bak0011a34d
%ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp.bak0011a3fd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp.bak0011a468
%ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp.bak0011a4ae
%ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp.bak0011a4d2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp.bak00119dc7
%ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp.bak00119d3b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp.bak0011b9cc
%ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp.bak00119cd0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp.bak0011bb73
%ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp.bak0011bbde
%ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp.bak0011bd85
%ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp.bak0011be7c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp.bak0011bf76
%ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp.bak001198ce
%ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp.bak001199c7
%ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp.bak00119a53
%ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp.bak00119b04
%ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp.bak00119b28
%ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp.bak00119b4a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp.bak00119b4a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp.bak00119b6f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file013.tmp.bak00119bfb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp.bak00119c1f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp.bak00119c41
%ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp.bak00119c66
%ALLUSERSPROFILE%\ipgaszip20220625202731\file208.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp.bak00119da3
%ALLUSERSPROFILE%\ipgaszip20220625202731\file207.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file186.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file187.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file204.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file197.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file196.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file195.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file194.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file193.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file192.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file189.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file188.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file206.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp.bak0011b985
%ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp.bak0011c265
%ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp.bak0011c1fd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp.bak0011afc2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp.bak0011afc2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp.bak0011afe6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp.bak0011b00a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp.bak0011b02c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp.bak0011b051
%ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp.bak0011b073
%ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp.bak0011b073
%ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp.bak0011b097
%ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp.bak0011b0bb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp.bak0011b101
%ALLUSERSPROFILE%\ipgaszip20220625202731\file052.tmp.bak0011b123
%ALLUSERSPROFILE%\ipgaszip20220625202731\file051.tmp.bak0011b123
%ALLUSERSPROFILE%\ipgaszip20220625202731\file050.tmp.bak0011b148
%ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp.bak0011b16c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp.bak0011b18e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp.bak0011b1b2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp.bak0011b1d4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp.bak0011b1d4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp.bak0011afa0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp.bak0011af7c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp.bak0011a969
%ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp.bak0011a9b0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp.bak0011a9d4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp.bak0011aa1a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp.bak0011ab35
%ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp.bak0011ac2c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp.bak0011acb9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp.bak0011acff
%ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp.bak0011ad47
%ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp.bak0011a945
%ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp.bak0011ad69
%ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp.bak0011ad8e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp.bak0011add4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp.bak0011ae3e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp.bak0011ae60
%ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp.bak0011aea9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp.bak0011af11
%ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp.bak0011af35
%ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp.bak0011b1f8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp.bak0011b21c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp.bak0011b23e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp.bak0011ba65
%ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp.bak0011ba87
%ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp.bak0011baab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp.bak0011baab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp.bak0011bacd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp.bak0011bb16
%ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp.bak0011bb5c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp.bak0011bbc6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp.bak0011bc53
%ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp.bak0011bcbd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp.bak0011bd04
%ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp.bak0011bdb4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp.bak0011bdfb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp.bak0011be1f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp.bak0011bf16
%ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp.bak0011bf5c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp.bak0011ba1d
%ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp.bak0011b9d6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp.bak0011ba41
%ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp.bak0011b94a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp.bak0011b263
%ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp.bak0011b6cd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp.bak0011b285
%ALLUSERSPROFILE%\ipgaszip20220625202731\file044.tmp.bak0011b2a9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file043.tmp.bak0011b2ef
%ALLUSERSPROFILE%\ipgaszip20220625202731\file042.tmp.bak0011b2ef
%ALLUSERSPROFILE%\ipgaszip20220625202731\file041.tmp.bak0011b313
%ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp.bak0011b313
%ALLUSERSPROFILE%\ipgaszip20220625202731\file039.tmp.bak0011b335
%ALLUSERSPROFILE%\ipgaszip20220625202731\file037.tmp.bak0011b3e6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file166.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp.bak0011b42f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp.bak0011b497
%ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp.bak0011b4bb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp.bak0011b526
%ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp.bak0011b590
%ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp.bak0011b641
%ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp.bak0011b663
%ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp.bak0011b687
%ALLUSERSPROFILE%\ipgaszip20220625202731\file038.tmp.bak0011b37e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp.bak0011ad23
%ALLUSERSPROFILE%\ipgaszip20220625202731\file165.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file052.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file051.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file050.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file044.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file043.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file042.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file041.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file073.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file072.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file039.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file038.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file013.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp
%ALLUSERSPROFILE%\ipgaskernel20220625202727\akernel3.exe
%ALLUSERSPROFILE%\ipgaskernel20220625202727\setupdata.dat
%ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file037.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file142.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file141.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file143.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file144.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file146.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file145.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file095.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file094.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file093.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file092.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file099.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file098.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file102.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file105.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file104.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file103.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp.bak0011d455
D:\fa7f7502cb2427332df078\wuweb.dll
%ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp.bak0011a872
%ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp.bak0011de07
%ALLUSERSPROFILE%\ipgaszip20220625202731\file208.tmp.bak0011de96
%ALLUSERSPROFILE%\ipgaszip20220625202731\file207.tmp.bak0011dedc
%ALLUSERSPROFILE%\ipgaszip20220625202731\file206.tmp.bak0011defe
%ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp.bak0011e019
%ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp.bak0011e03e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file204.tmp.bak0011e0a8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp.bak0011e0ee
%ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp.bak0011e135
%ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp.bak0011e17b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp.bak0011e19f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp.bak0011e20a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp.bak0011e296
%ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp.bak0011e2ba
%ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp.bak0011e2dc
%ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp.bak0011e300
%ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp.bak0011e300
C:\tnullfitler\tnullfilter.sys
%WINDIR%\temp\oldf508.tmp
D:\fa7f7502cb2427332df078\wuapi.dll.mui_it
<DRIVERS>\setf565.tmp
D:\fa7f7502cb2427332df078\wuapi.dll.mui_fr
D:\fa7f7502cb2427332df078\wuapi.dll.mui_es
D:\fa7f7502cb2427332df078\wuapi.dll.mui_en
D:\fa7f7502cb2427332df078\wuapi.dll.mui_de
D:\fa7f7502cb2427332df078\wuapi.dll
D:\fa7f7502cb2427332df078\wsus3setup.cat
D:\fa7f7502cb2427332df078\cdm.dll
%WINDIR%\bakimhc3.sys_2tmp
D:\fa7f7502cb2427332df078\wuclient-selfupdate-core-toplevel.cab
D:\fa7f7502cb2427332df078\wuclient-selfupdate-aux-toplevel.cab
D:\fa7f7502cb2427332df078\wuclient-selfupdate-activex.cab
%WINDIR%\bakhafnt.sys_2tmp
%WINDIR%\bakthv3.sys_2tmp
<SYSTEM32>\winrdlv3.exe
%CommonProgramFiles(x86)%\system\winwdgsvr.exe
%CommonProgramFiles(x86)%\system\winrdgv3.exe
%WINDIR%\temp\uddfac2.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp.bak0011e322
C:\tnullfitler\tnullfilter.inf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file197.tmp.bak0011e347
%ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp.bak0011e4e4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp.bak0011e570
%ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp.bak0011e669
%ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp.bak0011e68b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp.bak0011c050
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011c096
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011c0dd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp.bak0011c2a9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp.bak0011c2cd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp.bak0011c335
%ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp.bak0011c359
%ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp.bak0011c3c4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp.bak0011c3e6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp.bak0011c4bb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp.bak0011c525
%ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp.bak0011c640
%ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp.bak0011c737
%ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp.bak0011c80a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp.bak0011e54e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp.bak0011e4bf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file195.tmp.bak0011e7b1
%ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp.bak0011e382
%ALLUSERSPROFILE%\ipgaszip20220625202731\file194.tmp.bak0011e7f7
%ALLUSERSPROFILE%\ipgaszip20220625202731\file193.tmp.bak0011e81c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file192.tmp.bak0011e97d
%ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp.bak0011e9c3
%ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp.bak0011df3a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp.bak0011df82
%ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp.bak0011dfa4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file189.tmp.bak0011dfc8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file188.tmp.bak0011dfea
%ALLUSERSPROFILE%\ipgaszip20220625202731\file187.tmp.bak0011e00f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file186.tmp.bak0011e079
%ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp.bak0011e09b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp.bak0011e0bf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp.bak0011e14c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp.bak0011e1fc
%ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp.bak0011e221
%ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp.bak0011e318
%ALLUSERSPROFILE%\ipgaszip20220625202731\file196.tmp.bak0011e78f
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ja
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ko
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wuauhelp.chm_zhtw
D:\fa7f7502cb2427332df078\wuauhelp.chm_zhcn
D:\fa7f7502cb2427332df078\wuauhelp.chm_tr
D:\fa7f7502cb2427332df078\wuauhelp.chm_sv
D:\fa7f7502cb2427332df078\wuauhelp.chm_ru
D:\fa7f7502cb2427332df078\wuauhelp.chm_ptbr
D:\fa7f7502cb2427332df078\wuauhelp.chm_pt
%WINDIR%\syswow64\agt3tool.exe_2tmp
D:\fa7f7502cb2427332df078\wuauhelp.chm_pl
D:\fa7f7502cb2427332df078\wuauhelp.chm_no
D:\fa7f7502cb2427332df078\wuauhelp.chm_nl
D:\fa7f7502cb2427332df078\wuauhelp.chm_ko
D:\fa7f7502cb2427332df078\wuauhelp.chm_ja
%WINDIR%\syswow64\oagenttray.dll_2tmp
D:\fa7f7502cb2427332df078\wuauhelp.chm_it
D:\fa7f7502cb2427332df078\wuauhelp.chm_hu
D:\fa7f7502cb2427332df078\wuauhelp.chm_he
D:\fa7f7502cb2427332df078\wuauhelp.chm_fi
D:\fa7f7502cb2427332df078\wuauhelp.chm_fr
D:\fa7f7502cb2427332df078\wuauserv.dll
D:\fa7f7502cb2427332df078\wucltui.dll
D:\fa7f7502cb2427332df078\wusetup.inf
D:\fa7f7502cb2427332df078\wusetup.exe
D:\fa7f7502cb2427332df078\wups2.dll
D:\fa7f7502cb2427332df078\wups.dll
D:\fa7f7502cb2427332df078\wucltui.dll.mui_zhtw
%WINDIR%\syswow64\bakdevctrl64.sys_2tmp
D:\fa7f7502cb2427332df078\wucltui.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wucltui.dll.mui_sv
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ptbr
%ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp.bak0011a8b9
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ko
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ja
D:\fa7f7502cb2427332df078\wucltui.dll.mui_it
D:\fa7f7502cb2427332df078\wucltui.dll.mui_fr
D:\fa7f7502cb2427332df078\wucltui.dll.mui_es
D:\fa7f7502cb2427332df078\wucltui.dll.mui_en
D:\fa7f7502cb2427332df078\wucltui.dll.mui_de
%WINDIR%\syswow64\bakstec3.sys_2tmp
D:\fa7f7502cb2427332df078\wuauhelp.chm_es
D:\fa7f7502cb2427332df078\wuauhelp.chm_en
D:\fa7f7502cb2427332df078\wuauhelp.chm_el
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ptbr
%WINDIR%\bakthv364.sys_2tmp
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ko
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ja
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_it
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_fr
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_es
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_en
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_de
D:\fa7f7502cb2427332df078\wuaucpl.cpl
D:\fa7f7502cb2427332df078\wuauclt.exe
D:\fa7f7502cb2427332df078\wuapi.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wuapi.dll.mui_zhcn
%WINDIR%\baktsdoc2.sys_2tmp
D:\fa7f7502cb2427332df078\wuapi.dll.mui_sv
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ru
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_sv
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_zhcn
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ru
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_zhtw
D:\fa7f7502cb2427332df078\wuauhelp.chm_de
D:\fa7f7502cb2427332df078\wuaueng.dll
D:\fa7f7502cb2427332df078\wuauhelp.chm_da
D:\fa7f7502cb2427332df078\wuauhelp.chm_cs
D:\fa7f7502cb2427332df078\wuauhelp.chm_ar
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_sv
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ru
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ko
%ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp.bak0011c899
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ja
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_it
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_fr
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_es
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_en
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_de
%WINDIR%\baktsdoc64.sys_2tmp
%WINDIR%\bakhafnt64.sys_2tmp
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuapi.dll
%ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp.bak0011c8df
%ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp.bak0011ca87
%ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp.bak0011bdf8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp.bak0011be41
%ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp.bak0011be63
%ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp.bak0011be63
%ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp.bak0011be87
%ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp.bak0011bea9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp.bak0011becd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp.bak0011bef1
%ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp.bak0011bf13
%ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp.bak0011bf38
%ALLUSERSPROFILE%\ipgaszip20220625202731\file099.tmp.bak0011bfc4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file098.tmp.bak0011c053
%ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp.bak0011c053
%ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp.bak0011c075
%ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp.bak0011c0bb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp.bak0011c0df
%ALLUSERSPROFILE%\ipgaszip20220625202731\file095.tmp.bak0011c125
%ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp.bak0011bdd6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp.bak0011bd25
%ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp.bak0011b9b2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp.bak0011bcbb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp.bak0011b9b2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp.bak0011ba1c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp.bak0011ba1c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp.bak0011ba3e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp.bak0011ba3e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp.bak0011ba85
%ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp.bak0011ba85
%ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp.bak0011baa9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp.bak0011bacd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp.bak0011bb7e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp.bak0011bba0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp.bak0011bbc4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp.bak0011bbe6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp.bak0011bbe6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp.bak0011bc75
%ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp.bak0011bc75
%ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp.bak0011bc97
%ALLUSERSPROFILE%\ipgaszip20220625202731\file094.tmp.bak0011c125
%ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp.bak0011bd90
%ALLUSERSPROFILE%\ipgaszip20220625202731\file093.tmp.bak0011c190
%ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp.bak0011c6ab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp.bak0011c716
%ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp.bak0011c73a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp.bak0011c780
%ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp.bak0011c831
%ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp.bak0011ca89
%ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp.bak0011caad
%ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp.bak0011cacf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp.bak0011caf4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp.bak0011cb16
%ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp.bak0011cb3a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp.bak0011cb5e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp.bak0011cbeb
%ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp.bak0011cc0f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file073.tmp.bak0011cc31
%ALLUSERSPROFILE%\ipgaszip20220625202731\file072.tmp.bak0011cdb7
%ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp.bak0011ce67
%ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp.bak0011a84e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp.bak0011c6cf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp.bak0011c689
%ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp.bak0011c1b4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp.bak0011c61f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp.bak0011c1fa
%ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp.bak0011c21c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp.bak0011c265
%ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp.bak0011c287
%ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp.bak0011c2cd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp.bak0011c316
%ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp.bak0011c35c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp.bak0011c3c6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp.bak0011c3e8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp.bak0011c42f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp.bak0011c453
%ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp.bak0011c477
%ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp.bak0011c4df
%ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp.bak0011c528
%ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp.bak0011c56e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp.bak0011c5b4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp.bak0011c5d8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file092.tmp.bak0011c190
%ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp.bak0011b96c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp.bak0011b82c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp.bak0011b7c2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011ce40
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011ce65
%ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp.bak0011ceab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp.bak0011cecf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp.bak0011cecf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp.bak0011cef1
%ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp.bak0011cf5c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp.bak0011cfc6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp.bak0011d031
%ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp.bak0011d077
%ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp.bak0011d09b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp.bak0011d0bd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp.bak0011d103
%ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp.bak0011d128
%ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp.bak0011d14c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp.bak0011d16e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp.bak0011d192
%ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp.bak0011d21f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp.bak0011d1d8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp.bak0011ce1f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp.bak0011cd28
%ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp.bak0011c94a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp.bak0011c96b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp.bak0011c990
%ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp.bak0011c9b4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file166.tmp.bak0011c9d6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file165.tmp.bak0011c9fa
%ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp.bak0011c9fa
%ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp.bak0011ca65
%ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp.bak0011caab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp.bak0011c903
%ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp.bak0011cacd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp.bak0011cb37
%ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp.bak0011cb7e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp.bak0011cbe8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp.bak0011cc53
%ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp.bak0011ccbd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp.bak0011ccbd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp.bak0011ccdf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp.bak0011d21f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp.bak0011d2cf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file146.tmp.bak0011d2f4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp.bak0011d6ad
%ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp.bak0011d6d2
%ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp.bak0011d6f4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp.bak0011d718
%ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp.bak0011d75e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp.bak0011d782
%ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp.bak0011d7a4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp.bak0011d855
%ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp.bak0011d879
%ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp.bak0011d92a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp.bak0011d94c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp.bak0011da21
%ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp.bak0011b3e6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp.bak0011b523
%ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp.bak0011b523
%ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp.bak0011b7a0
%ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp.bak0011d643
%ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp.bak0011d621
%ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp.bak0011d667
%ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp.bak0011d5fd
%ALLUSERSPROFILE%\ipgaszip20220625202731\file145.tmp.bak0011d33a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp.bak0011d5d8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file144.tmp.bak0011d35e
%ALLUSERSPROFILE%\ipgaszip20220625202731\file143.tmp.bak0011d380
%ALLUSERSPROFILE%\ipgaszip20220625202731\file142.tmp.bak0011d380
%ALLUSERSPROFILE%\ipgaszip20220625202731\file141.tmp.bak0011d3a4
%ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp.bak0011d3c6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp.bak0011d3ea
%ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp.bak0011d40f
%ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp.bak0011a8db
%ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp.bak0011c8df
%ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp.bak0011d49b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp.bak0011d49b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp.bak0011d4bf
%ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp.bak0011d4e1
%ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp.bak0011d506
%ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp.bak0011d54c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp.bak0011d592
%ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp.bak0011d5b6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp.bak0011d431
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set30c2.tmp

Deletes the following files

%WINDIR%\temp\oldf508.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gb-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-3
%WINDIR%\syswow64\tks\newtemp\icuuc57.dll
%WINDIR%\syswow64\tks\newtemp\libdllwv2.dll
%WINDIR%\syswow64\tks\newtemp\libgcc_s_dw2-1.dll
%WINDIR%\syswow64\tks\newtemp\libgio-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libglib-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgmodule-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgobject-2.0-0.dll
%WINDIR%\syswow64\tks\newtemp\libgsf-1-114.dll
%WINDIR%\syswow64\tks\newtemp\libiconv-2.dll
%WINDIR%\syswow64\tks\newtemp\libintl-8.dll
%WINDIR%\syswow64\tks\newtemp\libstdc++-6.dll
%WINDIR%\syswow64\tks\newtemp\libxml2-2.dll
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\adobe-gb1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbt-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\b5pc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns1-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns1-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-6
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-3
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-h
%WINDIR%\syswow64\tks\newtemp\icudt57.dll
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-v
%WINDIR%\syswow64\tks\newtemp\icuin57.dll
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\gbk.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\adobe-cns1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\big5.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\big5ascii.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\iso-2022-cn.unicodemap
%ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-simplified\euc-cn.unicodemap
%ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file165.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file166.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file146.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file141.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file142.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file143.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file144.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file145.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file194.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file195.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file196.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file197.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp
%WINDIR%\temp\udd9b65.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file204.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file206.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file207.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file208.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file193.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file192.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file189.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp
%WINDIR%\temp\udd9b95.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp
%WINDIR%\syswow64\tks\newtemp\contentmatch.dll
%ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file186.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file187.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file188.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\iso-2022-jp.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\shift-jis.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\adobe-korea1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-johab-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-johab-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\ksc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\wp-symbol
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\euc-jp.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\adobe-korea1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijispro-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\v
%ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\iso-8859-9.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdfrc
%WINDIR%\syswow64\tks\newtemp\tksdoc32.dll
%WINDIR%\syswow64\tks\newtemp\tksframe32.dll
%WINDIR%\syswow64\tks\newtemp\xmemss.dll
%WINDIR%\syswow64\tks\newtemp\zlib1.dll
%WINDIR%\syswow64\outlookctrlx.dll
%WINDIR%\temp\uddd461.tmp
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscms-uhc-v
%WINDIR%\temp\uddd472.tmp
%WINDIR%\temp\udded9f.tmp
%WINDIR%\temp\uddf415.tmp
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.cat
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.inf
%WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.sys
C:\tpacket7\tpacket7.cat
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\tis-620.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-turkish\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\thai.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\iso-2022-kr.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\latin2.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-latin2\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-thai\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-korean\cmap\uniks-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\bulgarian.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\koi8-r.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\greek.nametounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\iso-8859-7.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-greek\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\iso-8859-8.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-hebrew\windows-1255.unicodemap
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\adobe-japan1.cidtounicode
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-cyrillic\add-to-xpdfrc
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-6
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\83pv-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\euc-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\ext-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-chinese-traditional\readme
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\hankaku
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\katakana
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\nwp-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\nwp-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\roman
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-5
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-4
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\hiragana
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\euc-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-3
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90ms-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90msp-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90msp-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2c
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-0
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\adobe-japan1-1
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78ms-rksj-v
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\78ms-rksj-h
%WINDIR%\syswow64\tks\newtemp\pdfextend\xpdf-japanese\cmap\add-h
%ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_en
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_de
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_sv
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_it
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_fr
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_es
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_en
D:\fa7f7502cb2427332df078\wow64\wuapi.dll.mui_de
D:\fa7f7502cb2427332df078\wow64\wuapi.dll
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_fr
D:\fa7f7502cb2427332df078\wuweb.dll
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_it
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_sv
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ko
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_it
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_fr
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_es
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_en
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_de
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_zhtw
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_zhcn
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_sv
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ru
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ptbr
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_ja
D:\fa7f7502cb2427332df078\wusetup.inf
D:\fa7f7502cb2427332df078\wusetup.exe
D:\fa7f7502cb2427332df078\wups2.dll
D:\fa7f7502cb2427332df078\wuauhelp.chm_pl
D:\fa7f7502cb2427332df078\wuauhelp.chm_nl
D:\fa7f7502cb2427332df078\wuauhelp.chm_ko
D:\fa7f7502cb2427332df078\wuauhelp.chm_ja
D:\fa7f7502cb2427332df078\wuauhelp.chm_it
D:\fa7f7502cb2427332df078\wuauhelp.chm_hu
D:\fa7f7502cb2427332df078\wuauhelp.chm_he
D:\fa7f7502cb2427332df078\wuauhelp.chm_fr
D:\fa7f7502cb2427332df078\wow64\wups.dll
D:\fa7f7502cb2427332df078\wuauhelp.chm_fi
D:\fa7f7502cb2427332df078\wuauhelp.chm_en
D:\fa7f7502cb2427332df078\wuauhelp.chm_el
D:\fa7f7502cb2427332df078\wuauhelp.chm_de
D:\fa7f7502cb2427332df078\wuauhelp.chm_da
D:\fa7f7502cb2427332df078\wuauhelp.chm_cs
D:\fa7f7502cb2427332df078\wuauhelp.chm_ar
D:\fa7f7502cb2427332df078\wuauhelp.chm_pt
D:\fa7f7502cb2427332df078\wuauhelp.chm_ptbr
D:\fa7f7502cb2427332df078\wuauhelp.chm_no
D:\fa7f7502cb2427332df078\wuauhelp.chm_ru
D:\fa7f7502cb2427332df078\wuauhelp.chm_sv
D:\fa7f7502cb2427332df078\wups.dll
D:\fa7f7502cb2427332df078\wucltui.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wucltui.dll.mui_sv
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ru
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ko
D:\fa7f7502cb2427332df078\wucltui.dll.mui_ja
D:\fa7f7502cb2427332df078\wow64\wuaueng.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wucltui.dll.mui_it
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wucltui.dll.mui_es
D:\fa7f7502cb2427332df078\wucltui.dll.mui_de
D:\fa7f7502cb2427332df078\wucltui.dll
D:\fa7f7502cb2427332df078\wuauserv.dll
D:\fa7f7502cb2427332df078\wuauhelp.chm_zhtw
D:\fa7f7502cb2427332df078\wuauhelp.chm_zhcn
D:\fa7f7502cb2427332df078\wuauhelp.chm_tr
D:\fa7f7502cb2427332df078\wucltui.dll.mui_fr
D:\fa7f7502cb2427332df078\wucltui.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wucltui.dll.mui_en
D:\fa7f7502cb2427332df078\wuauhelp.chm_es
D:\fa7f7502cb2427332df078\wow64\wuweb.dll
D:\fa7f7502cb2427332df078\da\eula.rtf
D:\fa7f7502cb2427332df078\ru\wuau.adm
D:\fa7f7502cb2427332df078\ru\eula.rtf
D:\fa7f7502cb2427332df078\ptbr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ptbr\wuau.adm
D:\fa7f7502cb2427332df078\ptbr\eula.rtf
D:\fa7f7502cb2427332df078\pt\wusetup.exe.mui
D:\fa7f7502cb2427332df078\pt\wuau.adm
D:\fa7f7502cb2427332df078\pt\eula.rtf
D:\fa7f7502cb2427332df078\pl\wusetup.exe.mui
D:\fa7f7502cb2427332df078\pl\wuau.adm
D:\fa7f7502cb2427332df078\pl\eula.rtf
D:\fa7f7502cb2427332df078\no\wusetup.exe.mui
D:\fa7f7502cb2427332df078\no\wuau.adm
D:\fa7f7502cb2427332df078\no\eula.rtf
D:\fa7f7502cb2427332df078\nl\wusetup.exe.mui
D:\fa7f7502cb2427332df078\nl\wuau.adm
D:\fa7f7502cb2427332df078\sv\eula.rtf
D:\fa7f7502cb2427332df078\nl\eula.rtf
D:\fa7f7502cb2427332df078\sv\wuau.adm
D:\fa7f7502cb2427332df078\tr\eula.rtf
%WINDIR%\temp\uddfac2.tmp
C:\tnullfitler\tnullfilter.inf
C:\tnullfitler\tnullfilter.sys
%WINDIR%\bakthv3t.sys
%WINDIR%\bakhafntt.sys
%WINDIR%\bakimhc3t.sys
%WINDIR%\baktsdoc2t.sys
%WINDIR%\bakthv364t.sys
%WINDIR%\baktsdoc64t.sys
D:\fa7f7502cb2427332df078\zhtw\wusetup.exe.mui
D:\fa7f7502cb2427332df078\zhtw\wuau.adm
D:\fa7f7502cb2427332df078\zhtw\eula.rtf
D:\fa7f7502cb2427332df078\zhcn\wusetup.exe.mui
D:\fa7f7502cb2427332df078\zhcn\wuau.adm
D:\fa7f7502cb2427332df078\zhcn\eula.rtf
D:\fa7f7502cb2427332df078\tr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\tr\wuau.adm
D:\fa7f7502cb2427332df078\sv\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ko\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ko\wuau.adm
D:\fa7f7502cb2427332df078\ko\eula.rtf
D:\fa7f7502cb2427332df078\en\wuau.adm
D:\fa7f7502cb2427332df078\el\wusetup.exe.mui
D:\fa7f7502cb2427332df078\el\wuau.adm
D:\fa7f7502cb2427332df078\el\eula.rtf
D:\fa7f7502cb2427332df078\de\wusetup.exe.mui
D:\fa7f7502cb2427332df078\de\wuau.adm
D:\fa7f7502cb2427332df078\de\eula.rtf
D:\fa7f7502cb2427332df078\da\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ru\wusetup.exe.mui
D:\fa7f7502cb2427332df078\da\wuau.adm
D:\fa7f7502cb2427332df078\cs\wusetup.exe.mui
D:\fa7f7502cb2427332df078\cs\wuau.adm
D:\fa7f7502cb2427332df078\cs\eula.rtf
D:\fa7f7502cb2427332df078\ar\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ar\wuau.adm
D:\fa7f7502cb2427332df078\ar\eula.rtf
D:\fa7f7502cb2427332df078\en\wusetup.exe.mui
D:\fa7f7502cb2427332df078\es\eula.rtf
D:\fa7f7502cb2427332df078\en\eula.rtf
D:\fa7f7502cb2427332df078\es\wuau.adm
D:\fa7f7502cb2427332df078\es\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ja\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ja\eula.rtf
D:\fa7f7502cb2427332df078\it\wusetup.exe.mui
D:\fa7f7502cb2427332df078\it\wuau.adm
D:\fa7f7502cb2427332df078\it\eula.rtf
D:\fa7f7502cb2427332df078\hu\wusetup.exe.mui
D:\fa7f7502cb2427332df078\hu\wuau.adm
D:\fa7f7502cb2427332df078\wow64\wups2.dll
D:\fa7f7502cb2427332df078\hu\eula.rtf
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_zhcn
D:\fa7f7502cb2427332df078\he\wuau.adm
D:\fa7f7502cb2427332df078\fr\wusetup.exe.mui
D:\fa7f7502cb2427332df078\fr\wuau.adm
D:\fa7f7502cb2427332df078\fr\eula.rtf
D:\fa7f7502cb2427332df078\fi\wusetup.exe.mui
D:\fa7f7502cb2427332df078\fi\wuau.adm
D:\fa7f7502cb2427332df078\fi\eula.rtf
D:\fa7f7502cb2427332df078\he\wusetup.exe.mui
D:\fa7f7502cb2427332df078\ja\wuau.adm
D:\fa7f7502cb2427332df078\he\eula.rtf
D:\fa7f7502cb2427332df078\wow64\wuaucpl.cpl.mui_es
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_sv
%ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file072.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file073.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file050.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file051.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file052.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file043.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file105.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file104.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file103.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file092.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file042.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file093.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file095.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file044.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file098.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file099.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file102.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file094.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file041.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file039.tmp
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ru
D:\fa7f7502cb2427332df078\wuapi.dll.mui_zhcn
D:\fa7f7502cb2427332df078\wuapi.dll.mui_sv
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ru
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ko
D:\fa7f7502cb2427332df078\wuapi.dll.mui_ja
D:\fa7f7502cb2427332df078\wuapi.dll.mui_it
D:\fa7f7502cb2427332df078\wuapi.dll.mui_fr
D:\fa7f7502cb2427332df078\wuapi.dll.mui_es
D:\fa7f7502cb2427332df078\wuapi.dll.mui_en
D:\fa7f7502cb2427332df078\wuapi.dll.mui_de
D:\fa7f7502cb2427332df078\wuapi.dll
D:\fa7f7502cb2427332df078\wsus3setup.cat
D:\fa7f7502cb2427332df078\cdm.dll
D:\fa7f7502cb2427332df078\wuclient-selfupdate-core-toplevel.cab
D:\fa7f7502cb2427332df078\wuaucpl.cpl
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_en
D:\fa7f7502cb2427332df078\wuapi.dll.mui_zhtw
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_de
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_es
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_zhtw
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ko
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ja
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_it
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_fr
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_es
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_en
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_de
D:\fa7f7502cb2427332df078\wuclient-selfupdate-aux-toplevel.cab
C:\tpacket7\tpacket7.inf
D:\fa7f7502cb2427332df078\wuaueng.dll
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_sv
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ru
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ptbr
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ko
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_ja
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_it
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_fr
D:\fa7f7502cb2427332df078\wuaueng.dll.mui_ptbr
D:\fa7f7502cb2427332df078\wuaucpl.cpl.mui_zhcn
%WINDIR%\temp\udddfb9.tmp
D:\fa7f7502cb2427332df078\wuclient-selfupdate-activex.cab
%ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp
D:\fa7f7502cb2427332df078\wuauclt.exe
%ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file037.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file038.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp
%ALLUSERSPROFILE%\ipgaskernel20220625202727\akernel3.exe
%ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp
%ALLUSERSPROFILE%\ipgaskernel20220625202727\setupdata.dat
%ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file013.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp
%ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp
C:\tpacket7\tpacket7.sys

Moves the following files

from %ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp.bak0011a4d2 to %CommonProgramFiles(x86)%\system\file000.tmp.bak0011a4d2
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp.bak0011e1fc to %WINDIR%\file183.tmp.bak0011e1fc
from %WINDIR%\file183.tmp.bak0011e1fc to %WINDIR%\baktwm64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp.bak0011e14c to %WINDIR%\syswow64\file184.tmp.bak0011e14c
from %WINDIR%\syswow64\file184.tmp.bak0011e14c to %WINDIR%\syswow64\tfollowwnd32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp.bak0011e14c to %WINDIR%\file184.tmp.bak0011e14c
from %WINDIR%\file184.tmp.bak0011e14c to %WINDIR%\baktfw32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp.bak0011e0bf to <SYSTEM32>\file185.tmp.bak0011e0bf
from <SYSTEM32>\file185.tmp.bak0011e0bf to <SYSTEM32>\tfollowwnd64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file185.tmp.bak0011e09b to %WINDIR%\file185.tmp.bak0011e09b
from %WINDIR%\file185.tmp.bak0011e09b to %WINDIR%\baktfw64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file186.tmp.bak0011e079 to %WINDIR%\file186.tmp.bak0011e079
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp.bak0011c050 to %WINDIR%\file178.tmp.bak0011c050
from %WINDIR%\file186.tmp.bak0011e079 to %WINDIR%\baktsdedrvxp.sys
from %WINDIR%\file187.tmp.bak0011e00f to %WINDIR%\baktsdedrvxp64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file188.tmp.bak0011dfea to %WINDIR%\file188.tmp.bak0011dfea
from %WINDIR%\file188.tmp.bak0011dfea to %WINDIR%\baktsdedrv2k3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file189.tmp.bak0011dfc8 to %WINDIR%\file189.tmp.bak0011dfc8
from %WINDIR%\file189.tmp.bak0011dfc8 to %WINDIR%\baktsdedrv2k364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp.bak0011dfa4 to %WINDIR%\file190.tmp.bak0011dfa4
from %WINDIR%\file190.tmp.bak0011dfa4 to %WINDIR%\baktsdedrv7.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file190.tmp.bak0011df82 to %WINDIR%\syswow64\drivers\file190.tmp.bak0011df82
from %WINDIR%\syswow64\drivers\file190.tmp.bak0011df82 to %WINDIR%\syswow64\drivers\tsdencrypt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp.bak0011df3a to %WINDIR%\file191.tmp.bak0011df3a
from %WINDIR%\file191.tmp.bak0011df3a to %WINDIR%\baktsdedrv764.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file191.tmp.bak0011e9c3 to <DRIVERS>\file191.tmp.bak0011e9c3
from %WINDIR%\file182.tmp.bak0011e318 to %WINDIR%\baktwm32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file187.tmp.bak0011e00f to %WINDIR%\file187.tmp.bak0011e00f
from <SYSTEM32>\file183.tmp.bak0011e221 to <SYSTEM32>\twatermask64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file183.tmp.bak0011e221 to <SYSTEM32>\file183.tmp.bak0011e221
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp.bak0011e318 to %WINDIR%\file182.tmp.bak0011e318
from %WINDIR%\syswow64\file182.tmp.bak0011e382 to %WINDIR%\syswow64\twatermask32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp.bak0011c335 to %WINDIR%\file176.tmp.bak0011c335
from %WINDIR%\file176.tmp.bak0011c335 to %WINDIR%\bakthlpdrv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp.bak0011c2cd to %WINDIR%\syswow64\file177.tmp.bak0011c2cd
from %WINDIR%\syswow64\file177.tmp.bak0011c2cd to %WINDIR%\syswow64\thlpdrvd32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file177.tmp.bak0011c2a9 to %WINDIR%\file177.tmp.bak0011c2a9
from %WINDIR%\file177.tmp.bak0011c2a9 to %WINDIR%\bakthlpdrvd32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011c0dd to %WINDIR%\syswow64\file157.tmp.bak0011c0dd
from %WINDIR%\syswow64\file157.tmp.bak0011c0dd to %WINDIR%\syswow64\sdencryptionapi.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011c096 to %WINDIR%\file157.tmp.bak0011c096
from %WINDIR%\file157.tmp.bak0011c096 to %WINDIR%\baksdeapi.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp.bak0011c050 to %WINDIR%\syswow64\file178.tmp.bak0011c050
from <DRIVERS>\file191.tmp.bak0011e9c3 to <DRIVERS>\tsdencrypt.sys
from %WINDIR%\syswow64\file178.tmp.bak0011c050 to %WINDIR%\syswow64\softwareidentify.dll
from %WINDIR%\syswow64\bakrdgv3.sys_2tmp to %WINDIR%\syswow64\bakrdgv3.sys
from %WINDIR%\file178.tmp.bak0011c050 to %WINDIR%\baksoftidentify.sys
from <SYSTEM32>\file179.tmp.bak0011e68b to <SYSTEM32>\softwareidentify64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp.bak0011e669 to %WINDIR%\file179.tmp.bak0011e669
from %WINDIR%\file179.tmp.bak0011e669 to %WINDIR%\baksoftidentify64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp.bak0011e570 to %WINDIR%\syswow64\file180.tmp.bak0011e570
from %WINDIR%\syswow64\file180.tmp.bak0011e570 to %WINDIR%\syswow64\osdexpacket.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file180.tmp.bak0011e54e to %WINDIR%\file180.tmp.bak0011e54e
from %WINDIR%\file180.tmp.bak0011e54e to %WINDIR%\bakosdexp.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp.bak0011e4e4 to %WINDIR%\syswow64\file181.tmp.bak0011e4e4
from %WINDIR%\syswow64\file181.tmp.bak0011e4e4 to %WINDIR%\syswow64\osdexviewer.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file181.tmp.bak0011e4bf to %WINDIR%\file181.tmp.bak0011e4bf
from %WINDIR%\file181.tmp.bak0011e4bf to %WINDIR%\bakosdexv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file176.tmp.bak0011c359 to <DRIVERS>\file176.tmp.bak0011c359
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file182.tmp.bak0011e382 to %WINDIR%\syswow64\file182.tmp.bak0011e382
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file179.tmp.bak0011e68b to <SYSTEM32>\file179.tmp.bak0011e68b
from <DRIVERS>\file176.tmp.bak0011c359 to <DRIVERS>\thlpdrv64.sys
from %WINDIR%\file175.tmp.bak0011c3c4 to %WINDIR%\bakthlpdrv32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file194.tmp.bak0011e7f7 to %WINDIR%\file194.tmp.bak0011e7f7
from %WINDIR%\file204.tmp.bak0011e0a8 to %WINDIR%\baktkspack.dat
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp.bak0011e03e to %WINDIR%\syswow64\file205.tmp.bak0011e03e
from %WINDIR%\syswow64\file205.tmp.bak0011e03e to %WINDIR%\syswow64\tusersystem32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file205.tmp.bak0011e019 to %WINDIR%\file205.tmp.bak0011e019
from %WINDIR%\file205.tmp.bak0011e019 to %WINDIR%\baktusystem32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file206.tmp.bak0011defe to %WINDIR%\file206.tmp.bak0011defe
from %WINDIR%\file206.tmp.bak0011defe to %WINDIR%\bakcamerafunc.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file207.tmp.bak0011dedc to %WINDIR%\file207.tmp.bak0011dedc
from %WINDIR%\file207.tmp.bak0011dedc to %WINDIR%\bakopencv_core2410.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file208.tmp.bak0011de96 to %WINDIR%\file208.tmp.bak0011de96
from %WINDIR%\file208.tmp.bak0011de96 to %WINDIR%\bakopencv_highgui2410.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file192.tmp.bak0011e97d to %WINDIR%\file192.tmp.bak0011e97d
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp.bak0011de07 to %WINDIR%\file149.tmp.bak0011de07
from <DRIVERS>\setf565.tmp to <DRIVERS>\tnullfilter.sys
from %WINDIR%\bakthv3.sys_2tmp to %WINDIR%\bakthv3.sys
from %WINDIR%\bakhafnt.sys_2tmp to %WINDIR%\bakhafnt.sys
from %WINDIR%\bakimhc3.sys_2tmp to %WINDIR%\bakimhc3.sys
from %WINDIR%\baktsdoc2.sys_2tmp to %WINDIR%\baktsdoc2.sys
from %WINDIR%\bakthv364.sys_2tmp to %WINDIR%\bakthv364.sys
from %WINDIR%\bakhafnt64.sys_2tmp to %WINDIR%\bakhafnt64.sys
from %WINDIR%\baktsdoc64.sys_2tmp to %WINDIR%\baktsdoc64.sys
from %WINDIR%\syswow64\oagenttray.dll_2tmp to %WINDIR%\syswow64\oagenttray.dll
from %WINDIR%\syswow64\agt3tool.exe_2tmp to %WINDIR%\syswow64\agt3tool.exe
from %WINDIR%\syswow64\bakstec3.sys_2tmp to %WINDIR%\syswow64\bakstec3.sys
from %WINDIR%\syswow64\bakdevctrl64.sys_2tmp to %WINDIR%\syswow64\bakdevctrl64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp.bak0011e0ee to %WINDIR%\file203.tmp.bak0011e0ee
from %WINDIR%\file149.tmp.bak0011de07 to %WINDIR%\linstsvr.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file204.tmp.bak0011e0a8 to %WINDIR%\file204.tmp.bak0011e0a8
from %WINDIR%\file203.tmp.bak0011e0ee to %WINDIR%\bakncap364.sys
from <SYSTEM32>\file203.tmp.bak0011e135 to <SYSTEM32>\winncap364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file203.tmp.bak0011e135 to <SYSTEM32>\file203.tmp.bak0011e135
from %WINDIR%\file194.tmp.bak0011e7f7 to %WINDIR%\baktsdedrv2k8.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file195.tmp.bak0011e7b1 to %WINDIR%\file195.tmp.bak0011e7b1
from %WINDIR%\file195.tmp.bak0011e7b1 to %WINDIR%\baktsdedrv2k864.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file196.tmp.bak0011e78f to %WINDIR%\file196.tmp.bak0011e78f
from %WINDIR%\file196.tmp.bak0011e78f to %WINDIR%\baktsdedrv10.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file197.tmp.bak0011e347 to %WINDIR%\file197.tmp.bak0011e347
from %WINDIR%\file197.tmp.bak0011e347 to %WINDIR%\baktsdedrv1064.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp.bak0011e322 to %WINDIR%\file198.tmp.bak0011e322
from %WINDIR%\file198.tmp.bak0011e322 to %WINDIR%\baktnf.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp.bak0011e300 to %WINDIR%\file199.tmp.bak0011e300
from %WINDIR%\file199.tmp.bak0011e300 to %WINDIR%\baktnf64.sys
from %WINDIR%\file192.tmp.bak0011e97d to %WINDIR%\baktsdedrv8.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file198.tmp.bak0011e300 to %WINDIR%\syswow64\drivers\file198.tmp.bak0011e300
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file193.tmp.bak0011e81c to %WINDIR%\file193.tmp.bak0011e81c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file199.tmp.bak0011e2dc to <DRIVERS>\file199.tmp.bak0011e2dc
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp.bak0011e2ba to %WINDIR%\syswow64\file200.tmp.bak0011e2ba
from %WINDIR%\syswow64\file200.tmp.bak0011e2ba to %WINDIR%\syswow64\dtsframe32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file200.tmp.bak0011e296 to %WINDIR%\file200.tmp.bak0011e296
from %WINDIR%\file200.tmp.bak0011e296 to %WINDIR%\bakdtsfrm32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp.bak0011e20a to <SYSTEM32>\file201.tmp.bak0011e20a
from <SYSTEM32>\file201.tmp.bak0011e20a to <SYSTEM32>\dtsframe64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file201.tmp.bak0011e19f to %WINDIR%\file201.tmp.bak0011e19f
from %WINDIR%\file201.tmp.bak0011e19f to %WINDIR%\bakdtsfrm64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp.bak0011e17b to %WINDIR%\syswow64\file202.tmp.bak0011e17b
from %WINDIR%\syswow64\file202.tmp.bak0011e17b to %WINDIR%\syswow64\winncap332.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp.bak0011e17b to %WINDIR%\file202.tmp.bak0011e17b
from %WINDIR%\file193.tmp.bak0011e81c to %WINDIR%\baktsdedrv864.sys
from %WINDIR%\file202.tmp.bak0011e17b to %WINDIR%\bakncap332.sys
from <DRIVERS>\file199.tmp.bak0011e2dc to <DRIVERS>\tnullfilter.sys
from %WINDIR%\file139.tmp.bak0011d40f to %WINDIR%\baksd7z64.sys
from %WINDIR%\syswow64\drivers\file198.tmp.bak0011e300 to %WINDIR%\syswow64\drivers\tnullfilter.sys
from %WINDIR%\file162.tmp.bak0011cacd to %WINDIR%\bakiteumgr.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp.bak0011d0bd to %WINDIR%\syswow64\file152.tmp.bak0011d0bd
from %WINDIR%\syswow64\file152.tmp.bak0011d0bd to %WINDIR%\syswow64\winbrosqlite3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file152.tmp.bak0011d09b to %WINDIR%\file152.tmp.bak0011d09b
from %WINDIR%\file152.tmp.bak0011d09b to %WINDIR%\bakbrosqlite3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp.bak0011d077 to <SYSTEM32>\file153.tmp.bak0011d077
from <SYSTEM32>\file153.tmp.bak0011d077 to <SYSTEM32>\winbrosqlite3_64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file153.tmp.bak0011d031 to %WINDIR%\file153.tmp.bak0011d031
from %WINDIR%\file153.tmp.bak0011d031 to %WINDIR%\bakbrosqlite3_64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp.bak0011cfc6 to %WINDIR%\syswow64\file154.tmp.bak0011cfc6
from %WINDIR%\syswow64\file154.tmp.bak0011cfc6 to %WINDIR%\syswow64\cpuidsdk.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file154.tmp.bak0011cf5c to %WINDIR%\file154.tmp.bak0011cf5c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file146.tmp.bak0011d2f4 to %WINDIR%\file146.tmp.bak0011d2f4
from %WINDIR%\file154.tmp.bak0011cf5c to %WINDIR%\bakcpuid.sys
from %WINDIR%\syswow64\file155.tmp.bak0011cef1 to %WINDIR%\syswow64\udiskiddll.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp.bak0011cecf to %WINDIR%\file155.tmp.bak0011cecf
from %WINDIR%\file155.tmp.bak0011cecf to %WINDIR%\bakudidhlp.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp.bak0011cecf to %WINDIR%\syswow64\file156.tmp.bak0011cecf
from %WINDIR%\syswow64\file156.tmp.bak0011cecf to %WINDIR%\syswow64\wlfunc.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file156.tmp.bak0011ceab to %WINDIR%\file156.tmp.bak0011ceab
from %WINDIR%\file156.tmp.bak0011ceab to %WINDIR%\bakwlfc.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011ce65 to %WINDIR%\syswow64\file157.tmp.bak0011ce65
from %WINDIR%\syswow64\file157.tmp.bak0011ce65 to %WINDIR%\syswow64\sdencryptionapi.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file157.tmp.bak0011ce40 to %WINDIR%\file157.tmp.bak0011ce40
from %WINDIR%\file157.tmp.bak0011ce40 to %WINDIR%\baksdeapi.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp.bak0011ce1f to <SYSTEM32>\file158.tmp.bak0011ce1f
from <SYSTEM32>\file151.tmp.bak0011d128 to <SYSTEM32>\winbrohca64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file155.tmp.bak0011cef1 to %WINDIR%\syswow64\file155.tmp.bak0011cef1
from %WINDIR%\file151.tmp.bak0011d103 to %WINDIR%\bakbrohca64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp.bak0011d103 to %WINDIR%\file151.tmp.bak0011d103
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file151.tmp.bak0011d128 to <SYSTEM32>\file151.tmp.bak0011d128
from %WINDIR%\file150.tmp.bak0011d14c to %WINDIR%\bakbrohca.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp.bak0011d3c6 to %WINDIR%\file140.tmp.bak0011d3c6
from %WINDIR%\file140.tmp.bak0011d3c6 to %WINDIR%\baksd7zarv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file141.tmp.bak0011d3a4 to %WINDIR%\file141.tmp.bak0011d3a4
from %WINDIR%\file141.tmp.bak0011d3a4 to %WINDIR%\bakoacnac.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file142.tmp.bak0011d380 to %WINDIR%\file142.tmp.bak0011d380
from %WINDIR%\file142.tmp.bak0011d380 to %WINDIR%\baknacagent.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file143.tmp.bak0011d380 to %WINDIR%\file143.tmp.bak0011d380
from %WINDIR%\file143.tmp.bak0011d380 to %WINDIR%\bakoacsgw.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file144.tmp.bak0011d35e to %WINDIR%\file144.tmp.bak0011d35e
from %WINDIR%\file144.tmp.bak0011d35e to %WINDIR%\baksgwagent.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file145.tmp.bak0011d33a to %WINDIR%\file145.tmp.bak0011d33a
from <SYSTEM32>\file158.tmp.bak0011ce1f to <SYSTEM32>\sdencryptionapi64.dll
from %WINDIR%\file145.tmp.bak0011d33a to %WINDIR%\bakoatool.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp.bak0011c3e6 to %WINDIR%\syswow64\drivers\file175.tmp.bak0011c3e6
from %WINDIR%\file146.tmp.bak0011d2f4 to %WINDIR%\bakoatool64.sys
from %WINDIR%\syswow64\file147.tmp.bak0011d2cf to %WINDIR%\syswow64\winoatmm.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp.bak0011d21f to %WINDIR%\file147.tmp.bak0011d21f
from %WINDIR%\file147.tmp.bak0011d21f to %WINDIR%\bakoatmm.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp.bak0011d21f to %WINDIR%\syswow64\file148.tmp.bak0011d21f
from %WINDIR%\syswow64\file148.tmp.bak0011d21f to %WINDIR%\syswow64\winoatmm2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file148.tmp.bak0011d1d8 to %WINDIR%\file148.tmp.bak0011d1d8
from %WINDIR%\file148.tmp.bak0011d1d8 to %WINDIR%\bakoatmm2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file149.tmp.bak0011d192 to %WINDIR%\file149.tmp.bak0011d192
from %WINDIR%\file149.tmp.bak0011d192 to %WINDIR%\linstsvr.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp.bak0011d16e to %WINDIR%\syswow64\file150.tmp.bak0011d16e
from %WINDIR%\syswow64\file150.tmp.bak0011d16e to %WINDIR%\syswow64\winbrohca.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file140.tmp.bak0011d3ea to <SYSTEM32>\file140.tmp.bak0011d3ea
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file150.tmp.bak0011d14c to %WINDIR%\file150.tmp.bak0011d14c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file147.tmp.bak0011d2cf to %WINDIR%\syswow64\file147.tmp.bak0011d2cf
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file175.tmp.bak0011c3c4 to %WINDIR%\file175.tmp.bak0011c3c4
from %WINDIR%\syswow64\drivers\file175.tmp.bak0011c3e6 to %WINDIR%\syswow64\drivers\thlpdrv32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp.bak0011ccbd to %WINDIR%\file159.tmp.bak0011ccbd
from %WINDIR%\file168.tmp.bak0011c96b to %WINDIR%\baktijtdrv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp.bak0011c94a to %WINDIR%\syswow64\file169.tmp.bak0011c94a
from %WINDIR%\syswow64\file169.tmp.bak0011c94a to %WINDIR%\syswow64\tijtdrvd32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp.bak0011c94a to %WINDIR%\file169.tmp.bak0011c94a
from %WINDIR%\file169.tmp.bak0011c94a to %WINDIR%\baktijtdrvd32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp.bak0011c903 to <SYSTEM32>\file170.tmp.bak0011c903
from <SYSTEM32>\file170.tmp.bak0011c903 to <SYSTEM32>\tijtdrvd64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file170.tmp.bak0011c8df to %WINDIR%\file170.tmp.bak0011c8df
from %WINDIR%\file170.tmp.bak0011c8df to %WINDIR%\baktijtdrvd64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp.bak0011c8df to %WINDIR%\syswow64\file171.tmp.bak0011c8df
from %WINDIR%\syswow64\file171.tmp.bak0011c8df to %WINDIR%\syswow64\wfirewallv.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file158.tmp.bak0011cd28 to %WINDIR%\file158.tmp.bak0011cd28
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file171.tmp.bak0011c899 to %WINDIR%\file171.tmp.bak0011c899
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp.bak0011c80a to %WINDIR%\syswow64\file172.tmp.bak0011c80a
from %WINDIR%\syswow64\file172.tmp.bak0011c80a to %WINDIR%\syswow64\enumprocessmodule.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp.bak0011c80a to %WINDIR%\file172.tmp.bak0011c80a
from %WINDIR%\file172.tmp.bak0011c80a to %WINDIR%\bakenumprocessmodule.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp.bak0011c737 to %WINDIR%\syswow64\file173.tmp.bak0011c737
from %WINDIR%\syswow64\file173.tmp.bak0011c737 to %WINDIR%\syswow64\oagenttray.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file173.tmp.bak0011c640 to %WINDIR%\file173.tmp.bak0011c640
from %WINDIR%\file173.tmp.bak0011c640 to %WINDIR%\bakoagenttray.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp.bak0011c525 to %WINDIR%\syswow64\file174.tmp.bak0011c525
from %WINDIR%\syswow64\file174.tmp.bak0011c525 to %WINDIR%\syswow64\sdconsole.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file174.tmp.bak0011c4bb to %WINDIR%\file174.tmp.bak0011c4bb
from %WINDIR%\file174.tmp.bak0011c4bb to %WINDIR%\baksdcsl.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp.bak0011c96b to <DRIVERS>\file168.tmp.bak0011c96b
from %WINDIR%\file171.tmp.bak0011c899 to %WINDIR%\bakwfirewallv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp.bak0011c96b to %WINDIR%\file168.tmp.bak0011c96b
from <DRIVERS>\file168.tmp.bak0011c96b to <DRIVERS>\tijtdrv64.sys
from %WINDIR%\file167.tmp.bak0011c990 to %WINDIR%\baktijtdrv32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp.bak0011c990 to %WINDIR%\file167.tmp.bak0011c990
from %WINDIR%\file159.tmp.bak0011ccbd to %WINDIR%\baksdgr.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp.bak0011ccbd to <SYSTEM32>\file160.tmp.bak0011ccbd
from <SYSTEM32>\file160.tmp.bak0011ccbd to <SYSTEM32>\sdguarder64.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file160.tmp.bak0011cc53 to %WINDIR%\file160.tmp.bak0011cc53
from %WINDIR%\file160.tmp.bak0011cc53 to %WINDIR%\baksdgr64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp.bak0011cbe8 to %WINDIR%\syswow64\file161.tmp.bak0011cbe8
from %WINDIR%\syswow64\file161.tmp.bak0011cbe8 to %WINDIR%\syswow64\performancetool.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file161.tmp.bak0011cb7e to %WINDIR%\file161.tmp.bak0011cb7e
from %WINDIR%\file161.tmp.bak0011cb7e to %WINDIR%\bakperformancetool.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp.bak0011cb37 to %WINDIR%\syswow64\file162.tmp.bak0011cb37
from %WINDIR%\syswow64\file162.tmp.bak0011cb37 to %WINDIR%\syswow64\iteudllvmgr.dll
from %WINDIR%\file158.tmp.bak0011cd28 to %WINDIR%\baksdeapi64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file162.tmp.bak0011cacd to %WINDIR%\file162.tmp.bak0011cacd
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file159.tmp.bak0011ccdf to %WINDIR%\syswow64\file159.tmp.bak0011ccdf
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp.bak0011caab to %WINDIR%\syswow64\file163.tmp.bak0011caab
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file163.tmp.bak0011ca87 to %WINDIR%\file163.tmp.bak0011ca87
from %WINDIR%\file163.tmp.bak0011ca87 to %WINDIR%\bakipgudll.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp.bak0011ca65 to %WINDIR%\syswow64\file164.tmp.bak0011ca65
from %WINDIR%\syswow64\file164.tmp.bak0011ca65 to %WINDIR%\syswow64\ipgflashsdk.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file164.tmp.bak0011c9fa to %WINDIR%\file164.tmp.bak0011c9fa
from %WINDIR%\file164.tmp.bak0011c9fa to %WINDIR%\bakipgflashsdk.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file165.tmp.bak0011c9fa to %WINDIR%\file165.tmp.bak0011c9fa
from %WINDIR%\file165.tmp.bak0011c9fa to %WINDIR%\baksas.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file166.tmp.bak0011c9d6 to %WINDIR%\file166.tmp.bak0011c9d6
from %WINDIR%\file166.tmp.bak0011c9d6 to %WINDIR%\baksas64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file167.tmp.bak0011c9b4 to %WINDIR%\syswow64\drivers\file167.tmp.bak0011c9b4
from %WINDIR%\syswow64\file159.tmp.bak0011ccdf to %WINDIR%\syswow64\sdguarder.exe
from %WINDIR%\syswow64\drivers\file167.tmp.bak0011c9b4 to %WINDIR%\syswow64\drivers\tijtdrv32.sys
from %WINDIR%\syswow64\file163.tmp.bak0011caab to %WINDIR%\syswow64\ipgudll.dll
from <SYSTEM32>\file140.tmp.bak0011d3ea to <SYSTEM32>\sd7zarchive64.dll
from <SYSTEM32>\funcextv64.dll_2tmp to <SYSTEM32>\funcextv64.dll
from %WINDIR%\syswow64\tks\icudt57.dll_tmp to %WINDIR%\syswow64\tks\icudt57.dll
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hankaku_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hankaku
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hiragana_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\hiragana
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\katakana_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\katakana
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\nwp-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\roman_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\roman
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2c_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2c
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-hw-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf16-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf16-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis2004-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijis-ucs2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\ext-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78ms-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\83pv-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\83pv-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90ms-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90msp-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-hw-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-hw-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\90pv-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-rksj-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-0_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-0
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-1_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-1
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-3_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-3
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-4_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-4
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-5_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-5
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-6_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-6
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\adobe-japan1-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\add-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-rksj-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-ucs2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\iso-2022-kr.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\iso-2022-kr.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\latin2.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\latin2.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-latin2\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\thai.nametounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\thai.nametounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\iso-8859-9.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\iso-8859-9.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-turkish\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdfrc
from %WINDIR%\syswow64\tks\tksdoc32.dll_tmp to %WINDIR%\syswow64\tks\tksdoc32.dll
from %WINDIR%\syswow64\tks\tksframe32.dll_tmp to %WINDIR%\syswow64\tks\tksframe32.dll
from %WINDIR%\syswow64\tks\xmemss.dll_tmp to %WINDIR%\syswow64\tks\xmemss.dll
from %WINDIR%\syswow64\tks\zlib1.dll_tmp to %WINDIR%\syswow64\tks\zlib1.dll
from %WINDIR%\syswow64\outlookctrlx.dll to %WINDIR%\syswow64\remsdfi2.dll
from %WINDIR%\syswow64\ocular\msolbase2.dat to %WINDIR%\syswow64\ocular\msolbase2_up.dat
from %WINDIR%\syswow64\ocular\msudiskinfo_send2.dat to %WINDIR%\syswow64\ocular\msudiskinfo_send2_up.dat
from %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set2d85.tmp to %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.cat
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-utf16-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\uniks-ucs2-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2c_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp.bak0011c2cd to %WINDIR%\syswow64\file089.tmp.bak0011c2cd
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx02132004-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\wp-symbol_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\wp-symbol
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\euc-jp.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\euc-jp.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\iso-2022-jp.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\iso-2022-jp.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\shift-jis.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\shift-jis.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\adobe-korea1.cidtounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\adobe-korea1.cidtounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-0_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-0
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-1_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-1
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijispro-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\unijisx0213-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-johab-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-hw-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscms-uhc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\kscpc-euc-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\adobe-korea1-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-korean\cmap\ksc-euc-v
from %WINDIR%\syswow64\ippacket.dll_2tmp to %WINDIR%\syswow64\ippacket.dll
from %WINDIR%\syswow64\ippcap.dll_2tmp to %WINDIR%\syswow64\ippcap.dll
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2c_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-ucs2c
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbpc-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbt-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbtpc-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\adobe-japan1.cidtounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\adobe-japan1.cidtounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf16-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\euc-cn.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\euc-cn.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\gbk.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\gbk.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\iso-2022-cn.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\iso-2022-cn.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\unigb-ucs2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbkp-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-v
from %WINDIR%\syswow64\tks\icuin57.dll_tmp to %WINDIR%\syswow64\tks\icuin57.dll
from %WINDIR%\syswow64\tks\icuuc57.dll_tmp to %WINDIR%\syswow64\tks\icuuc57.dll
from %WINDIR%\syswow64\tks\libdllwv2.dll_tmp to %WINDIR%\syswow64\tks\libdllwv2.dll
from %WINDIR%\syswow64\tks\libgcc_s_dw2-1.dll_tmp to %WINDIR%\syswow64\tks\libgcc_s_dw2-1.dll
from %WINDIR%\syswow64\tks\libgio-2.0-0.dll_tmp to %WINDIR%\syswow64\tks\libgio-2.0-0.dll
from %WINDIR%\syswow64\tks\libglib-2.0-0.dll_tmp to %WINDIR%\syswow64\tks\libglib-2.0-0.dll
from %WINDIR%\syswow64\tks\libgmodule-2.0-0.dll_tmp to %WINDIR%\syswow64\tks\libgmodule-2.0-0.dll
from %WINDIR%\syswow64\tks\libgobject-2.0-0.dll_tmp to %WINDIR%\syswow64\tks\libgobject-2.0-0.dll
from %WINDIR%\syswow64\tks\libgsf-1-114.dll_tmp to %WINDIR%\syswow64\tks\libgsf-1-114.dll
from %WINDIR%\syswow64\tks\libiconv-2.dll_tmp to %WINDIR%\syswow64\tks\libiconv-2.dll
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\adobe-cns1.cidtounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\adobe-cns1.cidtounicode
from %WINDIR%\syswow64\tks\libintl-8.dll_tmp to %WINDIR%\syswow64\tks\libintl-8.dll
from %WINDIR%\syswow64\tks\libxml2-2.dll_tmp to %WINDIR%\syswow64\tks\libxml2-2.dll
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gbk2k-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-0_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-0
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-1_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-1
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-3_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-3
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-4_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-4
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-5_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-5
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\adobe-gb1-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\cmap\gb-h
from %WINDIR%\syswow64\tks\libstdc++-6.dll_tmp to %WINDIR%\syswow64\tks\libstdc++-6.dll
from %WINDIR%\syswow64\tks\contentmatch.dll_tmp to %WINDIR%\syswow64\tks\contentmatch.dll
from %WINDIR%\syswow64\ipwpacket.dll_2tmp to %WINDIR%\syswow64\ipwpacket.dll
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\adobe-gb1.cidtounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-simplified\adobe-gb1.cidtounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-japanese\cmap\78-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-3_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-3
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkscs-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-ucs2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf16-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf32-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\unicns-utf8-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-0_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-0
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\bulgarian.nametounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\bulgarian.nametounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\koi8-r.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\koi8-r.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\greek.nametounicode_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\greek.nametounicode
from %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\iso-8859-7.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\iso-8859-7.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-greek\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\iso-8859-8.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\iso-8859-8.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\readme_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\readme
from %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\windows-1255.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-hebrew\windows-1255.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkgccs-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\add-to-xpdfrc_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-cyrillic\add-to-xpdfrc
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm471-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdlb-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-4_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-4
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-5_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-5
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-6_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-6
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2c_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-ucs2c
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\b5pc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5ascii.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\big5ascii.unicodemap
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkm314-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns1-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-ucs2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-ucs2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\eten-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\etenms-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\ethk-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-h
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\hkdla-b5-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-v_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns-euc-v
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-2_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-2
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-1_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\adobe-cns1-1
from %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-h_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-chinese-traditional\cmap\cns2-h
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp.bak0011d40f to %WINDIR%\file139.tmp.bak0011d40f
from <SYSTEM32>\file139.tmp.bak0011d431 to <SYSTEM32>\sd7z64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file139.tmp.bak0011d431 to <SYSTEM32>\file139.tmp.bak0011d431
from %WINDIR%\file044.tmp.bak0011b2a9 to %WINDIR%\toa32pcpx.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp.bak0011b285 to %WINDIR%\syswow64\drivers\file040.tmp.bak0011b285
from %WINDIR%\syswow64\drivers\file040.tmp.bak0011b285 to %WINDIR%\syswow64\drivers\ipnpf.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp.bak0011b263 to %WINDIR%\syswow64\file045.tmp.bak0011b263
from %WINDIR%\syswow64\file045.tmp.bak0011b263 to %WINDIR%\syswow64\tpacketd.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp.bak0011b263 to %WINDIR%\file045.tmp.bak0011b263
from %WINDIR%\file045.tmp.bak0011b263 to %WINDIR%\baktpktd.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp.bak0011b23e to %WINDIR%\syswow64\drivers\file046.tmp.bak0011b23e
from %WINDIR%\syswow64\drivers\file046.tmp.bak0011b23e to %WINDIR%\syswow64\drivers\tpacket.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file046.tmp.bak0011b21c to %WINDIR%\file046.tmp.bak0011b21c
from %WINDIR%\file046.tmp.bak0011b21c to %WINDIR%\baktpktn.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp.bak0011b1f8 to %WINDIR%\syswow64\file047.tmp.bak0011b1f8
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp.bak0011b94a to %WINDIR%\syswow64\file032.tmp.bak0011b94a
from %WINDIR%\syswow64\file047.tmp.bak0011b1f8 to %WINDIR%\syswow64\tpacket.vxd
from %WINDIR%\file047.tmp.bak0011b1d4 to %WINDIR%\baktpkt9.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp.bak0011b1d4 to %WINDIR%\syswow64\drivers\file048.tmp.bak0011b1d4
from %WINDIR%\syswow64\drivers\file048.tmp.bak0011b1d4 to %WINDIR%\syswow64\drivers\tpacketv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file048.tmp.bak0011b1b2 to %WINDIR%\file048.tmp.bak0011b1b2
from %WINDIR%\file048.tmp.bak0011b1b2 to %WINDIR%\baktpktv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp.bak0011b18e to %WINDIR%\syswow64\drivers\file049.tmp.bak0011b18e
from %WINDIR%\syswow64\drivers\file049.tmp.bak0011b18e to %WINDIR%\syswow64\drivers\tpacket7.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file049.tmp.bak0011b16c to %WINDIR%\file049.tmp.bak0011b16c
from %WINDIR%\file049.tmp.bak0011b16c to %WINDIR%\baktpkt7.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file050.tmp.bak0011b148 to %WINDIR%\file050.tmp.bak0011b148
from %WINDIR%\file050.tmp.bak0011b148 to %WINDIR%\baktpkt7cat.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file043.tmp.bak0011b2ef to %WINDIR%\file043.tmp.bak0011b2ef
from %WINDIR%\file042.tmp.bak0011b2ef to %WINDIR%\toa32pnt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file044.tmp.bak0011b2a9 to %WINDIR%\file044.tmp.bak0011b2a9
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file042.tmp.bak0011b2ef to %WINDIR%\file042.tmp.bak0011b2ef
from %WINDIR%\file041.tmp.bak0011b313 to %WINDIR%\toa32pd9.sys
from %WINDIR%\syswow64\file032.tmp.bak0011b94a to %WINDIR%\syswow64\winncap3.dll
from %WINDIR%\file032.tmp.bak0011b6cd to %WINDIR%\bakncap3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp.bak0011b687 to %WINDIR%\syswow64\file033.tmp.bak0011b687
from %WINDIR%\syswow64\file033.tmp.bak0011b687 to %WINDIR%\syswow64\outlka2k.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file033.tmp.bak0011b663 to %WINDIR%\file033.tmp.bak0011b663
from %WINDIR%\file033.tmp.bak0011b663 to %WINDIR%\bakola2k.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp.bak0011b641 to %WINDIR%\syswow64\file034.tmp.bak0011b641
from %WINDIR%\syswow64\file034.tmp.bak0011b641 to %WINDIR%\syswow64\outlka23.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file034.tmp.bak0011b590 to %WINDIR%\file034.tmp.bak0011b590
from %WINDIR%\file034.tmp.bak0011b590 to %WINDIR%\bakola23.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp.bak0011b526 to %WINDIR%\syswow64\file035.tmp.bak0011b526
from %WINDIR%\syswow64\file035.tmp.bak0011b526 to %WINDIR%\syswow64\notesoa.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file051.tmp.bak0011b123 to %WINDIR%\file051.tmp.bak0011b123
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file035.tmp.bak0011b4bb to %WINDIR%\file035.tmp.bak0011b4bb
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file047.tmp.bak0011b1d4 to %WINDIR%\file047.tmp.bak0011b1d4
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp.bak0011b497 to %WINDIR%\syswow64\file036.tmp.bak0011b497
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file036.tmp.bak0011b42f to %WINDIR%\file036.tmp.bak0011b42f
from %WINDIR%\file036.tmp.bak0011b42f to %WINDIR%\bakncap3x.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file037.tmp.bak0011b3e6 to %WINDIR%\file037.tmp.bak0011b3e6
from %WINDIR%\file037.tmp.bak0011b3e6 to %WINDIR%\toa32p9x.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file038.tmp.bak0011b37e to %WINDIR%\file038.tmp.bak0011b37e
from %WINDIR%\file038.tmp.bak0011b37e to %WINDIR%\toa32pcp.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file039.tmp.bak0011b335 to %WINDIR%\file039.tmp.bak0011b335
from %WINDIR%\file039.tmp.bak0011b335 to %WINDIR%\toa32pd4.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file040.tmp.bak0011b313 to %WINDIR%\file040.tmp.bak0011b313
from %WINDIR%\file040.tmp.bak0011b313 to %WINDIR%\toa32pd5.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file041.tmp.bak0011b313 to %WINDIR%\file041.tmp.bak0011b313
from %WINDIR%\file035.tmp.bak0011b4bb to %WINDIR%\baknotes.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file032.tmp.bak0011b6cd to %WINDIR%\file032.tmp.bak0011b6cd
from %WINDIR%\syswow64\file036.tmp.bak0011b497 to %WINDIR%\syswow64\winncap3x.dll
from %WINDIR%\file067.tmp.bak0011a9d4 to %WINDIR%\baksdfi2.sys
from %WINDIR%\file031.tmp.bak0011b9d6 to %WINDIR%\bakssb2p.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp.bak0011ae60 to %WINDIR%\syswow64\drivers\file061.tmp.bak0011ae60
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp.bak0011ae60 to %WINDIR%\file061.tmp.bak0011ae60
from %WINDIR%\file061.tmp.bak0011ae60 to %WINDIR%\baktvd.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp.bak0011ae3e to %CommonProgramFiles(x86)%\system\file062.tmp.bak0011ae3e
from %CommonProgramFiles(x86)%\system\file062.tmp.bak0011ae3e to %CommonProgramFiles(x86)%\system\windevctrl64.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file062.tmp.bak0011add4 to %WINDIR%\file062.tmp.bak0011add4
from %WINDIR%\file062.tmp.bak0011add4 to %WINDIR%\bakdevctrl64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp.bak0011ad8e to %WINDIR%\syswow64\file063.tmp.bak0011ad8e
from %WINDIR%\syswow64\file063.tmp.bak0011ad8e to %WINDIR%\syswow64\tsafetszc.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file063.tmp.bak0011ad69 to %WINDIR%\file063.tmp.bak0011ad69
from %WINDIR%\file063.tmp.bak0011ad69 to %WINDIR%\baktstszc.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp.bak0011ad47 to %WINDIR%\syswow64\file064.tmp.bak0011ad47
from %WINDIR%\syswow64\file064.tmp.bak0011ad47 to %WINDIR%\syswow64\winusrmd.dll
from %WINDIR%\file052.tmp.bak0011b123 to %WINDIR%\baktpktvmcat.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file064.tmp.bak0011ad23 to %WINDIR%\file064.tmp.bak0011ad23
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp.bak0011acff to %WINDIR%\syswow64\file065.tmp.bak0011acff
from %WINDIR%\syswow64\file065.tmp.bak0011acff to %WINDIR%\syswow64\sdcontext2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file065.tmp.bak0011acb9 to %WINDIR%\file065.tmp.bak0011acb9
from %WINDIR%\file065.tmp.bak0011acb9 to %WINDIR%\baksdctx2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp.bak0011ac2c to %WINDIR%\syswow64\file066.tmp.bak0011ac2c
from %WINDIR%\syswow64\file066.tmp.bak0011ac2c to %WINDIR%\syswow64\sdhelper2.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file066.tmp.bak0011ab35 to %WINDIR%\file066.tmp.bak0011ab35
from %WINDIR%\file066.tmp.bak0011ab35 to %WINDIR%\baksdhlp2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp.bak0011aa1a to %WINDIR%\syswow64\file067.tmp.bak0011aa1a
from %WINDIR%\syswow64\file067.tmp.bak0011aa1a to %WINDIR%\syswow64\sdfileicon2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file067.tmp.bak0011a9d4 to %WINDIR%\file067.tmp.bak0011a9d4
from %WINDIR%\file060.tmp.bak0011aea9 to %WINDIR%\bakmount.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp.bak0011aea9 to %WINDIR%\file060.tmp.bak0011aea9
from %WINDIR%\syswow64\drivers\file061.tmp.bak0011ae60 to %WINDIR%\syswow64\drivers\tvdisk.sys
from %WINDIR%\syswow64\file060.tmp.bak0011af11 to %WINDIR%\syswow64\tvdmount.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file060.tmp.bak0011af11 to %WINDIR%\syswow64\file060.tmp.bak0011af11
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp.bak0011b101 to %WINDIR%\syswow64\file053.tmp.bak0011b101
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file053.tmp.bak0011b0bb to %WINDIR%\file053.tmp.bak0011b0bb
from %WINDIR%\file053.tmp.bak0011b0bb to %WINDIR%\baktsnet.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp.bak0011b097 to %WINDIR%\syswow64\file054.tmp.bak0011b097
from %WINDIR%\syswow64\file054.tmp.bak0011b097 to %WINDIR%\syswow64\tsafenetx.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file054.tmp.bak0011b073 to %WINDIR%\file054.tmp.bak0011b073
from %WINDIR%\file054.tmp.bak0011b073 to %WINDIR%\baktsnetx.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp.bak0011b073 to %WINDIR%\syswow64\file055.tmp.bak0011b073
from %WINDIR%\syswow64\file055.tmp.bak0011b073 to %WINDIR%\syswow64\orcs3dll.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file055.tmp.bak0011b051 to %WINDIR%\file055.tmp.bak0011b051
from %WINDIR%\file055.tmp.bak0011b051 to %WINDIR%\bakorcs3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp.bak0011b02c to %WINDIR%\syswow64\file056.tmp.bak0011b02c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file052.tmp.bak0011b123 to %WINDIR%\file052.tmp.bak0011b123
from %WINDIR%\syswow64\file056.tmp.bak0011b02c to %WINDIR%\syswow64\orcshk3.dll
from %WINDIR%\file051.tmp.bak0011b123 to %WINDIR%\baktpktvcat.sys
from %WINDIR%\file056.tmp.bak0011b00a to %WINDIR%\bakorch3.sys
from %WINDIR%\syswow64\drivers\file057.tmp.bak0011afe6 to %WINDIR%\syswow64\drivers\tfsfltdrv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp.bak0011afc2 to %WINDIR%\file057.tmp.bak0011afc2
from %WINDIR%\file057.tmp.bak0011afc2 to %WINDIR%\baktfsdrv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp.bak0011afc2 to %WINDIR%\syswow64\file058.tmp.bak0011afc2
from %WINDIR%\syswow64\file058.tmp.bak0011afc2 to %WINDIR%\syswow64\winencyx.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file058.tmp.bak0011afa0 to %WINDIR%\file058.tmp.bak0011afa0
from %WINDIR%\file058.tmp.bak0011afa0 to %WINDIR%\bakencyx.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp.bak0011af7c to %WINDIR%\syswow64\file059.tmp.bak0011af7c
from %WINDIR%\syswow64\file059.tmp.bak0011af7c to %WINDIR%\syswow64\trmenushl.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file059.tmp.bak0011af35 to %WINDIR%\file059.tmp.bak0011af35
from %WINDIR%\file059.tmp.bak0011af35 to %WINDIR%\bakmenusl.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file056.tmp.bak0011b00a to %WINDIR%\file056.tmp.bak0011b00a
from %WINDIR%\syswow64\file053.tmp.bak0011b101 to %WINDIR%\syswow64\tsafenet.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file057.tmp.bak0011afe6 to %WINDIR%\syswow64\drivers\file057.tmp.bak0011afe6
from %WINDIR%\file064.tmp.bak0011ad23 to %WINDIR%\bakusrmd.sys
from %WINDIR%\syswow64\file031.tmp.bak0011ba1d to %WINDIR%\syswow64\snapb2p.dll
from <SYSTEM32>\file028.tmp.bak0011bacd to <SYSTEM32>\enumiacc264.dll
from %WINDIR%\file008.tmp.bak00119deb to %WINDIR%\bakthv3t.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp.bak00119dc7 to <SYSTEM32>\file009.tmp.bak00119dc7
from <SYSTEM32>\file009.tmp.bak00119dc7 to <SYSTEM32>\winoauve364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file009.tmp.bak00119da3 to %WINDIR%\file009.tmp.bak00119da3
from %WINDIR%\file009.tmp.bak00119da3 to %WINDIR%\bakoauve364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp.bak00119d3b to %WINDIR%\syswow64\file010.tmp.bak00119d3b
from %WINDIR%\syswow64\file010.tmp.bak00119d3b to %WINDIR%\syswow64\winhafnt.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file010.tmp.bak00119cd0 to %WINDIR%\file010.tmp.bak00119cd0
from %WINDIR%\file010.tmp.bak00119cd0 to %WINDIR%\bakhafntt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp.bak00119c66 to %WINDIR%\syswow64\file011.tmp.bak00119c66
from %WINDIR%\syswow64\file011.tmp.bak00119c66 to %WINDIR%\syswow64\winhaf9k.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp.bak00119c66 to %WINDIR%\file011.tmp.bak00119c66
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp.bak0011b9d6 to %WINDIR%\file031.tmp.bak0011b9d6
from %WINDIR%\file011.tmp.bak00119c66 to %WINDIR%\bakhaf9k.sys
from %WINDIR%\syswow64\file012.tmp.bak00119c41 to %WINDIR%\syswow64\winhaf9u.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp.bak00119c1f to %WINDIR%\file012.tmp.bak00119c1f
from %WINDIR%\file012.tmp.bak00119c1f to %WINDIR%\bakhaf9u.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file013.tmp.bak00119bfb to %WINDIR%\file013.tmp.bak00119bfb
from %WINDIR%\file013.tmp.bak00119bfb to %WINDIR%\bakhadnt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp.bak00119b6f to %WINDIR%\syswow64\file014.tmp.bak00119b6f
from %WINDIR%\syswow64\file014.tmp.bak00119b6f to %WINDIR%\syswow64\winhad9k.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file014.tmp.bak00119b4a to %WINDIR%\file014.tmp.bak00119b4a
from %WINDIR%\file014.tmp.bak00119b4a to %WINDIR%\bakhad9k.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp.bak00119b4a to %WINDIR%\syswow64\file015.tmp.bak00119b4a
from %WINDIR%\syswow64\file015.tmp.bak00119b4a to %WINDIR%\syswow64\winhad9u.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp.bak00119e0d to %WINDIR%\syswow64\file008.tmp.bak00119e0d
from %WINDIR%\file007.tmp.bak00119e53 to %WINDIR%\bakoauve3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file008.tmp.bak00119deb to %WINDIR%\file008.tmp.bak00119deb
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp.bak00119e53 to %WINDIR%\file007.tmp.bak00119e53
from %WINDIR%\syswow64\file007.tmp.bak00119e78 to %WINDIR%\syswow64\winoauve3.dll
from %CommonProgramFiles(x86)%\system\file000.tmp.bak0011a4d2 to %CommonProgramFiles(x86)%\system\systecv3.exe
from %WINDIR%\file000.tmp.bak0011a4ae to %WINDIR%\bakstec3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp.bak0011a468 to %CommonProgramFiles(x86)%\system\file001.tmp.bak0011a468
from %CommonProgramFiles(x86)%\system\file001.tmp.bak0011a468 to %CommonProgramFiles(x86)%\system\winrdgv3.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file001.tmp.bak0011a3fd to %WINDIR%\file001.tmp.bak0011a3fd
from %WINDIR%\file001.tmp.bak0011a3fd to %WINDIR%\bakrdgv3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp.bak0011a34d to %WINDIR%\syswow64\file002.tmp.bak0011a34d
from %WINDIR%\syswow64\file002.tmp.bak0011a34d to %WINDIR%\syswow64\winwdgv3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file002.tmp.bak0011a2e2 to %WINDIR%\file002.tmp.bak0011a2e2
from %WINDIR%\file002.tmp.bak0011a2e2 to %WINDIR%\bakwdgv3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp.bak0011a278 to %WINDIR%\syswow64\file003.tmp.bak0011a278
from %WINDIR%\syswow64\file003.tmp.bak0011a278 to %WINDIR%\syswow64\msowcnv3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file015.tmp.bak00119b28 to %WINDIR%\file015.tmp.bak00119b28
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file003.tmp.bak0011a256 to %WINDIR%\file003.tmp.bak0011a256
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file012.tmp.bak00119c41 to %WINDIR%\syswow64\file012.tmp.bak00119c41
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp.bak0011a232 to %CommonProgramFiles(x86)%\system\file004.tmp.bak0011a232
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp.bak0011a232 to %WINDIR%\file004.tmp.bak0011a232
from %WINDIR%\file004.tmp.bak0011a232 to %WINDIR%\bakwdgsvr.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp.bak0011a1eb to %WINDIR%\syswow64\file005.tmp.bak0011a1eb
from %WINDIR%\syswow64\file005.tmp.bak0011a1eb to %WINDIR%\syswow64\winoav3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file005.tmp.bak0011a0d0 to %WINDIR%\file005.tmp.bak0011a0d0
from %WINDIR%\file005.tmp.bak0011a0d0 to %WINDIR%\bakoav3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp.bak00119fd9 to %WINDIR%\syswow64\file006.tmp.bak00119fd9
from %WINDIR%\syswow64\file006.tmp.bak00119fd9 to %WINDIR%\syswow64\winoauv3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file006.tmp.bak00119f28 to %WINDIR%\file006.tmp.bak00119f28
from %WINDIR%\file006.tmp.bak00119f28 to %WINDIR%\bakoauv3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file007.tmp.bak00119e78 to %WINDIR%\syswow64\file007.tmp.bak00119e78
from %WINDIR%\file003.tmp.bak0011a256 to %WINDIR%\bakowv3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file000.tmp.bak0011a4ae to %WINDIR%\file000.tmp.bak0011a4ae
from %CommonProgramFiles(x86)%\system\file004.tmp.bak0011a232 to %CommonProgramFiles(x86)%\system\winwdgsvr.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp.bak0011a9b0 to %WINDIR%\syswow64\file068.tmp.bak0011a9b0
from %WINDIR%\syswow64\file008.tmp.bak00119e0d to %WINDIR%\syswow64\thooksv3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp.bak0011bdb4 to %WINDIR%\file024.tmp.bak0011bdb4
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp.bak0011bd04 to <SYSTEM32>\file025.tmp.bak0011bd04
from <SYSTEM32>\file025.tmp.bak0011bd04 to <SYSTEM32>\winimhc364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file025.tmp.bak0011bcbd to %WINDIR%\file025.tmp.bak0011bcbd
from %WINDIR%\file025.tmp.bak0011bcbd to %WINDIR%\bakimhc3t64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp.bak0011bc53 to <SYSTEM32>\file026.tmp.bak0011bc53
from <SYSTEM32>\file026.tmp.bak0011bc53 to <SYSTEM32>\winimhcd64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file026.tmp.bak0011bbc6 to %WINDIR%\file026.tmp.bak0011bbc6
from %WINDIR%\file026.tmp.bak0011bbc6 to %WINDIR%\bakimhcd64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp.bak0011bb5c to <SYSTEM32>\file027.tmp.bak0011bb5c
from <SYSTEM32>\file027.tmp.bak0011bb5c to <SYSTEM32>\winimhca64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file027.tmp.bak0011bb16 to %WINDIR%\file027.tmp.bak0011bb16
from %WINDIR%\file027.tmp.bak0011bb16 to %WINDIR%\bakimhca64.sys
from %WINDIR%\syswow64\file016.tmp.bak00119b04 to %WINDIR%\syswow64\winhadnt.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp.bak0011bacd to <SYSTEM32>\file028.tmp.bak0011bacd
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file028.tmp.bak0011baab to %WINDIR%\file028.tmp.bak0011baab
from %WINDIR%\file028.tmp.bak0011baab to %WINDIR%\bakenumiacc264.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp.bak0011baab to %WINDIR%\syswow64\file029.tmp.bak0011baab
from %WINDIR%\syswow64\file029.tmp.bak0011baab to %WINDIR%\syswow64\snapdos.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file029.tmp.bak0011ba87 to %WINDIR%\file029.tmp.bak0011ba87
from %WINDIR%\file029.tmp.bak0011ba87 to %WINDIR%\bakssdos.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp.bak0011ba65 to %WINDIR%\syswow64\file030.tmp.bak0011ba65
from %WINDIR%\syswow64\file030.tmp.bak0011ba65 to %WINDIR%\syswow64\ipddraw.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file030.tmp.bak0011ba41 to %WINDIR%\file030.tmp.bak0011ba41
from %WINDIR%\file030.tmp.bak0011ba41 to %WINDIR%\bakddraw.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file031.tmp.bak0011ba1d to %WINDIR%\syswow64\file031.tmp.bak0011ba1d
from <SYSTEM32>\file024.tmp.bak0011bdfb to <SYSTEM32>\winimhs364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file024.tmp.bak0011bdfb to <SYSTEM32>\file024.tmp.bak0011bdfb
from %WINDIR%\file024.tmp.bak0011bdb4 to %WINDIR%\bakimhs364.sys
from %WINDIR%\file023.tmp.bak0011be1f to %WINDIR%\bakenumiacc2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp.bak0011be1f to %WINDIR%\file023.tmp.bak0011be1f
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp.bak00119a53 to %WINDIR%\file016.tmp.bak00119a53
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp.bak001199c7 to %WINDIR%\syswow64\file017.tmp.bak001199c7
from %WINDIR%\syswow64\file017.tmp.bak001199c7 to %WINDIR%\syswow64\ifocmsdll.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file017.tmp.bak001198ce to %WINDIR%\file017.tmp.bak001198ce
from %WINDIR%\file017.tmp.bak001198ce to %WINDIR%\bakifocms.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp.bak0011bf76 to %WINDIR%\syswow64\file018.tmp.bak0011bf76
from %WINDIR%\syswow64\file018.tmp.bak0011bf76 to %WINDIR%\syswow64\dtframe32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file018.tmp.bak0011be7c to %WINDIR%\file018.tmp.bak0011be7c
from %WINDIR%\file018.tmp.bak0011be7c to %WINDIR%\bakdtfrm32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp.bak0011bd85 to %WINDIR%\syswow64\file019.tmp.bak0011bd85
from %WINDIR%\syswow64\file019.tmp.bak0011bd85 to %WINDIR%\syswow64\winimhs3.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file019.tmp.bak0011bbde to %WINDIR%\file019.tmp.bak0011bbde
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file016.tmp.bak00119b04 to %WINDIR%\syswow64\file016.tmp.bak00119b04
from %WINDIR%\file019.tmp.bak0011bbde to %WINDIR%\bakimhs3.sys
from %WINDIR%\file015.tmp.bak00119b28 to %WINDIR%\bakhad9u.sys
from %WINDIR%\syswow64\file020.tmp.bak0011bb73 to %WINDIR%\syswow64\winimhc3.dll
from %WINDIR%\file020.tmp.bak0011b9cc to %WINDIR%\bakimhc3t.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp.bak0011b985 to %WINDIR%\syswow64\file021.tmp.bak0011b985
from %WINDIR%\syswow64\file021.tmp.bak0011b985 to %WINDIR%\syswow64\winimhcd.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file021.tmp.bak0011c265 to %WINDIR%\file021.tmp.bak0011c265
from %WINDIR%\file021.tmp.bak0011c265 to %WINDIR%\bakimhcd.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp.bak0011c1fd to %WINDIR%\syswow64\file022.tmp.bak0011c1fd
from %WINDIR%\syswow64\file022.tmp.bak0011c1fd to %WINDIR%\syswow64\winimhca.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file022.tmp.bak0011bf5c to %WINDIR%\file022.tmp.bak0011bf5c
from %WINDIR%\file022.tmp.bak0011bf5c to %WINDIR%\bakimhca.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file023.tmp.bak0011bf16 to %WINDIR%\syswow64\file023.tmp.bak0011bf16
from %WINDIR%\syswow64\file023.tmp.bak0011bf16 to %WINDIR%\syswow64\enumiacc2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp.bak0011bb73 to %WINDIR%\syswow64\file020.tmp.bak0011bb73
from %WINDIR%\file016.tmp.bak00119a53 to %WINDIR%\bakhadntv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file020.tmp.bak0011b9cc to %WINDIR%\file020.tmp.bak0011b9cc
from %WINDIR%\file043.tmp.bak0011b2ef to %WINDIR%\toa32wp5.sys
from %WINDIR%\syswow64\file068.tmp.bak0011a9b0 to %WINDIR%\syswow64\tsafedoc2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp.bak0011bacd to %WINDIR%\file116.tmp.bak0011bacd
from <DRIVERS>\file117.tmp.bak0011baa9 to <DRIVERS>\tvdisk.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp.bak0011ba85 to %WINDIR%\file117.tmp.bak0011ba85
from %WINDIR%\file117.tmp.bak0011ba85 to %WINDIR%\baktvd64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp.bak0011ba85 to <DRIVERS>\file118.tmp.bak0011ba85
from <DRIVERS>\file118.tmp.bak0011ba85 to <DRIVERS>\tpacketv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file118.tmp.bak0011ba3e to %WINDIR%\file118.tmp.bak0011ba3e
from %WINDIR%\file118.tmp.bak0011ba3e to %WINDIR%\baktpktv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp.bak0011ba3e to <DRIVERS>\file119.tmp.bak0011ba3e
from <DRIVERS>\file119.tmp.bak0011ba3e to <DRIVERS>\tpacket7.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file119.tmp.bak0011ba1c to %WINDIR%\file119.tmp.bak0011ba1c
from %WINDIR%\file119.tmp.bak0011ba1c to %WINDIR%\baktpkt764.sys
from <SYSTEM32>\file108.tmp.bak0011be63 to <SYSTEM32>\dtframe64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp.bak0011ba1c to <DRIVERS>\file120.tmp.bak0011ba1c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file120.tmp.bak0011b9b2 to %WINDIR%\file120.tmp.bak0011b9b2
from %WINDIR%\file120.tmp.bak0011b9b2 to %WINDIR%\toa32pd564.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp.bak0011b9b2 to <DRIVERS>\file121.tmp.bak0011b9b2
from <DRIVERS>\file121.tmp.bak0011b9b2 to <DRIVERS>\tfsfltdrv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file121.tmp.bak0011b96c to %WINDIR%\file121.tmp.bak0011b96c
from %WINDIR%\file121.tmp.bak0011b96c to %WINDIR%\baktfsdrv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp.bak0011b82c to <SYSTEM32>\file122.tmp.bak0011b82c
from <SYSTEM32>\file122.tmp.bak0011b82c to <SYSTEM32>\winusrmd64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file122.tmp.bak0011b7c2 to %WINDIR%\file122.tmp.bak0011b7c2
from %WINDIR%\file122.tmp.bak0011b7c2 to %WINDIR%\bakusrmd64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp.bak0011b7a0 to <SYSTEM32>\file123.tmp.bak0011b7a0
from <SYSTEM32>\file116.tmp.bak0011bb7e to <SYSTEM32>\trmenushl64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file116.tmp.bak0011bb7e to <SYSTEM32>\file116.tmp.bak0011bb7e
from <DRIVERS>\file120.tmp.bak0011ba1c to <DRIVERS>\ipnpf.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file117.tmp.bak0011baa9 to <DRIVERS>\file117.tmp.bak0011baa9
from %WINDIR%\file116.tmp.bak0011bacd to %WINDIR%\bakmenusl64.sys
from %WINDIR%\file115.tmp.bak0011bba0 to %WINDIR%\bakssb2p64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp.bak0011bba0 to %WINDIR%\file115.tmp.bak0011bba0
from <SYSTEM32>\file109.tmp.bak0011bdf8 to <SYSTEM32>\winhafnt64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp.bak0011bdf8 to %WINDIR%\file109.tmp.bak0011bdf8
from %WINDIR%\file109.tmp.bak0011bdf8 to %WINDIR%\bakhafnt64t.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp.bak0011bdd6 to <SYSTEM32>\file110.tmp.bak0011bdd6
from <SYSTEM32>\file110.tmp.bak0011bdd6 to <SYSTEM32>\winhadnt64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file110.tmp.bak0011bd90 to %WINDIR%\file110.tmp.bak0011bd90
from %WINDIR%\file110.tmp.bak0011bd90 to %WINDIR%\bakhadnt64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp.bak0011bd25 to <SYSTEM32>\file111.tmp.bak0011bd25
from <SYSTEM32>\file111.tmp.bak0011bd25 to <SYSTEM32>\ifocmsdll64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file111.tmp.bak0011bcbb to %WINDIR%\file111.tmp.bak0011bcbb
from <SYSTEM32>\file123.tmp.bak0011b7a0 to <SYSTEM32>\winrdlv364.dll
from %WINDIR%\file111.tmp.bak0011bcbb to %WINDIR%\bakifocms64.sys
from <SYSTEM32>\file112.tmp.bak0011bc97 to <SYSTEM32>\winencyx64.dll
from %WINDIR%\file107.tmp.bak0011be63 to %WINDIR%\bakoauv364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp.bak0011bc75 to %WINDIR%\file112.tmp.bak0011bc75
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp.bak0011bc75 to <SYSTEM32>\file113.tmp.bak0011bc75
from <SYSTEM32>\file113.tmp.bak0011bc75 to <SYSTEM32>\thooksv364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file113.tmp.bak0011bbe6 to %WINDIR%\file113.tmp.bak0011bbe6
from %WINDIR%\file113.tmp.bak0011bbe6 to %WINDIR%\bakthv364t.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp.bak0011bbe6 to <SYSTEM32>\file114.tmp.bak0011bbe6
from <SYSTEM32>\file114.tmp.bak0011bbe6 to <SYSTEM32>\orcshk364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file114.tmp.bak0011bbc4 to %WINDIR%\file114.tmp.bak0011bbc4
from %WINDIR%\file114.tmp.bak0011bbc4 to %WINDIR%\bakorch364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp.bak0011bba0 to <SYSTEM32>\file115.tmp.bak0011bba0
from <SYSTEM32>\file115.tmp.bak0011bba0 to <SYSTEM32>\snapb2p64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file112.tmp.bak0011bc97 to <SYSTEM32>\file112.tmp.bak0011bc97
from %WINDIR%\file108.tmp.bak0011be41 to %WINDIR%\bakdtfrm64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp.bak0011be41 to %WINDIR%\file108.tmp.bak0011be41
from %WINDIR%\file112.tmp.bak0011bc75 to %WINDIR%\bakencyx64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp.bak0011bdf8 to <SYSTEM32>\file109.tmp.bak0011bdf8
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file123.tmp.bak0011b523 to %WINDIR%\file123.tmp.bak0011b523
from %WINDIR%\file124.tmp.bak0011b3e6 to %WINDIR%\bakola64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp.bak0011d5fd to <SYSTEM32>\file133.tmp.bak0011d5fd
from <SYSTEM32>\file133.tmp.bak0011d5fd to <SYSTEM32>\pathcvrt64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file133.tmp.bak0011d5d8 to %WINDIR%\file133.tmp.bak0011d5d8
from %WINDIR%\file133.tmp.bak0011d5d8 to %WINDIR%\bakpathcvrt64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp.bak0011d5b6 to <DRIVERS>\file134.tmp.bak0011d5b6
from <DRIVERS>\file134.tmp.bak0011d5b6 to <DRIVERS>\tsddrv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp.bak0011d5b6 to %WINDIR%\file134.tmp.bak0011d5b6
from %WINDIR%\file134.tmp.bak0011d5b6 to %WINDIR%\baksddrv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp.bak0011d592 to <SYSTEM32>\file135.tmp.bak0011d592
from <SYSTEM32>\file135.tmp.bak0011d592 to <SYSTEM32>\outlookctrlx64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file135.tmp.bak0011d54c to %WINDIR%\file135.tmp.bak0011d54c
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp.bak0011b523 to <SYSTEM32>\file124.tmp.bak0011b523
from %WINDIR%\file135.tmp.bak0011d54c to %WINDIR%\bakolctrlx64.sys
from <SYSTEM32>\file136.tmp.bak0011d506 to <SYSTEM32>\sdiskcontext64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp.bak0011d4e1 to %WINDIR%\file136.tmp.bak0011d4e1
from %WINDIR%\file136.tmp.bak0011d4e1 to %WINDIR%\baksdiskctx64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp.bak0011d4bf to <SYSTEM32>\file137.tmp.bak0011d4bf
from <SYSTEM32>\file137.tmp.bak0011d4bf to <SYSTEM32>\tfloattip64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file137.tmp.bak0011d49b to %WINDIR%\file137.tmp.bak0011d49b
from %WINDIR%\file137.tmp.bak0011d49b to %WINDIR%\baktftip64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp.bak0011d49b to <SYSTEM32>\file138.tmp.bak0011d49b
from <SYSTEM32>\file138.tmp.bak0011d49b to <SYSTEM32>\saveasfilecheck64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file138.tmp.bak0011d455 to %WINDIR%\file138.tmp.bak0011d455
from %WINDIR%\file138.tmp.bak0011d455 to %WINDIR%\baksafcheck64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp.bak0011d643 to <SYSTEM32>\file132.tmp.bak0011d643
from %WINDIR%\file131.tmp.bak0011d667 to %WINDIR%\baktmhk64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file136.tmp.bak0011d506 to <SYSTEM32>\file136.tmp.bak0011d506
from %WINDIR%\file132.tmp.bak0011d621 to %WINDIR%\baksdvwr64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file132.tmp.bak0011d621 to %WINDIR%\file132.tmp.bak0011d621
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp.bak0011d667 to %WINDIR%\file131.tmp.bak0011d667
from <SYSTEM32>\file131.tmp.bak0011d667 to <SYSTEM32>\tmailhook64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp.bak0011da21 to <SYSTEM32>\file125.tmp.bak0011da21
from <SYSTEM32>\file125.tmp.bak0011da21 to <SYSTEM32>\winwdgv364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file125.tmp.bak0011d94c to %WINDIR%\file125.tmp.bak0011d94c
from %WINDIR%\file125.tmp.bak0011d94c to %WINDIR%\bakwdgv364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp.bak0011d92a to <SYSTEM32>\file126.tmp.bak0011d92a
from <SYSTEM32>\file126.tmp.bak0011d92a to <SYSTEM32>\sdcontext64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file126.tmp.bak0011d879 to %WINDIR%\file126.tmp.bak0011d879
from %WINDIR%\file126.tmp.bak0011d879 to %WINDIR%\baksdctx64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp.bak0011d855 to <SYSTEM32>\file127.tmp.bak0011d855
from <SYSTEM32>\file127.tmp.bak0011d855 to <SYSTEM32>\sdfileicon64.dll
from %WINDIR%\file123.tmp.bak0011b523 to %WINDIR%\bakrdlv364.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file127.tmp.bak0011d7a4 to %WINDIR%\file127.tmp.bak0011d7a4
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp.bak0011d782 to <SYSTEM32>\file128.tmp.bak0011d782
from <SYSTEM32>\file132.tmp.bak0011d643 to <SYSTEM32>\sdviewer64.exe
from <SYSTEM32>\file128.tmp.bak0011d782 to <SYSTEM32>\tsafedoc64.dll
from %WINDIR%\file128.tmp.bak0011d75e to %WINDIR%\baktsdoc64t.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp.bak0011d718 to <SYSTEM32>\file129.tmp.bak0011d718
from <SYSTEM32>\file129.tmp.bak0011d718 to <SYSTEM32>\sdagent64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file129.tmp.bak0011d6f4 to %WINDIR%\file129.tmp.bak0011d6f4
from %WINDIR%\file129.tmp.bak0011d6f4 to %WINDIR%\baksda64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp.bak0011d6d2 to <SYSTEM32>\file130.tmp.bak0011d6d2
from <SYSTEM32>\file130.tmp.bak0011d6d2 to <SYSTEM32>\sdfattr64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file130.tmp.bak0011d6ad to %WINDIR%\file130.tmp.bak0011d6ad
from %WINDIR%\file130.tmp.bak0011d6ad to %WINDIR%\baksdfa64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp.bak0011d667 to <SYSTEM32>\file131.tmp.bak0011d667
from %WINDIR%\file127.tmp.bak0011d7a4 to %WINDIR%\baksdfi64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file124.tmp.bak0011b3e6 to %WINDIR%\file124.tmp.bak0011b3e6
from <SYSTEM32>\file124.tmp.bak0011b523 to <SYSTEM32>\outlka23.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file128.tmp.bak0011d75e to %WINDIR%\file128.tmp.bak0011d75e
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file108.tmp.bak0011be63 to <SYSTEM32>\file108.tmp.bak0011be63
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp.bak0011be63 to %WINDIR%\file107.tmp.bak0011be63
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file068.tmp.bak0011a969 to %WINDIR%\file068.tmp.bak0011a969
from %WINDIR%\syswow64\file078.tmp.bak0011ca89 to %WINDIR%\syswow64\tsdfmt32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp.bak0011c831 to %WINDIR%\file078.tmp.bak0011c831
from %WINDIR%\file078.tmp.bak0011c831 to %WINDIR%\baksdfmt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp.bak0011c780 to %WINDIR%\syswow64\file079.tmp.bak0011c780
from %WINDIR%\syswow64\file079.tmp.bak0011c780 to %WINDIR%\syswow64\tsdmnt32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file079.tmp.bak0011c73a to %WINDIR%\file079.tmp.bak0011c73a
from %WINDIR%\file079.tmp.bak0011c73a to %WINDIR%\baksdmnt.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp.bak0011c716 to %WINDIR%\syswow64\file080.tmp.bak0011c716
from %WINDIR%\syswow64\file080.tmp.bak0011c716 to %WINDIR%\syswow64\pathcvrt32.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp.bak0011c716 to %WINDIR%\file080.tmp.bak0011c716
from %WINDIR%\file080.tmp.bak0011c716 to %WINDIR%\bakpathcvrt32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp.bak0011c6cf to %WINDIR%\syswow64\drivers\file081.tmp.bak0011c6cf
from %WINDIR%\file084.tmp.bak0011c528 to %WINDIR%\baktftip.sys
from %WINDIR%\syswow64\drivers\file081.tmp.bak0011c6cf to %WINDIR%\syswow64\drivers\tsddrv32.sys
from %WINDIR%\file081.tmp.bak0011c6ab to %WINDIR%\baksddrv32.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp.bak0011c689 to %WINDIR%\syswow64\file082.tmp.bak0011c689
from %WINDIR%\syswow64\file082.tmp.bak0011c689 to %WINDIR%\syswow64\outlookctrlx.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file082.tmp.bak0011c61f to %WINDIR%\file082.tmp.bak0011c61f
from %WINDIR%\file082.tmp.bak0011c61f to %WINDIR%\bakolctrlx.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp.bak0011c5d8 to %WINDIR%\syswow64\file083.tmp.bak0011c5d8
from %WINDIR%\syswow64\file083.tmp.bak0011c5d8 to %WINDIR%\syswow64\sdiskcontext2.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file083.tmp.bak0011c5b4 to %WINDIR%\file083.tmp.bak0011c5b4
from %WINDIR%\file083.tmp.bak0011c5b4 to %WINDIR%\baksdiskctx2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp.bak0011c56e to %WINDIR%\syswow64\file084.tmp.bak0011c56e
from %WINDIR%\syswow64\file084.tmp.bak0011c56e to %WINDIR%\syswow64\tfloattip.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp.bak0011caad to %WINDIR%\file077.tmp.bak0011caad
from %WINDIR%\syswow64\file077.tmp.bak0011cacf to %WINDIR%\syswow64\tappaccess.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file078.tmp.bak0011ca89 to %WINDIR%\syswow64\file078.tmp.bak0011ca89
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file077.tmp.bak0011cacf to %WINDIR%\syswow64\file077.tmp.bak0011cacf
from %WINDIR%\file076.tmp.bak0011caf4 to %WINDIR%\baksdvwr.sys
from %WINDIR%\file068.tmp.bak0011a969 to %WINDIR%\baktsdoc2t.sys
from %WINDIR%\syswow64\file069.tmp.bak0011a945 to %WINDIR%\syswow64\sdcenter.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp.bak0011a8db to %WINDIR%\file069.tmp.bak0011a8db
from %WINDIR%\file069.tmp.bak0011a8db to %WINDIR%\baksdc.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp.bak0011a8b9 to %WINDIR%\syswow64\file070.tmp.bak0011a8b9
from %WINDIR%\syswow64\file070.tmp.bak0011a8b9 to %WINDIR%\syswow64\sdagent.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file070.tmp.bak0011a872 to %WINDIR%\file070.tmp.bak0011a872
from %WINDIR%\file070.tmp.bak0011a872 to %WINDIR%\baksda.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp.bak0011a84e to %WINDIR%\syswow64\file071.tmp.bak0011a84e
from %WINDIR%\syswow64\file071.tmp.bak0011a84e to %WINDIR%\syswow64\sdfattr.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file071.tmp.bak0011ce67 to %WINDIR%\file071.tmp.bak0011ce67
from %WINDIR%\file071.tmp.bak0011ce67 to %WINDIR%\baksdfa.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file084.tmp.bak0011c528 to %WINDIR%\file084.tmp.bak0011c528
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file072.tmp.bak0011cdb7 to %WINDIR%\file072.tmp.bak0011cdb7
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file081.tmp.bak0011c6ab to %WINDIR%\file081.tmp.bak0011c6ab
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file073.tmp.bak0011cc31 to %WINDIR%\syswow64\file073.tmp.bak0011cc31
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp.bak0011cc0f to %WINDIR%\syswow64\file074.tmp.bak0011cc0f
from %WINDIR%\syswow64\file074.tmp.bak0011cc0f to %WINDIR%\syswow64\tmailgateway.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file074.tmp.bak0011cbeb to %WINDIR%\file074.tmp.bak0011cbeb
from %WINDIR%\file074.tmp.bak0011cbeb to %WINDIR%\baktmgw.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp.bak0011cb5e to %WINDIR%\syswow64\file075.tmp.bak0011cb5e
from %WINDIR%\syswow64\file075.tmp.bak0011cb5e to %WINDIR%\syswow64\tmailhook.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file075.tmp.bak0011cb3a to %WINDIR%\file075.tmp.bak0011cb3a
from %WINDIR%\file075.tmp.bak0011cb3a to %WINDIR%\baktmhk.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp.bak0011cb16 to %WINDIR%\syswow64\file076.tmp.bak0011cb16
from %WINDIR%\syswow64\file076.tmp.bak0011cb16 to %WINDIR%\syswow64\sdviewer.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file076.tmp.bak0011caf4 to %WINDIR%\file076.tmp.bak0011caf4
from %WINDIR%\file072.tmp.bak0011cdb7 to %WINDIR%\baksdoeav.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file069.tmp.bak0011a945 to %WINDIR%\syswow64\file069.tmp.bak0011a945
from %WINDIR%\syswow64\file073.tmp.bak0011cc31 to %WINDIR%\syswow64\notice.wav
from %WINDIR%\file077.tmp.bak0011caad to %WINDIR%\baktaacs.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp.bak0011c4df to %WINDIR%\syswow64\file085.tmp.bak0011c4df
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file095.tmp.bak0011c125 to %WINDIR%\file095.tmp.bak0011c125
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp.bak0011c0df to %WINDIR%\syswow64\file096.tmp.bak0011c0df
from %WINDIR%\syswow64\file096.tmp.bak0011c0df to %WINDIR%\syswow64\funcextv.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file096.tmp.bak0011c0bb to %WINDIR%\file096.tmp.bak0011c0bb
from %WINDIR%\file096.tmp.bak0011c0bb to %WINDIR%\bakfextv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp.bak0011c075 to %WINDIR%\syswow64\file097.tmp.bak0011c075
from %WINDIR%\syswow64\file097.tmp.bak0011c075 to %WINDIR%\syswow64\funcextv64.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file097.tmp.bak0011c053 to %WINDIR%\file097.tmp.bak0011c053
from %WINDIR%\file097.tmp.bak0011c053 to %WINDIR%\bakfextv64.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file098.tmp.bak0011c053 to %WINDIR%\syswow64\file098.tmp.bak0011c053
from %WINDIR%\syswow64\file098.tmp.bak0011c053 to %WINDIR%\syswow64\windowsupdateagent20-x86.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file099.tmp.bak0011bfc4 to %WINDIR%\syswow64\file099.tmp.bak0011bfc4
from %WINDIR%\file094.tmp.bak0011c125 to %WINDIR%\bak32msc.sys
from %WINDIR%\syswow64\file085.tmp.bak0011c4df to %WINDIR%\syswow64\sd7z.dll
from %WINDIR%\file095.tmp.bak0011c125 to %WINDIR%\bak32msl.sys
from %WINDIR%\syswow64\file099.tmp.bak0011bfc4 to %WINDIR%\syswow64\windowsupdateagent30-x64.exe
from %CommonProgramFiles(x86)%\system\file100.tmp.bak0011bf13 to %CommonProgramFiles(x86)%\system\agt3tool.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp.bak0011bef1 to %WINDIR%\file101.tmp.bak0011bef1
from %WINDIR%\file101.tmp.bak0011bef1 to %WINDIR%\policyimporttool.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file101.tmp.bak0011becd to %CommonProgramFiles(x86)%\system\file101.tmp.bak0011becd
from %CommonProgramFiles(x86)%\system\file101.tmp.bak0011becd to %CommonProgramFiles(x86)%\system\policyimporttool.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp.bak0011bea9 to %WINDIR%\syswow64\file106.tmp.bak0011bea9
from %WINDIR%\syswow64\file106.tmp.bak0011bea9 to %WINDIR%\syswow64\winrdlv3.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp.bak0011bea9 to %WINDIR%\file106.tmp.bak0011bea9
from %WINDIR%\file106.tmp.bak0011bea9 to %WINDIR%\bakrdlv3.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file107.tmp.bak0011be87 to <SYSTEM32>\file107.tmp.bak0011be87
from <SYSTEM32>\file107.tmp.bak0011be87 to <SYSTEM32>\winoauv364.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp.bak0011bf38 to %WINDIR%\file100.tmp.bak0011bf38
from %WINDIR%\file100.tmp.bak0011bf38 to %WINDIR%\agt3tool.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file100.tmp.bak0011bf13 to %CommonProgramFiles(x86)%\system\file100.tmp.bak0011bf13
from %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\tis-620.unicodemap_tmp to %WINDIR%\syswow64\tks\pdfextend\xpdf-thai\tis-620.unicodemap
from %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set2eed.tmp to %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.inf
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file093.tmp.bak0011c190 to %WINDIR%\file093.tmp.bak0011c190
from %WINDIR%\file085.tmp.bak0011c477 to %WINDIR%\baksd7z.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp.bak0011c453 to %WINDIR%\syswow64\file086.tmp.bak0011c453
from %WINDIR%\syswow64\file086.tmp.bak0011c453 to %WINDIR%\syswow64\sd7zarchive.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file086.tmp.bak0011c42f to %WINDIR%\file086.tmp.bak0011c42f
from %WINDIR%\file086.tmp.bak0011c42f to %WINDIR%\baksd7zarv.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp.bak0011c3e8 to %WINDIR%\syswow64\file087.tmp.bak0011c3e8
from %WINDIR%\syswow64\file087.tmp.bak0011c3e8 to %WINDIR%\syswow64\sdtransformer.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file087.tmp.bak0011c3c6 to %WINDIR%\file087.tmp.bak0011c3c6
from %WINDIR%\file087.tmp.bak0011c3c6 to %WINDIR%\baksdtransfm.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp.bak0011c35c to %WINDIR%\syswow64\file088.tmp.bak0011c35c
from %WINDIR%\syswow64\file088.tmp.bak0011c35c to %WINDIR%\syswow64\sdtranshelper.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file088.tmp.bak0011c316 to %WINDIR%\file088.tmp.bak0011c316
from %WINDIR%\file093.tmp.bak0011c190 to %WINDIR%\bak32msm.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file094.tmp.bak0011c125 to %WINDIR%\file094.tmp.bak0011c125
from %WINDIR%\file088.tmp.bak0011c316 to %WINDIR%\baksdtranshlp.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file089.tmp.bak0011c287 to %WINDIR%\file089.tmp.bak0011c287
from %WINDIR%\file089.tmp.bak0011c287 to %WINDIR%\baksafcheck2.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp.bak0011c265 to %WINDIR%\syswow64\file090.tmp.bak0011c265
from %WINDIR%\syswow64\file090.tmp.bak0011c265 to %WINDIR%\syswow64\tsaferar.exe
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file090.tmp.bak0011c21c to %WINDIR%\file090.tmp.bak0011c21c
from %WINDIR%\file090.tmp.bak0011c21c to %WINDIR%\baktsrar.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp.bak0011c1fa to %WINDIR%\syswow64\file091.tmp.bak0011c1fa
from %WINDIR%\syswow64\file091.tmp.bak0011c1fa to %WINDIR%\syswow64\lbxwebservice.dll
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file091.tmp.bak0011c1b4 to %WINDIR%\file091.tmp.bak0011c1b4
from %WINDIR%\file091.tmp.bak0011c1b4 to %WINDIR%\baklbxws.sys
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file092.tmp.bak0011c190 to %WINDIR%\file092.tmp.bak0011c190
from %WINDIR%\file092.tmp.bak0011c190 to %WINDIR%\pwddict.ini
from %ALLUSERSPROFILE%\ipgaszip20220625202731\file085.tmp.bak0011c477 to %WINDIR%\file085.tmp.bak0011c477
from %WINDIR%\syswow64\file089.tmp.bak0011c2cd to %WINDIR%\syswow64\saveasfilecheck2.dll
from %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\set30c2.tmp to %WINDIR%\temp\{29cdfc79-af70-095c-8902-7857e2a97b57}\tpacket7.sys

Modifies the following files

%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl

Substitutes the following files

%ALLUSERSPROFILE%\ipgaszip20220625202731\file004.tmp.bak0011a232
%ALLUSERSPROFILE%\ipgaszip20220625202731\file184.tmp.bak0011e14c
%ALLUSERSPROFILE%\ipgaszip20220625202731\file178.tmp.bak0011c050
%ALLUSERSPROFILE%\ipgaszip20220625202731\file172.tmp.bak0011c80a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file169.tmp.bak0011c94a
%ALLUSERSPROFILE%\ipgaszip20220625202731\file168.tmp.bak0011c96b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file134.tmp.bak0011d5b6
%ALLUSERSPROFILE%\ipgaszip20220625202731\file202.tmp.bak0011e17b
%ALLUSERSPROFILE%\ipgaszip20220625202731\file131.tmp.bak0011d667
%ALLUSERSPROFILE%\ipgaszip20220625202731\file109.tmp.bak0011bdf8
%ALLUSERSPROFILE%\ipgaszip20220625202731\file106.tmp.bak0011bea9
%ALLUSERSPROFILE%\ipgaszip20220625202731\file080.tmp.bak0011c716
%ALLUSERSPROFILE%\ipgaszip20220625202731\file061.tmp.bak0011ae60
%ALLUSERSPROFILE%\ipgaszip20220625202731\file045.tmp.bak0011b263
%ALLUSERSPROFILE%\ipgaszip20220625202731\file011.tmp.bak00119c66
%ALLUSERSPROFILE%\ipgaszip20220625202731\file115.tmp.bak0011bba0
%WINDIR%\syswow64\outlookctrlx.dll

Network activity

Connects to

'<LOCALNET>.2.112':8237

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''
ClassName: 'CtrlNotifySink' WindowName: ''
ClassName: 'Button' WindowName: ''
ClassName: 'SearchableWebView' WindowName: ''

Creates and executes the following

'%ALLUSERSPROFILE%\ipgaskernel20220625202727\akernel3.exe'
'%CommonProgramFiles(x86)%\system\systecv3.exe'
'%CommonProgramFiles(x86)%\system\winrdgv3.exe'
'%WINDIR%\syswow64\windowsupdateagent30-x64.exe' /quiet /norestart
'<SYSTEM32>\winrdlv3.exe' winwdgv364.dll,StartBackMonitor
'%WINDIR%\syswow64\winrdlv3.exe' winwdgv3.dll,RunMonitor32
'%WINDIR%\syswow64\winrdlv3.exe' winoav3.dll,RunAgent32
'D:\fa7f7502cb2427332df078\wusetup.exe' /quiet /norestart
'%WINDIR%\syswow64\winrdlv3.exe' sdcenter.dll,RunSDCenter32
'%WINDIR%\syswow64\winrdlv3.exe' ITEuDllvMgr.dll,RunService
'%WINDIR%\syswow64\onacagent.exe'
'%WINDIR%\syswow64\winrdlv3.exe' winoauv3.dll,RunAgentU32
'<SYSTEM32>\winrdlv3.exe' winoauv364.dll,RunAgentU64

Executes the following

'<SYSTEM32>\rundll32.exe' setupapi,InstallHinfSection DefaultInstall 132 C:\TNullFitler\TNullFilter.inf
'<SYSTEM32>\runonce.exe' -r
'<SYSTEM32>\grpconv.exe' -o
'<SYSTEM32>\regsvr32.exe' /s trmenushl64.dll

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial