マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.KillProc.46851

Added to the Dr.Web virus database: 2016-10-09

Virus description added:

Technical Information

To ensure autorun and distribution:
Substitutes the following executable system files:
  • <SYSTEM32>\iesetup.dll with <SYSTEM32>\iesetup.dll
  • <SYSTEM32>\iernonce.dll with <SYSTEM32>\iernonce.dll
  • <SYSTEM32>\ifmon.dll with <SYSTEM32>\ifmon.dll
  • <SYSTEM32>\iexpress.exe with <SYSTEM32>\iexpress.exe
  • <SYSTEM32>\iepeers.dll with <SYSTEM32>\iepeers.dll
  • <SYSTEM32>\ieakui.dll with <SYSTEM32>\ieakui.dll
  • <SYSTEM32>\ieaksie.dll with <SYSTEM32>\ieaksie.dll
  • <SYSTEM32>\ieencode.dll with <SYSTEM32>\ieencode.dll
  • <SYSTEM32>\iedkcs32.dll with <SYSTEM32>\iedkcs32.dll
  • <SYSTEM32>\imeshare.dll with <SYSTEM32>\imeshare.dll
  • <SYSTEM32>\imapi.exe with <SYSTEM32>\imapi.exe
  • <SYSTEM32>\inetcfg.dll with <SYSTEM32>\inetcfg.dll
  • <SYSTEM32>\imgutil.dll with <SYSTEM32>\imgutil.dll
  • <SYSTEM32>\imaadp32.acm with <SYSTEM32>\imaadp32.acm
  • <SYSTEM32>\igmpagnt.dll with <SYSTEM32>\igmpagnt.dll
  • <SYSTEM32>\ifsutil.dll with <SYSTEM32>\ifsutil.dll
  • <SYSTEM32>\ils.dll with <SYSTEM32>\ils.dll
  • <SYSTEM32>\iissuba.dll with <SYSTEM32>\iissuba.dll
  • <SYSTEM32>\icardres.dll with <SYSTEM32>\icardres.dll
  • <SYSTEM32>\icardagt.exe with <SYSTEM32>\icardagt.exe
  • <SYSTEM32>\iccvid.dll with <SYSTEM32>\iccvid.dll
  • <SYSTEM32>\icardres.dll.mui with <SYSTEM32>\icardres.dll.mui
  • <SYSTEM32>\icaapi.dll with <SYSTEM32>\icaapi.dll
  • <SYSTEM32>\iassam.dll with <SYSTEM32>\iassam.dll
  • <SYSTEM32>\iasrecst.dll with <SYSTEM32>\iasrecst.dll
  • <SYSTEM32>\iassvcs.dll with <SYSTEM32>\iassvcs.dll
  • <SYSTEM32>\iassdo.dll with <SYSTEM32>\iassdo.dll
  • <SYSTEM32>\idq.dll with <SYSTEM32>\idq.dll
  • <SYSTEM32>\icwphbk.dll with <SYSTEM32>\icwphbk.dll
  • <SYSTEM32>\ieakeng.dll with <SYSTEM32>\ieakeng.dll
  • <SYSTEM32>\ie4uinit.exe with <SYSTEM32>\ie4uinit.exe
  • <SYSTEM32>\icwdial.dll with <SYSTEM32>\icwdial.dll
  • <SYSTEM32>\icm32.dll with <SYSTEM32>\icm32.dll
  • <SYSTEM32>\icfgnt5.dll with <SYSTEM32>\icfgnt5.dll
  • <SYSTEM32>\icmui.dll with <SYSTEM32>\icmui.dll
  • <SYSTEM32>\icmp.dll with <SYSTEM32>\icmp.dll
  • <SYSTEM32>\ipv6mon.dll with <SYSTEM32>\ipv6mon.dll
  • <SYSTEM32>\ipv6.exe with <SYSTEM32>\ipv6.exe
  • <SYSTEM32>\ipxpromn.dll with <SYSTEM32>\ipxpromn.dll
  • <SYSTEM32>\ipxmontr.dll with <SYSTEM32>\ipxmontr.dll
  • <SYSTEM32>\ipsmsnap.dll with <SYSTEM32>\ipsmsnap.dll
  • <SYSTEM32>\iprtrmgr.dll with <SYSTEM32>\iprtrmgr.dll
  • <SYSTEM32>\iprtprio.dll with <SYSTEM32>\iprtprio.dll
  • <SYSTEM32>\ipsecsnp.dll with <SYSTEM32>\ipsecsnp.dll
  • <SYSTEM32>\ipsec6.exe with <SYSTEM32>\ipsec6.exe
  • <SYSTEM32>\ir41_32.ax with <SYSTEM32>\ir41_32.ax
  • <SYSTEM32>\ir32_32.dll with <SYSTEM32>\ir32_32.dll
  • <SYSTEM32>\ir41_qcx.dll with <SYSTEM32>\ir41_qcx.dll
  • <SYSTEM32>\ir41_qc.dll with <SYSTEM32>\ir41_qc.dll
  • <SYSTEM32>\ipxwan.dll with <SYSTEM32>\ipxwan.dll
  • <SYSTEM32>\ipxroute.exe with <SYSTEM32>\ipxroute.exe
  • <SYSTEM32>\ipxrip.dll with <SYSTEM32>\ipxrip.dll
  • <SYSTEM32>\ipxsap.dll with <SYSTEM32>\ipxsap.dll
  • <SYSTEM32>\ipxrtmgr.dll with <SYSTEM32>\ipxrtmgr.dll
  • <SYSTEM32>\infocardapi.dll with <SYSTEM32>\infocardapi.dll
  • <SYSTEM32>\inetres.dll with <SYSTEM32>\inetres.dll
  • <SYSTEM32>\infosoft.dll with <SYSTEM32>\infosoft.dll
  • <SYSTEM32>\infocardcpl.cpl with <SYSTEM32>\infocardcpl.cpl
  • <SYSTEM32>\inetppui.dll with <SYSTEM32>\inetppui.dll
  • <SYSTEM32>\inetcpl.cpl with <SYSTEM32>\inetcpl.cpl
  • <SYSTEM32>\inetcomm.dll with <SYSTEM32>\inetcomm.dll
  • <SYSTEM32>\inetmib1.dll with <SYSTEM32>\inetmib1.dll
  • <SYSTEM32>\inetcplc.dll with <SYSTEM32>\inetcplc.dll
  • <SYSTEM32>\ipmontr.dll with <SYSTEM32>\ipmontr.dll
  • <SYSTEM32>\ipconfig.exe with <SYSTEM32>\ipconfig.exe
  • <SYSTEM32>\iprop.dll with <SYSTEM32>\iprop.dll
  • <SYSTEM32>\ippromon.dll with <SYSTEM32>\ippromon.dll
  • <SYSTEM32>\iologmsg.dll with <SYSTEM32>\iologmsg.dll
  • <SYSTEM32>\input.dll with <SYSTEM32>\input.dll
  • <SYSTEM32>\initpki.dll with <SYSTEM32>\initpki.dll
  • <SYSTEM32>\intl.cpl with <SYSTEM32>\intl.cpl
  • <SYSTEM32>\inseng.dll with <SYSTEM32>\inseng.dll
  • <SYSTEM32>\iasrad.dll with <SYSTEM32>\iasrad.dll
  • <SYSTEM32>\fontview.exe with <SYSTEM32>\fontview.exe
  • <SYSTEM32>\fontsub.dll with <SYSTEM32>\fontsub.dll
  • <SYSTEM32>\format.com with <SYSTEM32>\format.com
  • <SYSTEM32>\forcedos.exe with <SYSTEM32>\forcedos.exe
  • <SYSTEM32>\fontext.dll with <SYSTEM32>\fontext.dll
  • <SYSTEM32>\fltlib.dll with <SYSTEM32>\fltlib.dll
  • <SYSTEM32>\fldrclnr.dll with <SYSTEM32>\fldrclnr.dll
  • <SYSTEM32>\fmifs.dll with <SYSTEM32>\fmifs.dll
  • <SYSTEM32>\fltMc.exe with <SYSTEM32>\fltMc.exe
  • <SYSTEM32>\ftsrch.dll with <SYSTEM32>\ftsrch.dll
  • <SYSTEM32>\ftp.exe with <SYSTEM32>\ftp.exe
  • <SYSTEM32>\g711codc.ax with <SYSTEM32>\g711codc.ax
  • <SYSTEM32>\fwcfg.dll with <SYSTEM32>\fwcfg.dll
  • <SYSTEM32>\fsutil.exe with <SYSTEM32>\fsutil.exe
  • <SYSTEM32>\freecell.exe with <SYSTEM32>\freecell.exe
  • <SYSTEM32>\framebuf.dll with <SYSTEM32>\framebuf.dll
  • <SYSTEM32>\fsusd.dll with <SYSTEM32>\fsusd.dll
  • <SYSTEM32>\fsquirt.exe with <SYSTEM32>\fsquirt.exe
  • <SYSTEM32>\exts.dll with <SYSTEM32>\exts.dll
  • <SYSTEM32>\extrac32.exe with <SYSTEM32>\extrac32.exe
  • <SYSTEM32>\fc.exe with <SYSTEM32>\fc.exe
  • <SYSTEM32>\faultrep.dll with <SYSTEM32>\faultrep.dll
  • <SYSTEM32>\extmgr.dll with <SYSTEM32>\extmgr.dll
  • <SYSTEM32>\evr.dll with <SYSTEM32>\evr.dll
  • <SYSTEM32>\eventvwr.exe with <SYSTEM32>\eventvwr.exe
  • <SYSTEM32>\expsrv.dll with <SYSTEM32>\expsrv.dll
  • <SYSTEM32>\expand.exe with <SYSTEM32>\expand.exe
  • <SYSTEM32>\finger.exe with <SYSTEM32>\finger.exe
  • <SYSTEM32>\findstr.exe with <SYSTEM32>\findstr.exe
  • <SYSTEM32>\fixmapi.exe with <SYSTEM32>\fixmapi.exe
  • <SYSTEM32>\firewall.cpl with <SYSTEM32>\firewall.cpl
  • <SYSTEM32>\find.exe with <SYSTEM32>\find.exe
  • <SYSTEM32>\fdeploy.dll with <SYSTEM32>\fdeploy.dll
  • <SYSTEM32>\fde.dll with <SYSTEM32>\fde.dll
  • <SYSTEM32>\filemgmt.dll with <SYSTEM32>\filemgmt.dll
  • <SYSTEM32>\feclient.dll with <SYSTEM32>\feclient.dll
  • <SYSTEM32>\hotplug.dll with <SYSTEM32>\hotplug.dll
  • <SYSTEM32>\hostname.exe with <SYSTEM32>\hostname.exe
  • <SYSTEM32>\html.iec with <SYSTEM32>\html.iec
  • <SYSTEM32>\hticons.dll with <SYSTEM32>\hticons.dll
  • <SYSTEM32>\hnetwiz.dll with <SYSTEM32>\hnetwiz.dll
  • <SYSTEM32>\hhsetup.dll with <SYSTEM32>\hhsetup.dll
  • <SYSTEM32>\hhctrl.ocx with <SYSTEM32>\hhctrl.ocx
  • <SYSTEM32>\hnetmon.dll with <SYSTEM32>\hnetmon.dll
  • <SYSTEM32>\hlink.dll with <SYSTEM32>\hlink.dll
  • <SYSTEM32>\iashlpr.dll with <SYSTEM32>\iashlpr.dll
  • <SYSTEM32>\iasads.dll with <SYSTEM32>\iasads.dll
  • <SYSTEM32>\iaspolcy.dll with <SYSTEM32>\iaspolcy.dll
  • <SYSTEM32>\iasnap.dll with <SYSTEM32>\iasnap.dll
  • <SYSTEM32>\iasacct.dll with <SYSTEM32>\iasacct.dll
  • <SYSTEM32>\htui.dll with <SYSTEM32>\htui.dll
  • <SYSTEM32>\httpapi.dll with <SYSTEM32>\httpapi.dll
  • <SYSTEM32>\iac25_32.ax with <SYSTEM32>\iac25_32.ax
  • <SYSTEM32>\hypertrm.dll with <SYSTEM32>\hypertrm.dll
  • <SYSTEM32>\gpedit.dll with <SYSTEM32>\gpedit.dll
  • <SYSTEM32>\glu32.dll with <SYSTEM32>\glu32.dll
  • <SYSTEM32>\gpkrsrc.dll with <SYSTEM32>\gpkrsrc.dll
  • <SYSTEM32>\gpkcsp.dll with <SYSTEM32>\gpkcsp.dll
  • <SYSTEM32>\glmf32.dll with <SYSTEM32>\glmf32.dll
  • <SYSTEM32>\gdiplus.dll with <SYSTEM32>\gdiplus.dll
  • <SYSTEM32>\gcdef.dll with <SYSTEM32>\gcdef.dll
  • <SYSTEM32>\getuname.dll with <SYSTEM32>\getuname.dll
  • <SYSTEM32>\getmac.exe with <SYSTEM32>\getmac.exe
  • <SYSTEM32>\hal.dll with <SYSTEM32>\hal.dll
  • <SYSTEM32>\h323msp.dll with <SYSTEM32>\h323msp.dll
  • <SYSTEM32>\help.exe with <SYSTEM32>\help.exe
  • <SYSTEM32>\hdwwiz.cpl with <SYSTEM32>\hdwwiz.cpl
  • <SYSTEM32>\grpconv.exe with <SYSTEM32>\grpconv.exe
  • <SYSTEM32>\gptext.dll with <SYSTEM32>\gptext.dll
  • <SYSTEM32>\gpresult.exe with <SYSTEM32>\gpresult.exe
  • <SYSTEM32>\graftabl.com with <SYSTEM32>\graftabl.com
  • <SYSTEM32>\gpupdate.exe with <SYSTEM32>\gpupdate.exe
  • <SYSTEM32>\lmrt.dll with <SYSTEM32>\lmrt.dll
  • <SYSTEM32>\lights.exe with <SYSTEM32>\lights.exe
  • <SYSTEM32>\loadperf.dll with <SYSTEM32>\loadperf.dll
  • <SYSTEM32>\lnkstub.exe with <SYSTEM32>\lnkstub.exe
  • <SYSTEM32>\licwmi.dll with <SYSTEM32>\licwmi.dll
  • <SYSTEM32>\libxml2.dll with <SYSTEM32>\libxml2.dll
  • <SYSTEM32>\libpq82.dll with <SYSTEM32>\libpq82.dll
  • <SYSTEM32>\licmgr10.dll with <SYSTEM32>\licmgr10.dll
  • <SYSTEM32>\licdll.dll with <SYSTEM32>\licdll.dll
  • <SYSTEM32>\logman.exe with <SYSTEM32>\logman.exe
  • <SYSTEM32>\loghours.dll with <SYSTEM32>\loghours.dll
  • <SYSTEM32>\logon.scr with <SYSTEM32>\logon.scr
  • <SYSTEM32>\logoff.exe with <SYSTEM32>\logoff.exe
  • <SYSTEM32>\logagent.exe with <SYSTEM32>\logagent.exe
  • <SYSTEM32>\localui.dll with <SYSTEM32>\localui.dll
  • <SYSTEM32>\localsec.dll with <SYSTEM32>\localsec.dll
  • <SYSTEM32>\lodctr.exe with <SYSTEM32>\lodctr.exe
  • <SYSTEM32>\locator.exe with <SYSTEM32>\locator.exe
  • <SYSTEM32>\libgcc_s.dll with <SYSTEM32>\libgcc_s.dll
  • <SYSTEM32>\libeay32.dll with <SYSTEM32>\libeay32.dll
  • <SYSTEM32>\libgnat-2009.dll with <SYSTEM32>\libgnat-2009.dll
  • <SYSTEM32>\libgnarl-2009.dll with <SYSTEM32>\libgnarl-2009.dll
  • <SYSTEM32>\libdns.dll with <SYSTEM32>\libdns.dll
  • <SYSTEM32>\label.exe with <SYSTEM32>\label.exe
  • <SYSTEM32>\l3codecx.ax with <SYSTEM32>\l3codecx.ax
  • <SYSTEM32>\laprxy.dll with <SYSTEM32>\laprxy.dll
  • <SYSTEM32>\langwrbk.dll with <SYSTEM32>\langwrbk.dll
  • <SYSTEM32>\libisccfg.dll with <SYSTEM32>\libisccfg.dll
  • <SYSTEM32>\libisccc.dll with <SYSTEM32>\libisccc.dll
  • <SYSTEM32>\libmysql.dll with <SYSTEM32>\libmysql.dll
  • <SYSTEM32>\liblwres.dll with <SYSTEM32>\liblwres.dll
  • <SYSTEM32>\libisc.dll with <SYSTEM32>\libisc.dll
  • <SYSTEM32>\libiconv2.dll with <SYSTEM32>\libiconv2.dll
  • <SYSTEM32>\libiconv-2.dll with <SYSTEM32>\libiconv-2.dll
  • <SYSTEM32>\libintl3.dll with <SYSTEM32>\libintl3.dll
  • <SYSTEM32>\libintl-2.dll with <SYSTEM32>\libintl-2.dll
  • <SYSTEM32>\mdwmdmsp.dll with <SYSTEM32>\mdwmdmsp.dll
  • <SYSTEM32>\mdminst.dll with <SYSTEM32>\mdminst.dll
  • <SYSTEM32>\mfc100.dll with <SYSTEM32>\mfc100.dll
  • <SYSTEM32>\mf3216.dll with <SYSTEM32>\mf3216.dll
  • <SYSTEM32>\mdhcp.dll with <SYSTEM32>\mdhcp.dll
  • <SYSTEM32>\mciqtz32.dll with <SYSTEM32>\mciqtz32.dll
  • <SYSTEM32>\mciole32.dll with <SYSTEM32>\mciole32.dll
  • <SYSTEM32>\mciwave.dll with <SYSTEM32>\mciwave.dll
  • <SYSTEM32>\mciseq.dll with <SYSTEM32>\mciseq.dll
  • <SYSTEM32>\mfc100fra.dll with <SYSTEM32>\mfc100fra.dll
  • <SYSTEM32>\mfc100esn.dll with <SYSTEM32>\mfc100esn.dll
  • <SYSTEM32>\mfc100jpn.dll with <SYSTEM32>\mfc100jpn.dll
  • <SYSTEM32>\mfc100ita.dll with <SYSTEM32>\mfc100ita.dll
  • <SYSTEM32>\mfc100enu.dll with <SYSTEM32>\mfc100enu.dll
  • <SYSTEM32>\mfc100cht.dll with <SYSTEM32>\mfc100cht.dll
  • <SYSTEM32>\mfc100chs.dll with <SYSTEM32>\mfc100chs.dll
  • <SYSTEM32>\mfc100deu.dll with <SYSTEM32>\mfc100deu.dll
  • <SYSTEM32>\mfc100d.dll with <SYSTEM32>\mfc100d.dll
  • <SYSTEM32>\magnify.exe with <SYSTEM32>\magnify.exe
  • <SYSTEM32>\lprmonui.dll with <SYSTEM32>\lprmonui.dll
  • <SYSTEM32>\main.cpl with <SYSTEM32>\main.cpl
  • <SYSTEM32>\mag_hook.dll with <SYSTEM32>\mag_hook.dll
  • <SYSTEM32>\lprhelp.dll with <SYSTEM32>\lprhelp.dll
  • <SYSTEM32>\lpk.dll with <SYSTEM32>\lpk.dll
  • <SYSTEM32>\logonui.exe with <SYSTEM32>\logonui.exe
  • <SYSTEM32>\lpr.exe with <SYSTEM32>\lpr.exe
  • <SYSTEM32>\lpq.exe with <SYSTEM32>\lpq.exe
  • <SYSTEM32>\mchgrcoi.dll with <SYSTEM32>\mchgrcoi.dll
  • <SYSTEM32>\mcdsrv32.dll with <SYSTEM32>\mcdsrv32.dll
  • <SYSTEM32>\mcicda.dll with <SYSTEM32>\mcicda.dll
  • <SYSTEM32>\mciavi32.dll with <SYSTEM32>\mciavi32.dll
  • <SYSTEM32>\mcd32.dll with <SYSTEM32>\mcd32.dll
  • <SYSTEM32>\mapi32.dll with <SYSTEM32>\mapi32.dll
  • <SYSTEM32>\makecab.exe with <SYSTEM32>\makecab.exe
  • <SYSTEM32>\mcastmib.dll with <SYSTEM32>\mcastmib.dll
  • <SYSTEM32>\mapistub.dll with <SYSTEM32>\mapistub.dll
  • <SYSTEM32>\l3codeca.acm with <SYSTEM32>\l3codeca.acm
  • <SYSTEM32>\kbdbe.dll with <SYSTEM32>\kbdbe.dll
  • <SYSTEM32>\jsproxy.dll with <SYSTEM32>\jsproxy.dll
  • <SYSTEM32>\kbdbr.dll with <SYSTEM32>\kbdbr.dll
  • <SYSTEM32>\kbdbene.dll with <SYSTEM32>\kbdbene.dll
  • <SYSTEM32>\jscript.dll with <SYSTEM32>\jscript.dll
  • <SYSTEM32>\jgsh400.dll with <SYSTEM32>\jgsh400.dll
  • <SYSTEM32>\jgsd400.dll with <SYSTEM32>\jgsd400.dll
  • <SYSTEM32>\joy.cpl with <SYSTEM32>\joy.cpl
  • <SYSTEM32>\jobexec.dll with <SYSTEM32>\jobexec.dll
  • <SYSTEM32>\kbdfi.dll with <SYSTEM32>\kbdfi.dll
  • <SYSTEM32>\kbdfc.dll with <SYSTEM32>\kbdfc.dll
  • <SYSTEM32>\kbdfo.dll with <SYSTEM32>\kbdfo.dll
  • <SYSTEM32>\kbdfi1.dll with <SYSTEM32>\kbdfi1.dll
  • <SYSTEM32>\kbdes.dll with <SYSTEM32>\kbdes.dll
  • <SYSTEM32>\kbdcan.dll with <SYSTEM32>\kbdcan.dll
  • <SYSTEM32>\kbdca.dll with <SYSTEM32>\kbdca.dll
  • <SYSTEM32>\kbddv.dll with <SYSTEM32>\kbddv.dll
  • <SYSTEM32>\kbdda.dll with <SYSTEM32>\kbdda.dll
  • <SYSTEM32>\isrdbg32.dll with <SYSTEM32>\isrdbg32.dll
  • <SYSTEM32>\isign32.dll with <SYSTEM32>\isign32.dll
  • <SYSTEM32>\itss.dll with <SYSTEM32>\itss.dll
  • <SYSTEM32>\itircl.dll with <SYSTEM32>\itircl.dll
  • <SYSTEM32>\irprops.cpl with <SYSTEM32>\irprops.cpl
  • <SYSTEM32>\ir50_qc.dll with <SYSTEM32>\ir50_qc.dll
  • <SYSTEM32>\ir50_32.dll with <SYSTEM32>\ir50_32.dll
  • <SYSTEM32>\irclass.dll with <SYSTEM32>\irclass.dll
  • <SYSTEM32>\ir50_qcx.dll with <SYSTEM32>\ir50_qcx.dll
  • <SYSTEM32>\jgdw400.dll with <SYSTEM32>\jgdw400.dll
  • <SYSTEM32>\jgaw400.dll with <SYSTEM32>\jgaw400.dll
  • <SYSTEM32>\jgpl400.dll with <SYSTEM32>\jgpl400.dll
  • <SYSTEM32>\jgmd400.dll with <SYSTEM32>\jgmd400.dll
  • <SYSTEM32>\jet500.dll with <SYSTEM32>\jet500.dll
  • <SYSTEM32>\ivfsrc.ax with <SYSTEM32>\ivfsrc.ax
  • <SYSTEM32>\iuengine.dll with <SYSTEM32>\iuengine.dll
  • <SYSTEM32>\iyuv_32.dll with <SYSTEM32>\iyuv_32.dll
  • <SYSTEM32>\ixsso.dll with <SYSTEM32>\ixsso.dll
  • <SYSTEM32>\kbdsmsno.dll with <SYSTEM32>\kbdsmsno.dll
  • <SYSTEM32>\kbdsmsfi.dll with <SYSTEM32>\kbdsmsfi.dll
  • <SYSTEM32>\kbdsw.dll with <SYSTEM32>\kbdsw.dll
  • <SYSTEM32>\kbdsp.dll with <SYSTEM32>\kbdsp.dll
  • <SYSTEM32>\kbdsg.dll with <SYSTEM32>\kbdsg.dll
  • <SYSTEM32>\kbdno1.dll with <SYSTEM32>\kbdno1.dll
  • <SYSTEM32>\kbdno.dll with <SYSTEM32>\kbdno.dll
  • <SYSTEM32>\kbdsf.dll with <SYSTEM32>\kbdsf.dll
  • <SYSTEM32>\kbdpo.dll with <SYSTEM32>\kbdpo.dll
  • <SYSTEM32>\kd1394.dll with <SYSTEM32>\kd1394.dll
  • <SYSTEM32>\kbdusx.dll with <SYSTEM32>\kbdusx.dll
  • <SYSTEM32>\keymgr.dll with <SYSTEM32>\keymgr.dll
  • <SYSTEM32>\kdcom.dll with <SYSTEM32>\kdcom.dll
  • <SYSTEM32>\kbdusr.dll with <SYSTEM32>\kbdusr.dll
  • <SYSTEM32>\kbdukx.dll with <SYSTEM32>\kbdukx.dll
  • <SYSTEM32>\kbduk.dll with <SYSTEM32>\kbduk.dll
  • <SYSTEM32>\kbdusl.dll with <SYSTEM32>\kbdusl.dll
  • <SYSTEM32>\kbdus.dll with <SYSTEM32>\kbdus.dll
  • <SYSTEM32>\kbdinben.dll with <SYSTEM32>\kbdinben.dll
  • <SYSTEM32>\kbdinbe1.dll with <SYSTEM32>\kbdinbe1.dll
  • <SYSTEM32>\kbdir.dll with <SYSTEM32>\kbdir.dll
  • <SYSTEM32>\kbdinmal.dll with <SYSTEM32>\kbdinmal.dll
  • <SYSTEM32>\kbdic.dll with <SYSTEM32>\kbdic.dll
  • <SYSTEM32>\kbdgae.dll with <SYSTEM32>\kbdgae.dll
  • <SYSTEM32>\kbdfr.dll with <SYSTEM32>\kbdfr.dll
  • <SYSTEM32>\kbdgr1.dll with <SYSTEM32>\kbdgr1.dll
  • <SYSTEM32>\kbdgr.dll with <SYSTEM32>\kbdgr.dll
  • <SYSTEM32>\kbdmlt48.dll with <SYSTEM32>\kbdmlt48.dll
  • <SYSTEM32>\kbdmlt47.dll with <SYSTEM32>\kbdmlt47.dll
  • <SYSTEM32>\kbdnec.dll with <SYSTEM32>\kbdnec.dll
  • <SYSTEM32>\kbdne.dll with <SYSTEM32>\kbdne.dll
  • <SYSTEM32>\kbdmaori.dll with <SYSTEM32>\kbdmaori.dll
  • <SYSTEM32>\kbdit142.dll with <SYSTEM32>\kbdit142.dll
  • <SYSTEM32>\kbdit.dll with <SYSTEM32>\kbdit.dll
  • <SYSTEM32>\kbdmac.dll with <SYSTEM32>\kbdmac.dll
  • <SYSTEM32>\kbdla.dll with <SYSTEM32>\kbdla.dll
  • <SYSTEM32>\cfgmgr32.dll with <SYSTEM32>\cfgmgr32.dll
  • <SYSTEM32>\cfgbkend.dll with <SYSTEM32>\cfgbkend.dll
  • <SYSTEM32>\chcp.com with <SYSTEM32>\chcp.com
  • <SYSTEM32>\charmap.exe with <SYSTEM32>\charmap.exe
  • <SYSTEM32>\cewmdm.dll with <SYSTEM32>\cewmdm.dll
  • <SYSTEM32>\cdmodem.dll with <SYSTEM32>\cdmodem.dll
  • <SYSTEM32>\cdm.dll with <SYSTEM32>\cdm.dll
  • <SYSTEM32>\certmgr.dll with <SYSTEM32>\certmgr.dll
  • <SYSTEM32>\cdosys.dll with <SYSTEM32>\cdosys.dll
  • <SYSTEM32>\cipher.exe with <SYSTEM32>\cipher.exe
  • <SYSTEM32>\ciodm.dll with <SYSTEM32>\ciodm.dll
  • <SYSTEM32>\ckcnv.exe with <SYSTEM32>\ckcnv.exe
  • <SYSTEM32>\cisvc.exe with <SYSTEM32>\cisvc.exe
  • <SYSTEM32>\cidaemon.exe with <SYSTEM32>\cidaemon.exe
  • <SYSTEM32>\chkntfs.exe with <SYSTEM32>\chkntfs.exe
  • <SYSTEM32>\chkdsk.exe with <SYSTEM32>\chkdsk.exe
  • <SYSTEM32>\cic.dll with <SYSTEM32>\cic.dll
  • <SYSTEM32>\ciadmin.dll with <SYSTEM32>\ciadmin.dll
  • <SYSTEM32>\cc3250.dll with <SYSTEM32>\cc3250.dll
  • <SYSTEM32>\catsrvut.dll with <SYSTEM32>\catsrvut.dll
  • <SYSTEM32>\cc3260.dll with <SYSTEM32>\cc3260.dll
  • <SYSTEM32>\cc3250mt.dll with <SYSTEM32>\cc3250mt.dll
  • <SYSTEM32>\catsrvps.dll with <SYSTEM32>\catsrvps.dll
  • <SYSTEM32>\capesnpn.dll with <SYSTEM32>\capesnpn.dll
  • <SYSTEM32>\camocx.dll with <SYSTEM32>\camocx.dll
  • <SYSTEM32>\catsrv.dll with <SYSTEM32>\catsrv.dll
  • <SYSTEM32>\cards.dll with <SYSTEM32>\cards.dll
  • <SYSTEM32>\cc3290mt.dll with <SYSTEM32>\cc3290mt.dll
  • <SYSTEM32>\cc3290.dll with <SYSTEM32>\cc3290.dll
  • <SYSTEM32>\cdfview.dll with <SYSTEM32>\cdfview.dll
  • <SYSTEM32>\ccfgnt.dll with <SYSTEM32>\ccfgnt.dll
  • <SYSTEM32>\cc3280mt.dll with <SYSTEM32>\cc3280mt.dll
  • <SYSTEM32>\cc3270.dll with <SYSTEM32>\cc3270.dll
  • <SYSTEM32>\cc3260mt.dll with <SYSTEM32>\cc3260mt.dll
  • <SYSTEM32>\cc3280.dll with <SYSTEM32>\cc3280.dll
  • <SYSTEM32>\cc3270mt.dll with <SYSTEM32>\cc3270mt.dll
  • <SYSTEM32>\compstui.dll with <SYSTEM32>\compstui.dll
  • <SYSTEM32>\compatUI.dll with <SYSTEM32>\compatUI.dll
  • <SYSTEM32>\comsnap.dll with <SYSTEM32>\comsnap.dll
  • <SYSTEM32>\comrepl.dll with <SYSTEM32>\comrepl.dll
  • <SYSTEM32>\compact.exe with <SYSTEM32>\compact.exe
  • <SYSTEM32>\comaddin.dll with <SYSTEM32>\comaddin.dll
  • <SYSTEM32>\cnvfat.dll with <SYSTEM32>\cnvfat.dll
  • <SYSTEM32>\comp.exe with <SYSTEM32>\comp.exe
  • <SYSTEM32>\comcat.dll with <SYSTEM32>\comcat.dll
  • <SYSTEM32>\corpol.dll with <SYSTEM32>\corpol.dll
  • <SYSTEM32>\convert.exe with <SYSTEM32>\convert.exe
  • <SYSTEM32>\cryptdlg.dll with <SYSTEM32>\cryptdlg.dll
  • <SYSTEM32>\crtdll.dll with <SYSTEM32>\crtdll.dll
  • <SYSTEM32>\control.exe with <SYSTEM32>\control.exe
  • <SYSTEM32>\confmsp.dll with <SYSTEM32>\confmsp.dll
  • <SYSTEM32>\comuid.dll with <SYSTEM32>\comuid.dll
  • <SYSTEM32>\console.dll with <SYSTEM32>\console.dll
  • <SYSTEM32>\conime.exe with <SYSTEM32>\conime.exe
  • <SYSTEM32>\clipbrd.exe with <SYSTEM32>\clipbrd.exe
  • <SYSTEM32>\cliconfg.rll with <SYSTEM32>\cliconfg.rll
  • <SYSTEM32>\cmcfg32.dll with <SYSTEM32>\cmcfg32.dll
  • <SYSTEM32>\clipsrv.exe with <SYSTEM32>\clipsrv.exe
  • <SYSTEM32>\cliconfg.exe with <SYSTEM32>\cliconfg.exe
  • <SYSTEM32>\clbcatex.dll with <SYSTEM32>\clbcatex.dll
  • <SYSTEM32>\clb.dll with <SYSTEM32>\clb.dll
  • <SYSTEM32>\cliconfg.dll with <SYSTEM32>\cliconfg.dll
  • <SYSTEM32>\cleanmgr.exe with <SYSTEM32>\cleanmgr.exe
  • <SYSTEM32>\cmstp.exe with <SYSTEM32>\cmstp.exe
  • <SYSTEM32>\cmsetACL.dll with <SYSTEM32>\cmsetACL.dll
  • <SYSTEM32>\cnetcfg.dll with <SYSTEM32>\cnetcfg.dll
  • <SYSTEM32>\cmutil.dll with <SYSTEM32>\cmutil.dll
  • <SYSTEM32>\cmprops.dll with <SYSTEM32>\cmprops.dll
  • <SYSTEM32>\cmdl32.exe with <SYSTEM32>\cmdl32.exe
  • <SYSTEM32>\cmdial32.dll with <SYSTEM32>\cmdial32.dll
  • <SYSTEM32>\cmpbk32.dll with <SYSTEM32>\cmpbk32.dll
  • <SYSTEM32>\cmmon32.exe with <SYSTEM32>\cmmon32.exe
  • <SYSTEM32>\calc.exe with <SYSTEM32>\calc.exe
  • <SYSTEM32>\appwiz.cpl with <SYSTEM32>\appwiz.cpl
  • <SYSTEM32>\appmgr.dll with <SYSTEM32>\appmgr.dll
  • <SYSTEM32>\asctrls.ocx with <SYSTEM32>\asctrls.ocx
  • <SYSTEM32>\arp.exe with <SYSTEM32>\arp.exe
  • <SYSTEM32>\appmgmts.dll with <SYSTEM32>\appmgmts.dll
  • <SYSTEM32>\alrsvc.dll with <SYSTEM32>\alrsvc.dll
  • <SYSTEM32>\ahui.exe with <SYSTEM32>\ahui.exe
  • <SYSTEM32>\apcups.dll with <SYSTEM32>\apcups.dll
  • <SYSTEM32>\amstream.dll with <SYSTEM32>\amstream.dll
  • <SYSTEM32>\at.exe with <SYSTEM32>\at.exe
  • <SYSTEM32>\asycfilt.dll with <SYSTEM32>\asycfilt.dll
  • <SYSTEM32>\atl100.dll with <SYSTEM32>\atl100.dll
  • <SYSTEM32>\atkctrs.dll with <SYSTEM32>\atkctrs.dll
  • <SYSTEM32>\asr_pfu.exe with <SYSTEM32>\asr_pfu.exe
  • <SYSTEM32>\aspnet_counters.dll with <SYSTEM32>\aspnet_counters.dll
  • <SYSTEM32>\asferror.dll with <SYSTEM32>\asferror.dll
  • <SYSTEM32>\asr_ldm.exe with <SYSTEM32>\asr_ldm.exe
  • <SYSTEM32>\asr_fmt.exe with <SYSTEM32>\asr_fmt.exe
  • <SYSTEM32>\acledit.dll with <SYSTEM32>\acledit.dll
  • <SYSTEM32>\acelpdec.ax with <SYSTEM32>\acelpdec.ax
  • <SYSTEM32>\activeds.tlb with <SYSTEM32>\activeds.tlb
  • <SYSTEM32>\aclui.dll with <SYSTEM32>\aclui.dll
  • <SYSTEM32>\accwiz.exe with <SYSTEM32>\accwiz.exe
  • <SYSTEM32>\aaaamon.dll with <SYSTEM32>\aaaamon.dll
  • <SYSTEM32>\6to4svc.dll with <SYSTEM32>\6to4svc.dll
  • <SYSTEM32>\acctres.dll with <SYSTEM32>\acctres.dll
  • <SYSTEM32>\access.cpl with <SYSTEM32>\access.cpl
  • <SYSTEM32>\adsnt.dll with <SYSTEM32>\adsnt.dll
  • <SYSTEM32>\adsnds.dll with <SYSTEM32>\adsnds.dll
  • <SYSTEM32>\advpack.dll with <SYSTEM32>\advpack.dll
  • <SYSTEM32>\adsnw.dll with <SYSTEM32>\adsnw.dll
  • <SYSTEM32>\adsmsext.dll with <SYSTEM32>\adsmsext.dll
  • <SYSTEM32>\admparse.dll with <SYSTEM32>\admparse.dll
  • <SYSTEM32>\actmovie.exe with <SYSTEM32>\actmovie.exe
  • <SYSTEM32>\adsldp.dll with <SYSTEM32>\adsldp.dll
  • <SYSTEM32>\adptif.dll with <SYSTEM32>\adptif.dll
  • <SYSTEM32>\bootok.exe with <SYSTEM32>\bootok.exe
  • <SYSTEM32>\bootcfg.exe with <SYSTEM32>\bootcfg.exe
  • <SYSTEM32>\bootvrfy.exe with <SYSTEM32>\bootvrfy.exe
  • <SYSTEM32>\bootvid.dll with <SYSTEM32>\bootvid.dll
  • <SYSTEM32>\blastcln.exe with <SYSTEM32>\blastcln.exe
  • <SYSTEM32>\bitsprx2.dll with <SYSTEM32>\bitsprx2.dll
  • <SYSTEM32>\bidispl.dll with <SYSTEM32>\bidispl.dll
  • <SYSTEM32>\blackbox.dll with <SYSTEM32>\blackbox.dll
  • <SYSTEM32>\bitsprx3.dll with <SYSTEM32>\bitsprx3.dll
  • <SYSTEM32>\btpanui.dll with <SYSTEM32>\btpanui.dll
  • <SYSTEM32>\bthserv.dll with <SYSTEM32>\bthserv.dll
  • <SYSTEM32>\cacls.exe with <SYSTEM32>\cacls.exe
  • <SYSTEM32>\cabview.dll with <SYSTEM32>\cabview.dll
  • <SYSTEM32>\bthprops.cpl with <SYSTEM32>\bthprops.cpl
  • <SYSTEM32>\browselc.dll with <SYSTEM32>\browselc.dll
  • <SYSTEM32>\borlndmm.dll with <SYSTEM32>\borlndmm.dll
  • <SYSTEM32>\bthci.dll with <SYSTEM32>\bthci.dll
  • <SYSTEM32>\browsewm.dll with <SYSTEM32>\browsewm.dll
  • <SYSTEM32>\auditusr.exe with <SYSTEM32>\auditusr.exe
  • <SYSTEM32>\audiosrv.dll with <SYSTEM32>\audiosrv.dll
  • <SYSTEM32>\autoconv.exe with <SYSTEM32>\autoconv.exe
  • <SYSTEM32>\autochk.exe with <SYSTEM32>\autochk.exe
  • <SYSTEM32>\attrib.exe with <SYSTEM32>\attrib.exe
  • <SYSTEM32>\atmlib.dll with <SYSTEM32>\atmlib.dll
  • <SYSTEM32>\atmadm.exe with <SYSTEM32>\atmadm.exe
  • <SYSTEM32>\atrace.dll with <SYSTEM32>\atrace.dll
  • <SYSTEM32>\atmpvcno.dll with <SYSTEM32>\atmpvcno.dll
  • <SYSTEM32>\avtapi.dll with <SYSTEM32>\avtapi.dll
  • <SYSTEM32>\avmeter.dll with <SYSTEM32>\avmeter.dll
  • <SYSTEM32>\batt.dll with <SYSTEM32>\batt.dll
  • <SYSTEM32>\avwav.dll with <SYSTEM32>\avwav.dll
  • <SYSTEM32>\avifil32.dll with <SYSTEM32>\avifil32.dll
  • <SYSTEM32>\autofmt.exe with <SYSTEM32>\autofmt.exe
  • <SYSTEM32>\autodisc.dll with <SYSTEM32>\autodisc.dll
  • <SYSTEM32>\avicap32.dll with <SYSTEM32>\avicap32.dll
  • <SYSTEM32>\autolfn.exe with <SYSTEM32>\autolfn.exe
  • <SYSTEM32>\dpvsetup.exe with <SYSTEM32>\dpvsetup.exe
  • <SYSTEM32>\dpvoice.dll with <SYSTEM32>\dpvoice.dll
  • <SYSTEM32>\dpwsock.dll with <SYSTEM32>\dpwsock.dll
  • <SYSTEM32>\dpvvox.dll with <SYSTEM32>\dpvvox.dll
  • <SYSTEM32>\dpvacm.dll with <SYSTEM32>\dpvacm.dll
  • <SYSTEM32>\dpnsvr.exe with <SYSTEM32>\dpnsvr.exe
  • <SYSTEM32>\dpnmodem.dll with <SYSTEM32>\dpnmodem.dll
  • <SYSTEM32>\dpserial.dll with <SYSTEM32>\dpserial.dll
  • <SYSTEM32>\dpnwsock.dll with <SYSTEM32>\dpnwsock.dll
  • <SYSTEM32>\ds32gt.dll with <SYSTEM32>\ds32gt.dll
  • <SYSTEM32>\drwtsn32.exe with <SYSTEM32>\drwtsn32.exe
  • <SYSTEM32>\dsdmo.dll with <SYSTEM32>\dsdmo.dll
  • <SYSTEM32>\dsauth.dll with <SYSTEM32>\dsauth.dll
  • <SYSTEM32>\drmv2clt.dll with <SYSTEM32>\drmv2clt.dll
  • <SYSTEM32>\driverquery.exe with <SYSTEM32>\driverquery.exe
  • <SYSTEM32>\dpwsockx.dll with <SYSTEM32>\dpwsockx.dll
  • <SYSTEM32>\drmstor.dll with <SYSTEM32>\drmstor.dll
  • <SYSTEM32>\drmclien.dll with <SYSTEM32>\drmclien.dll
  • <SYSTEM32>\docprop2.dll with <SYSTEM32>\docprop2.dll
  • <SYSTEM32>\docprop.dll with <SYSTEM32>\docprop.dll
  • <SYSTEM32>\dpcdll.dll with <SYSTEM32>\dpcdll.dll
  • <SYSTEM32>\doskey.exe with <SYSTEM32>\doskey.exe
  • <SYSTEM32>\dmview.ocx with <SYSTEM32>\dmview.ocx
  • <SYSTEM32>\dmsynth.dll with <SYSTEM32>\dmsynth.dll
  • <SYSTEM32>\dmstyle.dll with <SYSTEM32>\dmstyle.dll
  • <SYSTEM32>\dmutil.dll with <SYSTEM32>\dmutil.dll
  • <SYSTEM32>\dmusic.dll with <SYSTEM32>\dmusic.dll
  • <SYSTEM32>\dpnhpast.dll with <SYSTEM32>\dpnhpast.dll
  • <SYSTEM32>\dpnet.dll with <SYSTEM32>\dpnet.dll
  • <SYSTEM32>\dpnlobby.dll with <SYSTEM32>\dpnlobby.dll
  • <SYSTEM32>\dpnhupnp.dll with <SYSTEM32>\dpnhupnp.dll
  • <SYSTEM32>\dpnaddr.dll with <SYSTEM32>\dpnaddr.dll
  • <SYSTEM32>\dplaysvr.exe with <SYSTEM32>\dplaysvr.exe
  • <SYSTEM32>\dplay.dll with <SYSTEM32>\dplay.dll
  • <SYSTEM32>\dpmodemx.dll with <SYSTEM32>\dpmodemx.dll
  • <SYSTEM32>\dplayx.dll with <SYSTEM32>\dplayx.dll
  • <SYSTEM32>\efsadu.dll with <SYSTEM32>\efsadu.dll
  • <SYSTEM32>\dxva2.dll with <SYSTEM32>\dxva2.dll
  • <SYSTEM32>\encapi.dll with <SYSTEM32>\encapi.dll
  • <SYSTEM32>\els.dll with <SYSTEM32>\els.dll
  • <SYSTEM32>\dxtrans.dll with <SYSTEM32>\dxtrans.dll
  • <SYSTEM32>\dxdiagn.dll with <SYSTEM32>\dxdiagn.dll
  • <SYSTEM32>\dxdiag.exe with <SYSTEM32>\dxdiag.exe
  • <SYSTEM32>\dxtmsft.dll with <SYSTEM32>\dxtmsft.dll
  • <SYSTEM32>\dxmasf.dll with <SYSTEM32>\dxmasf.dll
  • <SYSTEM32>\eventcls.dll with <SYSTEM32>\eventcls.dll
  • <SYSTEM32>\eudcedit.exe with <SYSTEM32>\eudcedit.exe
  • <SYSTEM32>\eventtriggers.exe with <SYSTEM32>\eventtriggers.exe
  • <SYSTEM32>\eventcreate.exe with <SYSTEM32>\eventcreate.exe
  • <SYSTEM32>\esentutl.exe with <SYSTEM32>\esentutl.exe
  • <SYSTEM32>\EqnClass.Dll with <SYSTEM32>\EqnClass.Dll
  • <SYSTEM32>\encdec.dll with <SYSTEM32>\encdec.dll
  • <SYSTEM32>\esentprf.dll with <SYSTEM32>\esentprf.dll
  • <SYSTEM32>\esent97.dll with <SYSTEM32>\esent97.dll
  • <SYSTEM32>\dsprpres.dll with <SYSTEM32>\dsprpres.dll
  • <SYSTEM32>\dsprop.dll with <SYSTEM32>\dsprop.dll
  • <SYSTEM32>\dssec.dll with <SYSTEM32>\dssec.dll
  • <SYSTEM32>\dsquery.dll with <SYSTEM32>\dsquery.dll
  • <SYSTEM32>\dsound3d.dll with <SYSTEM32>\dsound3d.dll
  • <SYSTEM32>\dskquota.dll with <SYSTEM32>\dskquota.dll
  • <SYSTEM32>\dsdmoprp.dll with <SYSTEM32>\dsdmoprp.dll
  • <SYSTEM32>\dsound.dll with <SYSTEM32>\dsound.dll
  • <SYSTEM32>\dskquoui.dll with <SYSTEM32>\dskquoui.dll
  • <SYSTEM32>\dwwin.exe with <SYSTEM32>\dwwin.exe
  • <SYSTEM32>\dvdupgrd.exe with <SYSTEM32>\dvdupgrd.exe
  • <SYSTEM32>\dx8vb.dll with <SYSTEM32>\dx8vb.dll
  • <SYSTEM32>\dx7vb.dll with <SYSTEM32>\dx7vb.dll
  • <SYSTEM32>\dvdplay.exe with <SYSTEM32>\dvdplay.exe
  • <SYSTEM32>\dswave.dll with <SYSTEM32>\dswave.dll
  • <SYSTEM32>\dsuiext.dll with <SYSTEM32>\dsuiext.dll
  • <SYSTEM32>\duser.dll with <SYSTEM32>\duser.dll
  • <SYSTEM32>\dumprep.exe with <SYSTEM32>\dumprep.exe
  • <SYSTEM32>\dmscript.dll with <SYSTEM32>\dmscript.dll
  • <SYSTEM32>\ddeshare.exe with <SYSTEM32>\ddeshare.exe
  • <SYSTEM32>\dcomcnfg.exe with <SYSTEM32>\dcomcnfg.exe
  • <SYSTEM32>\ddrawex.dll with <SYSTEM32>\ddrawex.dll
  • <SYSTEM32>\ddraw.dll with <SYSTEM32>\ddraw.dll
  • <SYSTEM32>\dciman32.dll with <SYSTEM32>\dciman32.dll
  • <SYSTEM32>\dbmsrpcn.dll with <SYSTEM32>\dbmsrpcn.dll
  • <SYSTEM32>\dbgeng.dll with <SYSTEM32>\dbgeng.dll
  • <SYSTEM32>\dbnmpntw.dll with <SYSTEM32>\dbnmpntw.dll
  • <SYSTEM32>\dbnetlib.dll with <SYSTEM32>\dbnetlib.dll
  • <SYSTEM32>\devmgr.dll with <SYSTEM32>\devmgr.dll
  • <SYSTEM32>\devenum.dll with <SYSTEM32>\devenum.dll
  • <SYSTEM32>\dfrgntfs.exe with <SYSTEM32>\dfrgntfs.exe
  • <SYSTEM32>\dfrgfat.exe with <SYSTEM32>\dfrgfat.exe
  • <SYSTEM32>\deskperf.dll with <SYSTEM32>\deskperf.dll
  • <SYSTEM32>\desk.cpl with <SYSTEM32>\desk.cpl
  • <SYSTEM32>\defrag.exe with <SYSTEM32>\defrag.exe
  • <SYSTEM32>\deskmon.dll with <SYSTEM32>\deskmon.dll
  • <SYSTEM32>\deskadp.dll with <SYSTEM32>\deskadp.dll
  • <SYSTEM32>\d3d8thk.dll with <SYSTEM32>\d3d8thk.dll
  • <SYSTEM32>\d3d8.dll with <SYSTEM32>\d3d8.dll
  • <SYSTEM32>\d3dim.dll with <SYSTEM32>\d3dim.dll
  • <SYSTEM32>\d3d9.dll with <SYSTEM32>\d3d9.dll
  • <SYSTEM32>\cygwin1.dll with <SYSTEM32>\cygwin1.dll
  • <SYSTEM32>\cryptnet.dll with <SYSTEM32>\cryptnet.dll
  • <SYSTEM32>\cryptext.dll with <SYSTEM32>\cryptext.dll
  • <SYSTEM32>\ctl3d32.dll with <SYSTEM32>\ctl3d32.dll
  • <SYSTEM32>\csseqchk.dll with <SYSTEM32>\csseqchk.dll
  • <SYSTEM32>\dataclen.dll with <SYSTEM32>\dataclen.dll
  • <SYSTEM32>\danim.dll with <SYSTEM32>\danim.dll
  • <SYSTEM32>\daxctle.ocx with <SYSTEM32>\daxctle.ocx
  • <SYSTEM32>\datime.dll with <SYSTEM32>\datime.dll
  • <SYSTEM32>\d3dxof.dll with <SYSTEM32>\d3dxof.dll
  • <SYSTEM32>\d3dpmesh.dll with <SYSTEM32>\d3dpmesh.dll
  • <SYSTEM32>\d3dim700.dll with <SYSTEM32>\d3dim700.dll
  • <SYSTEM32>\d3drm.dll with <SYSTEM32>\d3drm.dll
  • <SYSTEM32>\d3dramp.dll with <SYSTEM32>\d3dramp.dll
  • <SYSTEM32>\dmadmin.exe with <SYSTEM32>\dmadmin.exe
  • <SYSTEM32>\dllhst3g.exe with <SYSTEM32>\dllhst3g.exe
  • <SYSTEM32>\dmcompos.dll with <SYSTEM32>\dmcompos.dll
  • <SYSTEM32>\dmband.dll with <SYSTEM32>\dmband.dll
  • <SYSTEM32>\dllhost.exe with <SYSTEM32>\dllhost.exe
  • <SYSTEM32>\diskpart.exe with <SYSTEM32>\diskpart.exe
  • <SYSTEM32>\diskcopy.dll with <SYSTEM32>\diskcopy.dll
  • <SYSTEM32>\dispex.dll with <SYSTEM32>\dispex.dll
  • <SYSTEM32>\diskperf.exe with <SYSTEM32>\diskperf.exe
  • <SYSTEM32>\dmloader.dll with <SYSTEM32>\dmloader.dll
  • <SYSTEM32>\dmintf.dll with <SYSTEM32>\dmintf.dll
  • <SYSTEM32>\dmremote.exe with <SYSTEM32>\dmremote.exe
  • <SYSTEM32>\dmocx.dll with <SYSTEM32>\dmocx.dll
  • <SYSTEM32>\dmime.dll with <SYSTEM32>\dmime.dll
  • <SYSTEM32>\dmdlgs.dll with <SYSTEM32>\dmdlgs.dll
  • <SYSTEM32>\dmconfig.dll with <SYSTEM32>\dmconfig.dll
  • <SYSTEM32>\dmdskres.dll with <SYSTEM32>\dmdskres.dll
  • <SYSTEM32>\dmdskmgr.dll with <SYSTEM32>\dmdskmgr.dll
  • <SYSTEM32>\dgrpsetu.dll with <SYSTEM32>\dgrpsetu.dll
  • <SYSTEM32>\dgnet.dll with <SYSTEM32>\dgnet.dll
  • <SYSTEM32>\dhcpmon.dll with <SYSTEM32>\dhcpmon.dll
  • <SYSTEM32>\dgsetup.dll with <SYSTEM32>\dgsetup.dll
  • <SYSTEM32>\dfsshlex.dll with <SYSTEM32>\dfsshlex.dll
  • <SYSTEM32>\dfrgsnap.dll with <SYSTEM32>\dfrgsnap.dll
  • <SYSTEM32>\dfrgres.dll with <SYSTEM32>\dfrgres.dll
  • <SYSTEM32>\dfshim.dll with <SYSTEM32>\dfshim.dll
  • <SYSTEM32>\dfrgui.dll with <SYSTEM32>\dfrgui.dll
  • <SYSTEM32>\dinput8.dll with <SYSTEM32>\dinput8.dll
  • <SYSTEM32>\dinput.dll with <SYSTEM32>\dinput.dll
  • <SYSTEM32>\diskcopy.com with <SYSTEM32>\diskcopy.com
  • <SYSTEM32>\diskcomp.com with <SYSTEM32>\diskcomp.com
  • <SYSTEM32>\dimap.dll with <SYSTEM32>\dimap.dll
  • <SYSTEM32>\diactfrm.dll with <SYSTEM32>\diactfrm.dll
  • <SYSTEM32>\dhcpsapi.dll with <SYSTEM32>\dhcpsapi.dll
  • <SYSTEM32>\digest.dll with <SYSTEM32>\digest.dll
  • <SYSTEM32>\diantz.exe with <SYSTEM32>\diantz.exe
Malicious functions:
To complicate detection of its presence in the operating system,
forces the system hide from view:
  • file extensions
blocks execution of the following system utilities:
  • Command Prompt (CMD)
  • Windows Task Manager (Taskmgr)
  • Registry Editor (RegEdit)
modifies the following system settings:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoViewContextMenu' = '00000001'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoDesktop' = '00000001'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoViewOnDrive' = '00000001'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoRun' = '00000001'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoControlPanel' = '00000001'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoClose' = '00000001'
Executes the following:
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\currentVersion\policies\System /v NoDispCpl /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoViewOnDrive /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideFileExt /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v StartMenuLogOff /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall /v NoAddRemovePrograms /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDesktop /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableMsConfig /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\My Computer /v NoDrives /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoViewContextMenu /t REG_DWORD /d 1 /f
  • '<SYSTEM32>\reg.exe' add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 1 /f
Terminates or attempts to terminate
the following system processes:
  • <SYSTEM32>\svchost.exe
Attempts to shut down the Windows operating system.
Modifies file system:
Creates the following files:
  • <SYSTEM32>\dmusic.dll.new
  • <SYSTEM32>\dmsynth.dll.new
  • <SYSTEM32>\dmview.ocx.new
  • <SYSTEM32>\dllcache\cmstp.exe.new
  • <SYSTEM32>\dmscript.dll.new
  • <SYSTEM32>\dllcache\cmprops.dll.new
  • <SYSTEM32>\dllcache\cmsetacl.dll.new
  • <SYSTEM32>\dmstyle.dll.new
  • <SYSTEM32>\dllcache\cmutil.dll.new
  • <SYSTEM32>\dosx.exe.new
  • <SYSTEM32>\dllcache\cnvfat.dll.new
  • <SYSTEM32>\dllcache\comaddin.dll.new
  • <SYSTEM32>\dpcdll.dll.new
  • <SYSTEM32>\docprop.dll.new
  • <SYSTEM32>\dllcache\cnetcfg.dll.new
  • <SYSTEM32>\doskey.exe.new
  • <SYSTEM32>\docprop2.dll.new
  • <SYSTEM32>\dmconfig.dll.new
  • <SYSTEM32>\dllcache\cmdial32.dll.new
  • <SYSTEM32>\dllcache\cmdl32.exe.new
  • <SYSTEM32>\dmdlgs.dll.new
  • <SYSTEM32>\dmadmin.exe.new
  • <SYSTEM32>\dllcache\cmcfg32.dll.new
  • <SYSTEM32>\dmcompos.dll.new
  • <SYSTEM32>\dmband.dll.new
  • <SYSTEM32>\dmdskmgr.dll.new
  • <SYSTEM32>\dllcache\cmpbk32.dll.new
  • <SYSTEM32>\dmloader.dll.new
  • <SYSTEM32>\dmremote.exe.new
  • <SYSTEM32>\dmocx.dll.new
  • <SYSTEM32>\dmime.dll.new
  • <SYSTEM32>\dmdskres.dll.new
  • <SYSTEM32>\dmintf.dll.new
  • <SYSTEM32>\dllcache\cmmon32.exe.new
  • <SYSTEM32>\dplay.dll.new
  • <SYSTEM32>\dpwsock.dll.new
  • <SYSTEM32>\dllcache\compobj.dll.new
  • <SYSTEM32>\driverquery.exe.new
  • <SYSTEM32>\dpwsockx.dll.new
  • <SYSTEM32>\dpvoice.dll.new
  • <SYSTEM32>\dllcache\compatui.dll.new
  • <SYSTEM32>\dpvvox.dll.new
  • <SYSTEM32>\dpvsetup.exe.new
  • <SYSTEM32>\dllcache\compstui.dll.new
  • <SYSTEM32>\drwtsn32.exe.new
  • <SYSTEM32>\dllcache\comrepl.dll.new
  • <SYSTEM32>\dllcache\comsnap.dll.new
  • <SYSTEM32>\ds16gt.dll.new
  • <SYSTEM32>\drmstor.dll.new
  • <SYSTEM32>\drmclien.dll.new
  • <SYSTEM32>\drwatson.exe.new
  • <SYSTEM32>\drmv2clt.dll.new
  • <SYSTEM32>\dpnet.dll.new
  • <SYSTEM32>\dpnaddr.dll.new
  • <SYSTEM32>\dllcache\commdlg.dll.new
  • <SYSTEM32>\dpnhpast.dll.new
  • <SYSTEM32>\dplaysvr.exe.new
  • <SYSTEM32>\dllcache\comcat.dll.new
  • <SYSTEM32>\dpmodemx.dll.new
  • <SYSTEM32>\dplayx.dll.new
  • <SYSTEM32>\dpnhupnp.dll.new
  • <SYSTEM32>\dpnwsock.dll.new
  • <SYSTEM32>\dllcache\compact.exe.new
  • <SYSTEM32>\dpvacm.dll.new
  • <SYSTEM32>\dpserial.dll.new
  • <SYSTEM32>\dllcache\comp.exe.new
  • <SYSTEM32>\dpnlobby.dll.new
  • <SYSTEM32>\dpnsvr.exe.new
  • <SYSTEM32>\dpnmodem.dll.new
  • <SYSTEM32>\ddraw.dll.new
  • <SYSTEM32>\ddeshare.exe.new
  • <SYSTEM32>\ddrawex.dll.new
  • <SYSTEM32>\dllcache\chkntfs.exe.new
  • <SYSTEM32>\dcomcnfg.exe.new
  • <SYSTEM32>\dciman32.dll.new
  • <SYSTEM32>\dllcache\chkdsk.exe.new
  • <SYSTEM32>\ddeml.dll.new
  • <SYSTEM32>\debug.exe.new
  • <SYSTEM32>\deskperf.dll.new
  • <SYSTEM32>\deskmon.dll.new
  • <SYSTEM32>\devenum.dll.new
  • <SYSTEM32>\dllcache\cic.dll.new
  • <SYSTEM32>\defrag.exe.new
  • <SYSTEM32>\dllcache\ciadmin.dll.new
  • <SYSTEM32>\deskadp.dll.new
  • <SYSTEM32>\desk.cpl.new
  • <SYSTEM32>\d3drm.dll.new
  • <SYSTEM32>\dllcache\certmgr.dll.new
  • <SYSTEM32>\dllcache\cewmdm.dll.new
  • <SYSTEM32>\d3dxof.dll.new
  • <SYSTEM32>\d3dim700.dll.new
  • <SYSTEM32>\dllcache\cdosys.dll.new
  • <SYSTEM32>\d3dramp.dll.new
  • <SYSTEM32>\d3dpmesh.dll.new
  • <SYSTEM32>\danim.dll.new
  • <SYSTEM32>\dllcache\cfgmgr32.dll.new
  • <SYSTEM32>\dbgeng.dll.new
  • <SYSTEM32>\dllcache\charmap.exe.new
  • <SYSTEM32>\dbnetlib.dll.new
  • <SYSTEM32>\datime.dll.new
  • <SYSTEM32>\dataclen.dll.new
  • <SYSTEM32>\dllcache\cfgbkend.dll.new
  • <SYSTEM32>\daxctle.ocx.new
  • <SYSTEM32>\devmgr.dll.new
  • <SYSTEM32>\dinput.dll.new
  • <SYSTEM32>\dimap.dll.new
  • <SYSTEM32>\dllcache\cleanmgr.exe.new
  • <SYSTEM32>\dinput8.dll.new
  • <SYSTEM32>\diantz.exe.new
  • <SYSTEM32>\dllcache\clb.dll.new
  • <SYSTEM32>\dllcache\clbcatex.dll.new
  • <SYSTEM32>\digest.dll.new
  • <SYSTEM32>\diskcopy.dll.new
  • <SYSTEM32>\dllhost.exe.new
  • <SYSTEM32>\dispex.dll.new
  • <SYSTEM32>\dllhst3g.exe.new
  • <SYSTEM32>\dllcache\clipsrv.exe.new
  • <SYSTEM32>\dllcache\clipbrd.exe.new
  • <SYSTEM32>\diskpart.exe.new
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
  • <SYSTEM32>\diskperf.exe.new
  • <SYSTEM32>\dfrgsnap.dll.new
  • <SYSTEM32>\dfrgres.dll.new
  • <SYSTEM32>\dfrgui.dll.new
  • <SYSTEM32>\dllcache\cipher.exe.new
  • <SYSTEM32>\dfrgfat.exe.new
  • <SYSTEM32>\dllcache\cidaemon.exe.new
  • <SYSTEM32>\dfrgntfs.exe.new
  • <SYSTEM32>\dllcache\ciodm.dll.new
  • <SYSTEM32>\dfsshlex.dll.new
  • <SYSTEM32>\dllcache\ckcnv.exe.new
  • <SYSTEM32>\dhcpmon.dll.new
  • <SYSTEM32>\diactfrm.dll.new
  • <SYSTEM32>\dhcpsapi.dll.new
  • <SYSTEM32>\dgrpsetu.dll.new
  • <SYSTEM32>\dgnet.dll.new
  • <SYSTEM32>\dgsetup.dll.new
  • <SYSTEM32>\dllcache\cisvc.exe.new
  • <SYSTEM32>\ds32gt.dll.new
  • <SYSTEM32>\dllcache\c_28603.nls.new
  • <SYSTEM32>\extrac32.exe.new
  • <SYSTEM32>\dllcache\c_28605.nls.new
  • <SYSTEM32>\exts.dll.new
  • <SYSTEM32>\dllcache\c_28598.nls.new
  • <SYSTEM32>\dllcache\c_28597.nls.new
  • <SYSTEM32>\dllcache\c_28599.nls.new
  • <SYSTEM32>\extmgr.dll.new
  • <SYSTEM32>\fastopen.exe.new
  • <SYSTEM32>\dllcache\c_850.nls.new
  • <SYSTEM32>\fc.exe.new
  • <SYSTEM32>\fde.dll.new
  • <SYSTEM32>\dllcache\c_852.nls.new
  • <SYSTEM32>\faultrep.dll.new
  • <SYSTEM32>\dllcache\c_500.nls.new
  • <SYSTEM32>\dllcache\c_775.nls.new
  • <SYSTEM32>\dllcache\c_737.nls.new
  • <SYSTEM32>\dllcache\c_20866.nls.new
  • <SYSTEM32>\eventtriggers.exe.new
  • <SYSTEM32>\dllcache\c_20905.nls.new
  • <SYSTEM32>\eventvwr.exe.new
  • <SYSTEM32>\eventquery.vbs.new
  • <SYSTEM32>\dllcache\c_1258.nls.new
  • <SYSTEM32>\dllcache\c_20261.nls.new
  • <SYSTEM32>\dllcache\c_20127.nls.new
  • <SYSTEM32>\dllcache\c_21866.nls.new
  • <SYSTEM32>\expand.exe.new
  • <SYSTEM32>\dllcache\c_28594.nls.new
  • <SYSTEM32>\expsrv.dll.new
  • <SYSTEM32>\dllcache\c_28595.nls.new
  • <SYSTEM32>\dllcache\c_28592.nls.new
  • <SYSTEM32>\dllcache\c_28591.nls.new
  • <SYSTEM32>\dllcache\c_28593.nls.new
  • <SYSTEM32>\exe2bin.exe.new
  • <SYSTEM32>\dllcache\c_855.nls.new
  • <SYSTEM32>\dllcache\c_932.nls.new
  • <SYSTEM32>\fontext.dll.new
  • <SYSTEM32>\dllcache\c_936.nls.new
  • <SYSTEM32>\fontsub.dll.new
  • <SYSTEM32>\fltmc.exe.new
  • <SYSTEM32>\dllcache\c_874.nls.new
  • <SYSTEM32>\dllcache\c_875.nls.new
  • <SYSTEM32>\fmifs.dll.new
  • <SYSTEM32>\fontview.exe.new
  • <SYSTEM32>\freecell.exe.new
  • <SYSTEM32>\framebuf.dll.new
  • <SYSTEM32>\dllcache\d3d9.dll.new
  • <SYSTEM32>\dllcache\d3d8thk.dll.new
  • <SYSTEM32>\dllcache\c_949.nls.new
  • <SYSTEM32>\forcedos.exe.new
  • <SYSTEM32>\dllcache\d3d8.dll.new
  • <SYSTEM32>\dllcache\c_950.nls.new
  • <SYSTEM32>\find.exe.new
  • <SYSTEM32>\dllcache\c_860.nls.new
  • <SYSTEM32>\findstr.exe.new
  • <SYSTEM32>\dllcache\c_861.nls.new
  • <SYSTEM32>\feclient.dll.new
  • <SYSTEM32>\fdeploy.dll.new
  • <SYSTEM32>\filemgmt.dll.new
  • <SYSTEM32>\dllcache\c_857.nls.new
  • <SYSTEM32>\dllcache\c_863.nls.new
  • <SYSTEM32>\fldrclnr.dll.new
  • <SYSTEM32>\dllcache\c_866.nls.new
  • <SYSTEM32>\fltlib.dll.new
  • <SYSTEM32>\dllcache\c_869.nls.new
  • <SYSTEM32>\firewall.cpl.new
  • <SYSTEM32>\finger.exe.new
  • <SYSTEM32>\dllcache\c_865.nls.new
  • <SYSTEM32>\fixmapi.exe.new
  • <SYSTEM32>\dllcache\country.sys.new
  • <SYSTEM32>\duser.dll.new
  • <SYSTEM32>\dwwin.exe.new
  • <SYSTEM32>\dvdupgrd.exe.new
  • <SYSTEM32>\dsuiext.dll.new
  • <SYSTEM32>\dllcache\corpol.dll.new
  • <SYSTEM32>\dumprep.exe.new
  • <SYSTEM32>\dswave.dll.new
  • <SYSTEM32>\dllcache\crtdll.dll.new
  • <SYSTEM32>\dxdiagn.dll.new
  • <SYSTEM32>\dllcache\cryptext.dll.new
  • <SYSTEM32>\dllcache\cryptnet.dll.new
  • <SYSTEM32>\dxmasf.dll.new
  • <SYSTEM32>\dx8vb.dll.new
  • <SYSTEM32>\dx7vb.dll.new
  • <SYSTEM32>\dxdiag.exe.new
  • <SYSTEM32>\dllcache\cryptdlg.dll.new
  • <SYSTEM32>\dskquota.dll.new
  • <SYSTEM32>\dsdmoprp.dll.new
  • <SYSTEM32>\dskquoui.dll.new
  • <SYSTEM32>\dllcache\conime.exe.new
  • <SYSTEM32>\dllcache\comuid.dll.new
  • <SYSTEM32>\dsauth.dll.new
  • <SYSTEM32>\dllcache\confmsp.dll.new
  • <SYSTEM32>\dsdmo.dll.new
  • <SYSTEM32>\dsound.dll.new
  • <SYSTEM32>\dllcache\convert.exe.new
  • <SYSTEM32>\dsprpres.dll.new
  • <SYSTEM32>\dssec.dll.new
  • <SYSTEM32>\dsquery.dll.new
  • <SYSTEM32>\dsound3d.dll.new
  • <SYSTEM32>\dllcache\console.dll.new
  • <SYSTEM32>\dllcache\control.exe.new
  • <SYSTEM32>\dsprop.dll.new
  • <SYSTEM32>\dxtmsft.dll.new
  • <SYSTEM32>\dllcache\c_1026.nls.new
  • <SYSTEM32>\dllcache\c_10082.nls.new
  • <SYSTEM32>\dllcache\c_1251.nls.new
  • <SYSTEM32>\dllcache\c_1250.nls.new
  • <SYSTEM32>\esent97.dll.new
  • <SYSTEM32>\dllcache\c_10079.nls.new
  • <SYSTEM32>\esentprf.dll.new
  • <SYSTEM32>\dllcache\c_10081.nls.new
  • <SYSTEM32>\esentutl.exe.new
  • <SYSTEM32>\dllcache\c_1256.nls.new
  • <SYSTEM32>\eventcls.dll.new
  • <SYSTEM32>\dllcache\c_1257.nls.new
  • <SYSTEM32>\eventcreate.exe.new
  • <SYSTEM32>\dllcache\c_1254.nls.new
  • <SYSTEM32>\dllcache\c_1253.nls.new
  • <SYSTEM32>\dllcache\c_1255.nls.new
  • <SYSTEM32>\eudcedit.exe.new
  • <SYSTEM32>\edlin.exe.new
  • <SYSTEM32>\dllcache\c_037.nls.new
  • <SYSTEM32>\efsadu.dll.new
  • <SYSTEM32>\dllcache\c_10000.nls.new
  • <SYSTEM32>\dllcache\csseqchk.dll.new
  • <SYSTEM32>\dxtrans.dll.new
  • <SYSTEM32>\dllcache\ctl3dv2.dll.new
  • <SYSTEM32>\dllcache\ctl3d32.dll.new
  • <SYSTEM32>\dllcache\c_10006.nls.new
  • <SYSTEM32>\encdec.dll.new
  • <SYSTEM32>\dllcache\c_10017.nls.new
  • <SYSTEM32>\eqnclass.dll.new
  • <SYSTEM32>\dllcache\c_10029.nls.new
  • <SYSTEM32>\dllcache\c_10007.nls.new
  • <SYSTEM32>\els.dll.new
  • <SYSTEM32>\encapi.dll.new
  • <SYSTEM32>\dllcache\c_10010.nls.new
  • <SYSTEM32>\cdfview.dll.new
  • <SYSTEM32>\dllcache\admparse.dll.new
  • <SYSTEM32>\cdm.dll.new
  • <SYSTEM32>\dllcache\adptif.dll.new
  • <SYSTEM32>\dllcache\activeds.tlb.new
  • <SYSTEM32>\dllcache\aclui.dll.new
  • <SYSTEM32>\ccfgnt.dll.new
  • <SYSTEM32>\dllcache\actmovie.exe.new
  • <SYSTEM32>\dllcache\adsldp.dll.new
  • <SYSTEM32>\dllcache\adsnt.dll.new
  • <SYSTEM32>\certmgr.dll.new
  • <SYSTEM32>\dllcache\adsnw.dll.new
  • <SYSTEM32>\cewmdm.dll.new
  • <SYSTEM32>\cdosys.dll.new
  • <SYSTEM32>\cdmodem.dll.new
  • <SYSTEM32>\dllcache\adsnds.dll.new
  • <SYSTEM32>\dllcache\adsmsext.dll.new
  • <SYSTEM32>\cards.dll.new
  • <SYSTEM32>\capesnpn.dll.new
  • <SYSTEM32>\catsrvps.dll.new
  • <SYSTEM32>\catsrv.dll.new
  • <SYSTEM32>\cacls.exe.new
  • <SYSTEM32>\cabview.dll.new
  • <SYSTEM32>\camocx.dll.new
  • <SYSTEM32>\calc.exe.new
  • <SYSTEM32>\catsrvut.dll.new
  • <SYSTEM32>\dllcache\acctres.dll.new
  • <SYSTEM32>\dllcache\access.cpl.new
  • <SYSTEM32>\dllcache\acledit.dll.new
  • <SYSTEM32>\dllcache\accwiz.exe.new
  • <SYSTEM32>\dllcache\12520850.cpx.new
  • <SYSTEM32>\dllcache\12520437.cpx.new
  • <SYSTEM32>\dllcache\aaaamon.dll.new
  • <SYSTEM32>\dllcache\6to4svc.dll.new
  • <SYSTEM32>\dllcache\advpack.dll.new
  • <SYSTEM32>\dllcache\asr_fmt.exe.new
  • <SYSTEM32>\dllcache\asferror.dll.new
  • <SYSTEM32>\dllcache\asr_ldm.exe.new
  • <SYSTEM32>\cisvc.exe.new
  • <SYSTEM32>\ciodm.dll.new
  • <SYSTEM32>\dllcache\arp.exe.new
  • <SYSTEM32>\cipher.exe.new
  • <SYSTEM32>\dllcache\asctrls.ocx.new
  • <SYSTEM32>\ckcnv.exe.new
  • <SYSTEM32>\cleanmgr.exe.new
  • <SYSTEM32>\dllcache\at.exe.new
  • <SYSTEM32>\dllcache\atmadm.exe.new
  • <SYSTEM32>\dllcache\atkctrs.dll.new
  • <SYSTEM32>\clb.dll.new
  • <SYSTEM32>\dllcache\asr_pfu.exe.new
  • <SYSTEM32>\clbcatex.dll.new
  • <SYSTEM32>\dllcache\asycfilt.dll.new
  • <SYSTEM32>\dllcache\amstream.dll.new
  • <SYSTEM32>\charmap.exe.new
  • <SYSTEM32>\chkdsk.exe.new
  • <SYSTEM32>\dllcache\ansi.sys.new
  • <SYSTEM32>\dllcache\ahui.exe.new
  • <SYSTEM32>\cfgbkend.dll.new
  • <SYSTEM32>\dllcache\alrsvc.dll.new
  • <SYSTEM32>\cfgmgr32.dll.new
  • <SYSTEM32>\dllcache\apcups.dll.new
  • <SYSTEM32>\cic.dll.new
  • <SYSTEM32>\dllcache\appmgr.dll.new
  • <SYSTEM32>\cidaemon.exe.new
  • <SYSTEM32>\dllcache\appwiz.cpl.new
  • <SYSTEM32>\dllcache\append.exe.new
  • <SYSTEM32>\chkntfs.exe.new
  • <SYSTEM32>\dllcache\appmgmts.dll.new
  • <SYSTEM32>\ciadmin.dll.new
  • <SYSTEM32>\ansi.sys.new
  • <SYSTEM32>\amstream.dll.new
  • <SYSTEM32>\append.exe.new
  • <SYSTEM32>\apcups.dll.new
  • <SYSTEM32>\advpack.dll.new
  • <SYSTEM32>\adsnw.dll.new
  • <SYSTEM32>\alrsvc.dll.new
  • <SYSTEM32>\ahui.exe.new
  • <SYSTEM32>\appmgmts.dll.new
  • <SYSTEM32>\asr_fmt.exe.new
  • <SYSTEM32>\asferror.dll.new
  • <SYSTEM32>\asr_pfu.exe.new
  • <SYSTEM32>\asr_ldm.exe.new
  • <SYSTEM32>\appwiz.cpl.new
  • <SYSTEM32>\appmgr.dll.new
  • <SYSTEM32>\asctrls.ocx.new
  • <SYSTEM32>\arp.exe.new
  • <SYSTEM32>\acctres.dll.new
  • <SYSTEM32>\access.cpl.new
  • <SYSTEM32>\acledit.dll.new
  • <SYSTEM32>\accwiz.exe.new
  • <SYSTEM32>\12520850.cpx.new
  • <SYSTEM32>\12520437.cpx.new
  • <SYSTEM32>\aaaamon.dll.new
  • <SYSTEM32>\6to4svc.dll.new
  • <SYSTEM32>\aclui.dll.new
  • <SYSTEM32>\adsmsext.dll.new
  • <SYSTEM32>\adsldp.dll.new
  • <SYSTEM32>\adsnt.dll.new
  • <SYSTEM32>\adsnds.dll.new
  • <SYSTEM32>\actmovie.exe.new
  • <SYSTEM32>\activeds.tlb.new
  • <SYSTEM32>\adptif.dll.new
  • <SYSTEM32>\admparse.dll.new
  • <SYSTEM32>\asycfilt.dll.new
  • <SYSTEM32>\bidispl.dll.new
  • <SYSTEM32>\batt.dll.new
  • <SYSTEM32>\bitsprx3.dll.new
  • <SYSTEM32>\bitsprx2.dll.new
  • <SYSTEM32>\avmeter.dll.new
  • <SYSTEM32>\avifile.dll.new
  • <SYSTEM32>\avwav.dll.new
  • <SYSTEM32>\avtapi.dll.new
  • <SYSTEM32>\blackbox.dll.new
  • <SYSTEM32>\browselc.dll.new
  • <SYSTEM32>\bootvrfy.exe.new
  • <SYSTEM32>\btpanui.dll.new
  • <SYSTEM32>\browsewm.dll.new
  • <SYSTEM32>\bootcfg.exe.new
  • <SYSTEM32>\blastcln.exe.new
  • <SYSTEM32>\bootvid.dll.new
  • <SYSTEM32>\bootok.exe.new
  • <SYSTEM32>\atrace.dll.new
  • <SYSTEM32>\atmpvcno.dll.new
  • <SYSTEM32>\audiosrv.dll.new
  • <SYSTEM32>\attrib.exe.new
  • <SYSTEM32>\atkctrs.dll.new
  • <SYSTEM32>\at.exe.new
  • <SYSTEM32>\atmlib.dll.new
  • <SYSTEM32>\atmadm.exe.new
  • <SYSTEM32>\auditusr.exe.new
  • <SYSTEM32>\avicap.dll.new
  • <SYSTEM32>\autolfn.exe.new
  • <SYSTEM32>\avifil32.dll.new
  • <SYSTEM32>\avicap32.dll.new
  • <SYSTEM32>\autoconv.exe.new
  • <SYSTEM32>\autochk.exe.new
  • <SYSTEM32>\autofmt.exe.new
  • <SYSTEM32>\autodisc.dll.new
  • <SYSTEM32>\dllcache\atmlib.dll.new
  • <SYSTEM32>\c_1254.nls.new
  • <SYSTEM32>\c_1253.nls.new
  • <SYSTEM32>\c_1256.nls.new
  • <SYSTEM32>\c_1255.nls.new
  • <SYSTEM32>\c_1026.nls.new
  • <SYSTEM32>\c_10082.nls.new
  • <SYSTEM32>\c_1251.nls.new
  • <SYSTEM32>\c_1250.nls.new
  • <SYSTEM32>\c_1257.nls.new
  • <SYSTEM32>\c_21866.nls.new
  • <SYSTEM32>\c_20905.nls.new
  • <SYSTEM32>\c_28592.nls.new
  • <SYSTEM32>\c_28591.nls.new
  • <SYSTEM32>\c_20127.nls.new
  • <SYSTEM32>\c_1258.nls.new
  • <SYSTEM32>\c_20866.nls.new
  • <SYSTEM32>\c_20261.nls.new
  • <SYSTEM32>\csseqchk.dll.new
  • <SYSTEM32>\cryptnet.dll.new
  • <SYSTEM32>\ctl3dv2.dll.new
  • <SYSTEM32>\ctl3d32.dll.new
  • <SYSTEM32>\cryptdlg.dll.new
  • <SYSTEM32>\dllcache\catsrvps.dll.new
  • <SYSTEM32>\dllcache\catsrvut.dll.new
  • <SYSTEM32>\cryptext.dll.new
  • <SYSTEM32>\c_037.nls.new
  • <SYSTEM32>\c_10029.nls.new
  • <SYSTEM32>\c_10017.nls.new
  • <SYSTEM32>\c_10081.nls.new
  • <SYSTEM32>\c_10079.nls.new
  • <SYSTEM32>\c_10006.nls.new
  • <SYSTEM32>\c_10000.nls.new
  • <SYSTEM32>\c_10010.nls.new
  • <SYSTEM32>\c_10007.nls.new
  • <SYSTEM32>\c_28593.nls.new
  • <SYSTEM32>\c_874.nls.new
  • <SYSTEM32>\c_869.nls.new
  • <SYSTEM32>\c_875.nls.new
  • <SYSTEM32>\dllcache\cdm.dll.new
  • <SYSTEM32>\dllcache\cdfview.dll.new
  • <SYSTEM32>\c_863.nls.new
  • <SYSTEM32>\c_866.nls.new
  • <SYSTEM32>\c_865.nls.new
  • <SYSTEM32>\c_932.nls.new
  • <SYSTEM32>\d3d8thk.dll.new
  • <SYSTEM32>\dllcache\cdmodem.dll.new
  • <SYSTEM32>\d3dim.dll.new
  • <SYSTEM32>\d3d9.dll.new
  • <SYSTEM32>\c_949.nls.new
  • <SYSTEM32>\c_936.nls.new
  • <SYSTEM32>\d3d8.dll.new
  • <SYSTEM32>\c_950.nls.new
  • <SYSTEM32>\c_28603.nls.new
  • <SYSTEM32>\c_28599.nls.new
  • <SYSTEM32>\c_500.nls.new
  • <SYSTEM32>\c_28605.nls.new
  • <SYSTEM32>\c_28595.nls.new
  • <SYSTEM32>\c_28594.nls.new
  • <SYSTEM32>\c_28598.nls.new
  • <SYSTEM32>\c_28597.nls.new
  • <SYSTEM32>\c_737.nls.new
  • <SYSTEM32>\c_857.nls.new
  • <SYSTEM32>\dllcache\ccfgnt.dll.new
  • <SYSTEM32>\c_861.nls.new
  • <SYSTEM32>\c_860.nls.new
  • <SYSTEM32>\c_850.nls.new
  • <SYSTEM32>\c_775.nls.new
  • <SYSTEM32>\c_855.nls.new
  • <SYSTEM32>\c_852.nls.new
  • <SYSTEM32>\cmutil.dll.new
  • <SYSTEM32>\dllcache\avicap32.dll.new
  • <SYSTEM32>\dllcache\avifil32.dll.new
  • <SYSTEM32>\cnetcfg.dll.new
  • <SYSTEM32>\cmsetacl.dll.new
  • <SYSTEM32>\dllcache\autolfn.exe.new
  • <SYSTEM32>\cmstp.exe.new
  • <SYSTEM32>\dllcache\avicap.dll.new
  • <SYSTEM32>\dllcache\avifile.dll.new
  • <SYSTEM32>\dllcache\avwav.dll.new
  • <SYSTEM32>\dllcache\avtapi.dll.new
  • <SYSTEM32>\dllcache\bidispl.dll.new
  • <SYSTEM32>\dllcache\batt.dll.new
  • <SYSTEM32>\dllcache\avmeter.dll.new
  • <SYSTEM32>\cnvfat.dll.new
  • <SYSTEM32>\comcat.dll.new
  • <SYSTEM32>\comaddin.dll.new
  • <SYSTEM32>\dllcache\attrib.exe.new
  • <SYSTEM32>\cmcfg32.dll.new
  • <SYSTEM32>\cmdial32.dll.new
  • <SYSTEM32>\dllcache\audiosrv.dll.new
  • <SYSTEM32>\clipbrd.exe.new
  • <SYSTEM32>\dllcache\atmpvcno.dll.new
  • <SYSTEM32>\clipsrv.exe.new
  • <SYSTEM32>\dllcache\atrace.dll.new
  • <SYSTEM32>\dllcache\auditusr.exe.new
  • <SYSTEM32>\cmpbk32.dll.new
  • <SYSTEM32>\dllcache\autodisc.dll.new
  • <SYSTEM32>\cmprops.dll.new
  • <SYSTEM32>\dllcache\autofmt.exe.new
  • <SYSTEM32>\dllcache\autochk.exe.new
  • <SYSTEM32>\cmdl32.exe.new
  • <SYSTEM32>\cmmon32.exe.new
  • <SYSTEM32>\dllcache\autoconv.exe.new
  • <SYSTEM32>\commdlg.dll.new
  • <SYSTEM32>\console.dll.new
  • <SYSTEM32>\dllcache\cabview.dll.new
  • <SYSTEM32>\dllcache\calc.exe.new
  • <SYSTEM32>\dllcache\cacls.exe.new
  • <SYSTEM32>\confmsp.dll.new
  • <SYSTEM32>\comuid.dll.new
  • <SYSTEM32>\conime.exe.new
  • <SYSTEM32>\dllcache\btpanui.dll.new
  • <SYSTEM32>\control.exe.new
  • <SYSTEM32>\country.sys.new
  • <SYSTEM32>\dllcache\cards.dll.new
  • <SYSTEM32>\crtdll.dll.new
  • <SYSTEM32>\dllcache\catsrv.dll.new
  • <SYSTEM32>\dllcache\camocx.dll.new
  • <SYSTEM32>\convert.exe.new
  • <SYSTEM32>\dllcache\capesnpn.dll.new
  • <SYSTEM32>\corpol.dll.new
  • <SYSTEM32>\compatui.dll.new
  • <SYSTEM32>\dllcache\blackbox.dll.new
  • <SYSTEM32>\dllcache\bootcfg.exe.new
  • <SYSTEM32>\dllcache\blastcln.exe.new
  • <SYSTEM32>\comp.exe.new
  • <SYSTEM32>\dllcache\bitsprx2.dll.new
  • <SYSTEM32>\compact.exe.new
  • <SYSTEM32>\dllcache\bitsprx3.dll.new
  • <SYSTEM32>\compobj.dll.new
  • <SYSTEM32>\dllcache\browselc.dll.new
  • <SYSTEM32>\comrepl.dll.new
  • <SYSTEM32>\dllcache\browsewm.dll.new
  • <SYSTEM32>\comsnap.dll.new
  • <SYSTEM32>\compstui.dll.new
  • <SYSTEM32>\dllcache\bootok.exe.new
  • <SYSTEM32>\dllcache\bootvrfy.exe.new
  • <SYSTEM32>\dllcache\bootvid.dll.new
Deletes the following files:
  • <SYSTEM32>\ieencode.dll
  • <SYSTEM32>\iedkcs32.dll
  • <SYSTEM32>\ieakui.dll
  • <SYSTEM32>\iesetup.dll
  • <SYSTEM32>\iernonce.dll
  • <SYSTEM32>\iepeers.dll
  • <SYSTEM32>\idq.dll
  • <SYSTEM32>\ideograf.uce
  • <SYSTEM32>\icwphbk.dll
  • <SYSTEM32>\ieaksie.dll
  • <SYSTEM32>\ieakeng.dll
  • <SYSTEM32>\ie4uinit.exe
  • <SYSTEM32>\ieuinit.inf
  • <SYSTEM32>\imapi.exe
  • <SYSTEM32>\imagehlp.dll
  • <SYSTEM32>\imaadp32.acm
  • <SYSTEM32>\imm32.dll
  • <SYSTEM32>\imgutil.dll
  • <SYSTEM32>\imeshare.dll
  • <SYSTEM32>\ifsutil.dll
  • <SYSTEM32>\ifmon.dll
  • <SYSTEM32>\iexpress.exe
  • <SYSTEM32>\ils.dll
  • <SYSTEM32>\iissuba.dll
  • <SYSTEM32>\igmpagnt.dll
  • <SYSTEM32>\icwdial.dll
  • <SYSTEM32>\iashlpr.dll
  • <SYSTEM32>\iasads.dll
  • <SYSTEM32>\iasacct.dll
  • <SYSTEM32>\iasrad.dll
  • <SYSTEM32>\iaspolcy.dll
  • <SYSTEM32>\iasnap.dll
  • <SYSTEM32>\httpapi.dll
  • <SYSTEM32>\html.iec
  • <SYSTEM32>\hticons.dll
  • <SYSTEM32>\iac25_32.ax
  • <SYSTEM32>\hypertrm.dll
  • <SYSTEM32>\htui.dll
  • <SYSTEM32>\iasrecst.dll
  • <SYSTEM32>\icfgnt5.dll
  • <SYSTEM32>\iccvid.dll
  • <SYSTEM32>\icardres.dll.mui
  • <SYSTEM32>\icmui.dll
  • <SYSTEM32>\icmp.dll
  • <SYSTEM32>\icm32.dll
  • <SYSTEM32>\iassvcs.dll
  • <SYSTEM32>\iassdo.dll
  • <SYSTEM32>\iassam.dll
  • <SYSTEM32>\icardres.dll
  • <SYSTEM32>\icardagt.exe
  • <SYSTEM32>\icaapi.dll
  • <SYSTEM32>\inetcfg.dll
  • <SYSTEM32>\ipxroute.exe
  • <SYSTEM32>\ipxrip.dll
  • <SYSTEM32>\ipxpromn.dll
  • <SYSTEM32>\ipxwan.dll
  • <SYSTEM32>\ipxsap.dll
  • <SYSTEM32>\ipxrtmgr.dll
  • <SYSTEM32>\ipsmsnap.dll
  • <SYSTEM32>\ipsecsvc.dll
  • <SYSTEM32>\ipsecsnp.dll
  • <SYSTEM32>\ipxmontr.dll
  • <SYSTEM32>\ipv6mon.dll
  • <SYSTEM32>\ipv6.exe
  • <SYSTEM32>\ir32_32.dll
  • <SYSTEM32>\isign32.dll
  • <SYSTEM32>\irprops.cpl
  • <SYSTEM32>\irclass.dll
  • <SYSTEM32>\itss.dll
  • <SYSTEM32>\itircl.dll
  • <SYSTEM32>\isrdbg32.dll
  • <SYSTEM32>\ir41_qcx.dll
  • <SYSTEM32>\ir41_qc.dll
  • <SYSTEM32>\ir41_32.ax
  • <SYSTEM32>\ir50_qcx.dll
  • <SYSTEM32>\ir50_qc.dll
  • <SYSTEM32>\ir50_32.dll
  • <SYSTEM32>\ipsec6.exe
  • <SYSTEM32>\infocardcpl.cpl
  • <SYSTEM32>\infocardapi.dll
  • <SYSTEM32>\inetres.dll
  • <SYSTEM32>\input.dll
  • <SYSTEM32>\initpki.dll
  • <SYSTEM32>\infosoft.dll
  • <SYSTEM32>\inetcplc.dll
  • <SYSTEM32>\inetcpl.cpl
  • <SYSTEM32>\inetcomm.dll
  • <SYSTEM32>\inetppui.dll
  • <SYSTEM32>\inetpp.dll
  • <SYSTEM32>\inetmib1.dll
  • <SYSTEM32>\inseng.dll
  • <SYSTEM32>\ippromon.dll
  • <SYSTEM32>\ipnathlp.dll
  • <SYSTEM32>\ipmontr.dll
  • <SYSTEM32>\iprtrmgr.dll
  • <SYSTEM32>\iprtprio.dll
  • <SYSTEM32>\iprop.dll
  • <SYSTEM32>\iologmsg.dll
  • <SYSTEM32>\intl.cpl
  • <SYSTEM32>\instcat.sql
  • <SYSTEM32>\iphlpapi.dll
  • <SYSTEM32>\ipconfig.exe
  • <SYSTEM32>\ipconf.tsp
  • <SYSTEM32>\hotplug.dll
  • <SYSTEM32>\fastopen.exe
  • <SYSTEM32>\exts.dll
  • <SYSTEM32>\extrac32.exe
  • <SYSTEM32>\fde.dll
  • <SYSTEM32>\fc.exe
  • <SYSTEM32>\faultrep.dll
  • <SYSTEM32>\exe2bin.exe
  • <SYSTEM32>\evr.dll
  • <SYSTEM32>\eventvwr.msc
  • <SYSTEM32>\extmgr.dll
  • <SYSTEM32>\expsrv.dll
  • <SYSTEM32>\expand.exe
  • <SYSTEM32>\fdeploy.dll
  • <SYSTEM32>\fltlib.dll
  • <SYSTEM32>\fldrclnr.dll
  • <SYSTEM32>\fixmapi.exe
  • <SYSTEM32>\FNTCACHE.DAT
  • <SYSTEM32>\fmifs.dll
  • <SYSTEM32>\fltMc.exe
  • <SYSTEM32>\find.exe
  • <SYSTEM32>\filemgmt.dll
  • <SYSTEM32>\feclient.dll
  • <SYSTEM32>\firewall.cpl
  • <SYSTEM32>\finger.exe
  • <SYSTEM32>\findstr.exe
  • <SYSTEM32>\eventvwr.exe
  • <SYSTEM32>\encdec.dll
  • <SYSTEM32>\encapi.dll
  • <SYSTEM32>\emptyregdb.dat
  • <SYSTEM32>\es.dll
  • <SYSTEM32>\ersvc.dll
  • <SYSTEM32>\EqnClass.Dll
  • <SYSTEM32>\edit.hlp
  • <SYSTEM32>\edit.com
  • <SYSTEM32>\dxva2.dll
  • <SYSTEM32>\els.dll
  • <SYSTEM32>\efsadu.dll
  • <SYSTEM32>\edlin.exe
  • <SYSTEM32>\esent.dll
  • <SYSTEM32>\eventcreate.exe
  • <SYSTEM32>\eventcls.dll
  • <SYSTEM32>\eula.txt
  • <SYSTEM32>\eventtriggers.exe
  • <SYSTEM32>\eventquery.vbs
  • <SYSTEM32>\eventlog.dll
  • <SYSTEM32>\esentprf.hxx
  • <SYSTEM32>\esentprf.dll
  • <SYSTEM32>\esent97.dll
  • <SYSTEM32>\eudcedit.exe
  • <SYSTEM32>\esentutl.exe
  • <SYSTEM32>\esentprf.ini
  • <SYSTEM32>\fontext.dll
  • <SYSTEM32>\grpconv.exe
  • <SYSTEM32>\graphics.pro
  • <SYSTEM32>\graphics.com
  • <SYSTEM32>\hal.dll
  • <SYSTEM32>\h323msp.dll
  • <SYSTEM32>\h323.tsp
  • <SYSTEM32>\gpresult.exe
  • <SYSTEM32>\gpkrsrc.dll
  • <SYSTEM32>\gpkcsp.dll
  • <SYSTEM32>\graftabl.com
  • <SYSTEM32>\gpupdate.exe
  • <SYSTEM32>\gptext.dll
  • <SYSTEM32>\hdwwiz.cpl
  • <SYSTEM32>\hnetmon.dll
  • <SYSTEM32>\hnetcfg.dll
  • <SYSTEM32>\hlink.dll
  • <SYSTEM32>\hostname.exe
  • <SYSTEM32>\homepage.inf
  • <SYSTEM32>\hnetwiz.dll
  • <SYSTEM32>\hhsetup.dll
  • <SYSTEM32>\hhctrl.ocx
  • <SYSTEM32>\help.exe
  • <SYSTEM32>\himem.sys
  • <SYSTEM32>\hidphone.tsp
  • <SYSTEM32>\hid.dll
  • <SYSTEM32>\gpedit.msc
  • <SYSTEM32>\fsusd.dll
  • <SYSTEM32>\fsquirt.exe
  • <SYSTEM32>\fsmgmt.msc
  • <SYSTEM32>\ftsrch.dll
  • <SYSTEM32>\ftp.exe
  • <SYSTEM32>\fsutil.exe
  • <SYSTEM32>\forcedos.exe
  • <SYSTEM32>\fontview.exe
  • <SYSTEM32>\fontsub.dll
  • <SYSTEM32>\freecell.exe
  • <SYSTEM32>\framebuf.dll
  • <SYSTEM32>\format.com
  • <SYSTEM32>\fwcfg.dll
  • <SYSTEM32>\getuname.dll
  • <SYSTEM32>\getmac.exe
  • <SYSTEM32>\geo.nls
  • <SYSTEM32>\gpedit.dll
  • <SYSTEM32>\glu32.dll
  • <SYSTEM32>\glmf32.dll
  • <SYSTEM32>\gcdef.dll
  • <SYSTEM32>\gb2312.uce
  • <SYSTEM32>\g711codc.ax
  • <SYSTEM32>\gdiplus.dll
  • <SYSTEM32>\gdi32.dll
  • <SYSTEM32>\gdi.exe
  • <SYSTEM32>\iuengine.dll
  • <SYSTEM32>\lights.exe
  • <SYSTEM32>\licwmi.dll
  • <SYSTEM32>\licmgr10.dll
  • <SYSTEM32>\lmrt.dll
  • <SYSTEM32>\lmhsvc.dll
  • <SYSTEM32>\linkinfo.dll
  • <SYSTEM32>\libmysql.dll
  • <SYSTEM32>\liblwres.dll
  • <SYSTEM32>\libisccfg.dll
  • <SYSTEM32>\licdll.dll
  • <SYSTEM32>\libxml2.dll
  • <SYSTEM32>\libpq82.dll
  • <SYSTEM32>\lnkstub.exe
  • <SYSTEM32>\logagent.exe
  • <SYSTEM32>\lodctr.exe
  • <SYSTEM32>\locator.exe
  • <SYSTEM32>\logman.exe
  • <SYSTEM32>\login.cmd
  • <SYSTEM32>\loghours.dll
  • <SYSTEM32>\locale.nls
  • <SYSTEM32>\loadperf.dll
  • <SYSTEM32>\loadfix.com
  • <SYSTEM32>\localui.dll
  • <SYSTEM32>\localspl.dll
  • <SYSTEM32>\localsec.dll
  • <SYSTEM32>\libisccc.dll
  • <SYSTEM32>\krnl386.exe
  • <SYSTEM32>\korean.uce
  • <SYSTEM32>\kmddsp.tsp
  • <SYSTEM32>\label.exe
  • <SYSTEM32>\l3codecx.ax
  • <SYSTEM32>\l3codeca.acm
  • <SYSTEM32>\key01.sys
  • <SYSTEM32>\kernel32.dll
  • <SYSTEM32>\kerberos.dll
  • <SYSTEM32>\keymgr.dll
  • <SYSTEM32>\keyboard.sys
  • <SYSTEM32>\keyboard.drv
  • <SYSTEM32>\langwrbk.dll
  • <SYSTEM32>\libiconv2.dll
  • <SYSTEM32>\libiconv-2.dll
  • <SYSTEM32>\libgnat-2009.dll
  • <SYSTEM32>\libisc.dll
  • <SYSTEM32>\libintl3.dll
  • <SYSTEM32>\libintl-2.dll
  • <SYSTEM32>\libdns.dll
  • <SYSTEM32>\laprxy.dll
  • <SYSTEM32>\lanman.drv
  • <SYSTEM32>\libgnarl-2009.dll
  • <SYSTEM32>\libgcc_s.dll
  • <SYSTEM32>\libeay32.dll
  • <SYSTEM32>\logoff.exe
  • <SYSTEM32>\mciwave.drv
  • <SYSTEM32>\mciwave.dll
  • <SYSTEM32>\mciseq.drv
  • <SYSTEM32>\mdwmdmsp.dll
  • <SYSTEM32>\mdminst.dll
  • <SYSTEM32>\mdhcp.dll
  • <SYSTEM32>\mciole16.dll
  • <SYSTEM32>\mcicda.dll
  • <SYSTEM32>\mciavi32.dll
  • <SYSTEM32>\mciseq.dll
  • <SYSTEM32>\mciqtz32.dll
  • <SYSTEM32>\mciole32.dll
  • <SYSTEM32>\mem.exe
  • <SYSTEM32>\mfc100fra.dll
  • <SYSTEM32>\mfc100esn.dll
  • <SYSTEM32>\mfc100enu.dll
  • <SYSTEM32>\mfc100kor.dll
  • <SYSTEM32>\mfc100jpn.dll
  • <SYSTEM32>\mfc100ita.dll
  • <SYSTEM32>\mfc100chs.dll
  • <SYSTEM32>\mfc100.dll
  • <SYSTEM32>\mf3216.dll
  • <SYSTEM32>\mfc100deu.dll
  • <SYSTEM32>\mfc100d.dll
  • <SYSTEM32>\mfc100cht.dll
  • <SYSTEM32>\mciavi.drv
  • <SYSTEM32>\lsasrv.dll
  • <SYSTEM32>\lprmonui.dll
  • <SYSTEM32>\lprhelp.dll
  • <SYSTEM32>\lz32.dll
  • <SYSTEM32>\lusrmgr.msc
  • <SYSTEM32>\lsass.exe
  • <SYSTEM32>\logonui.exe.manifest
  • <SYSTEM32>\logonui.exe
  • <SYSTEM32>\logon.scr
  • <SYSTEM32>\lpr.exe
  • <SYSTEM32>\lpq.exe
  • <SYSTEM32>\lpk.dll
  • <SYSTEM32>\lzexpand.dll
  • <SYSTEM32>\mcastmib.dll
  • <SYSTEM32>\mapistub.dll
  • <SYSTEM32>\mapi32.dll
  • <SYSTEM32>\mchgrcoi.dll
  • <SYSTEM32>\mcdsrv32.dll
  • <SYSTEM32>\mcd32.dll
  • <SYSTEM32>\magnify.exe
  • <SYSTEM32>\l_intl.nls
  • <SYSTEM32>\l_except.nls
  • <SYSTEM32>\makecab.exe
  • <SYSTEM32>\main.cpl
  • <SYSTEM32>\mag_hook.dll
  • <SYSTEM32>\kdcom.dll
  • <SYSTEM32>\kbdest.dll
  • <SYSTEM32>\kbdes.dll
  • <SYSTEM32>\kbddv.dll
  • <SYSTEM32>\kbdfi1.dll
  • <SYSTEM32>\kbdfi.dll
  • <SYSTEM32>\kbdfc.dll
  • <SYSTEM32>\kbdcz.dll
  • <SYSTEM32>\kbdcr.dll
  • <SYSTEM32>\kbdcan.dll
  • <SYSTEM32>\kbdda.dll
  • <SYSTEM32>\kbdcz2.dll
  • <SYSTEM32>\kbdcz1.dll
  • <SYSTEM32>\kbdfo.dll
  • <SYSTEM32>\kbdhela2.dll
  • <SYSTEM32>\kbdhe319.dll
  • <SYSTEM32>\kbdhe220.dll
  • <SYSTEM32>\kbdhu.dll
  • <SYSTEM32>\kbdhept.dll
  • <SYSTEM32>\kbdhela3.dll
  • <SYSTEM32>\kbdgkl.dll
  • <SYSTEM32>\kbdgae.dll
  • <SYSTEM32>\kbdfr.dll
  • <SYSTEM32>\kbdhe.dll
  • <SYSTEM32>\kbdgr1.dll
  • <SYSTEM32>\kbdgr.dll
  • <SYSTEM32>\kbdca.dll
  • <SYSTEM32>\jgsd400.dll
  • <SYSTEM32>\jgpl400.dll
  • <SYSTEM32>\jgmd400.dll
  • <SYSTEM32>\joy.cpl
  • <SYSTEM32>\jobexec.dll
  • <SYSTEM32>\jgsh400.dll
  • <SYSTEM32>\iyuv_32.dll
  • <SYSTEM32>\ixsso.dll
  • <SYSTEM32>\ivfsrc.ax
  • <SYSTEM32>\jgdw400.dll
  • <SYSTEM32>\jgaw400.dll
  • <SYSTEM32>\jet500.dll
  • <SYSTEM32>\jscript.dll
  • <SYSTEM32>\kbdbene.dll
  • <SYSTEM32>\kbdbe.dll
  • <SYSTEM32>\kbdazel.dll
  • <SYSTEM32>\kbdbu.dll
  • <SYSTEM32>\kbdbr.dll
  • <SYSTEM32>\kbdblr.dll
  • <SYSTEM32>\kanji_2.uce
  • <SYSTEM32>\kanji_1.uce
  • <SYSTEM32>\jsproxy.dll
  • <SYSTEM32>\kbdaze.dll
  • <SYSTEM32>\KBDAL.DLL
  • <SYSTEM32>\kb16.com
  • <SYSTEM32>\kbdhu1.dll
  • <SYSTEM32>\kbdsmsno.dll
  • <SYSTEM32>\kbdsmsfi.dll
  • <SYSTEM32>\kbdsl1.dll
  • <SYSTEM32>\kbdtat.dll
  • <SYSTEM32>\kbdsw.dll
  • <SYSTEM32>\kbdsp.dll
  • <SYSTEM32>\kbdru1.dll
  • <SYSTEM32>\kbdru.dll
  • <SYSTEM32>\kbdro.dll
  • <SYSTEM32>\kbdsl.dll
  • <SYSTEM32>\kbdsg.dll
  • <SYSTEM32>\kbdsf.dll
  • <SYSTEM32>\kbdtuf.dll
  • <SYSTEM32>\kbduzb.dll
  • <SYSTEM32>\kbdusx.dll
  • <SYSTEM32>\kbdusr.dll
  • <SYSTEM32>\kd1394.dll
  • <SYSTEM32>\kbdycl.dll
  • <SYSTEM32>\kbdycc.dll
  • <SYSTEM32>\kbdukx.dll
  • <SYSTEM32>\kbduk.dll
  • <SYSTEM32>\kbdtuq.dll
  • <SYSTEM32>\kbdusl.dll
  • <SYSTEM32>\kbdus.dll
  • <SYSTEM32>\kbdur.dll
  • <SYSTEM32>\kbdpo.dll
  • <SYSTEM32>\kbdkyr.dll
  • <SYSTEM32>\kbdkaz.dll
  • <SYSTEM32>\kbdit142.dll
  • <SYSTEM32>\kbdlt1.dll
  • <SYSTEM32>\kbdlt.dll
  • <SYSTEM32>\kbdla.dll
  • <SYSTEM32>\kbdinben.dll
  • <SYSTEM32>\kbdinbe1.dll
  • <SYSTEM32>\kbdic.dll
  • <SYSTEM32>\kbdit.dll
  • <SYSTEM32>\kbdir.dll
  • <SYSTEM32>\kbdinmal.dll
  • <SYSTEM32>\kbdlv.dll
  • <SYSTEM32>\kbdno.dll
  • <SYSTEM32>\kbdnec.dll
  • <SYSTEM32>\kbdne.dll
  • <SYSTEM32>\kbdpl1.dll
  • <SYSTEM32>\kbdpl.dll
  • <SYSTEM32>\kbdno1.dll
  • <SYSTEM32>\kbdmaori.dll
  • <SYSTEM32>\kbdmac.dll
  • <SYSTEM32>\kbdlv1.dll
  • <SYSTEM32>\kbdmon.dll
  • <SYSTEM32>\kbdmlt48.dll
  • <SYSTEM32>\kbdmlt47.dll
  • <SYSTEM32>\ckcnv.exe
  • <SYSTEM32>\cisvc.exe
  • <SYSTEM32>\cipher.exe
  • <SYSTEM32>\clbcatq.dll
  • <SYSTEM32>\clbcatex.dll
  • <SYSTEM32>\clb.dll
  • <SYSTEM32>\ciadv.msc
  • <SYSTEM32>\ciadmin.dll
  • <SYSTEM32>\chkntfs.exe
  • <SYSTEM32>\ciodm.dll
  • <SYSTEM32>\cidaemon.exe
  • <SYSTEM32>\cic.dll
  • <SYSTEM32>\cleanmgr.exe
  • <SYSTEM32>\cmd.exe
  • <SYSTEM32>\cmcfg32.dll
  • <SYSTEM32>\clusapi.dll
  • <SYSTEM32>\cmdlib.wsc
  • <SYSTEM32>\cmdl32.exe
  • <SYSTEM32>\cmdial32.dll
  • <SYSTEM32>\cliconfg.exe
  • <SYSTEM32>\cliconfg.dll
  • <SYSTEM32>\cliconf.chm
  • <SYSTEM32>\clipsrv.exe
  • <SYSTEM32>\clipbrd.exe
  • <SYSTEM32>\cliconfg.rll
  • <SYSTEM32>\chkdsk.exe
  • <SYSTEM32>\cc3280mt.dll
  • <SYSTEM32>\cc3280.dll
  • <SYSTEM32>\cc3270mt.dll
  • <SYSTEM32>\ccfgnt.dll
  • <SYSTEM32>\cc3290mt.dll
  • <SYSTEM32>\cc3290.dll
  • <SYSTEM32>\cc3250mt.dll
  • <SYSTEM32>\cc3250.dll
  • <SYSTEM32>\catsrvut.dll
  • <SYSTEM32>\cc3270.dll
  • <SYSTEM32>\cc3260mt.dll
  • <SYSTEM32>\cc3260.dll
  • <SYSTEM32>\cdfview.dll
  • <SYSTEM32>\cfgbkend.dll
  • <SYSTEM32>\cewmdm.dll
  • <SYSTEM32>\certmgr.msc
  • <SYSTEM32>\chcp.com
  • <SYSTEM32>\charmap.exe
  • <SYSTEM32>\cfgmgr32.dll
  • <SYSTEM32>\cdosys.dll
  • <SYSTEM32>\cdmodem.dll
  • <SYSTEM32>\cdm.dll
  • <SYSTEM32>\certmgr.dll
  • <SYSTEM32>\certcli.dll
  • <SYSTEM32>\cdplayer.exe.manifest
  • <SYSTEM32>\cmmgr32.hlp
  • <SYSTEM32>\control.exe
  • <SYSTEM32>\console.dll
  • <SYSTEM32>\conime.exe
  • <SYSTEM32>\country.sys
  • <SYSTEM32>\corpol.dll
  • <SYSTEM32>\convert.exe
  • <SYSTEM32>\comuid.dll
  • <SYSTEM32>\comsvcs.dll
  • <SYSTEM32>\comsnap.dll
  • <SYSTEM32>\confmsp.dll
  • <SYSTEM32>\CONFIG.TMP
  • <SYSTEM32>\CONFIG.NT
  • <SYSTEM32>\credui.dll
  • <SYSTEM32>\cscdll.dll
  • <SYSTEM32>\cryptui.dll
  • <SYSTEM32>\cryptsvc.dll
  • <SYSTEM32>\csrss.exe
  • <SYSTEM32>\csrsrv.dll
  • <SYSTEM32>\cscui.dll
  • <SYSTEM32>\cryptdlg.dll
  • <SYSTEM32>\crypt32.dll
  • <SYSTEM32>\crtdll.dll
  • <SYSTEM32>\cryptnet.dll
  • <SYSTEM32>\cryptext.dll
  • <SYSTEM32>\cryptdll.dll
  • <SYSTEM32>\comres.dll
  • <SYSTEM32>\cnetcfg.dll
  • <SYSTEM32>\cnbjmon.dll
  • <SYSTEM32>\cmutil.dll
  • <SYSTEM32>\comaddin.dll
  • <SYSTEM32>\colbact.dll
  • <SYSTEM32>\cnvfat.dll
  • <SYSTEM32>\cmpbk32.dll
  • <SYSTEM32>\cmos.ram
  • <SYSTEM32>\cmmon32.exe
  • <SYSTEM32>\cmstp.exe
  • <SYSTEM32>\cmsetACL.dll
  • <SYSTEM32>\cmprops.dll
  • <SYSTEM32>\comcat.dll
  • <SYSTEM32>\compmgmt.msc
  • <SYSTEM32>\compatUI.dll
  • <SYSTEM32>\compact.exe
  • <SYSTEM32>\comrepl.dll
  • <SYSTEM32>\compstui.dll
  • <SYSTEM32>\compobj.dll
  • <SYSTEM32>\comm.drv
  • <SYSTEM32>\comdlg32.dll
  • <SYSTEM32>\comctl32.dll
  • <SYSTEM32>\comp.exe
  • <SYSTEM32>\commdlg.dll
  • <SYSTEM32>\command.com
  • <SYSTEM32>\catsrvps.dll
  • <SYSTEM32>\appmgmts.dll
  • <SYSTEM32>\apphelp.dll
  • <SYSTEM32>\append.exe
  • <SYSTEM32>\arp.exe
  • <SYSTEM32>\appwiz.cpl
  • <SYSTEM32>\appmgr.dll
  • <SYSTEM32>\amcompat.tlb
  • <SYSTEM32>\alrsvc.dll
  • <SYSTEM32>\alg.exe
  • <SYSTEM32>\apcups.dll
  • <SYSTEM32>\ansi.sys
  • <SYSTEM32>\amstream.dll
  • <SYSTEM32>\asctrls.ocx
  • <SYSTEM32>\atl.dll
  • <SYSTEM32>\atkctrs.dll
  • <SYSTEM32>\at.exe
  • <SYSTEM32>\atmfd.dll
  • <SYSTEM32>\atmadm.exe
  • <SYSTEM32>\atl100.dll
  • <SYSTEM32>\asr_fmt.exe
  • <SYSTEM32>\aspnet_counters.dll
  • <SYSTEM32>\asferror.dll
  • <SYSTEM32>\asycfilt.dll
  • <SYSTEM32>\asr_pfu.exe
  • <SYSTEM32>\asr_ldm.exe
  • <SYSTEM32>\ahui.exe
  • <SYSTEM32>\acelpdec.ax
  • <SYSTEM32>\accwiz.exe
  • <SYSTEM32>\acctres.dll
  • <SYSTEM32>\activeds.dll
  • <SYSTEM32>\aclui.dll
  • <SYSTEM32>\acledit.dll
  • <SYSTEM32>\12520850.cpx
  • <SYSTEM32>\12520437.cpx
  • <SYSTEM32>\$winnt$.inf
  • <SYSTEM32>\access.cpl
  • <SYSTEM32>\aaaamon.dll
  • <SYSTEM32>\6to4svc.dll
  • <SYSTEM32>\activeds.tlb
  • <SYSTEM32>\adsnt.dll
  • <SYSTEM32>\adsnds.dll
  • <SYSTEM32>\adsmsext.dll
  • <SYSTEM32>\advpack.dll
  • <SYSTEM32>\advapi32.dll
  • <SYSTEM32>\adsnw.dll
  • <SYSTEM32>\admparse.dll
  • <SYSTEM32>\actxprxy.dll
  • <SYSTEM32>\actmovie.exe
  • <SYSTEM32>\adsldpc.dll
  • <SYSTEM32>\adsldp.dll
  • <SYSTEM32>\adptif.dll
  • <SYSTEM32>\atmlib.dll
  • <SYSTEM32>\borlndmm.dll
  • <SYSTEM32>\bopomofo.uce
  • <SYSTEM32>\bootvrfy.exe
  • <SYSTEM32>\browseui.dll
  • <SYSTEM32>\browser.dll
  • <SYSTEM32>\browselc.dll
  • <SYSTEM32>\blastcln.exe
  • <SYSTEM32>\blackbox.dll
  • <SYSTEM32>\bitsprx3.dll
  • <SYSTEM32>\bootvid.dll
  • <SYSTEM32>\bootok.exe
  • <SYSTEM32>\bootcfg.exe
  • <SYSTEM32>\browsewm.dll
  • <SYSTEM32>\camocx.dll
  • <SYSTEM32>\calc.exe
  • <SYSTEM32>\cacls.exe
  • <SYSTEM32>\catsrv.dll
  • <SYSTEM32>\cards.dll
  • <SYSTEM32>\capesnpn.dll
  • <SYSTEM32>\bthserv.dll
  • <SYSTEM32>\bthprops.cpl
  • <SYSTEM32>\bthci.dll
  • <SYSTEM32>\cabview.dll
  • <SYSTEM32>\cabinet.dll
  • <SYSTEM32>\btpanui.dll
  • <SYSTEM32>\bitsprx2.dll
  • <SYSTEM32>\autodisc.dll
  • <SYSTEM32>\autoconv.exe
  • <SYSTEM32>\autochk.exe
  • <SYSTEM32>\autolfn.exe
  • <SYSTEM32>\autofmt.exe
  • <SYSTEM32>\AUTOEXEC.NT
  • <SYSTEM32>\attrib.exe
  • <SYSTEM32>\atrace.dll
  • <SYSTEM32>\atmpvcno.dll
  • <SYSTEM32>\authz.dll
  • <SYSTEM32>\auditusr.exe
  • <SYSTEM32>\audiosrv.dll
  • <SYSTEM32>\avicap.dll
  • <SYSTEM32>\batt.dll
  • <SYSTEM32>\batmeter.dll
  • <SYSTEM32>\basesrv.dll
  • <SYSTEM32>\bios4.rom
  • <SYSTEM32>\bios1.rom
  • <SYSTEM32>\bidispl.dll
  • <SYSTEM32>\avifile.dll
  • <SYSTEM32>\avifil32.dll
  • <SYSTEM32>\avicap32.dll
  • <SYSTEM32>\avwav.dll
  • <SYSTEM32>\avtapi.dll
  • <SYSTEM32>\avmeter.dll
  • <SYSTEM32>\csseqchk.dll
  • <SYSTEM32>\dmserver.dll
  • <SYSTEM32>\dmscript.dll
  • <SYSTEM32>\dmremote.exe
  • <SYSTEM32>\dmusic.dll
  • <SYSTEM32>\dmsynth.dll
  • <SYSTEM32>\dmstyle.dll
  • <SYSTEM32>\dmime.dll
  • <SYSTEM32>\dmdskres.dll
  • <SYSTEM32>\dmdskmgr.dll
  • <SYSTEM32>\dmocx.dll
  • <SYSTEM32>\dmloader.dll
  • <SYSTEM32>\dmintf.dll
  • <SYSTEM32>\dmutil.dll
  • <SYSTEM32>\dplay.dll
  • <SYSTEM32>\dpcdll.dll
  • <SYSTEM32>\dosx.exe
  • <SYSTEM32>\dpmodemx.dll
  • <SYSTEM32>\dplayx.dll
  • <SYSTEM32>\dplaysvr.exe
  • <SYSTEM32>\dnsrslvr.dll
  • <SYSTEM32>\dnsapi.dll
  • <SYSTEM32>\dmview.ocx
  • <SYSTEM32>\doskey.exe
  • <SYSTEM32>\docprop2.dll
  • <SYSTEM32>\docprop.dll
  • <SYSTEM32>\dmdlgs.dll
  • <SYSTEM32>\digest.dll
  • <SYSTEM32>\diantz.exe
  • <SYSTEM32>\diactfrm.dll
  • <SYSTEM32>\dinput8.dll
  • <SYSTEM32>\dinput.dll
  • <SYSTEM32>\dimap.dll
  • <SYSTEM32>\dgsetup.dll
  • <SYSTEM32>\dgrpsetu.dll
  • <SYSTEM32>\dgnet.dll
  • <SYSTEM32>\dhcpsapi.dll
  • <SYSTEM32>\dhcpmon.dll
  • <SYSTEM32>\dhcpcsvc.dll
  • <SYSTEM32>\diskcomp.com
  • <SYSTEM32>\dmadmin.exe
  • <SYSTEM32>\dllhst3g.exe
  • <SYSTEM32>\dllhost.exe
  • <SYSTEM32>\dmconfig.dll
  • <SYSTEM32>\dmcompos.dll
  • <SYSTEM32>\dmband.dll
  • <SYSTEM32>\diskmgmt.msc
  • <SYSTEM32>\diskcopy.dll
  • <SYSTEM32>\diskcopy.com
  • <SYSTEM32>\dispex.dll
  • <SYSTEM32>\diskperf.exe
  • <SYSTEM32>\diskpart.exe
  • <SYSTEM32>\dpnaddr.dll
  • <SYSTEM32>\dssec.dat
  • <SYSTEM32>\dsquery.dll
  • <SYSTEM32>\dsprpres.dll
  • <SYSTEM32>\dsuiext.dll
  • <SYSTEM32>\dssenh.dll
  • <SYSTEM32>\dssec.dll
  • <SYSTEM32>\dsound.dll
  • <SYSTEM32>\dskquoui.dll
  • <SYSTEM32>\dskquota.dll
  • <SYSTEM32>\dsprop.dll
  • <SYSTEM32>\dsound3d.dll
  • <SYSTEM32>\dsound.vxd
  • <SYSTEM32>\dswave.dll
  • <SYSTEM32>\dxdiagn.dll
  • <SYSTEM32>\dxdiag.exe
  • <SYSTEM32>\dx8vb.dll
  • <SYSTEM32>\dxtrans.dll
  • <SYSTEM32>\dxtmsft.dll
  • <SYSTEM32>\dxmasf.dll
  • <SYSTEM32>\dvdplay.exe
  • <SYSTEM32>\duser.dll
  • <SYSTEM32>\dumprep.exe
  • <SYSTEM32>\dx7vb.dll
  • <SYSTEM32>\dwwin.exe
  • <SYSTEM32>\dvdupgrd.exe
  • <SYSTEM32>\dsdmoprp.dll
  • <SYSTEM32>\dpvacm.dll
  • <SYSTEM32>\dpserial.dll
  • <SYSTEM32>\dpnwsock.dll
  • <SYSTEM32>\dpvvox.dll
  • <SYSTEM32>\dpvsetup.exe
  • <SYSTEM32>\dpvoice.dll
  • <SYSTEM32>\dpnhupnp.dll
  • <SYSTEM32>\dpnhpast.dll
  • <SYSTEM32>\dpnet.dll
  • <SYSTEM32>\dpnsvr.exe
  • <SYSTEM32>\dpnmodem.dll
  • <SYSTEM32>\dpnlobby.dll
  • <SYSTEM32>\dpwsock.dll
  • <SYSTEM32>\ds16gt.dLL
  • <SYSTEM32>\drwtsn32.exe
  • <SYSTEM32>\drwatson.exe
  • <SYSTEM32>\dsdmo.dll
  • <SYSTEM32>\dsauth.dll
  • <SYSTEM32>\ds32gt.dll
  • <SYSTEM32>\drmclien.dll
  • <SYSTEM32>\driverquery.exe
  • <SYSTEM32>\dpwsockx.dll
  • <SYSTEM32>\drprov.dll
  • <SYSTEM32>\drmv2clt.dll
  • <SYSTEM32>\drmstor.dll
  • <SYSTEM32>\dfsshlex.dll
  • <SYSTEM32>\C_28595.NLS
  • <SYSTEM32>\C_28594.NLS
  • <SYSTEM32>\c_28593.nls
  • <SYSTEM32>\c_28599.nls
  • <SYSTEM32>\c_28598.nls
  • <SYSTEM32>\C_28597.NLS
  • <SYSTEM32>\c_20905.nls
  • <SYSTEM32>\c_20866.nls
  • <SYSTEM32>\c_20261.nls
  • <SYSTEM32>\c_28592.nls
  • <SYSTEM32>\c_28591.nls
  • <SYSTEM32>\c_21866.nls
  • <SYSTEM32>\c_28603.nls
  • <SYSTEM32>\c_857.nls
  • <SYSTEM32>\c_855.nls
  • <SYSTEM32>\c_852.nls
  • <SYSTEM32>\c_863.nls
  • <SYSTEM32>\c_861.nls
  • <SYSTEM32>\c_860.nls
  • <SYSTEM32>\c_500.nls
  • <SYSTEM32>\c_437.nls
  • <SYSTEM32>\c_28605.nls
  • <SYSTEM32>\c_850.nls
  • <SYSTEM32>\c_775.nls
  • <SYSTEM32>\c_737.nls
  • <SYSTEM32>\c_20127.nls
  • <SYSTEM32>\c_10007.nls
  • <SYSTEM32>\c_10006.nls
  • <SYSTEM32>\c_10000.nls
  • <SYSTEM32>\c_10029.nls
  • <SYSTEM32>\c_10017.nls
  • <SYSTEM32>\c_10010.nls
  • <SYSTEM32>\ctl3dv2.dll
  • <SYSTEM32>\ctl3d32.dll
  • <SYSTEM32>\ctfmon.exe
  • <SYSTEM32>\c_037.nls
  • <SYSTEM32>\cygwin1.dll
  • <SYSTEM32>\ctype.nls
  • <SYSTEM32>\c_10079.nls
  • <SYSTEM32>\c_1255.nls
  • <SYSTEM32>\c_1254.nls
  • <SYSTEM32>\c_1253.nls
  • <SYSTEM32>\c_1258.nls
  • <SYSTEM32>\c_1257.nls
  • <SYSTEM32>\c_1256.nls
  • <SYSTEM32>\c_1026.nls
  • <SYSTEM32>\c_10082.nls
  • <SYSTEM32>\c_10081.nls
  • <SYSTEM32>\c_1252.nls
  • <SYSTEM32>\c_1251.nls
  • <SYSTEM32>\c_1250.nls
  • <SYSTEM32>\c_865.nls
  • <SYSTEM32>\debug.exe
  • <SYSTEM32>\ddrawex.dll
  • <SYSTEM32>\ddraw.dll
  • <SYSTEM32>\deskadp.dll
  • <SYSTEM32>\desk.cpl
  • <SYSTEM32>\defrag.exe
  • <SYSTEM32>\dciman32.dll
  • <SYSTEM32>\Dcache.bin
  • <SYSTEM32>\dbnmpntw.dll
  • <SYSTEM32>\ddeshare.exe
  • <SYSTEM32>\ddeml.dll
  • <SYSTEM32>\dcomcnfg.exe
  • <SYSTEM32>\deskmon.dll
  • <SYSTEM32>\dfrgres.dll
  • <SYSTEM32>\dfrgntfs.exe
  • <SYSTEM32>\dfrgfat.exe
  • <SYSTEM32>\dfshim.dll
  • <SYSTEM32>\dfrgui.dll
  • <SYSTEM32>\dfrgsnap.dll
  • <SYSTEM32>\devenum.dll
  • <SYSTEM32>\desktop.ini
  • <SYSTEM32>\deskperf.dll
  • <SYSTEM32>\dfrg.msc
  • <SYSTEM32>\devmgr.dll
  • <SYSTEM32>\devmgmt.msc
  • <SYSTEM32>\dbnetlib.dll
  • <SYSTEM32>\d3d8.dll
  • <SYSTEM32>\c_950.nls
  • <SYSTEM32>\c_949.nls
  • <SYSTEM32>\d3dim.dll
  • <SYSTEM32>\d3d9.dll
  • <SYSTEM32>\d3d8thk.dll
  • <SYSTEM32>\c_874.nls
  • <SYSTEM32>\c_869.nls
  • <SYSTEM32>\c_866.nls
  • <SYSTEM32>\c_936.nls
  • <SYSTEM32>\c_932.nls
  • <SYSTEM32>\c_875.nls
  • <SYSTEM32>\d3dim700.dll
  • <SYSTEM32>\daxctle.ocx
  • <SYSTEM32>\davclnt.dll
  • <SYSTEM32>\datime.dll
  • <SYSTEM32>\dbmsrpcn.dll
  • <SYSTEM32>\dbghelp.dll
  • <SYSTEM32>\dbgeng.dll
  • <SYSTEM32>\d3drm.dll
  • <SYSTEM32>\d3dramp.dll
  • <SYSTEM32>\d3dpmesh.dll
  • <SYSTEM32>\dataclen.dll
  • <SYSTEM32>\danim.dll
  • <SYSTEM32>\d3dxof.dll

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android