Trojan.KillFiles.9273

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IEUpdater' = '%TEMP%\IEUpdater.exe'

Создает или изменяет следующие файлы:

%HOMEPATH%\Start Menu\Programs\startup.exe
%ALLUSERSPROFILE%\Start Menu\Programs\startup.exe

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует отображение:

скрытых файлов
расширений файлов

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9519494798a88867406b5755e1dbded6.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9e71fd0d299c5668c96a54e4a63479fa.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\79c2fd29b1e46c943960278051b4e1b9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\9469981a17c01dd154c540127e678b35.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationframewo#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b4dc4bd8534d90fbb7430926ad990cd9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\reachframework.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\ReachFramework\5c59991df60164cae10fd81b88a8e5b1.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationUI\87fb973e4ab6a21fd00e45656fa7c115.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ef1a93d10c3a91b728745dbfcc79c2c7.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationui.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationfontcac#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\MSBuild\87c84ffaaad81d8d106a9aa9d68b5926.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\28ea74096df47800fe2c78bb2b9a4f2a.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\msbuild.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationbuildta#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationcore.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCore\12dcb10b76012416357bdbb010fdaa97.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\487c1bc20f6e73e8e79503898d17d102.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b6bfb51dec7f8cc42c21c5928470c773.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\presentationcffrast#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\a8e047504bdad9ec14efd483574b0dd5.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.configuratio#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.componentmod#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.addin.contra#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f2b48eab657b4ef1d19dac11bdf0c913.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\22a1629a4dcdd493bbd8be40cc122e94.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Core\6c69930d05c557da70144bcc0add7065.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.core.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.configuration.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb4cb21d14767292e079366a5d3d76cd.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.AddIn\b01721205312c6c18df033cc47b60e5c.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\2e19ccefc30d7b827bab3f7d8dcc0ab9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\smsvchost.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\smdiagnostics.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\servicemodelreg.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\6781b87c8d3b55e6120b1e86bea6e040.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\SMSvcHost\b9c1a29e684bc02e49226ff1e9eec253.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.addin.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\sysglobl.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\sysglobl\6e07cc846884a853b910775fcec87ced.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.vsa.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\aspnetmmcext.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c7ffd8c23e8de4018a88185b3b60631e.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Accessibility\c2af7cfbb47c077029a2645930b4eeac.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\accessibility.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\comsvcconfig.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\dfsvc.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\dfsvc\a2865dcec9c5d3cc9c55f026cbad6fcc.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\e148983beeb0f30918b0564849a16456.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\19b50dd470540911fc5cc65331a769e4.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\custommarshalers.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f236c56a.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_cd264933.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.drawing.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.design.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_27b9fd4f.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_c34133cb.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_353815cd.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.xml.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.windows.forms.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\system.drawing.design.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_7cac80ba.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\7d61e63dea85f4f77ea4c13df7651ec7.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.transacti#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.jscript.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\28eede53267524df58362a75a668cf86.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\43dceeb2d0601d79af40752fb20283c2.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\21bb6244c91b6207fbcb038884a641ef.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.visualc.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\f0e9a97ade4529d4caeccd467aa8e7db.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\5b3d048d8c003d743ea5e72caf07773a.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\539e297cc9bc67fbf2fbdc9dc5fcd0f1.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.visualbas#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.build.uti#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\ce984d7bbd9a6d5d3cca28c4e5038020.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\daf5ff5e06c80eefa80c6fcc79aec963.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.build.eng#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.build.con#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c5c4db4f9bc7a454e9cfc2548a9d45a5.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.build.fra#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\152cf75db013f0523933ac45177b4217.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\cd6eeb3d7ea1f65c28a43e665db38644.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\microsoft.build.tas#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\36dbc4689f7c51e393504230004c9dec.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\66359457e427c0d547750a79f754f9ba.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.speech.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Speech\2e7a6c977ac9f8d46ebe2982697a0c8d.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a9e71dda6389403be4db7b567592e3b8.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\bfa7858f498cd67ef58b689c2e0fec89.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.serviceproce#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.transactions.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web\50ea744ffc3cb7f09b027fd6c5c93b2b.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.abstract#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\_filelst.cfg
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Transactions\12903c3843fe923d1977801ffa3cf26c.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.servicemodel#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.runtime.seri#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\01dc643b54310ebc5ab7e4696df426bc.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3736ba3ecac186f9c5d85f01bda2be98.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Printing\db428f231a2ccaf490ae219efd2edc69.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.runtime.remo#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bb748f8ef8c98eb5c7f79b8faee95397.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\19644a754454916a619b68315e50b428.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.servicemodel.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.security.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Security\0418eb6dbffe9b46aa4c989153d6a3b5.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.routing.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\18e1acd6761195389db42bab83169fd2.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\70764208219715962d310336b5959dfa.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\e5995a34d44ad5af7d9f335075bded4d.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.regulare#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.services.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.windows.pres#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\b5a285233229bb4f9d9831ebf27fe9ac.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9a254c455892c02355ab0ab0f0727c5b.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Services\1dad08772eb89d48a8a0cfe9b0467eb0.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.windows.forms.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.mobile.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c171b28823047a7e9db5f3e092333336.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.entity.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\5bd3f76680b4c09039d42ae873ddd190.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\fbe60d84b9f1ab74e396fb1507f69615.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.dynamicd#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\015d6049e237304a27105c3846c79648.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\79f9b2acf94065fd92c54c29ff66017b.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d8a3d7926a927b9fd62aeabb16a74ab0.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.extensio#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.web.entity.d#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\119750ae4265d719a24ebe245e212db7.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.printing.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f24134b397836c33a65d4d05c54ef4f5.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.sqlxml.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.services.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\8582bf6991112c859e843af4321a2fda.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\fee2e476d10aac7784f46140ee1b4a59.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\0ec1b690c5ee057fa92ecff78de1457c.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Design\204db7071fb26343b0fd3f3d140c0bf8.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.directoryser#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.design.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.deployment.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Deployment\df1efcbac5973454c608890f72eb994d.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.service#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.entity.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\8c050147d7031f912f6ca2b15550173f.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4f4ddae492a4a4ce4a2961f3d72d9399.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data\0b40341027c01716cec1dd97592698e0.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.dataset#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.entity.#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.oraclec#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\57f7cf02ea17b36bc3d9c75c22d0f551.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\fa206c73f39721cd2c55829b9853de44.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\9867484f25281882e61f61066fa651a3.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.data.linq.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.management.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Management\894d87c08a9a5b5923e7104055a616d2.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.IO.Log\bcfccfa22245d2223a764611c61a7cb9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\94b2ca600c860c76e387f8bd317bd4c3.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.io.log.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.management.i#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.net.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Net\eabe1915c13467e1e66e2b073bcb842f.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Messaging\643e95098a9ce99a598d3419b5ce157f.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Management.I#\1db9deebde7c96b2874b4ffccac2f48e.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.messaging.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.identitymodel.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.drawing.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c205bbbb88bfa4bd5e274f43ea0013cb.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\44de75caba2b9711b3d9030a30767f8b.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6bcc481030a56c24d5990d199812c594.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.drawing.desi#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.identitymode#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\be8c7482f1e78a3b4984af9082d455a7.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5f9cd5bfebcb94175d440ebab3aa412f.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\5f5d64dd0e7991aaaad2d98ee52afe42.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.enterprisese#.exe
%WINDIR%\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.configuration.install.exe
%WINDIR%\assembly\GAC_MSIL\system.configuration.exe
%WINDIR%\assembly\GAC_MSIL\system.componentmodel.dataannotations.exe
%WINDIR%\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.data.entity.exe
%WINDIR%\assembly\GAC_MSIL\system.data.datasetextensions.exe
%WINDIR%\assembly\GAC_MSIL\system.core.exe
%WINDIR%\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\sysglobl.exe
%WINDIR%\assembly\GAC_MSIL\smdiagnostics.exe
%WINDIR%\assembly\GAC_MSIL\sentinel.v3.5client.exe
%WINDIR%\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.addin.contract.exe
%WINDIR%\assembly\GAC_MSIL\system.addin.exe
%WINDIR%\assembly\GAC_MSIL\system.exe
%WINDIR%\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.design.exe
%WINDIR%\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.deployment.exe
%WINDIR%\assembly\GAC_MSIL\system.directoryservices.exe
%WINDIR%\assembly\GAC_MSIL\system.directoryservices.protocols.exe
%WINDIR%\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.directoryservices.accountmanagement.exe
%WINDIR%\assembly\GAC_MSIL\system.data.sqlxml.exe
%WINDIR%\assembly\GAC_MSIL\system.data.linq.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.data.entity.design.exe
%WINDIR%\assembly\GAC_MSIL\system.data.services.exe
%WINDIR%\assembly\GAC_MSIL\system.data.services.design.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.data.services.client.exe
%WINDIR%\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualbasic.vsa.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualc.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.vsa.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualc.stlclr.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.utilities.v3.5.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.utilities.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.jscript.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.visualbasic.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.transactions.bridge.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\presentationframework.luna.exe
%WINDIR%\assembly\GAC_MSIL\presentationframework.classic.exe
%WINDIR%\assembly\GAC_MSIL\presentationframework.aero.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\reachframework.exe
%WINDIR%\assembly\GAC_MSIL\presentationui.exe
%WINDIR%\assembly\GAC_MSIL\presentationframework.royale.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\presentationbuildtasks.exe
%WINDIR%\assembly\GAC_MSIL\microsoft_vsavb.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.vsa.vb.codedomprocessor.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\presentationframework.exe
%WINDIR%\assembly\GAC_MSIL\presentationfontcache.exe
%WINDIR%\assembly\GAC_MSIL\presentationcffrasterizer.exe
%WINDIR%\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\system.windows.presentation.exe
%WINDIR%\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.windows.forms.exe
%WINDIR%\assembly\GAC_MSIL\system.workflow.activities.exe
%WINDIR%\assembly\GAC_MSIL\system.workflow.runtime.exe
%WINDIR%\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\system.workflow.componentmodel.exe
%WINDIR%\assembly\GAC_MSIL\system.web.services.exe
%WINDIR%\assembly\GAC_MSIL\system.web.extensions.design.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.web.extensions.exe
%WINDIR%\assembly\GAC_MSIL\system.web.mobile.exe
%WINDIR%\assembly\GAC_MSIL\system.web.routing.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.web.regularexpressions.exe
%WINDIR%\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\windowsformsintegration.exe
%WINDIR%\assembly\GAC_MSIL\windowsbase.exe
%WINDIR%\assembly\GAC_MSIL\uiautomationtypes.exe
%WINDIR%\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_5917eb5b.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b50667e9.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322.exe
%WINDIR%\assembly\NativeImages1_v1.1.4322\custommarshalers.exe
%WINDIR%\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.xml.linq.exe
%WINDIR%\assembly\GAC_MSIL\system.xml.exe
%WINDIR%\assembly\GAC_MSIL\system.workflowservices.exe
%WINDIR%\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\uiautomationprovider.exe
%WINDIR%\assembly\GAC_MSIL\uiautomationclientsideproviders.exe
%WINDIR%\assembly\GAC_MSIL\uiautomationclient.exe
%WINDIR%\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\system.web.entity.design.exe
%WINDIR%\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.net.exe
%WINDIR%\assembly\GAC_MSIL\system.messaging.exe
%WINDIR%\assembly\GAC_MSIL\system.management.instrumentation.exe
%WINDIR%\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.runtime.serialization.formatters.soap.exe
%WINDIR%\assembly\GAC_MSIL\system.runtime.serialization.exe
%WINDIR%\assembly\GAC_MSIL\system.runtime.remoting.exe
%WINDIR%\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.identitymodel.exe
%WINDIR%\assembly\GAC_MSIL\system.drawing.design.exe
%WINDIR%\assembly\GAC_MSIL\system.drawing.exe
%WINDIR%\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.management.exe
%WINDIR%\assembly\GAC_MSIL\system.io.log.exe
%WINDIR%\assembly\GAC_MSIL\system.identitymodel.selectors.exe
%WINDIR%\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.web.abstractions.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.speech.exe
%WINDIR%\assembly\GAC_MSIL\system.web.dynamicdata.exe
%WINDIR%\assembly\GAC_MSIL\system.web.entity.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\system.web.dynamicdata.design.exe
%WINDIR%\assembly\GAC_MSIL\system.serviceprocess.exe
%WINDIR%\assembly\GAC_MSIL\system.servicemodel.exe
%WINDIR%\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\system.security.exe
%WINDIR%\assembly\GAC_MSIL\system.servicemodel.install.exe
%WINDIR%\assembly\GAC_MSIL\system.servicemodel.web.exe
%WINDIR%\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_MSIL\system.servicemodel.washosting.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.configuration.install.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.configuration.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.core.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.entity.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.datasetextensions.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.componentmodel.dataannotations.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.activities.presentation.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.activities.durableinstancing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.addin.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.componentmodel.composition.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.addin.contract.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.device.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.deployment.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.directoryservices.protocols.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.directoryservices.accountmanagement.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.directoryservices.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.services.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.linq.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.entity.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.sqlxml.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.services.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.data.services.client.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.activities.core.presentation.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.visualc.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationbuildtasks.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.workflow.compiler.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.visualc.stlclr.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.csharp.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.utilities.v4.0.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.tasks.v4.0.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.visualbasic.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.transactions.bridge.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.jscript.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\smdiagnostics.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\reachframework.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\sysglobl.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.activities.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationui.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationframework.aero.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationframework.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationframework.classic.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationframework.royale.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\presentationframework.luna.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.datavisualization.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.datavisualization.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.applicationservices.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.entity.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.dynamicdata.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.dynamicdata.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.web.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.washosting.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.servicemoniker40.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.abstractions.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.speech.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.serviceprocess.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.windows.forms.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.services.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.windows.forms.datavisualization.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.windows.input.manipulations.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.windows.forms.datavisualization.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.routing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.extensions.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.entity.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.extensions.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.regularexpressions.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.web.mobile.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.management.instrumentation.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.management.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.messaging.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.numerics.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.net.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.io.log.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.drawing.design.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.drawing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.dynamic.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.identitymodel.selectors.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.identitymodel.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.activities.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.activation.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.routing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.discovery.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.servicemodel.channels.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.runtime.remoting.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.runtime.durableinstancing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.runtime.caching.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.security.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.runtime.serialization.formatters.soap.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\system.runtime.serialization.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\87a713cee613d08ee04ae9483a9d4716.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.data.sqlxml.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.data.linq.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.data.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\1fdd0961d8d07ef4d1fcaf30f0050c0a.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.drawing.desi#.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.drawing.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.design.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Design\95a46d4775428acf5dd84f12aaa9f06f.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.core.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.configuration.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.componentmod#.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c.exe
%WINDIR%\assembly\tmp.exe
%WINDIR%\config.exe
%WINDIR%\assembly\temp.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\windowsbase.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62.exe
%WINDIR%\connection wizard.exe
%WINDIR%\downloaded program files.exe
%WINDIR%\driver cache.exe
%WINDIR%\Debug\usermode.exe
%WINDIR%\cursors.exe
%WINDIR%\debug.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\temp.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.numerics.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Dynamic\1331ee3a7146218388537aa7e41303af.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\8f9993d3eb4cd33d1452155f79b23d65.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.dynamic.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.security.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.xml.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Security\09a97525ae5583cc2685e2c39a3078bd.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\system.windows.forms.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Temp\zap39.tmp.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\uiautomationclient.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Temp\zap1b.tmp.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\temp.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Temp\zap1ac.tmp.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\d255ab525d10d8fefe5df9ba092b2df8.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\8f5c0e1b77c840d99a68897898317b79.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\uiautomationtypes.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\uiautomationprovider.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\uiautomationclients#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\8698f073a59ef0db10a3258b1f1deaee.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\8c0d96269480bdd3de8a825f0215308d.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9de33f5786cd15e220f47b916c5a15e9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.workflow.run#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.workflow.com#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.workflow.act#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\d6cc33db5d526553ffbbfd1d372a8493.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6d0966370023925610756f368140b947.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.xml.linq.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.xml.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\system.workflowserv#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\43911ac4e29949c57560eee5cb7b76c2.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\dfsvc\b9b6069e6da06eb57e89cc544397f735.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\microsoft.csharp.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\dfsvc.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\comsvcconfig.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\51819c709096229ee187a7feee395d9f.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\presentationframewo#.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\presentationcore.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\03bf63d8ea6622a32b9a3fc6851801a9.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\windowsformsintegra#.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a18dff8832712a0f6cccaaefbcc45861.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\WindowsBase\df20e56b59b1b1a595af305ddc0777ba.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\dbb2fcd246efaf3df823410597cd1677.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\windowsbase.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\wsatconfig.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\aspnetmmcext.exe
%WINDIR%\assembly\NativeImages_v4.0.30319_32\accessibility.exe
%WINDIR%\assembly\NativeImages_v2.0.50727_32\WsatConfig\7d2a3adbdcb675f872eb2dbf21f73596.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\microsoft.visualbasic.activities.compiler.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\microsoft.transactions.bridge.dtc.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.data.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\presentationcore.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\isymwrapper.exe
%WINDIR%\java\classes.exe
%WINDIR%\java\trustlib.exe
%WINDIR%\java.exe
%WINDIR%\Installer\{baf78226-3200-4db4-be33-4d922a799840}.exe
%WINDIR%\Installer\{fe9126db-5f84-495a-bb46-3c724f1c2d08}.exe
%WINDIR%\media.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\custommarshalers.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\gac_32.exe
%WINDIR%\microsoft.net.exe
%WINDIR%\Microsoft.NET\assembly.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\aspnetmmcext.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.conversion.v4.0.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.framework.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\microsoft.build.engine.exe
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\accessibility.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.printing.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.enterpriseservices.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.data.oracleclient.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\Microsoft.NET\assembly\gac_msil.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.web.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\system.transactions.exe
%WINDIR%\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089.exe
%WINDIR%\Installer\{350c97b0-3d7c-4ee8-baa9-00bcb3d54227}.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\scr.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\video.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\Img\wmarks.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\img.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\Img\btn.exe
%WINDIR%\ime.exe
%WINDIR%\ime\CHTIME\applets.exe
%WINDIR%\ime\imejp.exe
%WINDIR%\ime\chtime.exe
%WINDIR%\ime\chsime.exe
%WINDIR%\ime\chsime\applets.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\css.exe
%WINDIR%\help.exe
%WINDIR%\Help\tours.exe
%WINDIR%\fonts.exe
%WINDIR%\Driver Cache\i386.exe
%WINDIR%\ehome.exe
%WINDIR%\Help\Tours\htmltour.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\wav.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\cnt.exe
%WINDIR%\Help\Tours\WindowsMediaPlayer\audio.exe
%WINDIR%\Help\Tours\mmtour.exe
%WINDIR%\Help\Tours\windowsmediaplayer.exe
%WINDIR%\Installer\$PatchCache$\Managed\26ddc2ec4210ac63483df9d4fcc5b59d.exe
%WINDIR%\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729.exe
%WINDIR%\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729.exe
%WINDIR%\Installer\$PatchCache$\managed.exe
%WINDIR%\Installer\$PatchCache$\Managed\0dc1503a46f231838ad88bcddc8e8f7c.exe
%WINDIR%\Installer\$PatchCache$\Managed\62287fab00234bd4eb33d429a2978904.exe
%WINDIR%\Installer\$PatchCache$\Managed\dde7f2bcf1d91c3409cff425ae1e271a.exe
%WINDIR%\Installer\$PatchCache$\Managed\DDE7F2BCF1D91C3409CFF425AE1E271A\1.1.4322.exe
%WINDIR%\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729.exe
%WINDIR%\Installer\$PatchCache$\Managed\62287FAB00234BD4EB33D429A2978904\3.0.6920.exe
%WINDIR%\Installer\$PatchCache$\Managed\dc3bf90cc0d3d2f398a9a6d1762f70f3.exe
%WINDIR%\Installer\$patchcache$.exe
%WINDIR%\ime\imjp8_1\applets.exe
%WINDIR%\ime\imkr6_1.exe
%WINDIR%\ime\imjp8_1.exe
%WINDIR%\ime\imejp\applets.exe
%WINDIR%\ime\imejp98.exe
%WINDIR%\ime\imkr6_1\applets.exe
%WINDIR%\inf.exe
%WINDIR%\installer.exe
%WINDIR%\ime\shared\res.exe
%WINDIR%\ime\imkr6_1\dicts.exe
%WINDIR%\ime\shared.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.tasks.v3.5.exe
C:\Far2\Plugins\7-zip.exe
C:\Far2\Plugins\align.exe
C:\Far2\plugins.exe
C:\Far2\encyclopedia.exe
C:\Far2\fexcept.exe
C:\Far2\Plugins\arclite.exe
C:\Far2\Plugins\Colorer\bin.exe
C:\Far2\Plugins\Colorer\hrc.exe
C:\Far2\Plugins\colorer.exe
C:\Far2\Plugins\autowrap.exe
C:\Far2\Plugins\brackets.exe
C:\Far2\Documentation\rus.exe
C:\Far2\Addons\Colors\default highlighting.exe
C:\Far2\Addons\macros.exe
C:\Far2\Addons\Colors\custom highlighting.exe
C:\Far2\addons.exe
C:\Far2\Addons\colors.exe
C:\Far2\Addons\setup.exe
C:\Far2\documentation.exe
C:\Far2\Documentation\eng.exe
C:\Far2\Addons\XLat\russian.exe
C:\Far2\Addons\shell.exe
C:\Far2\Addons\xlat.exe
C:\Far2\Plugins\filecase.exe
C:\Far2\Plugins\ftp.exe
C:\Far2\Plugins\farcmds.exe
C:\Far2\Plugins\ExtSearch\sources.exe
C:\Far2\Plugins\ExtSearch\sources\regexp.exe
C:\Far2\Plugins\FTP\lib.exe
C:\Far2\Plugins\proclist.exe
C:\Far2\Plugins\tmppanel.exe
C:\Far2\Plugins\network.exe
C:\Far2\Plugins\hlfviewer.exe
C:\Far2\Plugins\macroview.exe
C:\Far2\Plugins\ExtSearch\keys.exe
C:\Far2\Plugins\Colorer\hrd\console.exe
C:\Far2\Plugins\Colorer\hrd\console\contrib.exe
C:\Far2\Plugins\Colorer\hrd.exe
C:\Far2\Plugins\Colorer\hrc\auto.exe
C:\Far2\Plugins\Colorer\hrc\auto\types.exe
C:\Far2\Plugins\compare.exe
C:\Far2\Plugins\extsearch.exe
C:\Far2\Plugins\ExtSearch\doc.exe
C:\Far2\Plugins\emenu.exe
C:\Far2\Plugins\drawline.exe
C:\Far2\Plugins\editcase.exe
C:\far2.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\c.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\d.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\b.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\a.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\e.exe
%HOMEPATH%\Local Settings\history.exe
%HOMEPATH%\Local Settings\History\history.ie5.exe
<LS_APPDATA>\vmware.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\f.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupcache.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\cache.exe
<LS_APPDATA>\Mozilla\Firefox\profiles.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4.exe
%HOMEPATH%\recent.exe
%HOMEPATH%\sendto.exe
%HOMEPATH%\printhood.exe
%HOMEPATH%\My Documents\my received files.exe
%HOMEPATH%\nethood.exe
%HOMEPATH%\start menu.exe
%HOMEPATH%\Start Menu\Programs\Accessories\entertainment.exe
%HOMEPATH%\templates.exe
%HOMEPATH%\Start Menu\Programs\Accessories\accessibility.exe
%HOMEPATH%\Start Menu\programs.exe
%HOMEPATH%\Start Menu\Programs\accessories.exe
%HOMEPATH%\My Documents\my pictures.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\content.ie5.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2vazy7an.exe
%HOMEPATH%\Local Settings\temporary internet files.exe
%HOMEPATH%\Local Settings\History\History.IE5\mshist012011111020111111.exe
%HOMEPATH%\Local Settings\temp.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\khmhgz4f.exe
%HOMEPATH%\My Documents\downloads.exe
%HOMEPATH%\My Documents\my music.exe
%HOMEPATH%\my documents.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\u98d4x8h.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\yporkzyz.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut.exe
%CommonProgramFiles%\mssoap.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin.exe
%CommonProgramFiles%\Microsoft Shared\vgx.exe
%CommonProgramFiles%\Microsoft Shared\web folders.exe
%CommonProgramFiles%\Microsoft Shared\vc.exe
%CommonProgramFiles%\Microsoft Shared\textconv.exe
%CommonProgramFiles%\Microsoft Shared\triedit.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi.exe
%CommonProgramFiles%\System\ole db.exe
%PROGRAM_FILES%\complus applications.exe
%CommonProgramFiles%\System\msadc.exe
%CommonProgramFiles%\system.exe
%CommonProgramFiles%\System\ado.exe
%PROGRAM_FILES%\firefox.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\branding.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content.exe
%PROGRAM_FILES%\FireFox\chrome.exe
%PROGRAM_FILES%\FireFox\chrome\browser.exe
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033.exe
%CommonProgramFiles%\odbc.exe
%CommonProgramFiles%\ODBC\data sources.exe
%CommonProgramFiles%\MSSoap\Binaries\Resources\1033.exe
%CommonProgramFiles%\MSSoap\binaries.exe
%CommonProgramFiles%\MSSoap\Binaries\resources.exe
%CommonProgramFiles%\services.exe
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033.exe
%CommonProgramFiles%\SpeechEngines\Microsoft\tts.exe
%CommonProgramFiles%\SpeechEngines\Microsoft\lexicon.exe
%CommonProgramFiles%\speechengines.exe
%CommonProgramFiles%\SpeechEngines\microsoft.exe
%CommonProgramFiles%\Microsoft Shared\stationery.exe
C:\Far2\Plugins\WinSCP\packages\tb2k.exe
C:\Far2\Plugins\WinSCP\packages\tbx.exe
C:\Far2\Plugins\WinSCP\packages\my.exe
C:\Far2\Plugins\WinSCP\packages\dragndrop.exe
C:\Far2\Plugins\WinSCP\packages\filemng.exe
C:\Far2\Plugins\WinSCP\packages\theme.exe
C:\Far2\Plugins\WinSCP\release.exe
C:\Far2\Plugins\WinSCP\resource.exe
C:\Far2\Plugins\WinSCP\putty\windows.exe
C:\Far2\Plugins\WinSCP\putty.exe
C:\Far2\Plugins\WinSCP\putty\charset.exe
C:\Far2\Plugins\WinSCP\packages.exe
C:\Far2\Plugins\WinSCP\core.exe
C:\Far2\Plugins\WinSCP\dragext.exe
C:\Far2\Plugins\WinSCP\console.exe
C:\Far2\Plugins\winscp.exe
C:\Far2\Plugins\WinSCP\components.exe
C:\Far2\Plugins\WinSCP\far.exe
C:\Far2\Plugins\WinSCP\forms.exe
C:\Far2\Plugins\WinSCP\lib.exe
C:\Far2\Plugins\WinSCP\filezilla\misc.exe
C:\Far2\Plugins\WinSCP\fari.exe
C:\Far2\Plugins\WinSCP\filezilla.exe
%CommonProgramFiles%\Microsoft Shared\DW\1040.exe
%CommonProgramFiles%\Microsoft Shared\DW\1041.exe
%CommonProgramFiles%\Microsoft Shared\DW\1036.exe
%CommonProgramFiles%\Microsoft Shared\DW\1031.exe
%CommonProgramFiles%\Microsoft Shared\DW\1033.exe
%CommonProgramFiles%\Microsoft Shared\DW\1042.exe
%CommonProgramFiles%\Microsoft Shared\speech.exe
%CommonProgramFiles%\Microsoft Shared\Speech\1033.exe
%CommonProgramFiles%\Microsoft Shared\msinfo.exe
%CommonProgramFiles%\Microsoft Shared\DW\2052.exe
%CommonProgramFiles%\Microsoft Shared\DW\3082.exe
%CommonProgramFiles%\Microsoft Shared\DW\1028.exe
C:\Far2\PluginSDK\headers.pas.exe
C:\<Служебное имя>.exe
C:\Far2\PluginSDK\headers.c.exe
C:\Far2\Plugins\WinSCP\windows.exe
C:\Far2\pluginsdk.exe
%PROGRAM_FILES%.exe
%CommonProgramFiles%\Microsoft Shared\dw.exe
%CommonProgramFiles%\Microsoft Shared\DW\1025.exe
%CommonProgramFiles%\Microsoft Shared\dao.exe
%CommonProgramFiles%.exe
%CommonProgramFiles%\microsoft shared.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0.exe
C:\Documents and Settings\Default User\Local Settings\history.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\windows media.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\microsoft.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\media player.exe
C:\Documents and Settings\Default User\Local Settings\History\history.ie5.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\2vazy7an.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\khmhgz4f.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\content.ie5.exe
C:\Documents and Settings\Default User\Local Settings\temp.exe
C:\Documents and Settings\Default User\Local Settings\temporary internet files.exe
C:\Documents and Settings\Default User\Local Settings\application data.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\my.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\certificates.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\systemcertificates.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\internet explorer.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\media player.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\crls.exe
C:\Documents and Settings\Default User\favorites.exe
C:\Documents and Settings\Default User\local settings.exe
C:\Documents and Settings\Default User\desktop.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\ctls.exe
C:\Documents and Settings\Default User\cookies.exe
C:\Documents and Settings\LocalService\application data.exe
C:\Documents and Settings\LocalService\Application Data\microsoft.exe
C:\Documents and Settings\localservice.exe
C:\Documents and Settings\Default User\Start Menu\Programs\startup.exe
C:\Documents and Settings\Default User\templates.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\credentials.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\systemcertificates.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\my.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\media player.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\s-1-5-19.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\internet explorer.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\entertainment.exe
C:\Documents and Settings\Default User\nethood.exe
C:\Documents and Settings\Default User\printhood.exe
C:\Documents and Settings\Default User\my documents.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\u98d4x8h.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\yporkzyz.exe
C:\Documents and Settings\Default User\recent.exe
C:\Documents and Settings\Default User\Start Menu\Programs\accessories.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\accessibility.exe
C:\Documents and Settings\Default User\Start Menu\programs.exe
C:\Documents and Settings\Default User\sendto.exe
C:\Documents and Settings\Default User\start menu.exe
C:\Documents and Settings\Default User\Application Data\microsoft.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\media player.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\network.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\media index.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\dr watson.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\html help.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\connections.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\default pictures.exe
%ALLUSERSPROFILE%\desktop.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\user account pictures.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\cm.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\pbk.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\s-1-5-18.exe
%ALLUSERSPROFILE%.exe
%ALLUSERSPROFILE%\application data.exe
C:\documents and settings.exe
%TEMP%\IEUpdater.exe
<Текущая директория>.exe
%ALLUSERSPROFILE%\Application Data\microsoft.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\rsa.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\machinekeys.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\machinekeys.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\crypto.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\dss.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\communications.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\entertainment.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\accessibility.exe
%ALLUSERSPROFILE%\Start Menu\programs.exe
%ALLUSERSPROFILE%\Start Menu\Programs\accessories.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\system tools.exe
C:\Documents and Settings\default user.exe
C:\Documents and Settings\Default User\application data.exe
%ALLUSERSPROFILE%\templates.exe
%ALLUSERSPROFILE%\Start Menu\Programs\administrative tools.exe
%ALLUSERSPROFILE%\Start Menu\Programs\games.exe
%ALLUSERSPROFILE%\start menu.exe
%ALLUSERSPROFILE%\Documents\My Music\sample music.exe
%ALLUSERSPROFILE%\Documents\My Music\sample playlists.exe
%ALLUSERSPROFILE%\Documents\My Music\my playlists.exe
%ALLUSERSPROFILE%\documents.exe
%ALLUSERSPROFILE%\Documents\my music.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338e140.exe
%ALLUSERSPROFILE%\drm.exe
%ALLUSERSPROFILE%\favorites.exe
%ALLUSERSPROFILE%\Documents\my videos.exe
%ALLUSERSPROFILE%\Documents\my pictures.exe
%ALLUSERSPROFILE%\Documents\My Pictures\sample pictures.exe
%APPDATA%\Microsoft\SystemCertificates\My\crls.exe
%APPDATA%\Microsoft\SystemCertificates\My\ctls.exe
%APPDATA%\Microsoft\SystemCertificates\My\certificates.exe
%APPDATA%\Microsoft\systemcertificates.exe
%APPDATA%\Microsoft\SystemCertificates\my.exe
%APPDATA%\Microsoft\windows.exe
%APPDATA%\Mozilla\firefox.exe
%APPDATA%\Mozilla\Firefox\profiles.exe
%APPDATA%\Mozilla\extensions.exe
%APPDATA%\Microsoft\Windows\themes.exe
%APPDATA%\mozilla.exe
%APPDATA%\Microsoft\mmc.exe
%APPDATA%\Identities\{5518f2fb-db74-45a3-bec1-4575d8d9dc84}.exe
%APPDATA%\microsoft.exe
%APPDATA%\identities.exe
%HOMEPATH%.exe
%APPDATA%.exe
%APPDATA%\Microsoft\address book.exe
%APPDATA%\Microsoft\Internet Explorer\quick launch.exe
%APPDATA%\Microsoft\media player.exe
%APPDATA%\Microsoft\internet explorer.exe
%APPDATA%\Microsoft\credentials.exe
%APPDATA%\Microsoft\Credentials\s-1-5-21-2052111302-484763869-725345543-1003.exe
<LS_APPDATA>\Microsoft\credentials.exe
<LS_APPDATA>\Microsoft\Credentials\s-1-5-21-2052111302-484763869-725345543-1003.exe
<LS_APPDATA>\Microsoft\cd burning.exe
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\outlook express.exe
<LS_APPDATA>\microsoft.exe
<LS_APPDATA>\Microsoft\media player.exe
<LS_APPDATA>\mozilla.exe
<LS_APPDATA>\Mozilla\firefox.exe
<LS_APPDATA>\Microsoft\Windows Media\9.0.exe
<LS_APPDATA>\Microsoft\windows.exe
<LS_APPDATA>\Microsoft\windows media.exe
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\microsoft.exe
%HOMEPATH%\cookies.exe
%HOMEPATH%\desktop.exe
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome.exe
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default.exe
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups.exe
%HOMEPATH%\favorites.exe
<LS_APPDATA>\identities.exe
<LS_APPDATA>\Identities\{5518f2fb-db74-45a3-bec1-4575d8d9dc84}.exe
<LS_APPDATA>.exe
%HOMEPATH%\Favorites\links.exe
%HOMEPATH%\local settings.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\yporkzyz.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\bggtymh1.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\cjctq25g.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\content.ie5.exe
C:\Documents and Settings\LocalService\Local Settings\temp.exe
C:\Documents and Settings\LocalService\Local Settings\temporary internet files.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\lbmmc3h3.exe
C:\Documents and Settings\NetworkService\Application Data\microsoft.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\credentials.exe
C:\Documents and Settings\NetworkService\application data.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\moe00uy1.exe
C:\Documents and Settings\networkservice.exe
C:\Documents and Settings\LocalService\Local Settings\History\history.ie5.exe
C:\Documents and Settings\LocalService\cookies.exe
C:\Documents and Settings\LocalService\local settings.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\ctls.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\certificates.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\crls.exe
C:\Documents and Settings\LocalService\Local Settings\application data.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\windows.exe
C:\Documents and Settings\LocalService\Local Settings\history.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\s-1-5-19.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\microsoft.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\credentials.exe
C:\Documents and Settings\NetworkService\Local Settings\history.exe
C:\Documents and Settings\NetworkService\Local Settings\History\history.ie5.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\windows.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\credentials.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\s-1-5-20.exe
C:\Documents and Settings\NetworkService\Local Settings\temp.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\khmhgz4f.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\u98d4x8h.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2vazy7an.exe
C:\Documents and Settings\NetworkService\Local Settings\temporary internet files.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\content.ie5.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\microsoft.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\systemcertificates.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\my.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\media player.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\s-1-5-20.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\internet explorer.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\certificates.exe
C:\Documents and Settings\NetworkService\local settings.exe
C:\Documents and Settings\NetworkService\Local Settings\application data.exe
C:\Documents and Settings\NetworkService\cookies.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\crls.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\ctls.exe
%WINDIR%\addins.exe
%WINDIR%\apppatch.exe
%WINDIR%\$NtUninstallWIC$\spuninst.exe
%WINDIR%\$NtUninstallKB942288-v3$\spuninst.exe
%WINDIR%\$ntuninstallwic$.exe
%WINDIR%\assembly.exe
%WINDIR%\assembly\GAC\cscompmgd.exe
%WINDIR%\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\gac.exe
%WINDIR%\assembly\GAC\accessibility.exe
%WINDIR%\$ntuninstallkb942288-v3$.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot\repository.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\rp14.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot\Repository\fs.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\rp13.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot\Repository\fs.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot\Repository\fs.exe
%WINDIR%.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot\repository.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\rp15.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot.exe
%WINDIR%\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\microsoft.visualc.exe
%WINDIR%\assembly\GAC\microsoft.visualbasic.vsa.exe
%WINDIR%\assembly\GAC\microsoft.visualbasic.exe
%WINDIR%\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\microsoft_vsavb.exe
%WINDIR%\assembly\GAC\microsoft.vsa.vb.codedomprocessor.exe
%WINDIR%\assembly\GAC\microsoft.vsa.exe
%WINDIR%\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\iehost.exe
%WINDIR%\assembly\GAC\ieexecremote.exe
%WINDIR%\assembly\GAC\custommarshalers.exe
%WINDIR%\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\microsoft.jscript.exe
%WINDIR%\assembly\GAC\isymwrapper.exe
%WINDIR%\assembly\GAC\iiehost.exe
%WINDIR%\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot\repository.exe
%PROGRAM_FILES%\MSN Gaming Zone\windows.exe
%PROGRAM_FILES%\netmeeting.exe
%PROGRAM_FILES%\msn gaming zone.exe
%PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msn9components.exe
%PROGRAM_FILES%\MSN\MSNCoreFiles\oobe.exe
%PROGRAM_FILES%\online services.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\framework.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.0.exe
%PROGRAM_FILES%\Reference Assemblies\microsoft.exe
%PROGRAM_FILES%\outlook express.exe
%PROGRAM_FILES%\reference assemblies.exe
%PROGRAM_FILES%\MSN\MSNCoreFiles\install.exe
%PROGRAM_FILES%\Movie Maker\Shared\profiles.exe
%PROGRAM_FILES%\msbuild.exe
%PROGRAM_FILES%\Movie Maker\shared.exe
%PROGRAM_FILES%\Movie Maker\mui.exe
%PROGRAM_FILES%\Movie Maker\MUI\0409.exe
%PROGRAM_FILES%\MSBuild\microsoft.exe
%PROGRAM_FILES%\msn.exe
%PROGRAM_FILES%\MSN\msncorefiles.exe
%PROGRAM_FILES%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5.exe
%PROGRAM_FILES%\MSBuild\Microsoft\windows workflow foundation.exe
%PROGRAM_FILES%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0.exe
%PROGRAM_FILES%\xerox.exe
%PROGRAM_FILES%\xerox\nwwia.exe
%PROGRAM_FILES%\windowsupdate.exe
%PROGRAM_FILES%\Windows NT\accessories.exe
%PROGRAM_FILES%\Windows NT\pinball.exe
C:\recycler.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\rp12.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot.exe
C:\system volume information.exe
C:\RECYCLER\s-1-5-21-2052111302-484763869-725345543-1003.exe
<Служебный элемент>
%PROGRAM_FILES%\windows nt.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.5\redistlist.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.5\subsetlist.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.5.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.0\redistlist.exe
%PROGRAM_FILES%\Reference Assemblies\Microsoft\Framework\v3.0\subsetlist.exe
%PROGRAM_FILES%\uninstall information.exe
%PROGRAM_FILES%\Windows Media Player\skins.exe
%PROGRAM_FILES%\Windows Media Player\visualizations.exe
%PROGRAM_FILES%\Windows Media Player\sample playlists.exe
%PROGRAM_FILES%\windows media player.exe
%PROGRAM_FILES%\Windows Media Player\icons.exe
%WINDIR%\assembly\GAC_32\system.enterpriseservices.exe
%WINDIR%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_32\system.data.oracleclient.exe
%WINDIR%\assembly\GAC_32\system.printing.exe
%WINDIR%\assembly\GAC_32\system.web.exe
%WINDIR%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_32\system.transactions.exe
%WINDIR%\assembly\GAC_32\system.data.exe
%WINDIR%\assembly\GAC_32\isymwrapper.exe
%WINDIR%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\gac_32.exe
%WINDIR%\assembly\GAC_32\custommarshalers.exe
%WINDIR%\assembly\GAC_32\microsoft.transactions.bridge.dtc.exe
%WINDIR%\assembly\GAC_32\presentationcore.exe
%WINDIR%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35.exe
%WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_32\mscorlib.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.engine.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.conversion.v3.5.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.tasks.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\microsoft.build.framework.exe
%WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\iiehost.exe
%WINDIR%\assembly\GAC_MSIL\aspnetmmcext.exe
%WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\gac_msil.exe
%WINDIR%\assembly\GAC_MSIL\accessibility.exe
%WINDIR%\assembly\GAC_MSIL\cscompmgd.exe
%WINDIR%\assembly\GAC_MSIL\iehost.exe
%WINDIR%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC_MSIL\ieexecremote.exe
%WINDIR%\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\system.directoryservices.exe
%WINDIR%\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\system.design.exe
%WINDIR%\assembly\GAC\system.drawing.exe
%WINDIR%\assembly\GAC\system.enterpriseservices.exe
%WINDIR%\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\system.drawing.design.exe
%WINDIR%\assembly\GAC\system.data.oracleclient.exe
%WINDIR%\assembly\GAC\regcode.exe
%WINDIR%\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\mscorcfg.exe
%WINDIR%\assembly\GAC\system.exe
%WINDIR%\assembly\GAC\system.data.exe
%WINDIR%\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\system.configuration.install.exe
%WINDIR%\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\system.web.regularexpressions.exe
%WINDIR%\assembly\GAC\system.web.mobile.exe
%WINDIR%\assembly\GAC\system.web.exe
%WINDIR%\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\system.xml.exe
%WINDIR%\assembly\GAC\system.windows.forms.exe
%WINDIR%\assembly\GAC\system.web.services.exe
%WINDIR%\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\system.runtime.remoting.exe
%WINDIR%\assembly\GAC\system.messaging.exe
%WINDIR%\assembly\GAC\system.management.exe
%WINDIR%\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089.exe
%WINDIR%\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a.exe
%WINDIR%\assembly\GAC\system.serviceprocess.exe
%WINDIR%\assembly\GAC\system.security.exe
%WINDIR%\assembly\GAC\system.runtime.serialization.formatters.soap.exe
%WINDIR%\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\profile.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\update.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\handling.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pippki.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\places.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pipnss.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\necko.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\passwordmgr.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xslt.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xpinstall.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\svg.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xml.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\mac.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-region.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\unix.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\win.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\downloads.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\extensions.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\svg.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\xml.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\handling.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\update.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\xpinstall.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\profile.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\plugins.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow.exe
%PROGRAM_FILES%\FireFox\chrome\pippki\content.exe
%PROGRAM_FILES%\FireFox\chrome\pippki\content\pippki.exe
%PROGRAM_FILES%\FireFox\chrome\pippki.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\services.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\feedback.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\alerts.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\bindings.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\cookie.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\security.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places.exe
%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-us.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\alerts.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser-region.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\safebrowsing.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\sidebar.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\autoconfig.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\layout.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\search.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\dom.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\cookie.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\preferences.exe
%PROGRAM_FILES%\FireFox\chrome\en-us.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser.exe
%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\migration.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\places.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\feeds.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser.exe
%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads.exe
%PROGRAM_FILES%\FireFox\defaults\profile\chrome.exe
%PROGRAM_FILES%\FireFox\dictionaries.exe
%PROGRAM_FILES%\FireFox\defaults\profile.exe
%PROGRAM_FILES%\FireFox\defaults\autoconfig.exe
%PROGRAM_FILES%\FireFox\defaults\pref.exe
%PROGRAM_FILES%\FireFox\extensions.exe
%PROGRAM_FILES%\FireFox\modules\services-sync.exe
%PROGRAM_FILES%\FireFox\modules\services-sync\engines.exe
%PROGRAM_FILES%\FireFox\modules\services-crypto.exe
%PROGRAM_FILES%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.exe
%PROGRAM_FILES%\FireFox\modules.exe
%PROGRAM_FILES%\FireFox\defaults.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\places.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\handling.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall.exe
%PROGRAM_FILES%\FireFox\components.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\profile.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\update.exe
%PROGRAM_FILES%\Internet Explorer\signup.exe
%PROGRAM_FILES%\messenger.exe
%PROGRAM_FILES%\Internet Explorer\plugins.exe
%PROGRAM_FILES%\Internet Explorer\mui.exe
%PROGRAM_FILES%\Internet Explorer\MUI\0409.exe
%PROGRAM_FILES%\microsoft frontpage.exe
%PROGRAM_FILES%\Microsoft.NET\redistlist.exe
%PROGRAM_FILES%\movie maker.exe
%PROGRAM_FILES%\microsoft.net.exe
%PROGRAM_FILES%\microsoft frontpage\version3.0.exe
%PROGRAM_FILES%\microsoft frontpage\version3.0\bin.exe
%PROGRAM_FILES%\Internet Explorer\connection wizard.exe
%PROGRAM_FILES%\FireFox\res.exe
%PROGRAM_FILES%\FireFox\res\dtd.exe
%PROGRAM_FILES%\FireFox\plugins.exe
%PROGRAM_FILES%\FireFox\modules\services-sync\ext.exe
%PROGRAM_FILES%\FireFox\modules\tabview.exe
%PROGRAM_FILES%\FireFox\res\entitytables.exe
%PROGRAM_FILES%\FireFox\uninstall.exe
%PROGRAM_FILES%\internet explorer.exe
%PROGRAM_FILES%\FireFox\searchplugins.exe
%PROGRAM_FILES%\FireFox\res\fonts.exe
%PROGRAM_FILES%\FireFox\res\html.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\radio.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\media.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\dirlisting.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\icons.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\tree.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\console.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\xbl-marquee.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\passwordmgr.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\satchel.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\icons.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\media.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\dirlisting.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\checkbox.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\console.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\printpreview.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\toolbar.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\tree.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\splitter.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\radio.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\scrollbar.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\arrow.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\alerts.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource.exe

Удаляет следующие файлы:

C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot\Repository\fs.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot\repository.exe
<SYSTEM32>\Restore\MachineGuid.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\snapshot.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot\repository.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot\Repository\fs.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP12\snapshot.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot\repository.exe
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP14\snapshot\Repository\fs.exe

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней