Jump to content

MicQsenoch

Honorary Members
 View Profile  See their activity

  • Posts

    69

  • Joined

  • Last visited

 Content Type 

Posts posted by MicQsenoch

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    NEW DEVELOPMENT!

    Computer freezing at start up. It always seems to hang up in the same spot IF it does happen. The desktop loads, malwarebytes and the MSE Xed out icons load in the tool bar, then a note from malwarebytes saying my trial version will expire pops up, and then the computer freezes. I can move my mouse around, but cannot click on anything and the computer is unresponsive to anything else. It seems to happen rather frequently and it just started happening this night around 9:30.

    After poking around a bit on the internet, it seems that other people have a similar problem somewhat frequently.

    The only thing i have done tonight is do the combo-fix and post the log, and also read about other people with a similar problem.

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    As far as the websites I am wisiting I wouldnt classify any of them as shady.

    ESPN

    Facebook

    Youtube

    Various reputable League of Legends websites (Reign of Gaming) (lolpro) (lolking) edit* (I use the word reputable because ive used these websites for years and have never had trouble with them. Basically I have no idea what im talking about.)

    Video Game Websites

    A few forums (board game geeks) (Isotropic dominion forums) (gamefaqs)

    MLG pro

    News websites

    Hulu

    I got into this entire mess cuz i did click on a very questionable link. Very stupid of me. Learned a lesson.

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    ComboFix 13-01-08.01 - Michael Senff 01/09/2013 18:54:10.1.4 - x86

    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3564.2730 [GMT -6:00]

    Running from: c:\documents and settings\Michael Senff\Desktop\Combo-Fix.exe

    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\windows\system32\Cache

    c:\windows\system32\Cache\0025579d476751f2.fb

    c:\windows\system32\Cache\272512937d9e61a4.fb

    c:\windows\system32\Cache\287204568329e189.fb

    c:\windows\system32\Cache\28bc8f716fd76a47.fb

    c:\windows\system32\Cache\31a0997e9a5b5eb3.fb

    c:\windows\system32\Cache\32c84fe32bb74d60.fb

    c:\windows\system32\Cache\3917078cb68ec657.fb

    c:\windows\system32\Cache\590ba23ce359fd0c.fb

    c:\windows\system32\Cache\610289e025a3ee9a.fb

    c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb

    c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb

    c:\windows\system32\Cache\6d03dad1035885d3.fb

    c:\windows\system32\Cache\a8556537add6dfc5.fb

    c:\windows\system32\Cache\ad10a52aff5e038d.fb

    c:\windows\system32\Cache\c1fa887b03019701.fb

    c:\windows\system32\Cache\c4d28dca2e7648be.fb

    c:\windows\system32\Cache\d201ef9910cd39de.fb

    c:\windows\system32\Cache\d2e94710a5708128.fb

    c:\windows\system32\Cache\d79b9dfe81484ec4.fb

    c:\windows\system32\Cache\f998975c9cc711ee.fb

    .

    .

    ((((((((((((((((((((((((( Files Created from 2012-12-10 to 2013-01-10 )))))))))))))))))))))))))))))))

    .

    .

    2013-01-04 14:20 . 2013-01-06 14:48 -------- d-----w- C:\JRT

    2013-01-03 00:15 . 2013-01-03 00:15 -------- d-----w- C:\_OTL

    2013-01-01 17:57 . 2013-01-01 17:57 -------- d-----w- C:\rsit

    2012-12-30 21:13 . 2012-12-30 21:13 -------- d-----w- C:\Riot Games

    2012-12-30 20:13 . 2012-12-30 20:13 -------- d-----w- C:\NVIDIA

    2012-12-30 15:38 . 2012-12-30 15:38 -------- d-----w- C:\Intel

    2012-12-30 15:38 . 2012-12-30 15:38 -------- d-----w- C:\931dd4e9d3fec63017e138d3

    .

    .

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-12-29 10:31 . 2008-04-14 00:12 4154752 ----a-w- c:\windows\system32\nv4_disp.dll

    2012-12-29 08:07 . 2011-03-20 21:52 54272 ----a-w- c:\windows\system32\nvwddi.dll

    2012-12-29 08:07 . 2011-03-20 21:52 157112 ----a-w- c:\windows\system32\nvsvc32.exe

    2012-12-29 08:07 . 2011-03-20 21:52 15635896 ----a-w- c:\windows\system32\nvcpl.dll

    2012-12-29 08:07 . 2011-03-20 21:52 108984 ----a-w- c:\windows\system32\nvmctray.dll

    2012-12-29 08:07 . 2011-03-20 21:52 144312 ----a-w- c:\windows\system32\nvcolor.exe

    2012-12-16 12:23 . 2004-08-04 12:00 290560 ----a-w- c:\windows\system32\atmfd.dll

    2012-11-13 01:25 . 2004-08-04 12:00 1866368 ----a-w- c:\windows\system32\win32k.sys

    2012-11-06 02:01 . 2008-04-14 00:12 1371648 ----a-w- c:\windows\system32\msxml6.dll

    2012-11-02 02:02 . 2004-08-04 12:00 375296 ----a-w- c:\windows\system32\dpnet.dll

    2012-11-01 12:17 . 2004-08-04 12:00 916992 ----a-w- c:\windows\system32\wininet.dll

    2012-11-01 12:17 . 2004-08-04 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll

    2012-11-01 12:17 . 2004-08-04 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl

    2012-11-01 00:35 . 2004-08-04 12:00 385024 ----a-w- c:\windows\system32\html.iec

    2012-11-29 08:27 . 2012-12-30 20:23 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Note* empty entries & legit default entries are not shown

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2012-12-30 3093624]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "RTHDCPL"="RTHDCPL.EXE" [2011-10-14 20064872]

    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]

    "vProt"="c:\program files\AVG Secure Search\vprot.exe" [2013-01-01 997320]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-24 926896]

    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-12-29 15635896]

    "NvMediaCenter"="NvMCTray.dll" [2012-12-29 108984]

    "nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-12-29 1982312]

    .

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

    @="Service"

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=

    "c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=

    "c:\\Documents and Settings\\All Users\\Application Data\\Battle.net\\Agent\\Agent.1267\\Agent.exe"=

    "c:\\Documents and Settings\\All Users\\Application Data\\Battle.net\\Agent\\Agent.1544\\Agent.exe"=

    "c:\\Program Files\\StarCraft II\\StarCraft II.exe"=

    "c:\\Program Files\\StarCraft II\\StarCraft II Public Test.exe"=

    "c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "58358:TCP"= 58358:TCP:Pando Media Booster

    "58358:UDP"= 58358:UDP:Pando Media Booster

    .

    R1 AppleCharger;AppleCharger;c:\windows\system32\drivers\AppleCharger.sys [12/30/2012 9:41 AM 19056]

    R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [12/31/2012 6:03 PM 26984]

    R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\Intel\Intel® Management Engine Components\UNS\UNS.exe [12/30/2012 9:41 AM 2655768]

    R2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe [12/31/2012 6:03 PM 711112]

    R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\drivers\EtronHub3.sys [8/17/2011 4:18 AM 45056]

    R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\drivers\EtronXHCI.sys [8/17/2011 4:18 AM 64896]

    R3 MEI;Intel® Management Engine Interface;c:\windows\system32\drivers\HECI.sys [12/30/2012 9:41 AM 41088]

    S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [12/30/2012 12:58 PM 398184]

    S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12/30/2012 12:58 PM 682344]

    S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [12/30/2012 9:39 AM 1691480]

    S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]

    S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [12/30/2012 9:44 AM 24944]

    S3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [1/1/2013 9:43 AM 35144]

    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12/30/2012 12:58 PM 21104]

    .

    Contents of the 'Scheduled Tasks' folder

    .

    2013-01-09 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-30 02:20]

    .

    2013-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-01 00:14]

    .

    2013-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2013-01-01 00:14]

    .

    2013-01-08 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job

    - c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 23:25]

    .

    2013-01-09 c:\windows\Tasks\MpIdleTask.job

    - c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 23:25]

    .

    .

    ------- Supplementary Scan -------

    .

    uStart Page = hxxp://www.google.com

    TCP: DhcpNameServer = 192.168.1.1

    FF - ProfilePath - c:\documents and settings\Michael Senff\Application Data\Mozilla\Firefox\Profiles\8v50ytho.default\

    FF - ExtSQL: 2012-12-30 12:22; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

    FF - ExtSQL: 2012-12-31 18:03; avg@toolbar; c:\documents and settings\All Users\Application Data\AVG Secure Search\FireFoxExt\13.2.0.5

    FF - ExtSQL: 2013-01-01 12:12; {e001c731-5e37-4538-a5cb-8168736a2360}; c:\documents and settings\Michael Senff\Application Data\Mozilla\Firefox\Profiles\8v50ytho.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2013-01-09 18:55

    Windows 5.1.2600 Service Pack 3 NTFS

    .

    scanning hidden processes ...

    .

    scanning hidden autostart entries ...

    .

    scanning hidden files ...

    .

    scan completed successfully

    hidden files: 0

    .

    **************************************************************************

    .

    --------------------- LOCKED REGISTRY KEYS ---------------------

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    Completion time: 2013-01-09 18:57:05

    ComboFix-quarantined-files.txt 2013-01-10 00:57

    .

    Pre-Run: 45,336,084,480 bytes free

    Post-Run: 45,349,552,128 bytes free

    .

    WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe

    [boot loader]

    timeout=2

    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

    [operating systems]

    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

    UnsupportedDebug="do not select this" /debug

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

    .

    - - End Of File - - 9745D89B75FCBA738EF8C508B39E96E5

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    # AdwCleaner v2.105 - Logfile created 01/08/2013 at 08:40:35

    # Updated 08/01/2013 by Xplode

    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)

    # User : Michael Senff - DEEZGOOD-D8793A

    # Boot Mode : Normal

    # Running from : C:\Documents and Settings\Michael Senff\My Documents\Downloads\adwcleaner.exe

    # Option [search]

    ***** [services] *****

    ***** [Files / Folders] *****

    File Found : C:\END

    File Found : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml

    Folder Found : C:\Documents and Settings\All Users\Application Data\AVG Secure Search

    Folder Found : C:\Documents and Settings\Michael Senff\Application Data\AVG Secure Search

    Folder Found : C:\Documents and Settings\Michael Senff\Local Settings\Application Data\AVG Secure Search

    Folder Found : C:\Program Files\AVG Secure Search

    Folder Found : C:\Program Files\Common Files\AVG Secure Search

    ***** [Registry] *****

    Key Found : HKCU\Software\AVG Secure Search

    Key Found : HKCU\Software\InstallCore

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}

    Key Found : HKLM\Software\AVG Secure Search

    Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

    Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

    Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

    Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

    Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search

    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

    Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

    ***** [internet Browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    [OK] Registry is clean.

    -\\ Mozilla Firefox v17.0.1 (en-US)

    File : C:\Documents and Settings\Michael Senff\Application Data\Mozilla\Firefox\Profiles\8v50ytho.default\prefs.js

    [OK] File is clean.

    -\\ Google Chrome v23.0.1271.97

    File : C:\Documents and Settings\Michael Senff\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    [OK] File is clean.

    *************************

    AdwCleaner[R1].txt - [4170 octets] - [08/01/2013 08:40:35]

    ########## EOF - C:\AdwCleaner[R1].txt - [4230 octets] ##########

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    2013/01/07 00:52:01 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 91.188.46.140 (Type: incoming)

    2013/01/07 00:52:04 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 91.188.46.140 (Type: incoming)

    2013/01/07 00:52:11 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 91.188.46.140 (Type: incoming)

    2013/01/07 13:44:16 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting protection

    2013/01/07 13:44:16 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Protection started successfully

    2013/01/07 13:44:16 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting IP protection

    2013/01/07 13:44:26 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/07 17:55:47 -0600 DEEZGOOD-D8793A MESSAGE Starting protection

    2013/01/07 17:55:47 -0600 DEEZGOOD-D8793A MESSAGE Protection started successfully

    2013/01/07 17:55:47 -0600 DEEZGOOD-D8793A MESSAGE Starting IP protection

    2013/01/07 17:55:58 -0600 DEEZGOOD-D8793A MESSAGE Executing scheduled update: Daily

    2013/01/07 17:56:02 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/07 17:56:24 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting database refresh

    2013/01/07 17:56:24 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Stopping IP protection

    2013/01/07 17:56:25 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection stopped successfully

    2013/01/07 17:56:24 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Scheduled update executed successfully: database updated from version v2013.01.06.03 to version v2013.01.07.11

    2013/01/07 17:56:27 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Database refreshed successfully

    2013/01/07 17:56:27 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting IP protection

    2013/01/07 17:56:29 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/07 19:52:53 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 195.216.173.188 (Type: outgoing)

    2013/01/07 19:52:56 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 195.216.173.188 (Type: outgoing)

    2013/01/07 19:53:02 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 195.216.173.188 (Type: outgoing)

    2013/01/07 21:05:43 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 203.93.239.76 (Type: outgoing)

    2013/01/07 21:05:46 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 203.93.239.76 (Type: outgoing)

    2013/01/07 21:05:52 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 203.93.239.76 (Type: outgoing)

    2013/01/07 23:18:08 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 218.10.162.65 (Type: outgoing)

    2013/01/07 23:18:11 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 218.10.162.65 (Type: outgoing)

    2013/01/07 23:18:17 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 218.10.162.65 (Type: outgoing)

    2013/01/07 23:40:09 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.24.123 (Type: incoming)

    2013/01/07 23:40:12 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.24.123 (Type: incoming)

    2013/01/07 23:40:18 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.24.123 (Type: incoming)

    2013/01/06 08:44:02 -0600 DEEZGOOD-D8793A MESSAGE Starting protection

    2013/01/06 08:44:02 -0600 DEEZGOOD-D8793A MESSAGE Protection started successfully

    2013/01/06 08:44:02 -0600 DEEZGOOD-D8793A MESSAGE Starting IP protection

    2013/01/06 08:44:09 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Executing scheduled update: Daily

    2013/01/06 08:44:19 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/06 08:44:19 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Scheduled update executed successfully: database updated from version v2013.01.05.04 to version v2013.01.06.03

    2013/01/06 08:44:19 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting database refresh

    2013/01/06 08:44:20 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Stopping IP protection

    2013/01/06 08:44:20 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection stopped successfully

    2013/01/06 08:44:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Database refreshed successfully

    2013/01/06 08:44:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting IP protection

    2013/01/06 08:44:25 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/06 08:47:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Stopping protection

    2013/01/06 08:47:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Protection stopped successfully

    2013/01/06 08:47:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Stopping IP protection

    2013/01/06 08:47:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection stopped successfully

    2013/01/06 08:47:23 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Protection stopped

    2013/01/06 08:52:56 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting protection

    2013/01/06 08:52:56 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Protection started successfully

    2013/01/06 08:52:56 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting IP protection

    2013/01/06 08:52:58 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/06 10:57:51 -0600 DEEZGOOD-D8793A MESSAGE Starting protection

    2013/01/06 10:57:51 -0600 DEEZGOOD-D8793A MESSAGE Protection started successfully

    2013/01/06 10:57:51 -0600 DEEZGOOD-D8793A MESSAGE Starting IP protection

    2013/01/06 10:58:03 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/06 23:34:51 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:34:54 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:00 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:12 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:15 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:21 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:33 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:36 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:42 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:35:58 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:36:01 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/06 23:36:07 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 222.70.235.87 (Type: outgoing)

    2013/01/05 08:48:11 -0600 DEEZGOOD-D8793A MESSAGE Starting protection

    2013/01/05 08:48:11 -0600 DEEZGOOD-D8793A MESSAGE Protection started successfully

    2013/01/05 08:48:11 -0600 DEEZGOOD-D8793A MESSAGE Starting IP protection

    2013/01/05 08:48:13 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/05 08:54:17 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Executing scheduled update: Daily

    2013/01/05 08:54:25 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Scheduled update executed successfully: database updated from version v2013.01.05.02 to version v2013.01.05.04

    2013/01/05 08:54:25 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting database refresh

    2013/01/05 08:54:26 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Stopping IP protection

    2013/01/05 08:54:26 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection stopped successfully

    2013/01/05 08:54:29 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Database refreshed successfully

    2013/01/05 08:54:29 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE Starting IP protection

    2013/01/05 08:54:31 -0600 DEEZGOOD-D8793A Michael Senff MESSAGE IP Protection started successfully

    2013/01/05 15:13:30 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: incoming)

    2013/01/05 15:13:33 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: incoming)

    2013/01/05 15:13:39 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: incoming)

    2013/01/05 16:15:25 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: outgoing)

    2013/01/05 16:15:28 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: outgoing)

    2013/01/05 16:15:34 -0600 DEEZGOOD-D8793A Michael Senff IP-BLOCK 89.28.82.55 (Type: outgoing)

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    Malwarebytes Anti-Malware (Trial) 1.70.0.1100

    www.malwarebytes.org

    Database version: v2013.01.06.03

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    Michael Senff :: DEEZGOOD-D8793A [administrator]

    Protection: Enabled

    1/6/2013 9:14:27 AM

    mbam-log-2013-01-06 (09-14-27).txt

    Scan type: Full scan (C:\|D:\|)

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 249617

    Time elapsed: 21 minute(s), 7 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    aswMBR version 0.9.9.1707 Copyright© 2011 AVAST Software

    Run date: 2013-01-06 09:10:20

    -----------------------------

    09:10:20.625 OS Version: Windows 5.1.2600 Service Pack 3

    09:10:20.625 Number of processors: 4 586 0x2A07

    09:10:20.625 ComputerName: DEEZGOOD-D8793A UserName: Michael Senff

    09:10:21.000 Initialize success

    09:11:52.187 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP4T0L0-b

    09:11:52.187 Disk 0 Vendor: WDC_WD740GD-00FLC0 33.08F33 Size: 70910MB BusType: 3

    09:11:52.187 Disk 0 MBR read successfully

    09:11:52.187 Disk 0 MBR scan

    09:11:52.187 Disk 0 Windows XP default MBR code

    09:11:52.187 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 70896 MB offset 63

    09:11:52.187 Disk 0 scanning sectors +145195470

    09:11:52.218 Disk 0 scanning C:\WINDOWS\system32\drivers

    09:11:59.000 Service scanning

    09:12:01.046 Service MpKsl2a3864f7 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0BD60223-5EBA-4621-8746-38ADEA8515DE}\MpKsl2a3864f7.sys **LOCKED** 32

    09:12:03.625 Modules scanning

    09:12:05.828 Scan finished successfully

    09:12:22.156 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Michael Senff\Desktop\MBR.dat"

    09:12:22.171 The log file has been saved successfully to "C:\Documents and Settings\Michael Senff\Desktop\aswMBR.txt"

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    Farbar log

    Farbar Service Scanner Version: 05-01-2013

    Ran by Michael Senff (administrator) on 06-01-2013 at 09:08:03

    Running from "C:\Documents and Settings\Michael Senff\Desktop"

    Microsoft Windows XP Service Pack 3 (X86)

    Boot Mode: Normal

    ****************************************************************

    Internet Services:

    ============

    Connection Status:

    ==============

    Localhost is accessible.

    LAN connected.

    Google IP is accessible.

    Google.com is accessible.

    Yahoo IP is accessible.

    Yahoo.com is accessible.

    Windows Firewall:

    =============

    Firewall Disabled Policy:

    ==================

    System Restore:

    ============

    System Restore Disabled Policy:

    ========================

    Security Center:

    ============

    Windows Update:

    ============

    Windows Autoupdate Disabled Policy:

    ============================

    File Check:

    ========

    C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

    C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

    C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

    C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

    C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

    C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

    C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

    C:\WINDOWS\system32\netman.dll => MD5 is legit

    C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

    C:\WINDOWS\system32\srsvc.dll => MD5 is legit

    C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

    C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

    C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

    C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

    C:\WINDOWS\system32\qmgr.dll => MD5 is legit

    C:\WINDOWS\system32\es.dll => MD5 is legit

    C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

    C:\WINDOWS\system32\svchost.exe => MD5 is legit

    C:\WINDOWS\system32\rpcss.dll => MD5 is legit

    C:\WINDOWS\system32\services.exe => MD5 is legit

    Extra List:

    =======

    Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)

    0x0700000005000000010000000200000003000000040000000600000007000000

    IpSec Tag value is correct.

    **** End of log ****

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    What time of day does the outgoing IP blocks occur?

    Early morning 7am -9am, or 7pm-1am. These are the times I am on my computer if I do get on. I'm at work the rest of the day. I have noticed blocks at both times, both outgoing, and more recently ive noticed some incoming ones. Ive looked up a few of the IP adresses. One from Ukraine, one from Bosnia, one from China, and one from Washington St.

    What is running {of your programs} when this happens ?

    Firefox or League fo Legends.

    Do you have or use instant messenger programs? which ?

    Windows messenger is installed by default, but I have never used it.

    Are you browsing / websurfing the internet when the blocks occur?

    yes

    Does this machine have a 3rd-party firewall program?

    Not that have have done, so no

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    JRT log

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Junkware Removal Tool (JRT) by Thisisu

    Version: 4.4.1 (01.06.2013:2)

    OS: Microsoft Windows XP x86

    Ran by Michael Senff on Sun 01/06/2013 at 8:48:31.15

    Blog: http://thisisudax.blogspot.com

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    ~~~ Services

    ~~~ Registry Values

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\DisplayName

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\URL

    ~~~ Registry Keys

    ~~~ Files

    ~~~ Folders

    ~~~ Chrome

    Successfully deleted: [Folder] C:\Documents and Settings\Michael Senff\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Scan was completed on Sun 01/06/2013 at 8:50:58.53

    End of JRT log

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    Having a problem with the Junkware removal tool. Everytime i try to run a scan, it gets hung up when it scans internet explorer. I let it sit for a good 6 hours before i closed it out. You said it would take awhile to run the scan, but would it really take that long just to do the IE portion of the scan?

    The computer seems to be running fine. I am still receiving plenty of Outgoing and Incoming IP blocks. It only seems to be during certain times of the day.

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    Step 3 log

    ESETSmartInstaller@High as CAB hook log:

    OnlineScanner.ocx - registred OK

    # version=8

    # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)

    # OnlineScanner.ocx=1.0.0.6844

    # api_version=3.0.2

    # EOSSerial=bd91ae80d2296d499eacc08e3c8655a3

    # end=finished

    # remove_checked=false

    # archives_checked=true

    # unwanted_checked=true

    # unsafe_checked=true

    # antistealth_checked=true

    # utc_time=2013-01-03 12:42:54

    # local_time=2013-01-02 06:42:54 (-0600, Central Standard Time)

    # country="United States"

    # lang=1033

    # osver=5.1.2600 NT Service Pack 3

    # compatibility_mode=5892 16777213 88 94 0 9866346 0 0

    # scanned=39369

    # found=0

    # cleaned=0

    # scan_time=682

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    Step 2 Log

    All processes killed

    ========== COMMANDS ==========

    C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.

    HOSTS file reset successfully

    [EMPTYTEMP]

    User: All Users

    User: Default User

    ->Temp folder emptied: 0 bytes

    ->Temporary Internet Files folder emptied: 0 bytes

    User: LocalService

    ->Temp folder emptied: 0 bytes

    ->Temporary Internet Files folder emptied: 33170 bytes

    User: Michael Senff

    ->Temp folder emptied: 888333 bytes

    ->Temporary Internet Files folder emptied: 33170 bytes

    ->FireFox cache emptied: 4147952 bytes

    ->Google Chrome cache emptied: 0 bytes

    ->Flash cache emptied: 492 bytes

    User: NetworkService

    ->Temp folder emptied: 2254 bytes

    ->Temporary Internet Files folder emptied: 33170 bytes

    User: UpdatusUser

    ->Temp folder emptied: 0 bytes

    ->Temporary Internet Files folder emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes

    %systemroot% .tmp files removed: 0 bytes

    %systemroot%\System32 .tmp files removed: 0 bytes

    %systemroot%\System32\dllcache .tmp files removed: 0 bytes

    %systemroot%\System32\drivers .tmp files removed: 0 bytes

    Windows Temp folder emptied: 13176 bytes

    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes

    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 5.00 mb

    Restore point Set: OTL Restore Point

    [EMPTYFLASH]

    User: All Users

    User: Default User

    User: LocalService

    User: Michael Senff

    ->Flash cache emptied: 0 bytes

    User: NetworkService

    User: UpdatusUser

    Total Flash Files Cleaned = 0.00 mb

    [EMPTYJAVA]

    User: All Users

    User: Default User

    User: LocalService

    User: Michael Senff

    User: NetworkService

    User: UpdatusUser

    Total Java Files Cleaned = 0.00 mb

    OTL by OldTimer - Version 3.2.69.0 log created on 01022013_181836

    Files\Folders moved on Reboot...

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\8CD95628-6839BAB8-8251CD28-34F710F0\3jjqtynh.dll is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\8CD95628-6839BAB8-8251CD28-34F710F0\3jjqtynh.dll\data003 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 3 for mbar-1.01.0.1011 (1).zip\mbar\License.rtf - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\3jjqtynh.dll is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\8CD95628-6839BAB8-8251CD28-34F710F0\3jjqtynh.dll\data004 - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\3jjqtynh.dll\data003 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\8CD95628-6839BAB8-8251CD28-34F710F0\3jjqtynh.dll - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\3jjqtynh.dll\data004 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\3jjqtynh.dll - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002 is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data001 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 4 for mbar-1.01.0.1011 (1).zip\mbar\mbam.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data002 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\WERf24b.dir00\appcompat.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data003 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data004 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\WERf24b.dir00\IEXPLORE.EXE.hdmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data005 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data006 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data007 - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 1 for mbar-1.01.0.1011 (1).zip\mbar\mbar.exe is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\WERf24b.dir00\IEXPLORE.EXE.mdmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\WERf24b.dir00\manifest.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 1 for mbar-1.01.0.1011 (1).zip\mbar\mbar.exe\data001 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\_ir_tmpfnt_1\Calibri.FON - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 1 for mbar-1.01.0.1011 (1).zip\mbar\mbar.exe\data002 - packed by BINARYRES

    >>>C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data008 - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 1 for mbar-1.01.0.1011 (1).zip\mbar\mbar.exe\data006 is ZLIB container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002\data008 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data002 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\1086062379.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 1 for mbar-1.01.0.1011 (1).zip\mbar\mbar.exe - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\11592134.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\1356238373.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\2078219770.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\_ir_tmpfnt_1\Calibri.TFT - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\454288769.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\520036212.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\537770292.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69234_Setup.CIS - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69070_Setup.CIS - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 5 for mbar-1.01.0.1011 (1).zip\mbar\mbamcore.dll is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 5 for mbar-1.01.0.1011 (1).zip\mbar\mbamcore.dll - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69286_Setup.CIS - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\92785961.cfg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69416_Setup.CIS - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\isp241.tmp\_Setup.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\EVrMEgeYLP.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\EVrMEgeYLP.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\EVrMEgeYLP.mht is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\isp195.tmp\_Setup.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\EVrMEgeYLP.mht - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\FxwJX4y5Zd.html is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\FxwJX4y5Zd.mht is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\FxwJX4y5Zd.mht - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\FxwJX4y5Zd.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\Hg6Sncsuoe.mht is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\Hg6Sncsuoe.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\Hg6Sncsuoe.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\Hg6Sncsuoe.mht - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\SupportCom_Chrome_v1.exe - packed by FLY-CODE

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\KCPab4WbLD.mht is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\KCPab4WbLD.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\KCPab4WbLD.mht - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\KCPab4WbLD.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\oilocal_main.min.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\oilocal_main.min.js - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Temporary Directory 6 for mbar-1.01.0.1011 (1).zip\mbar\mbamnet.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\oilocal_screen_2_4.min.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\oilocal_screen_2_4.min.js - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\oilocal_screen_2.min.js - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\SupportCom_Chrome_v1.exe is NSIS container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\OIAssistWTD.exe - packed by FLY-CODE

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\T1tspDjYSX.html is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\T1tspDjYSX.mht is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\T1tspDjYSX.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\T1tspDjYSX.mht - container

    >>>C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\SupportCom_Chrome_v1.exe\GoogleUpdateSetup_1.3.21.123.exe is LZMA container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\OIAssistWTD.exe is LZMA container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\wSInfVDLtW.html is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\winzip170-32.msi is OLE container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\wSInfVDLtW.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\SupportCom_Chrome_v1.exe - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\wSInfVDLtW.mht is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\wSInfVDLtW.mht - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{457D7505-D665-4F95-91C3-ECB8C56E9ACA}\ycc.dll is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{457D7505-D665-4F95-91C3-ECB8C56E9ACA}\ycc.dll - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\OIAssistWTD.exe - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx10_39_x86.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx10_39_x86.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx10_39_x86.cab - archive

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{668771E9-5081-4BDF-B025-C1E6722C2542}\ISSetup.dll - packed by UPX

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx9_39_x86.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx9_39_x86.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_d3dx9_39_x86.cab - archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{668771E9-5081-4BDF-B025-C1E6722C2542}\_Setup.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_XAudio_x86.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_XAudio_x86.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\Aug2008_XAudio_x86.cab - archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\DSETUP.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxdllreg_x86.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxdllreg_x86.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxdllreg_x86.cab - archive

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxnt.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxnt.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxnt.cab - archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{668771E9-5081-4BDF-B025-C1E6722C2542}\ISSetup.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxupdate.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxupdate.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dxupdate.cab - archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\~nsu.tmp\1 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\DXSETUP.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{9D881ADB-E350-4118-8146-09BCC96D6EDE}\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\dsetup32.dll - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe is BINARYRES container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69060_Setup.EXE is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69060_Setup.EXE - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\is754907076\69060_Setup.EXE - archive

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001 is BINARYRES container

    >>>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data001 is ZIP archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data001 - Ok

    >>>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002 is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data001 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data002 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data003 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data004 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data005 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data006 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data007 - Ok

    >>>>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data008 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002\data008 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001\data002 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data001 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data002 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data003 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe\data004 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\avg.exe - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\winzip170-32.msi\stream000 is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\winzip170-32.msi\stream000 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\winzip170-32.msi - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\oi_l9QOA1j2VI\winzip170-32.msi - container

    Total 7302408788 bytes in 18053 files scanned (21586 objects)

    Total 18037 files (21568 objects) are clean

    Total 1 file are infected

    Total 17 files are raised error condition

    Scan time is 00:08:35.657

    -----------------------------------------------------------------------------

    Start curing

    -----------------------------------------------------------------------------

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP21\A0007646.dll - quarantined

    Total 7302408788 bytes in 18053 files scanned (21586 objects)

    Total 18037 files (21568 objects) are clean

    Total 1 file are infected

    Total 1 file are neutralized

    Total 17 files are raised error condition

    Scan time is 00:08:35.657

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\sk\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ru\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\sr\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\sr\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\tr\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\zh-cn\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\tr\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\zh-cn\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\zh-tw\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\ajax-loader.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\about.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\calc.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\active-threats18.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\zh-tw\global.properties - Ok

    >>>>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data003 - packed by FLY-CODE

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\CleanHistory.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\close.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\Facebook.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\current.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\feedback.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\feedicon.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\currently-safe18.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\dnt.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\help.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\icon18.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\labs.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\icon_search.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\information-24.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\loader.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\search.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\questionmarkIcon.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\note.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\surf-with-caution18.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\speed-test.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\window-close.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\uninstall.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\about.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\updating18.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\windows.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\calc.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\CleanHistory.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\skin\weather.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\active-threats18.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\current.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\currently-safe18.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Facebook.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\feedback.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\configuration.xml - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\help.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\favicon.ico - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\labs.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\icon18.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Eula.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\note.gif - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\remote_configuration.xml is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\remote_configuration.xml - container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\search.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\PostInstall.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\speed-test.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\surf-with-caution18.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\lip.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\uninstall.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\updating18.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\GenericWndApi.dll - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\weather.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\windows.gif - Ok

    >>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data004 - packed by FLY-CODE

    >>>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data004 - packed by LZMA

    >>>>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data004 - packed by FLY-CODE

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.exe is BINARYRES container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe - container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\bg_close.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\bg_expand.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\bg_tooltip.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\bg_tracking.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\bull4x4.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\divider.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Chrome\content\icons\innerBG_gradient.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\Encoding_decoding_base64.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\hmac.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\LICENSE-bsdiff.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\LICENSE-bzip.txt - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.exe - container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\LICENSE-MPL-NPAPI.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\LICENSE-JasonCpp.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\PassthruApp.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Licenses\LICENSE-sparsehash.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\JQueyExtensions.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\uninstall_cp.css - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Uninstall_cp.html is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Uninstall_cp.html - container

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\cp-bg.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\cp_logo.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\Uninstall.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\downBtn.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\loader.gif - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\vprot.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\11223344556677889900112233445566 - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\uninstall-bg.png - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\Images\uninstall\upBtn.png - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\AAX2.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\AAX3.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Arabic.bin - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\jquery-1.5.1.min.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\AAX6A.tmp - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\UninstallRes\ClientPackage\jquery-1.5.1.min.js - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00000.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00001.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00002.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00003.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00004.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00005.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\6B6C0.dmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00006.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00007.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00008.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00010.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ASPNETSetup_00009.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\avg-secure-search.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Attach.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\avg-secure-search.xml - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\b291_appcompat.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Croatian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Czech.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Danish.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\DDS.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\chrome_installer.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_ATL80SP1_KB973923UI40B0.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_ATL80SP1_KB973923MSI40B0.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_dotnetfx35error.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\avguidx.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_clwireg.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_dotnetfx35install.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_NET_Framework20_Setup460A.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_MSXML6_MSI45EF.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_depcheck_NETFX_EXP_35.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_NET_Framework30_Setup46A6.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_NET_Framework35_MSI46F1.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_RGB9RAST_x86.msi45EC.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_vcredistUI4873.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_vcredistUI48AA.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_vcredistMSI4873.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_vcredistMSI48AA.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA293C.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA2A65.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA5360.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA34D.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA2C15.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_wcf_retCA664.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Dutch.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_WIC.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\eb16fe134b2678a812a5ad6da56c94dc.lock - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dw.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dd_XPS.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\English.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Finnish.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\French.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\German.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Greek.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Hebrew.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\dump.dat - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Hungarian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\installer_cfg.ini - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Italian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Korean.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Japanese.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Lithuanian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ichcop - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\LeagueofLegends.exe.log - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20121230_220034062.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20121230_220034062-Msi0.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\MachineIdCreator.exe - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20121230_215727218.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20121230_215727218-Msi0.txt - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgFiles\AVG Secure Search\setup.bmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20121230_220215140-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20121230_220215140.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20121230_215227890-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20121230_215227890.html - packed by UNICODE

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20121230_220034062.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2604092_20121230_220034062.html - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20121230_215727218.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656352_20121230_215727218.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2729450_20121230_215027812-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20121230_220215140.html is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2729450_20121230_215027812.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2656369_20121230_220215140.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20121230_182437421.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20121230_182437421-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20121230_215227890.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20121230_182727078-Msi0.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2686828_20121230_215227890.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20121230_182727078.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20121230_182257156-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20121230_182257156.html - packed by UNICODE

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2729450_20121230_215027812.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB2729450_20121230_215027812.html - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20121230_182437421.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB958481_20121230_182437421.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20121230_181751984.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20121230_181751984-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20121230_182727078.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB974417_20121230_182727078.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20121230_220418906-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20121230_220418906.html - packed by UNICODE

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20121230_182257156.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB976576_20121230_182257156.html - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20121230_220418906.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2604110_20121230_220418906.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20121230_215635390-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20121230_215635390.html - packed by UNICODE

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20121230_182536218.html - packed by UNICODE

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20121230_215635390.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20121230_182536218-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20121230_181751984.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB2656407_20121230_215635390.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 2.0-KB979909_20121230_181751984.html - container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20121230_182354468.html - packed by UNICODE

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20121230_182536218.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB958483_20121230_182536218.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20121230_182354468-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20121230_182354468.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB977354_20121230_182354468.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20121230_181911718-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20121230_181911718.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20121230_181911718-Msi1.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20121230_220348093.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20121230_220348093-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20121230_220348093.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2604111_20121230_220348093.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20121230_215923203-Msi0.txt - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20121230_215923203.html - packed by UNICODE

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20121230_182546828.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20121230_182546828-Msi0.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20121230_215923203.html is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20121230_182546828.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB2657424_20121230_215923203.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB958484_20121230_182546828.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20121230_182246609-Msi0.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Norwegian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\pdo16E.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\pdo360.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\pdo68.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Perflib_Perfdata_bac.dat - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20121230_182246609.html - packed by UNICODE

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Polish.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Portuguese(Brazil).bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Portuguese.bin - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20121230_181911718.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\qs-en-utf16.txt - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20121230_182246609.html is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.0-KB982168_20121230_181911718.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Russian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Microsoft .NET Framework 3.5-KB963707_20121230_182246609.html - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SimChin.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Slovak.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Slovenian.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Spanish.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SWEDISH.bin - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\CommonInstaller.exe is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\fp_pl_pfs_installer.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SET191.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Set23D.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Thai.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\swt-win32-3740.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\TradChin.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Turkish.bin - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\uxeventlog.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\toolbar_log.txt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\_isdelet.ini - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\TFR38.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{A48C7142-8C18-463B-AA5B-A0097DD0CE1F}.ini - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\{7014E919-2EAA-4158-AB8A-7483300316F4}.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\~DF1F2E.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\00zstied - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\05oqcdxs - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\0i9s83yd - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\0oao9ybr - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\OIC58.tmp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\0tc4jzi6 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\13cbkgyc - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\1j9lq59x - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\1s48t9jt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\2c3cc7bp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\2hrx1bk1 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3f5cdptq - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\CommonInstaller.exe\data008 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\CommonInstaller.exe - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3s02dm22 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3jdosabx - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\4blf9nhz - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\4idkbdzp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\5dge7qmy - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\60uskbwf - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\5i4lciua - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\72bqybon - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\7knz0vya - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\_is20B.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\9fnm37mb - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\6qpfy1g7.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\a2v624wd - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\9ky53qsk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\bgbjacyk.key - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\9wgs10jp - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\a3of1pu2 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ba0jf7bz - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\bsxqi1u9 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\c5pou474 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\cur0kazg - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\dcjtn7qk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\dwwlku9v - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\dedkzu0s - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\e5pmvbxw - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ec23fubw - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\fmygzlo9 - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm is CHM container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\erhrr0a1 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\evutvfnk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\g6iy9kbo - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\g022mtpl - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\gq8olt25 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\gz065ne2 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\hw0bbm8g - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\i0seglip - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\i16libsy - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\cureit70_en_popup_text.js is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_additionaloptions.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\i99csduf - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_cli_parameters.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_cli_switches.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\il9gczgy - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_customscan.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_detectionmethods.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_enfmode.htm is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm is CHM container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_intro.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_legal.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_quarantine.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_quickscan.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_quickstart.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_scan_set_1.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_scan_set_2.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_scan_set_3.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_scan_set_4.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_scan_settings.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_setneutrules.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_snip_scan_1.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_statistics.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_sysreq.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_techsupport.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_testing.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\dw_update.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm\helpman_topicinit.js is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3jjqtynh.dll is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\cureit70_ja_popup_html.js is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_additionaloptions.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_cli_parameters.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\en.chm - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_cli_switches.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3jjqtynh.dll\data003 - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_customscan.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\jae4x1dz - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_detectionmethods.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_enfmode.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\jcjydt6v - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_intro.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_legal.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_quarantine.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3jjqtynh.dll\data004 - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_quickscan.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_quickstart.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_scan_set_1.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_scan_set_2.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\jet4em2a - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_scan_set_3.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_scan_set_4.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_scan_settings.htm is JS-HTML container

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data001 is ZIP archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\ToolbarInstaller.exe\data001 - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_setneutrules.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_snip_scan_1.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_statistics.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\kbuk6hfc - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_sysreq.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_techsupport.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\3jjqtynh.dll - container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_testing.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\dw_update.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm\helpman_topicinit.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\kxx242nk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\laz4svn3 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\lghp8ppe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ja.chm - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\m1cnqcni - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ggv5nwpp.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\md0w92v1 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\n18t5qzi - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\n6nzvpdy - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ndrb99tv - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\neisoa6b - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ng6y0ln0 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\nts2jtjx - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\nhz50bw5 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\on8w4e4q - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ppz31w63 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\pnsktmnf - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\pqrn25km - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\q66r8rp5 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\r2u0dpqq - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\r3utp6kk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\rmt0aykz - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\rciabzrq - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm is CHM container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\senpbwkw - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\sni6aqxc - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\sg7ay0yu - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\szyb64sl - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\t7pfoqgj - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\tg6afcyk - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ts4vjrbl - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\uj5y1cme - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\vd2yjdma - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\uxgg0rpp - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\cureit70_popup_text.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\vz1bijda - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\dw_cli_switches.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\wusvly0y - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\x0x8egvs - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\dw_quickstart.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\dw_scan_set_2.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ysjt6e70 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\z7inloz3 - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\dw_scan_set_3.htm is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\zmpd1ovn - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\zn7nidtp - Ok

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\dw_testing.htm is JS-HTML container

    >>C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm\helpman_topicinit.js is JS-HTML container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\zufndlbt - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\ru.chm - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\CRX_75DAF8CB7768\crl-set - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\CRX_75DAF8CB7768\manifest.json - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\8CD95628-6839BAB8-8251CD28-34F710F0\6qpfy1g7.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\6qpfy1g7.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\FixitTempFolder(34B9DFE5-2C9B-404E-AC8C-9B4AF77E7D0A)\PreCheckCA.log - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\FixitTempFolder(34B9DFE5-2C9B-404E-AC8C-9B4AF77E7D0A)\RunCA.log - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\IE Performance and Safety_result.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\IE Performance and Safety_result.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\IE Performance and Safety_result.cab - archive

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\Internet Explorer Add-on_result.cab is CAB archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\Internet Explorer Add-on_result.cab - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\MATS-Temp\Results\Internet Explorer Add-on_result.cab - archive

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\autorun.inf - Ok

    >C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\h35pdxp9.exe is BINARYRES container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\h35pdxp9.exe - container

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\3A5B7962-2EAEEAB4-B9D2C94-B79934C4\m5w0426c.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\netmotcm.cat - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\NetMotCM.inf - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\NetMotCM.sys - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\detect.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\setup.db3 - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\SAS_LaunchChromeSetup.exe - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\SUPERSetup\setup.dll - Ok

    C:\Documents and Settings\Michael Senff\Local Settings\Temp\Motorola\MotUsbDriverInst.exe - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\system32\oobe\setup\prvcyms.htm - container

    C:\WINDOWS\system32\oobe\setup\reg3.htm - container

    C:\WINDOWS\system32\oobe\setup\prodkey.htm - container

    C:\WINDOWS\system32\ras\cis.scp - Ok

    >C:\WINDOWS\system32\oobe\setup\security.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\regdial.htm - Ok

    C:\WINDOWS\system32\oobe\setup\security.htm - container

    >C:\WINDOWS\system32\oobe\setup\timezone.htm is JS-HTML container

    C:\WINDOWS\system32\ras\pad.inf - Ok

    C:\WINDOWS\system32\ras\slip.scp - Ok

    C:\WINDOWS\system32\ras\slipmenu.scp - Ok

    >C:\WINDOWS\system32\oobe\setup\username.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\timezone.htm - container

    C:\WINDOWS\system32\oobe\setup\username.htm - container

    C:\WINDOWS\system32\ras\switch.inf - Ok

    C:\WINDOWS\system32\ras\pppmenu.scp - Ok

    >C:\WINDOWS\system32\oobe\setup\welcome.htm is JS-HTML container

    C:\WINDOWS\system32\scripting\jscript.dll.mui - Ok

    C:\WINDOWS\system32\scripting\cscript.exe.mui - Ok

    C:\WINDOWS\system32\scripting\scrobj.dll.mui - Ok

    C:\WINDOWS\system32\scripting\msscript.ocx.mui - Ok

    C:\WINDOWS\system32\scripting\vbscript.dll.mui - Ok

    C:\WINDOWS\system32\oobe\setup\welcome.htm - container

    C:\WINDOWS\system32\scripting\scrrun.dll.mui - Ok

    C:\WINDOWS\system32\spool\XPSEP\msxpsinc.gpd - Ok

    C:\WINDOWS\system32\scripting\wscript.exe.mui - Ok

    C:\WINDOWS\system32\spool\XPSEP\msxpsinc.ppd - Ok

    C:\WINDOWS\system32\spool\XPSEP\msxpsdrv.inf - Ok

    C:\WINDOWS\system32\scripting\wshom.ocx.mui - Ok

    C:\WINDOWS\system32\spool\XPSEP\msxpsdrv.cat - Ok

    C:\WINDOWS\system32\scripting\wshext.dll.mui - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\msxpsinc.gpd - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\msxpsinc.ppd - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\msxpsdrv.inf - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\msxpsdrv.cat - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\msxpsdrv.inf - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\msxpsdrv.cat - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\msxpsinc.gpd - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\msxpsinc.ppd - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\mxdwdrv.dll - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll - Ok

    C:\WINDOWS\system32\spool\XPSEP\amd64\xpssvcs.dll - Ok

    C:\WINDOWS\system32\spool\drivers\color\is330.icm - Ok

    C:\WINDOWS\system32\spool\drivers\color\sRGB Color Space Profile.icm - Ok

    C:\WINDOWS\system32\spool\drivers\color\kodak_dc.icm - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\mxdwdrv.dll - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.BUD - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.gpd - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.ini - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\stddtype.gdl - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\stdnames.gpd - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\stdschem.gdl - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\stdschmx.gdl - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdui.dll - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\i386\mxdwdrv.dll - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.hlp - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\mxdwdrv.dll - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll - Ok

    C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\unires.dll - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrvui.dll - Ok

    C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll - Ok

    C:\WINDOWS\system32\usmt\cobramsg.dll - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\xpssvcs.dll - Ok

    C:\WINDOWS\system32\usmt\archvapp.inf - Ok

    C:\WINDOWS\system32\usmt\guitrn.dll - Ok

    C:\WINDOWS\system32\usmt\guitrna.dll - Ok

    C:\WINDOWS\system32\usmt\guitrn_a.dll - Ok

    C:\WINDOWS\system32\usmt\iconlib.dll - Ok

    C:\WINDOWS\system32\usmt\log.dll - Ok

    C:\WINDOWS\system32\usmt\migism.inf - Ok

    C:\WINDOWS\system32\usmt\migapp.inf - Ok

    C:\WINDOWS\system32\spool\XPSEP\i386\i386\xpssvcs.dll - Ok

    C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe - Ok

    C:\WINDOWS\system32\usmt\migsys.inf - Ok

    C:\WINDOWS\system32\usmt\miguser.inf - Ok

    C:\WINDOWS\system32\usmt\migism.dll - Ok

    C:\WINDOWS\system32\usmt\migwiz.exe.manifest - Ok

    C:\WINDOWS\system32\usmt\migism_a.dll - Ok

    C:\WINDOWS\system32\usmt\migwiz.inf - Ok

    C:\WINDOWS\system32\usmt\migisma.dll - Ok

    C:\WINDOWS\system32\usmt\migload.exe - Ok

    C:\WINDOWS\system32\usmt\migwiz.exe - Ok

    C:\WINDOWS\system32\usmt\scripta.dll - Ok

    C:\WINDOWS\system32\usmt\script.dll - Ok

    C:\WINDOWS\system32\usmt\migwiz_a.exe - Ok

    C:\WINDOWS\system32\usmt\migwiza.exe - Ok

    C:\WINDOWS\system32\spool\drivers\w32x86\3\XpsSvcs.dll - Ok

    C:\WINDOWS\system32\usmt\script_a.dll - Ok

    C:\WINDOWS\system32\usmt\sysmoda.dll - Ok

    C:\WINDOWS\system32\usmt\sysmod.dll - Ok

    C:\WINDOWS\system32\usmt\usmtdef.inf - Ok

    C:\WINDOWS\system32\usmt\sysmod_a.dll - Ok

    C:\WINDOWS\system32\wbem\dgnet.mof - Ok

    C:\WINDOWS\system32\wbem\dsprov.mfl - Ok

    C:\WINDOWS\system32\wbem\dsprov.mof - Ok

    C:\WINDOWS\system32\wbem\cimwin32.mfl - Ok

    C:\WINDOWS\system32\wbem\evntrprv.dll - Ok

    C:\WINDOWS\system32\wbem\cimwin32.mof - Ok

    C:\WINDOWS\system32\wbem\evntrprv.mof - Ok

    C:\WINDOWS\system32\wbem\dsprov.dll - Ok

    C:\WINDOWS\system32\wbem\fconprov.mfl - Ok

    C:\WINDOWS\system32\wbem\fconprov.mof - Ok

    C:\WINDOWS\system32\wbem\fevprov.mof - Ok

    C:\WINDOWS\system32\wbem\fevprov.mfl - Ok

    C:\WINDOWS\system32\wbem\fwdprov.dll - Ok

    C:\WINDOWS\system32\wbem\esscli.dll - Ok

    C:\WINDOWS\system32\wbem\hnetcfg.mof - Ok

    C:\WINDOWS\system32\wbem\ieinfo5.mof - Ok

    C:\WINDOWS\system32\wbem\framedyn.dll - Ok

    C:\WINDOWS\system32\wbem\krnlprov.dll - Ok

    C:\WINDOWS\system32\wbem\krnlprov.mof - Ok

    C:\WINDOWS\system32\wbem\krnlprov.mfl - Ok

    C:\WINDOWS\system32\wbem\licwmi.mfl - Ok

    C:\WINDOWS\system32\wbem\licwmi.mof - Ok

    C:\WINDOWS\system32\wbem\fastprox.dll - Ok

    C:\WINDOWS\system32\wbem\mofcomp.exe - Ok

    C:\WINDOWS\system32\usmt\sysfiles.inf - Ok

    C:\WINDOWS\system32\wbem\napclientprov.mof - Ok

    C:\WINDOWS\system32\wbem\msi.mfl - Ok

    C:\WINDOWS\system32\wbem\napclientschema.mof - Ok

    C:\WINDOWS\system32\wbem\ncprov.mfl - Ok

    C:\WINDOWS\system32\wbem\ncprov.mof - Ok

    C:\WINDOWS\system32\wbem\mofd.dll - Ok

    C:\WINDOWS\system32\wbem\msi.mof - Ok

    C:\WINDOWS\system32\wbem\ntevt.mfl - Ok

    C:\WINDOWS\system32\wbem\ncprov.dll - Ok

    C:\WINDOWS\system32\wbem\ntevt.mof - Ok

    C:\WINDOWS\system32\wbem\regevent.mfl - Ok

    C:\WINDOWS\system32\wbem\regevent.mof - Ok

    C:\WINDOWS\system32\wbem\scm.mof - Ok

    C:\WINDOWS\system32\wbem\repdrvfs.dll - Ok

    C:\WINDOWS\system32\wbem\provthrd.dll - Ok

    C:\WINDOWS\system32\wbem\ntevt.dll - Ok

    C:\WINDOWS\system32\wbem\scrcons.mfl - Ok

    C:\WINDOWS\system32\wbem\scrcons.mof - Ok

    C:\WINDOWS\system32\wbem\secrcw32.mof - Ok

    C:\WINDOWS\system32\wbem\smtpcons.mfl - Ok

    C:\WINDOWS\system32\wbem\secrcw32.mfl - Ok

    C:\WINDOWS\system32\wbem\smtpcons.mof - Ok

    C:\WINDOWS\system32\wbem\msiprov.dll - Ok

    C:\WINDOWS\system32\wbem\smtpcons.dll - Ok

    C:\WINDOWS\system32\wbem\subscrpt.mof - Ok

    C:\WINDOWS\system32\wbem\sr.mof - Ok

    C:\WINDOWS\system32\wbem\tmplprov.mfl - Ok

    C:\WINDOWS\system32\wbem\tmplprov.mof - Ok

    C:\WINDOWS\system32\wbem\scrcons.exe - Ok

    C:\WINDOWS\system32\wbem\stdprov.dll - Ok

    C:\WINDOWS\system32\wbem\tmplprov.dll - Ok

    C:\WINDOWS\system32\wbem\trnsprov.mof - Ok

    C:\WINDOWS\system32\wbem\trnsprov.mfl - Ok

    C:\WINDOWS\system32\wbem\tscfgwmi.mfl - Ok

    C:\WINDOWS\system32\wbem\trnsprov.dll - Ok

    C:\WINDOWS\system32\wbem\tscfgwmi.mof - Ok

    C:\WINDOWS\system32\wbem\updprov.mfl - Ok

    C:\WINDOWS\system32\wbem\updprov.mof - Ok

    C:\WINDOWS\system32\wbem\updprov.dll - Ok

    C:\WINDOWS\system32\wbem\wbemads.dll - Ok

    C:\WINDOWS\system32\wbem\unsecapp.exe - Ok

    C:\WINDOWS\system32\wbem\wbemads.tlb - Ok

    C:\WINDOWS\system32\wbem\viewprov.dll - Ok

    C:\WINDOWS\system32\wbem\wbemcons.mfl - Ok

    C:\WINDOWS\system32\wbem\cimwin32.dll - Ok

    C:\WINDOWS\system32\wbem\wbemcons.dll - Ok

    C:\WINDOWS\system32\wbem\wbemcons.mof - Ok

    C:\WINDOWS\system32\wbem\system.mof - Ok

    C:\WINDOWS\system32\wbem\wbemcomn.dll - Ok

    C:\WINDOWS\system32\wbem\wbemdisp.tlb - Ok

    C:\WINDOWS\system32\wbem\wbemcntl.dll - Ok

    C:\WINDOWS\system32\wbem\wbemprox.dll - Ok

    C:\WINDOWS\system32\wbem\wbemsvc.dll - Ok

    C:\WINDOWS\system32\wbem\wbemperf.dll - Ok

    C:\WINDOWS\system32\wbem\whqlprov.mof - Ok

    C:\WINDOWS\system32\wbem\wbemdisp.dll - Ok

    C:\WINDOWS\system32\wbem\winmgmtr.dll - Ok

    C:\WINDOWS\system32\wbem\wmi.mfl - Ok

    C:\WINDOWS\system32\wbem\wbemess.dll - Ok

    C:\WINDOWS\system32\wbem\wbemtest.exe - Ok

    C:\WINDOWS\system32\wbem\wmi.mof - Ok

    C:\WINDOWS\system32\wbem\wbemcore.dll - Ok

    C:\WINDOWS\system32\wbem\winmgmt.exe - Ok

    C:\WINDOWS\system32\wbem\wmiapres.dll - Ok

    C:\WINDOWS\system32\wbem\wbemupgd.dll - Ok

    C:\WINDOWS\system32\wbem\wmicookr.dll - Ok

    C:\WINDOWS\system32\wbem\wmiaprpl.dll - Ok

    C:\WINDOWS\system32\wbem\wmimsg.dll - Ok

    C:\WINDOWS\system32\wbem\wmipcima.mfl - Ok

    C:\WINDOWS\system32\wbem\wmiapsrv.exe - Ok

    C:\WINDOWS\system32\wbem\wmipdskq.mfl - Ok

    C:\WINDOWS\system32\wbem\wmipcima.mof - Ok

    C:\WINDOWS\system32\wbem\wmipdskq.mof - Ok

    C:\WINDOWS\system32\wbem\wmidcprv.dll - Ok

    C:\WINDOWS\system32\wbem\wmipicmp.mfl - Ok

    C:\WINDOWS\system32\wbem\wmiadap.exe - Ok

    C:\WINDOWS\system32\wbem\wmipicmp.mof - Ok

    C:\WINDOWS\system32\wbem\wmipcima.dll - Ok

    C:\WINDOWS\system32\wbem\wmipiprt.mfl - Ok

    C:\WINDOWS\system32\wbem\wmipiprt.mof - Ok

    C:\WINDOWS\system32\wbem\wmipdskq.dll - Ok

    C:\WINDOWS\system32\wbem\wmipiprt.dll - Ok

    C:\WINDOWS\system32\wbem\wmipicmp.dll - Ok

    C:\WINDOWS\system32\wbem\wmipjobj.dll - Ok

    C:\WINDOWS\system32\wbem\wmipjobj.mof - Ok

    C:\WINDOWS\system32\wbem\wmipjobj.mfl - Ok

    C:\WINDOWS\system32\wbem\wmipsess.mfl - Ok

    C:\WINDOWS\system32\wbem\wmipsess.mof - Ok

    C:\WINDOWS\system32\wbem\wmipsess.dll - Ok

    C:\WINDOWS\system32\wbem\wmitimep.mfl - Ok

    C:\WINDOWS\system32\wbem\wmitimep.mof - Ok

    C:\WINDOWS\system32\wbem\wmitimep.dll - Ok

    C:\WINDOWS\system32\wbem\wmiprov.dll - Ok

    C:\WINDOWS\system32\wbem\wscenter.mof - Ok

    C:\WINDOWS\system32\wbem\wmisvc.dll - Ok

    C:\WINDOWS\system32\wbem\wmiutils.dll - Ok

    C:\WINDOWS\system32\wbem\wmiprvse.exe - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\092389D621F5A8834203DAAC74CCA279.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\02E78424AB18BDBFA706C08B7D7B9F1D.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\20D2C3B8CE10B96CE6B8A3C241EF4416.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\1E97A05DE566CF6EEAE29D0634E27392.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\2A61A823DC2C1C838EE71C4351BED0B4.mof - Ok

    C:\WINDOWS\system32\wbem\wmiprvsd.dll - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\26D6C4EB696DD0C83F5D5BF2235000A7.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\2C142C4C15E3B8D139B98154CD083071.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\2DA80135BA8EC175C9B1C1598F659434.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\0A9DBC92D554324656F61F9862679F27.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\2AA23BB86A5EBD8BC2D820944E55B233.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\1EBE968EB7AF815A32641E6185350A9E.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\42355E8E232EF8CADD187D531DEC55DD.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\2CE64FBD51953C097BB5470043A6DAF9.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\37134956F76D3C30C9BE0C12571CAF43.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\42C894EEACAD83A4E41154685841B3E1.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\608B41C6A2CD9460C2263E6CD80C335A.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\26C097A9392F8C541AD42E89B7909073.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\79E817BC978E2D450EB9E3794DFDA6CF.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\701B705ED7DF100F88D5BC4A595E938D.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\7A62FA52E22CE751514BC93BE067BC80.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\731AE1FC8C795979F40FAD645FFBAEB1.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\7BDE76979585395D59B5DA1D62E63C50.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\6B38F33147D0369D5038BBB61C7A31C8.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\3EC317800FF508210BB945C81C0EACE7.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\72F867EF62976CE9F70993FF3E68A4EB.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\7F417E1A6D819A9B2FEB55DA6858EA0A.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\852ECCDBABE77624586E4417FE66F857.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\8636DC7F9479DACE6778109CB4FB4B01.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\903E49C444C46FEF5F2C3A189C9CEF71.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\9AD3182A2F39A3E091E15109132EC6CC.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\98473EDE03F6AA4FAE07C9B8533F89F7.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\958A50DFF8A9DF5FAEA042AC9F60815F.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\ABB70D53B97FC8002205F77E02C97304.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\AE7023598F41510BF261111652046301.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\A99860BB696AE92ED001E48B014365CE.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\C81ACF420917AA0F87487BC4D958BEB4.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\A7575F8DE31A912FFE91A7A41B1E382A.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\AEA50E449C23761CA4D9B7F9ED0D9C89.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\7E27EAAD25AA36FEADFF502991DFC5C1.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\C92641594A6F2DA8A55FE4738AFDA539.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\CFC35B349D24A8495FD2CEAB15C32D88.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\DBD781C2C031C708BCB490F228E7BEF9.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\BE81B2C0741907C1FC1C42B6223E59AD.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\C6300BFE37ADE6B52EC023F66124985F.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\DFD614E4D613EF4506AC8F525F5F514B.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\CA0106054EB09C302ED3E0669F99D021.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\E04DE4CDFEC284A342159BB920976701.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\DFB9AD54AC2D3B8122567AAD3BF3EB7F.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\EDBF963FB003D0670AA9C2219BD091FB.mof - Ok

    C:\WINDOWS\system32\wbem\Logs\FrameWork.log - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\E441354B9FE5F63362A481C9B9195A73.mof - Ok

    C:\WINDOWS\system32\wbem\Logs\replog.log - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\DC999686F8B85B326CEDFA199DD07F72.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\E737DE61441445E1FDFCA45EF5E7D987.mof - Ok

    C:\WINDOWS\system32\wbem\AutoRecover\FAAD7D567E76CAB10704AFD7C0488F23.mof - Ok

    C:\WINDOWS\system32\wbem\Logs\setup.log - Ok

    C:\WINDOWS\system32\wbem\Logs\WinMgmt.log - Ok

    C:\WINDOWS\system32\wbem\Logs\wbemprox.log - Ok

    C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ - Ok

    C:\WINDOWS\system32\wbem\Logs\wmiprov.log - Ok

    C:\WINDOWS\system32\wbem\Logs\wmiadap.log - Ok

    C:\WINDOWS\system32\wbem\Repository\$WinMgmt.CFG - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR - Ok

    C:\WINDOWS\system32\wbem\Performance\WmiApRpl.ini - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER - Ok

    C:\WINDOWS\system32\wbem\Logs\wbemess.log - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP - Ok

    C:\WINDOWS\system32\wbem\Performance\WmiApRpl.h - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP - Ok

    C:\WINDOWS\system32\wbem\Logs\wbemcore.log - Ok

    C:\WINDOWS\system32\wbem\Logs\mofcomp.log - Ok

    C:\WINDOWS\system32\wbem\xml\cim20.dtd - Ok

    C:\WINDOWS\system32\wbem\xml\wmi20.dtd - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_arithmetic_operators.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_array.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_associative_array.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_assignment_operators.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_command_search.help.txt - Ok

    C:\WINDOWS\system32\wbem\xml\wmi2xml.dll - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_break.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_alias.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_automatic_variables.help.txt - Ok

    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_continue.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_command_syntax.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_commonparameters.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_core_commands.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_environment_variable.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_display.xml.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_comparison_operators.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_execution_environment.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_escape_character.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_globbing.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_flow_control.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_filter.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_for.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_line_editing.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_location.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_if.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_foreach.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_history.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_namespace.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_method.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_function.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_object.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_logical_operator.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_operator.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_parsing.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_property.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_path_syntax.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_parameter.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_pipeline.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_redirection.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_quoting_rules.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_provider.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_ref.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_regular_expression.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_pssnapins.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_shell_variable.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_script_block.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_scope.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_switch.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_special_characters.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_reserved_words.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_signing.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_where.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_system_state.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_types.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\certificate.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_while.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\eula.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\about_wildcard.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\default.help.txt - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\filesystem.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\dotnettypes.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\microsoft.powershell.consolehost.dll-help.xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\microsoft.powershell.security.dll-help.xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\help.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\microsoft.powershell.commands.management.dll-help.xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\powershell.exe.mui - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\microsoft.powershell.commands.utility.dll-help.xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\powershelltrace.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\pwrshmsg.dll - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\powershellcore.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\registry.format.ps1xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\releasenotes.rtf - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\system.management.automation.dll-help.xml - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\types.ps1xml - Ok

    C:\Documents and Settings\Michael Senff\My Documents\desktop.ini - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\examples\profile.ps1 - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\powershell.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr:Zone.Identifier - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\quadfold.rtf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\drweb-cureit.exe:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr - packed by UPX

    C:\WINDOWS\system32\windowspowershell\v1.0\gettingstarted.rtf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe:Zone.Identifier - Ok

    C:\WINDOWS\system32\windowspowershell\v1.0\userguide.rtf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\LeagueofLegends.exe:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1).zip is ZIP archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1).zip - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1).zip - archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1).zip:Zone.Identifier - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr - packed by FLY-CODE

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011(1).zip is ZIP archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011(1).zip - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011(1).zip - archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011(1).zip:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011.zip is ZIP archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011.zip - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011.zip - archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011.zip:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\drweb-cureit.exe is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\drweb-cureit.exe\data001 - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\drweb-cureit.exe\data002 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\drweb-cureit.exe - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\RogueKiller.exe:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe is INNO SETUP container

    >>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr is NSIS container

    >>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr\MBR.DAT - packed by UPX

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\RogueKiller.exe - packed by UPX

    >>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr\MBR.DAT - packed by BINARYRES

    >>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr\PEV.DAT - packed by PECOMPACT

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\Script2.bin - packed by BINARYRES

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\AUTOBACK.EXE - packed by UPX

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\ERDNT.E_E - packed by UPX

    >>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\ERDNT.E_E - packed by UPX

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\LeagueofLegends.exe - packed by UPX

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\ERUNT.EXE - packed by UPX

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\RogueKiller.exe - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\RogueKiller.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\RSIT.exe:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\dds.scr - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\SecurityCheck.exe:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\mseinstall.exe is CAB archive

    C:\Documents and Settings\Michael Senff\My Documents\mseinstall.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\mseinstall.exe - archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.exe:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.opt - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.txt - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\SecurityCheck.exe - packed by FLY-CODE

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\RSIT.exe is AUTOIT container

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\SecurityCheck.exe is ZIP archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\SecurityCheck.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\SecurityCheck.exe - archive

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\RSIT.exe\Users\ADMINI~1\AppData\Local\Temp\1\autD5FF.tmp - packed by ASCRIPT

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe - packed by FLY-CODE

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\RSIT.exe - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\fixdamage.exe:Zone.Identifier - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe - packed by LZMA

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\fixdamage.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\License.rtf:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\License.rtf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbam.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbam.dll - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbamcore.dll:Zone.Identifier - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbamcore.dll is BINARYRES container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbamcore.dll - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbamnet.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar-log-2012-12-30 (13-32-31).txt - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\LeagueofLegends.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\msvcp100.dll - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\msvcp100.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbamnet.dll - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\msvcr100.dll:Zone.Identifier - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\LOC_GER.ZIP is ZIP archive

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\LOC_GER.ZIP - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\NTREGOPT.EXE - packed by UPX

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe is BINARYRES container

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe\data001 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\NTREGOPT.EXE - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\NTREGOPT.LOC - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{app}\README.TXT - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{tmp}\UNZIP32.EXE - packed by UPX

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\msvcr100.dll - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe\data002 - packed by BINARYRES

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\QtCore4.dll:Zone.Identifier - Ok

    >>C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe\data006 is ZLIB container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\mbar.exe - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\QtGui4.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe\{tmp}\UNZIP32.EXE - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\erunt-setup.exe - container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\ReadMe.rtf:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\system-log.txt - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\rules.ref - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\swissarmy.ref - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\config.conf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\config.conf:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\database.conf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\local.conf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\manifest.conf - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Data\Configuration\manifest.conf:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Languages\English.lng - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\Languages\English.lng:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\imageformats\qico4.dll - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\imageformats\qico4.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\imageformats\qicod4.dll - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\imageformats\qicod4.dll:Zone.Identifier - Ok

    C:\Documents and Settings\Michael Senff\My Documents\My Music\Desktop.ini - Ok

    C:\Documents and Settings\Michael Senff\My Documents\My Music\Sample Music.lnk - Ok

    C:\Documents and Settings\Michael Senff\My Documents\My Pictures\Desktop.ini - Ok

    C:\Documents and Settings\Michael Senff\My Documents\My Pictures\Sample Pictures.lnk - Ok

    C:\Documents and Settings\Michael Senff\My Documents\My Videos\Desktop.ini - Ok

    C:\WINDOWS\TEMP\dw.log - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\QtCore4.dll - Ok

    C:\WINDOWS\TEMP\MpSigStub.log - Ok

    C:\WINDOWS\TEMP\MpCmdRun.log - Ok

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\ReadMe.rtf - Ok

    C:\WINDOWS\TEMP\toolbar_log.txt - Ok

    >C:\WINDOWS\TEMP\avg_a00504\Installer.7z is 7-ZIP archive

    C:\WINDOWS\TEMP\avg_a00504\Installer.7z - Ok

    C:\WINDOWS\TEMP\avg_a00504\Installer.7z - archive

    C:\WINDOWS\TEMP\avg_a00504\{95B7759C-8C7F-4BF1-B163-73684A933233} - Ok

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\stinger.exe - packed by UPX

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\avgdttbx.dll - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\avgtpx64.sys - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\avgtpx86.sys - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\CommonCfg.ini - Ok

    C:\WINDOWS\TEMP\avg_a00504\avg-secure-search-installer.exe - Ok

    >>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe - packed by FLY-CODE

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\DriverInstaller_64.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\DriverInstaller.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\npsitesafety.dll - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\SiteSafety.dll - Ok

    >C:\WINDOWS\TEMP\{E2FDE7A2-1E1A-4A9D-A08C-BE452F6E41AC}.exe is 7-ZIP archive

    C:\WINDOWS\TEMP\{E2FDE7A2-1E1A-4A9D-A08C-BE452F6E41AC}.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\ToolBand.tlb - Ok

    C:\WINDOWS\TEMP\{E2FDE7A2-1E1A-4A9D-A08C-BE452F6E41AC}.exe - archive

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\UpdaterConfig.ini - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\ViProtocol.dll - Ok

    >>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe is BINARYRES container

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\ScriptHelper.exe - Ok

    >>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data003 - packed by FLY-CODE

    C:\WINDOWS\TEMP\avg_a00504\ConfigFiles\installer_cfg.ini - Ok

    >>>>>>C:\Documents and Settings\Michael Senff\My Documents\Downloads\tdsskiller.exe\data003 - packed by LZMA

    >C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\QtGui4.dll is ZLIB container

    C:\Documents and Settings\Michael Senff\My Documents\Downloads\mbar-1.01.0.1011 (1)\mbar\QtGui4.dll - container

    C:\WINDOWS\TEMP\avg_a00504\ConfigFiles\avguidx.dll - Ok

    C:\WINDOWS\TEMP\avg_a00504\CommonFiles\AVG Secure Search\ToolbarUpdater.exe - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\avg-secure-search.xml - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\avg-secure-search.tmp - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\chrome.manifest - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\icon.png - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\chrome\avg.jar is ZIP archive

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\chrome\avg.jar - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\chrome\avg.jar - archive

    C:\WINDOWS\TEMP\avg_a00504\ConfigFiles\MachineIdCreator.exe - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx - packed by BINARY PACKAGE

    >>C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx is BINARYRES container

    >>>C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx\data001 is ZIP archive

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx\data001 - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx - container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\components\avg-dnt-policy.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\locale\en-US\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\components\toolbarhomeApi.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\locale\en-US\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\avg.xml - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\avgJsm.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\avg-dnt-adapter.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\configuration_0.css - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\install.rdf - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\Bindings.xml - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\configuration.js is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\configuration.js - container

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\configuration_0.xul is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\configuration_0.xul - container

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\propertiesJsm.js is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\propertiesJsm.js - container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\HistoryCleaner.js - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\Preferences.js - Ok

    >C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\IOJsm.js is JS-HTML container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\cs\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\cs\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\IOJsm.js - container

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\da\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\de\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\da\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\de\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\en\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\es-es\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\es-es\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\en\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\es\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\es\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\fr\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\hu\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\fr\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\id\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\hu\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\id\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\it\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ja\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ja\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\it\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ko\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ms\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ko\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ms\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\nl\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pl\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pt-br\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pl\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\nl\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pt-br\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pt\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\ru\global.dtd - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\pt\global.properties - Ok

    C:\WINDOWS\TEMP\avg_a00504\ProgData\AVG Secure Search\FireFoxExt\13.2.0.5\modules\locale\sk\global.dtd - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\compressingcopiesofcdtrackstouselessdiskspace.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\copyingandplayingcds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\copyingfilestoyourportabledevice.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\copyingmusicfromcds.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmspdmod.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\copyingthecontentsofyourmedialibrarytoanewcomputer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\creatingyourowncds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\credential_explain_basic_authentication.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\customerserviceforpeoplewhoaredeaforhardofhearing.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\customizinginformationaboutcdsinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\customizingtheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\deletingfilesfromaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\deletingfilesinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\displayareasandcontrols.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\downloadingportabledevicedrivers.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\editautoplaylistdialogbox.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmsdmoe2.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\enablingplugins.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\errormessagehelp.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmp.dll - Ok

    C:\WINDOWS\system32\dllcache\wmploc.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\featuresarea.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\filemenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\findingwindowsmediafilesontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\formattingdevicesandmedia.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\gettingmoreaccessibilityinformation0.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\gettingstarted.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\glossary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\grantingaccesstoyourmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\helpmenu.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmstream.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\howtopreventinformationfrombeingstoredonyourcomput.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmv8ds32.ax - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\idd_fileopen.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmspdmoe.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\infocenterviewpane.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\keepingyourcomputersecure.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\keyboardaccess.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\keyboardshortcutsforusingthehelpwindow.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\listeningtoradiostations.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\maintainingyourprivacy.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\mediainformationpane.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmvds32.ax - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\medialibraryfeature.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\wordpad.exe is BINARYRES container

    C:\WINDOWS\system32\dllcache\wordpad.exe - container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\mediascan.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wowdeb.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\microsoftdocumentationinalternativeformats0.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\miniplayer.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wowexec.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\moreinformationaboutaudioanddatacds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\newautoplaylistdialogbox.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wowfax.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\nowplayingarea.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\nowplayingtoolsarea.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wow32.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\organizingyourmultimediafiles.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wowfaxui.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playbackcontrolsarea.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_firstrun_privacy.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_cdaudio.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_csgz.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmvdmod.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_dvd.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmvdmoe2.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_effects.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_formats.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wpnpinst.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_medialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_metadata_fileupdates.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_network.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ws2help.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_performance.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_player.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\write.exe - Ok

    C:\WINDOWS\system32\dllcache\ws2ifsl.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_portabledevice.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wpabaln.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_privacy.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_overview_security.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_playing_files_toaddlyricstoafile.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wscntfy.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\player_playing_files_toviewlyrics.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playercontrols.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingadvd.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ws2_32.dll - Ok

    C:\WINDOWS\system32\dllcache\wscsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\WMVCore.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingavcd.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshatm.dll - Ok

    C:\WINDOWS\system32\dllcache\wscript.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingdvds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingfiles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingmultimediafilesinmedialibrary.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshbth.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playingmusicfromcds.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wship6.dll - Ok

    >C:\WINDOWS\system32\dllcache\wscui.cpl is ZLIB container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playlistpane.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playlistselectionarea.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\playmenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\portabledevicefeature.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshisn.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\portabledeviceproperties.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshirda.dll - Ok

    C:\WINDOWS\system32\dllcache\wscui.cpl - container

    C:\WINDOWS\system32\dllcache\wshext.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\searchcomputerformultimedia.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshnetbs.dll - Ok

    C:\WINDOWS\system32\dllcache\wshrm.dll - Ok

    C:\WINDOWS\system32\dllcache\wshtcpip.dll - Ok

    C:\WINDOWS\system32\dllcache\wsiintxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\settingsthataffectyourprivacy.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\sharingyourmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\skinchooser.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wsock32.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\skinsshortcutmenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\sortingandfindingitemsinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\specialfeatures.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wsnmp32.dll - Ok

    C:\WINDOWS\system32\dllcache\wstcodec.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\stepbysteptutorials.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\supportedfileformats.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_addingitemstoplaylistsandmedialibrary.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wtsapi32.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_copyingtoacdorportabledevice.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_customizingtheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_organizingfiles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_playingfiles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tips_viewingfileinformation.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tipsandtricks.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshom.ocx - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddaplugin.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddaradiostationtoaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddcdinformation.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddfilestoaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddfilestomedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddinformationaboutacdtrackorentirealbumtoadatabaseontheinternet.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wuauclt.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddnormalizationvaluestofiles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddoreditmediainformationusingtheadvancedtagedit.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wstdecod.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toaddsynchronizedlyricstoafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjustaudiodynamicrange.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wshcon.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjusttheaudioeffects.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjustthegraphicequalizerlevels.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjustthenumberofsecondscontentisbuffered.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjustthevolume.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toadjustvideosettings.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toapplyaskin.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\wuaucpl.cpl - packed by FLY-CODE

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toautomaticallyaddfilestomedialibrarywhenplayed.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toautomaticallyplaydvds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tobackupyourlicenses.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocaptureadvdimage.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangecaptionorsubtitlelanguage.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\wuauclt1.exe is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\wuauclt1.exe\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangecdrorcdrwdrivesettings.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wuaueng1.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangecopyquality.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangehowmediainformationisupdated.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wuauclt1.exe - container

    C:\WINDOWS\system32\dllcache\wuauserv.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangescriptcommandoptions.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangesoundtracklanguage.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangetheappearanceofahelptopic.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethecolorofthebackgroundortextinhelp.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethecoloroftheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethecopyqualityofmusiccopiedfromcds.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wupdmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\wuapi.dll - Ok

    C:\WINDOWS\system32\dllcache\wuaucpl.cpl - Ok

    C:\WINDOWS\system32\dllcache\wups.dll - Ok

    C:\WINDOWS\system32\dllcache\wvchntxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethefoldersthataremonitored.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethefolderwhereyouraudioandvideofilesarestored.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethefontinhelp.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wucltui.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethelanguageofthedvdmenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethenumberofstarsforanitem.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangetheorderinwhichpluginsoperate.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wzcsapi.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangethetypesoffilesfileformatsthattheplayerplays.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochangezonesettings.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocheckwhetherdigitalcopyingisselected.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochooseavisualization.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tochoosewhichcolumnsdisplayinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toconfiguretheplayertoplayhdcdsusing20bitaudio.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toconfiguretheplayertoplaymultichanneldvds.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\xactsrv.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\wuweb.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toconfiguretheplayertoplaymultichannelwindowsmedia.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocopyanaudiocd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocopycdsinsuccession.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocopyfilestoyourportabledevice.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocreatealistofyourownpresetradiostations.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xcopy.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocreateanautoplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wzcdlg.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocreateaplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xactsrv.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocreateyourowncd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tocrossfadefiles.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xem336n5.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todeleteafilefrommedialibrary.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xjis.nls - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todeleteaplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wzcsvc.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todeleteaskin.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todeletefilesfromaplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wuaueng.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todisableaplugin.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todownloadaportabledevicedriver.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xmlprovi.dll - Ok

    C:\WINDOWS\system32\dllcache\xlog.exe - Ok

    C:\WINDOWS\system32\dllcache\xenroll.dll - Ok

    C:\WINDOWS\system32\dllcache\xmlprov.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todownloadpluginsfromtheinternet.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpshims.dll - Ok

    C:\WINDOWS\system32\dllcache\xolehlp.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todownloadskinsfromtheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\todownloadvisualizationsfromtheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toeditalbuminformationforanindividualtrackinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toeditanautoplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toeditaplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpsp1res.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toeditinformationforseveraltrackssimultaneously.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toedititemsandplaylistsbeforecopyingtoaportabledevice.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toejectacd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toenableaplugin.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toenableaudionormalization.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toeraseacdrw.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tofastforwardafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tofindaradiostationontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tofinddigitalmediausingasubscriptionservice.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tofindwindowsmediafilesontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toformatadeviceormedia.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\togetorchangeinformationaboutanalbumontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tohidethefeaturestaskbar.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpob2res.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tohidethemenubar.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tolocateotheritemsbyartistoralbuminmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toolsmenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\topauseafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\topermanentlydeletefilesfrommedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayadvd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayanaudiocd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayanyportionofafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayaradiostationontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayavcd.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\xpsp3res.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplaycontentatvariablespeeds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\xpsp3res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\xrxflnch.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayfiles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\xpsp3res.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayfilesinrandomorder.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayitemsinacategoryasaplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpsshhdr.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplaymarkedsectionsinafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayspecialfeaturesonadvd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\xpsp3res.dll\data004 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplaytracksinadifferentorder.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpsp3res.dll - container

    C:\WINDOWS\system32\dllcache\xrxscnui.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toplayvideooneframeatatime.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\topreventplayofcertaindvdsbysettingparentalcontrols.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xrxwbtmp.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\torearrangefilesonaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toremoveaplugin.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toremoveasubscriptionservice.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xrxwiadr.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toremoveduplicateitemsfromyourmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toremovelistsoffilesplayedorinternetaddressesurlsv.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toremovestoredmediainformationforcdsanddvds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\torenameaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\torenametitlesandchapters.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\zcorem.dll - Ok

    C:\WINDOWS\system32\dllcache\xrxftplt.exe - Ok

    C:\WINDOWS\system32\dllcache\zeeverm.dll - Ok

    C:\WINDOWS\system32\dllcache\znetm.dll - Ok

    C:\WINDOWS\system32\dllcache\zoneclim.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toresizetheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toresizetheplayerautomaticallytofitavideo.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\zonelibm.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toresizethevideowindow.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\torestoreyourlicenses.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\torewindafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tosaveatemporaryplaylistwithadifferentname.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tosearchforitemsinmedialibrary.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tosearchyourcomputerformusicandvideo.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toselectthefiletypefortrackscopiedfromcds.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpssvcs.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tosetpluginoptions.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toshareaclipwithafriend.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toskipplayingtracksonacd.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\zoneoc.dll - Ok

    C:\WINDOWS\system32\dllcache\zipfldr.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toskiptothenextfile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toskiptothepreviousfile.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\zclientm.exe - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tosortitemsusingadifferentcolumnheadinginmedialibr.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\acpiec.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tospecifytheinformationthatappearsinatrackfilename.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\adv01nt5.dll - Ok

    C:\WINDOWS\system32\drivers\adv02nt5.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tostopacquiringlicensesautomatically.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tostopafile.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tostopbeingaskedifyouwanttobackupyourlicenses.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\adv05nt5.dll - Ok

    C:\WINDOWS\system32\drivers\adv07nt5.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tostopretrievingmediainformationautomatically.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\adv08nt5.dll - Ok

    C:\WINDOWS\system32\drivers\adv09nt5.dll - Ok

    C:\WINDOWS\system32\drivers\acpi.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toswitchbetweenmodes.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\adv11nt5.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toswitchcameraangles.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toswitchtootherprograms.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\totemporarilyadditemstoaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\totemporarilyrearrangeitemsinaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toturnoffcopyrightprotectionlicenses.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toturnoffscreensaverduringplayback.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\agp440.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toturnoncaptions.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toupdateinformationaboutadvd.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\agpcpq.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toupdateorfindalbuminformationontheinternet.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toupgradetheplayer.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\alim1541.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\touseapluginwithafileorplaylist.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\aec.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\tousedigitalplaybackanderrorcorrection.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewalbumdetails.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewdetailsaboutafile.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\afd.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewinformationaboutadvd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewinformationabouterrors.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\amdagp.sys - Ok

    C:\WINDOWS\system32\drivers\amdk6.sys - Ok

    C:\WINDOWS\system32\drivers\AppleCharger.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewinformationaboutmultimediacontent.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\amdk7.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewlicensedetails.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewstatisticsaboutplayback.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewthevideousingtheentirescreen.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\asyncmac.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toviewtitlesandchapters.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\toworkoffline.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\arp1394.sys - Ok

    C:\WINDOWS\system32\drivers\ati1btxx.sys - Ok

    C:\WINDOWS\system32\drivers\ati1mdxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\typesofblankcds.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\understandingbuffering.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\atapi.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\understandingdigitalmediaconcepts.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\understandinglicensedfiles.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1pdxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\understandingprogressivedownloading.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1raxx.sys - Ok

    C:\WINDOWS\system32\drivers\ati1rvxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\understandingstreamingmedia.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\upgradingtheplayer.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1snxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingaudiocrossfade.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingaudionormalization.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1tuxx.sys - Ok

    C:\WINDOWS\system32\drivers\ati1ttxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usinghelp.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingplugins.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1xbxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingshortcutkeys.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingsurroundsound.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingvcds.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\ati1xsxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\usingwindowsmediaplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\videoandvisualizationpane.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\viewingcdinformation.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\viewinginformationaboutadvd.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\viewinginformationaboutfilesandcontent.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\viewmenu.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\atinbtxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\windowsmediaplayererrorcenter.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\windowsmediaplayerhelp.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\windowsmediaplayerwebhelp.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\workingoffline.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\atinmdxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\workingwithplaylists.htm is JS-HTML container

    C:\WINDOWS\system32\drivers\atinpdxx.sys - Ok

    C:\WINDOWS\system32\drivers\ati2mtaa.sys - Ok

    C:\WINDOWS\system32\drivers\atinraxx.sys - Ok

    C:\WINDOWS\system32\dllcache\wmplayer.chm - container

    C:\WINDOWS\system32\drivers\atinsnxx.sys - Ok

    >C:\WINDOWS\system32\dllcache\xpsp2res.dll is BINARYRES container

    C:\WINDOWS\system32\drivers\atinrvxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\xpsp2res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\drivers\atinttxx.sys - Ok

    C:\WINDOWS\system32\drivers\atintuxx.sys - Ok

    C:\WINDOWS\system32\drivers\atinxbxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\xpsp2res.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\drivers\ativmc20.cod - Ok

    C:\WINDOWS\system32\drivers\atinxsxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\xpsp2res.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\drivers\atmarpc.sys - Ok

    C:\WINDOWS\system32\drivers\ati2mtag.sys - Ok

    >>C:\WINDOWS\system32\dllcache\xpsp2res.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\dllcache\xpsp2res.dll - container

    C:\WINDOWS\system32\drivers\atmepvc.sys - Ok

    C:\WINDOWS\system32\drivers\atv01nt5.dll - Ok

    C:\WINDOWS\system32\drivers\atmlane.sys - Ok

    C:\WINDOWS\system32\drivers\atv02nt5.dll - Ok

    C:\WINDOWS\system32\drivers\atv04nt5.dll - Ok

    C:\WINDOWS\system32\drivers\atv06nt5.dll - Ok

    C:\WINDOWS\system32\drivers\atv10nt5.dll - Ok

    C:\WINDOWS\system32\drivers\avgtpx86.sys - Ok

    C:\WINDOWS\system32\drivers\audstub.sys - Ok

    C:\WINDOWS\system32\drivers\beep.sys - Ok

    C:\WINDOWS\system32\drivers\bridge.sys - Ok

    C:\WINDOWS\system32\drivers\bthenum.sys - Ok

    C:\WINDOWS\system32\drivers\bthmodem.sys - Ok

    C:\WINDOWS\system32\drivers\Ambfilt.sys - Ok

    C:\WINDOWS\system32\drivers\bthpan.sys - Ok

    C:\WINDOWS\system32\drivers\bthusb.sys - Ok

    C:\WINDOWS\system32\drivers\bthprint.sys - Ok

    C:\WINDOWS\system32\drivers\cbidf2k.sys - Ok

    C:\WINDOWS\system32\drivers\cdaudio.sys - Ok

    C:\WINDOWS\system32\drivers\ch7xxnt5.dll - Ok

    C:\WINDOWS\system32\drivers\cdfs.sys - Ok

    C:\WINDOWS\system32\drivers\cpqdap01.sys - Ok

    C:\WINDOWS\system32\drivers\classpnp.sys - Ok

    C:\WINDOWS\system32\drivers\cdrom.sys - Ok

    C:\WINDOWS\system32\drivers\atmuni.sys - Ok

    C:\WINDOWS\system32\drivers\diskdump.sys - Ok

    C:\WINDOWS\system32\drivers\crusoe.sys - Ok

    C:\WINDOWS\system32\drivers\disk.sys - Ok

    C:\WINDOWS\system32\drivers\cxthsfs2.cty - Ok

    C:\WINDOWS\system32\drivers\bthport.sys - Ok

    C:\WINDOWS\system32\drivers\dmload.sys - Ok

    C:\WINDOWS\system32\drivers\dmusic.sys - Ok

    C:\WINDOWS\system32\drivers\drmkaud.sys - Ok

    C:\WINDOWS\system32\drivers\cinemst2.sys - Ok

    C:\WINDOWS\system32\drivers\drmk.sys - Ok

    C:\WINDOWS\system32\drivers\dxapi.sys - Ok

    C:\WINDOWS\system32\drivers\dxgthk.sys - Ok

    C:\WINDOWS\system32\drivers\dxg.sys - Ok

    C:\WINDOWS\system32\drivers\EtronHub3.sys - Ok

    C:\WINDOWS\system32\drivers\dmio.sys - Ok

    C:\WINDOWS\system32\drivers\fdc.sys - Ok

    C:\WINDOWS\system32\drivers\EtronXHCI.sys - Ok

    C:\WINDOWS\system32\drivers\flpydisk.sys - Ok

    C:\WINDOWS\system32\drivers\fips.sys - Ok

    C:\WINDOWS\system32\drivers\fsvga.sys - Ok

    C:\WINDOWS\system32\drivers\fs_rec.sys - Ok

    C:\WINDOWS\system32\drivers\gm.dls - Ok

    C:\WINDOWS\system32\drivers\gagp30kx.sys - Ok

    C:\WINDOWS\system32\drivers\fastfat.sys - Ok

    C:\WINDOWS\system32\drivers\fltmgr.sys - Ok

    C:\WINDOWS\system32\drivers\ftdisk.sys - Ok

    C:\WINDOWS\system32\drivers\GVTDrv.sys - Ok

    C:\WINDOWS\system32\drivers\hidbth.sys - Ok

    C:\WINDOWS\system32\drivers\HECI.sys - Ok

    C:\WINDOWS\system32\drivers\gmreadme.txt - Ok

    C:\WINDOWS\system32\drivers\hidir.sys - Ok

    C:\WINDOWS\system32\drivers\hidclass.sys - Ok

    C:\WINDOWS\system32\drivers\hidparse.sys - Ok

    C:\WINDOWS\system32\drivers\hidusb.sys - Ok

    C:\WINDOWS\system32\drivers\Hdaudio.sys - Ok

    C:\WINDOWS\system32\drivers\hdaudbus.sys - Ok

    C:\WINDOWS\system32\drivers\i8042prt.sys - Ok

    C:\WINDOWS\system32\drivers\dmboot.sys - Ok

    C:\WINDOWS\system32\drivers\imapi.sys - Ok

    C:\WINDOWS\system32\drivers\IntelMEFWVer.dll - Ok

    C:\WINDOWS\system32\drivers\intelppm.sys - Ok

    C:\WINDOWS\system32\drivers\hsfbs2s2.sys - Ok

    C:\WINDOWS\system32\drivers\ip6fw.sys - Ok

    C:\WINDOWS\system32\drivers\ipinip.sys - Ok

    C:\WINDOWS\system32\drivers\ipfltdrv.sys - Ok

    C:\WINDOWS\system32\drivers\http.sys - Ok

    C:\WINDOWS\system32\drivers\irenum.sys - Ok

    C:\WINDOWS\system32\drivers\kbdclass.sys - Ok

    C:\WINDOWS\system32\drivers\isapnp.sys - Ok

    C:\WINDOWS\system32\drivers\ipnat.sys - Ok

    C:\WINDOWS\system32\drivers\ksecdd.sys - Ok

    C:\WINDOWS\system32\drivers\kmixer.sys - Ok

    C:\WINDOWS\system32\drivers\mbam.sys - Ok

    C:\WINDOWS\system32\drivers\ks.sys - Ok

    C:\WINDOWS\system32\drivers\mcd.sys - Ok

    C:\WINDOWS\system32\drivers\mbamchameleon.sys - Ok

    C:\WINDOWS\system32\drivers\mdmxsdk.sys - Ok

    C:\WINDOWS\system32\drivers\mnmdd.sys - Ok

    C:\WINDOWS\system32\drivers\mf.sys - Ok

    C:\WINDOWS\system32\drivers\modem.sys - Ok

    C:\WINDOWS\system32\drivers\ipsec.sys - Ok

    C:\WINDOWS\system32\drivers\mouhid.sys - Ok

    C:\WINDOWS\system32\drivers\mouclass.sys - Ok

    C:\WINDOWS\system32\drivers\mountmgr.sys - Ok

    C:\WINDOWS\system32\drivers\hsfdpsp2.sys - Ok

    C:\WINDOWS\system32\drivers\msfs.sys - Ok

    C:\WINDOWS\system32\drivers\MpFilter.sys - Ok

    C:\WINDOWS\system32\drivers\mrxdav.sys - Ok

    C:\WINDOWS\system32\drivers\msgpc.sys - Ok

    C:\WINDOWS\system32\drivers\mskssrv.sys - Ok

    C:\WINDOWS\system32\drivers\mspclock.sys - Ok

    C:\WINDOWS\system32\drivers\mspqm.sys - Ok

    C:\WINDOWS\system32\drivers\mssmbios.sys - Ok

    C:\WINDOWS\system32\drivers\mtlmnt5.sys - Ok

    C:\WINDOWS\system32\drivers\mup.sys - Ok

    C:\WINDOWS\system32\drivers\mutohpen.sys - Ok

    C:\WINDOWS\system32\drivers\mtxparhm.sys - Ok

    C:\WINDOWS\system32\drivers\mrxsmb.sys - Ok

    C:\WINDOWS\system32\drivers\ndistapi.sys - Ok

    C:\WINDOWS\system32\drivers\ndisuio.sys - Ok

    C:\WINDOWS\system32\drivers\ndiswan.sys - Ok

    C:\WINDOWS\system32\drivers\Monfilt.sys - Ok

    C:\WINDOWS\system32\drivers\ndproxy.sys - Ok

    C:\WINDOWS\system32\drivers\ndis.sys - Ok

    C:\WINDOWS\system32\drivers\netbios.sys - Ok

    C:\WINDOWS\system32\drivers\hsfcxts2.sys - Ok

    C:\WINDOWS\system32\drivers\netwlan5.img - Ok

    C:\WINDOWS\system32\drivers\nikedrv.sys - Ok

    C:\WINDOWS\system32\drivers\nic1394.sys - Ok

    C:\WINDOWS\system32\drivers\nmnt.sys - Ok

    C:\WINDOWS\system32\drivers\mtlstrm.sys - Ok

    C:\WINDOWS\system32\drivers\npfs.sys - Ok

    C:\WINDOWS\system32\drivers\null.sys - Ok

    C:\WINDOWS\system32\drivers\netbt.sys - Ok

    C:\WINDOWS\system32\drivers\nwlnkflt.sys - Ok

    C:\WINDOWS\system32\drivers\nwlnkfwd.sys - Ok

    C:\WINDOWS\system32\drivers\nwlnknb.sys - Ok

    C:\WINDOWS\system32\drivers\nwlnkipx.sys - Ok

    C:\WINDOWS\system32\drivers\nvhda32.sys - Ok

    C:\WINDOWS\system32\drivers\ntmtlfax.sys - Ok

    C:\WINDOWS\system32\drivers\oprghdlr.sys - Ok

    C:\WINDOWS\system32\drivers\nwlnkspx.sys - Ok

    C:\WINDOWS\system32\drivers\partmgr.sys - Ok

    C:\WINDOWS\system32\drivers\parvdm.sys - Ok

    C:\WINDOWS\system32\drivers\p3.sys - Ok

    C:\WINDOWS\system32\drivers\pciide.sys - Ok

    C:\WINDOWS\system32\drivers\pciidex.sys - Ok

    C:\WINDOWS\system32\drivers\parport.sys - Ok

    C:\WINDOWS\system32\drivers\pci.sys - Ok

    C:\WINDOWS\system32\drivers\pcmcia.sys - Ok

    C:\WINDOWS\system32\drivers\processr.sys - Ok

    C:\WINDOWS\system32\drivers\psched.sys - Ok

    C:\WINDOWS\system32\drivers\portcls.sys - Ok

    C:\WINDOWS\system32\drivers\rasacd.sys - Ok

    C:\WINDOWS\system32\drivers\ptilink.sys - Ok

    C:\WINDOWS\system32\drivers\raspppoe.sys - Ok

    C:\WINDOWS\system32\drivers\rasl2tp.sys - Ok

    C:\WINDOWS\system32\drivers\raspti.sys - Ok

    C:\WINDOWS\system32\drivers\raspptp.sys - Ok

    C:\WINDOWS\system32\drivers\rdpcdd.sys - Ok

    C:\WINDOWS\system32\drivers\rawwan.sys - Ok

    C:\WINDOWS\system32\drivers\ntfs.sys - Ok

    C:\WINDOWS\system32\drivers\recagent.sys - Ok

    C:\WINDOWS\system32\drivers\redbook.sys - Ok

    C:\WINDOWS\system32\drivers\rfcomm.sys - Ok

    C:\WINDOWS\system32\drivers\rdbss.sys - Ok

    C:\WINDOWS\system32\drivers\rdpwd.sys - Ok

    C:\WINDOWS\system32\drivers\rio8drv.sys - Ok

    C:\WINDOWS\system32\drivers\riodrv.sys - Ok

    C:\WINDOWS\system32\drivers\rdpdr.sys - Ok

    C:\WINDOWS\system32\drivers\RTAIODAT.DAT - Ok

    C:\WINDOWS\system32\drivers\rndismp.sys - Ok

    C:\WINDOWS\system32\drivers\rootmdm.sys - Ok

    C:\WINDOWS\system32\drivers\rndismpx.sys - Ok

    C:\WINDOWS\system32\drivers\scsiport.sys - Ok

    C:\WINDOWS\system32\drivers\s3gnbm.sys - Ok

    C:\WINDOWS\system32\drivers\sdbus.sys - Ok

    C:\WINDOWS\system32\drivers\rmcast.sys - Ok

    C:\WINDOWS\system32\drivers\secdrv.sys - Ok

    C:\WINDOWS\system32\drivers\serenum.sys - Ok

    C:\WINDOWS\system32\drivers\Rtenicxp.sys - Ok

    C:\WINDOWS\system32\drivers\sffdisk.sys - Ok

    C:\WINDOWS\system32\drivers\sffp_mmc.sys - Ok

    C:\WINDOWS\system32\drivers\serial.sys - Ok

    C:\WINDOWS\system32\drivers\sfloppy.sys - Ok

    C:\WINDOWS\system32\drivers\siint5.dll - Ok

    C:\WINDOWS\system32\drivers\sffp_sd.sys - Ok

    C:\WINDOWS\system32\drivers\sisagp.sys - Ok

    C:\WINDOWS\system32\drivers\slwdmsup.sys - Ok

    C:\WINDOWS\system32\drivers\slnthal.sys - Ok

    C:\WINDOWS\system32\drivers\smbali.sys - Ok

    C:\WINDOWS\system32\drivers\smclib.sys - Ok

    C:\WINDOWS\system32\drivers\slnt7554.sys - Ok

    C:\WINDOWS\system32\drivers\sonydcam.sys - Ok

    C:\WINDOWS\system32\drivers\splitter.sys - Ok

    C:\WINDOWS\system32\drivers\stream.sys - Ok

    C:\WINDOWS\system32\drivers\sr.sys - Ok

    C:\WINDOWS\system32\drivers\swenum.sys - Ok

    C:\WINDOWS\system32\drivers\swmidi.sys - Ok

    C:\WINDOWS\system32\drivers\tape.sys - Ok

    C:\WINDOWS\system32\drivers\slntamr.sys - Ok

    C:\WINDOWS\system32\drivers\sysaudio.sys - Ok

    C:\WINDOWS\system32\drivers\tdi.sys - Ok

    C:\WINDOWS\system32\drivers\tdpipe.sys - Ok

    C:\WINDOWS\system32\drivers\srv.sys - Ok

    C:\WINDOWS\system32\drivers\tdtcp.sys - Ok

    C:\WINDOWS\system32\drivers\termdd.sys - Ok

    C:\WINDOWS\system32\drivers\tosdvd.sys - Ok

    C:\WINDOWS\system32\drivers\tunmp.sys - Ok

    C:\WINDOWS\system32\drivers\tcpip6.sys - Ok

    C:\WINDOWS\system32\drivers\tsbvcap.sys - Ok

    C:\WINDOWS\system32\drivers\tcpip.sys - Ok

    C:\WINDOWS\system32\drivers\usb8023.sys - Ok

    C:\WINDOWS\system32\drivers\uagp35.sys - Ok

    C:\WINDOWS\system32\drivers\udfs.sys - Ok

    C:\WINDOWS\system32\drivers\usb8023x.sys - Ok

    C:\WINDOWS\system32\drivers\usbcamd2.sys - Ok

    C:\WINDOWS\system32\drivers\usbcamd.sys - Ok

    C:\WINDOWS\system32\drivers\usbehci.sys - Ok

    C:\WINDOWS\system32\drivers\usbd.sys - Ok

    C:\WINDOWS\system32\drivers\usbhub.sys - Ok

    C:\WINDOWS\system32\drivers\usbintel.sys - Ok

    C:\WINDOWS\system32\drivers\usbstor.sys - Ok

    C:\WINDOWS\system32\drivers\vchnt5.dll - Ok

    C:\WINDOWS\system32\drivers\usbport.sys - Ok

    C:\WINDOWS\system32\drivers\usbvideo.sys - Ok

    C:\WINDOWS\system32\drivers\update.sys - Ok

    C:\WINDOWS\system32\drivers\vga.sys - Ok

    C:\WINDOWS\system32\drivers\vdmindvd.sys - Ok

    C:\WINDOWS\system32\drivers\viaagp.sys - Ok

    C:\WINDOWS\system32\drivers\wacompen.sys - Ok

    C:\WINDOWS\system32\drivers\wadv07nt.sys - Ok

    C:\WINDOWS\system32\drivers\volsnap.sys - Ok

    C:\WINDOWS\system32\drivers\videoprt.sys - Ok

    C:\WINDOWS\system32\drivers\wadv09nt.sys - Ok

    C:\WINDOWS\system32\drivers\wadv08nt.sys - Ok

    C:\WINDOWS\system32\drivers\wadv11nt.sys - Ok

    C:\WINDOWS\system32\drivers\watv10nt.sys - Ok

    C:\WINDOWS\system32\drivers\watv06nt.sys - Ok

    C:\WINDOWS\system32\drivers\wanarp.sys - Ok

    C:\WINDOWS\system32\drivers\ws2ifsl.sys - Ok

    C:\WINDOWS\system32\drivers\etc\hosts - Ok

    C:\WINDOWS\system32\drivers\etc\networks - Ok

    C:\WINDOWS\system32\drivers\wmilib.sys - Ok

    C:\WINDOWS\system32\drivers\etc\protocol - Ok

    C:\WINDOWS\system32\drivers\etc\services - Ok

    C:\WINDOWS\system32\drivers\wdmaud.sys - Ok

    C:\WINDOWS\system32\en-US\html.iec.mui - Ok

    C:\WINDOWS\system32\en-US\admparse.dll.mui - Ok

    C:\WINDOWS\system32\en-US\aaclient.dll.mui - Ok

    C:\WINDOWS\system32\drivers\etc\lmhosts.sam - Ok

    C:\WINDOWS\system32\en-US\ieakeng.dll.mui - Ok

    C:\WINDOWS\system32\en-US\ie4uinit.exe.mui - Ok

    >C:\WINDOWS\system32\en-US\icardie.dll.mui is BINARYRES container

    C:\WINDOWS\system32\en-US\ieaksie.dll.mui - Ok

    C:\WINDOWS\system32\en-US\icardie.dll.mui - container

    C:\WINDOWS\system32\en-US\iepeers.dll.mui - Ok

    C:\WINDOWS\system32\en-US\iernonce.dll.mui - Ok

    C:\WINDOWS\system32\en-US\iedkcs32.dll.mui - Ok

    C:\WINDOWS\system32\en-US\IERtUtil.dll.mui - Ok

    C:\WINDOWS\system32\en-US\ieakui.dll.mui - Ok

    C:\WINDOWS\system32\en-US\ieudinit.exe.mui - Ok

    C:\WINDOWS\system32\en-US\ieui.dll.mui - Ok

    >C:\WINDOWS\system32\en-US\iesetup.dll.mui is BINARYRES container

    C:\WINDOWS\system32\en-US\inseng.dll.mui - Ok

    C:\WINDOWS\system32\en-US\jscript.dll.mui - Ok

    >>C:\WINDOWS\system32\en-US\iesetup.dll.mui\data003 is JS-HTML container

    C:\WINDOWS\system32\en-US\inetcpl.cpl.mui - Ok

    C:\WINDOWS\system32\en-US\licmgr10.dll.mui - Ok

    C:\WINDOWS\system32\en-US\mshta.exe.mui - Ok

    C:\WINDOWS\system32\en-US\iesetup.dll.mui - container

    >C:\WINDOWS\system32\en-US\mshtml.dll.mui is BINARYRES container

    C:\WINDOWS\system32\en-US\mshtml.dll.mui - container

    C:\WINDOWS\system32\en-US\msfeedsbs.dll.mui - Ok

    C:\WINDOWS\system32\en-US\mshtmler.dll.mui - Ok

    C:\WINDOWS\system32\en-US\msrating.dll.mui - Ok

    C:\WINDOWS\system32\en-US\mstsc.exe.mui - Ok

    C:\WINDOWS\system32\drivers\nv4_mini.sys - Ok

    C:\WINDOWS\system32\en-US\PresentationHost.exe.mui - Ok

    C:\WINDOWS\system32\en-US\mstscax.dll.mui - Ok

    C:\WINDOWS\system32\en-US\UIAutomationCore.dll.mui - Ok

    C:\WINDOWS\system32\en-US\occache.dll.mui - Ok

    C:\WINDOWS\system32\en-US\urlmon.dll.mui - Ok

    C:\WINDOWS\system32\en-US\vbscript.dll.mui - Ok

    C:\WINDOWS\system32\en-US\WinFXDocObj.exe.mui - Ok

    C:\WINDOWS\system32\en\microsoft.managementconsole.resources.dll - Ok

    C:\WINDOWS\system32\en-US\webcheck.dll.mui - Ok

    C:\WINDOWS\system32\en\mmcex.resources.dll - Ok

    C:\WINDOWS\system32\en-US\wininet.dll.mui - Ok

    C:\WINDOWS\system32\icsxml\cmnicfg.xml - Ok

    C:\WINDOWS\system32\icsxml\ipcfg.xml - Ok

    C:\WINDOWS\system32\icsxml\osinfo.xml - Ok

    C:\WINDOWS\system32\icsxml\potscfg.xml - Ok

    C:\WINDOWS\system32\en\mmcfxcommon.resources.dll - Ok

    C:\WINDOWS\system32\ias\dnary.mdb - Ok

    C:\WINDOWS\system32\icsxml\pppcfg.xml - Ok

    C:\WINDOWS\system32\ias\ias.mdb - Ok

    C:\WINDOWS\system32\mui\0009\hhctrlui.dll - Ok

    C:\WINDOWS\system32\mui\0409\mscorees.dll - Ok

    C:\WINDOWS\system32\en-US\ieframe.dll.mui - Ok

    C:\WINDOWS\system32\mui\041b\xpsp1res.dll - Ok

    C:\WINDOWS\system32\drivers\RtkHDAud.sys - Ok

    C:\WINDOWS\system32\mui\041b\xpob2res.dll - Ok

    C:\WINDOWS\system32\mui\0424\xpsp1res.dll - Ok

    >C:\WINDOWS\system32\mui\0409\icardres.dll.mui is BINARYRES container

    C:\WINDOWS\system32\mui\0424\xpob2res.dll - Ok

    C:\WINDOWS\system32\npp\ndisnpp.dll - Ok

    >C:\WINDOWS\system32\mui\041b\xpsp3res.dll is BINARYRES container

    >>C:\WINDOWS\system32\mui\041b\xpsp3res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\mui\041b\xpsp3res.dll - container

    >C:\WINDOWS\system32\mui\041b\xpsp2res.dll is BINARYRES container

    >>C:\WINDOWS\system32\mui\041b\xpsp2res.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\mui\041b\xpsp2res.dll\data002 is JS-HTML container

    >C:\WINDOWS\system32\mui\0424\xpsp2res.dll is BINARYRES container

    >>C:\WINDOWS\system32\mui\0424\xpsp2res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\mui\0409\icardres.dll.mui - container

    >>C:\WINDOWS\system32\mui\041b\xpsp2res.dll\data003 is JS-HTML container

    >>C:\WINDOWS\system32\mui\041b\xpsp2res.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\mui\041b\xpsp2res.dll - container

    >>C:\WINDOWS\system32\mui\0424\xpsp2res.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\npp\nppagent.exe - Ok

    >>C:\WINDOWS\system32\mui\0424\xpsp2res.dll\data003 is JS-HTML container

    >>C:\WINDOWS\system32\mui\0424\xpsp2res.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\mui\0424\xpsp2res.dll - container

    >C:\WINDOWS\system32\oobe\agtscrp2.js is JS-HTML container

    >C:\WINDOWS\system32\oobe\agtcore.js is JS-HTML container

    C:\WINDOWS\system32\oobe\agtscrp2.js - container

    >C:\WINDOWS\system32\oobe\actshell.htm is JS-HTML container

    >C:\WINDOWS\system32\mui\0424\xpsp3res.dll is BINARYRES container

    >>C:\WINDOWS\system32\mui\0424\xpsp3res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\mui\0424\xpsp3res.dll - container

    >C:\WINDOWS\system32\oobe\dialmgr.js is JS-HTML container

    C:\WINDOWS\system32\oobe\agtcore.js - container

    >C:\WINDOWS\system32\oobe\dslmain.js is JS-HTML container

    C:\WINDOWS\system32\oobe\dialmgr.js - container

    C:\WINDOWS\system32\oobe\dslmain.js - container

    >C:\WINDOWS\system32\oobe\error.js is JS-HTML container

    >C:\WINDOWS\system32\oobe\iconnect.js is JS-HTML container

    C:\WINDOWS\system32\oobe\error.js - container

    >C:\WINDOWS\system32\oobe\isptype.js is JS-HTML container

    C:\WINDOWS\system32\oobe\isptype.js - container

    C:\WINDOWS\system32\oobe\migip.dun - Ok

    C:\WINDOWS\system32\oobe\migrate.isp - Ok

    C:\WINDOWS\system32\oobe\iconnect.js - container

    C:\WINDOWS\system32\oobe\actshell.htm - container

    >C:\WINDOWS\system32\oobe\dtsgnup.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\icsmgr.js is JS-HTML container

    C:\WINDOWS\system32\oobe\migx25a.dun - Ok

    C:\WINDOWS\system32\oobe\migrate.obe - Ok

    C:\WINDOWS\system32\oobe\icsmgr.js - container

    C:\WINDOWS\system32\oobe\migx25b.dun - Ok

    C:\WINDOWS\system32\oobe\migx25c.dun - Ok

    >C:\WINDOWS\system32\oobe\migrate.js is JS-HTML container

    C:\WINDOWS\system32\oobe\dtsgnup.htm - container

    C:\WINDOWS\system32\oobe\msobdl.dll - Ok

    C:\WINDOWS\system32\oobe\msobe.isp - Ok

    >C:\WINDOWS\system32\oobe\mousetut.js is JS-HTML container

    C:\WINDOWS\system32\oobe\migrate.js - container

    >C:\WINDOWS\system32\oobe\msobshel.dll is BINARYRES container

    >C:\WINDOWS\system32\oobe\agtscrpt.js is JS-HTML container

    C:\WINDOWS\system32\oobe\msobcomm.dll - Ok

    >>C:\WINDOWS\system32\oobe\msobshel.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\oobe\mousetut.js - container

    C:\WINDOWS\system32\oobe\msobshel.dll - container

    C:\WINDOWS\system32\oobe\obeip.dun - Ok

    C:\WINDOWS\system32\oobe\msobweb.dll - Ok

    >C:\WINDOWS\system32\oobe\oobeinfo.ini is JS-HTML container

    C:\WINDOWS\system32\oobe\oobeinfo.ini - container

    C:\WINDOWS\system32\oobe\msoobe.exe - Ok

    C:\WINDOWS\system32\oobe\phone.inf - Ok

    >C:\WINDOWS\system32\oobe\oobeutil.js is JS-HTML container

    C:\WINDOWS\system32\oobe\oobeutil.js - container

    C:\WINDOWS\system32\oobe\reg.isp - Ok

    >C:\WINDOWS\system32\oobe\sconnect.js is JS-HTML container

    C:\WINDOWS\system32\oobe\sconnect.js - container

    C:\WINDOWS\system32\oobe\phone.obe - Ok

    C:\WINDOWS\system32\oobe\agtscrpt.js - container

    >C:\WINDOWS\system32\oobe\actsetup\actconn.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\msobshel.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\actconn.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\actdone.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\actdone.htm - container

    C:\WINDOWS\system32\oobe\oobebaln.exe - Ok

    >C:\WINDOWS\system32\oobe\actsetup\activerr.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\activerr.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\activ.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\updshell.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\activ.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\actlan.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\actlan.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\activsvc.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\updshell.htm - container

    C:\WINDOWS\system32\oobe\actsetup\activsvc.htm - container

    C:\WINDOWS\system32\oobe\msobmain.dll - Ok

    >C:\WINDOWS\system32\oobe\actsetup\adrdyreg.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\actsetup\areg1.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\actsetup\apolicy.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\apolicy.htm - container

    C:\WINDOWS\system32\oobe\actsetup\areg1.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\aprvcyms.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\adrdyreg.htm - container

    C:\WINDOWS\system32\oobe\actsetup\aprvcyms.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\adeskerr.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\aregsty2.css - Ok

    C:\WINDOWS\system32\oobe\actsetup\adeskerr.htm - container

    C:\WINDOWS\system32\oobe\actsetup\aregstyl.css - Ok

    >C:\WINDOWS\system32\oobe\actsetup\aregdial.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\aregdial.htm - container

    C:\WINDOWS\system32\oobe\msobshel.htm - container

    >C:\WINDOWS\system32\oobe\actsetup\aregdone.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\actsetup\aregdone.htm - container

    >C:\WINDOWS\system32\oobe\error\dialtone.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\error\cnncterr.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\actsetup\ausrinfo.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\error\dialtone.htm - container

    C:\WINDOWS\system32\oobe\actsetup\ausrinfo.htm - container

    C:\WINDOWS\system32\oobe\error\cnncterr.htm - container

    >C:\WINDOWS\system32\oobe\error\isp2busy.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\error\hndshake.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\error\isp2busy.htm - container

    C:\WINDOWS\system32\oobe\error\hndshake.htm - container

    >C:\WINDOWS\system32\oobe\error\pberr.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\error\pulse.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\error\pulse.htm - container

    C:\WINDOWS\system32\oobe\error\pberr.htm - container

    >C:\WINDOWS\system32\oobe\html\dslmain\dsl_a.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\dslmain\dsl_a.htm - container

    >C:\WINDOWS\system32\oobe\html\dslmain\dslmain.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\iconnect\icntlast.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\dslmain\dslmain.htm - container

    >C:\WINDOWS\system32\oobe\error\noanswer.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\iconnect\iconnect.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\error\noanswer.htm - container

    >C:\WINDOWS\system32\oobe\error\toobusy.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\error\toobusy.htm - container

    C:\WINDOWS\system32\oobe\html\iconnect\iconnect.htm - container

    >C:\WINDOWS\system32\oobe\html\isptype\isptype.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\iconnect\icntlast.htm - container

    >C:\WINDOWS\system32\oobe\html\dslmain\dsl_b.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\dslmain\dsl_b.htm - container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_b.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\isptype\isptype.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_b.htm - container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_c.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_f.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_e.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_f.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_e.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_c.htm - container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_a.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_d.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_d.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_a.htm - container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_h.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_g.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_h.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse_g.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\mouse.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\images\bulzano.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\bulzanom.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but1_dwn.gif - Ok

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_k.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\images\but1_idl.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but1_up.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\mouse_k.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\images\but2_dwn.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but2_idl.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but2_up.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but3_dwn.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but3_idl.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but3_up.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but4_dwn.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but4_idl.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\but4_up.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\clicking.gif - Ok

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_i.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\images\heidelbm.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\desktop3.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\mouse_i.htm - container

    >C:\WINDOWS\system32\oobe\html\mouse\mouse_j.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\mouse\images\heidelb.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\mouse_j.htm - container

    C:\WINDOWS\system32\oobe\html\mouse\images\mouse4.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\mouseimg.gif - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\paris.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\parism.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\pisam.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\praguem.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\prague.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\pisa.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\tyrol.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\tyrolm.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\venicem.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\veronam.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\verona.jpg - Ok

    C:\WINDOWS\system32\oobe\html\mouse\images\venice.jpg - Ok

    C:\WINDOWS\system32\oobe\images\arrow.gif - Ok

    C:\WINDOWS\system32\oobe\images\backdown.jpg - Ok

    C:\WINDOWS\system32\oobe\images\backup.jpg - Ok

    C:\WINDOWS\system32\oobe\images\backoff.jpg - Ok

    C:\WINDOWS\system32\oobe\images\backover.jpg - Ok

    >C:\WINDOWS\system32\oobe\html\sconnect\scntlast.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\images\btn3.gif - Ok

    C:\WINDOWS\system32\oobe\images\btn2.gif - Ok

    C:\WINDOWS\system32\oobe\images\bullet1.gif - Ok

    C:\WINDOWS\system32\oobe\images\btn1.gif - Ok

    C:\WINDOWS\system32\oobe\images\clickerx.wav - Ok

    C:\WINDOWS\system32\oobe\images\clickhr.gif - Ok

    >C:\WINDOWS\system32\oobe\icserror\icsdc.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\icserror\icsdc.htm - container

    C:\WINDOWS\system32\oobe\images\dialtone.gif - Ok

    C:\WINDOWS\system32\oobe\images\dialup.gif - Ok

    C:\WINDOWS\system32\oobe\images\grn_btn.gif - Ok

    C:\WINDOWS\system32\oobe\images\greenshd.gif - Ok

    >C:\WINDOWS\system32\oobe\html\sconnect\sconnect.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\html\sconnect\scntlast.htm - container

    C:\WINDOWS\system32\oobe\images\hand2.gif - Ok

    C:\WINDOWS\system32\oobe\images\hand1.gif - Ok

    C:\WINDOWS\system32\oobe\images\monitor.gif - Ok

    C:\WINDOWS\system32\oobe\images\magnify.gif - Ok

    C:\WINDOWS\system32\oobe\images\merlin.gif - Ok

    C:\WINDOWS\system32\oobe\html\sconnect\sconnect.htm - container

    C:\WINDOWS\system32\oobe\images\monitor2.gif - Ok

    C:\WINDOWS\system32\oobe\images\mslogo.jpg - Ok

    C:\WINDOWS\system32\oobe\images\mousewn1.gif - Ok

    C:\WINDOWS\system32\oobe\images\mouse.gif - Ok

    C:\WINDOWS\system32\oobe\images\newbtm1.jpg - Ok

    C:\WINDOWS\system32\oobe\images\newbtm8.jpg - Ok

    C:\WINDOWS\system32\oobe\images\newtop8.jpg - Ok

    C:\WINDOWS\system32\oobe\images\newtop1.jpg - Ok

    C:\WINDOWS\system32\oobe\images\newmark8.jpg - Ok

    C:\WINDOWS\system32\oobe\images\nextup.jpg - Ok

    C:\WINDOWS\system32\oobe\images\nextdown.jpg - Ok

    C:\WINDOWS\system32\oobe\images\nextoff.jpg - Ok

    C:\WINDOWS\system32\oobe\images\nextover.jpg - Ok

    C:\WINDOWS\system32\oobe\images\newmark1.jpg - Ok

    C:\WINDOWS\system32\oobe\images\oemcoa.jpg - Ok

    C:\WINDOWS\system32\oobe\images\oemlogo.gif - Ok

    C:\WINDOWS\system32\oobe\images\prodkey.gif - Ok

    C:\WINDOWS\system32\oobe\images\intro.wmv - Ok

    C:\WINDOWS\system32\oobe\images\progress.gif - Ok

    C:\WINDOWS\system32\oobe\images\qmark.gif - Ok

    C:\WINDOWS\system32\oobe\images\redshd.gif - Ok

    C:\WINDOWS\system32\oobe\images\skipover.jpg - Ok

    C:\WINDOWS\system32\oobe\images\skipup.jpg - Ok

    C:\WINDOWS\system32\oobe\images\skipdown.jpg - Ok

    C:\WINDOWS\system32\oobe\images\thanks10.png - Ok

    C:\WINDOWS\system32\oobe\images\thanks8.png - Ok

    C:\WINDOWS\system32\oobe\images\skipoff.jpg - Ok

    C:\WINDOWS\system32\oobe\images\wpaflag.jpg - Ok

    C:\WINDOWS\system32\oobe\images\wpabtm.jpg - Ok

    C:\WINDOWS\system32\oobe\images\wpakey.jpg - Ok

    C:\WINDOWS\system32\oobe\images\wpatop.jpg - Ok

    C:\WINDOWS\system32\oobe\images\wpaback.jpg - Ok

    C:\WINDOWS\system32\oobe\isperror\ispdtone.htm - Ok

    C:\WINDOWS\system32\oobe\isperror\ispcnerr.htm - Ok

    C:\WINDOWS\system32\oobe\isperror\isphdshk.htm - Ok

    C:\WINDOWS\system32\oobe\images\qmark.acs - Ok

    C:\WINDOWS\system32\oobe\isperror\ispins.htm - Ok

    >C:\WINDOWS\system32\oobe\isperror\isppberr.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\images\title.wma - Ok

    C:\WINDOWS\system32\oobe\isperror\isppberr.htm - container

    C:\WINDOWS\system32\oobe\isperror\ispnoanw.htm - Ok

    >C:\WINDOWS\system32\oobe\regerror\rcnterr.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\regerror\rcnterr.htm - container

    C:\WINDOWS\system32\oobe\isperror\ispsbusy.htm - Ok

    C:\WINDOWS\system32\oobe\isperror\ispphbsy.htm - Ok

    >C:\WINDOWS\system32\oobe\regerror\rhndshk.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\regerror\rhndshk.htm - container

    >C:\WINDOWS\system32\oobe\regerror\rdtone.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\regerror\rdtone.htm - container

    >C:\WINDOWS\system32\oobe\regerror\rpulse.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\regerror\rnomdm.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\regerror\rnomdm.htm - container

    C:\WINDOWS\system32\oobe\regerror\rpulse.htm - container

    >C:\WINDOWS\system32\oobe\regerror\rnoansw.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\regerror\rpberr.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\regerror\rnoansw.htm - container

    C:\WINDOWS\system32\oobe\regerror\rpberr.htm - container

    >C:\WINDOWS\system32\oobe\setup\acterror.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\autoupdt.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\autoupdt.htm - container

    >C:\WINDOWS\system32\oobe\setup\activate.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\regerror\rtoobusy.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\acterror.htm - container

    C:\WINDOWS\system32\oobe\regerror\rtoobusy.htm - container

    C:\WINDOWS\system32\oobe\setup\activate.htm - container

    >C:\WINDOWS\system32\oobe\setup\act_plcy.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\act_plcy.htm - container

    >C:\WINDOWS\system32\oobe\setup\dialup.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\dialup.htm - container

    >C:\WINDOWS\system32\oobe\setup\badeula.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\compname.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\au_plcy.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\compname.htm - container

    >C:\WINDOWS\system32\oobe\setup\badpkey.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\badeula.htm - container

    C:\WINDOWS\system32\oobe\setup\au_plcy.htm - container

    C:\WINDOWS\system32\oobe\setup\badpkey.htm - container

    >C:\WINDOWS\system32\oobe\setup\drdymig.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\dtiwait.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\dtiwait.htm - container

    C:\WINDOWS\system32\oobe\setup\drdymig.htm - container

    >C:\WINDOWS\system32\oobe\setup\drdyisp.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\drdyisp.htm - container

    >C:\WINDOWS\system32\oobe\setup\hnwprmpt.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\hnwprmpt.htm - container

    >C:\WINDOWS\system32\oobe\setup\drdyoem.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\drdyoem.htm - container

    >C:\WINDOWS\system32\oobe\setup\drdyref.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\iconn.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\iconn.htm - container

    C:\WINDOWS\system32\oobe\setup\drdyref.htm - container

    >C:\WINDOWS\system32\oobe\setup\fini.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\fini.htm - container

    >C:\WINDOWS\system32\oobe\setup\ident1.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\ident1.htm - container

    >C:\WINDOWS\system32\oobe\setup\ispwait.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\ispwait.htm - container

    >C:\WINDOWS\system32\oobe\setup\isp.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\isp.htm - container

    >C:\WINDOWS\system32\oobe\setup\jndom_a.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\jndom_a.htm - container

    >C:\WINDOWS\system32\oobe\setup\ics.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\ics.htm - container

    >C:\WINDOWS\system32\oobe\setup\keybd.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\ident2.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\keybd.htm - container

    C:\WINDOWS\system32\oobe\setup\ident2.htm - container

    C:\WINDOWS\system32\oobe\setup\migdial.htm - Ok

    >C:\WINDOWS\system32\oobe\setup\keybdcmt.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\jndomain.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\neweula2.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\jndomain.htm - container

    C:\WINDOWS\system32\oobe\setup\neweula2.htm - container

    C:\WINDOWS\system32\oobe\setup\keybdcmt.htm - container

    >C:\WINDOWS\system32\oobe\setup\migpage.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\miglist.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\migpage.htm - container

    C:\WINDOWS\system32\oobe\setup\miglist.htm - container

    C:\WINDOWS\system32\oobe\setup\Oobedisc.htm - Ok

    >C:\WINDOWS\system32\oobe\setup\oempriv.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\oempriv.htm - container

    C:\WINDOWS\system32\oobe\setup\oobestyl.css - Ok

    >C:\WINDOWS\system32\oobe\setup\neweula.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\neweula.htm - container

    >C:\WINDOWS\system32\oobe\setup\prodkey.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\refdial.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\refdial.htm - container

    >C:\WINDOWS\system32\oobe\setup\reg1.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\reg3.htm is JS-HTML container

    >C:\WINDOWS\system32\oobe\setup\prvcyms.htm is JS-HTML container

    C:\WINDOWS\system32\oobe\setup\reg1.htm - container

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    >C:\WINDOWS\system32\dllcache\nddeapi.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\ncprov.dll - Ok

    C:\WINDOWS\system32\dllcache\nddenb32.dll - Ok

    C:\WINDOWS\system32\dllcache\nddeapir.exe - Ok

    C:\WINDOWS\system32\dllcache\ndistapi.sys - Ok

    C:\WINDOWS\system32\dllcache\napstat.exe - Ok

    C:\WINDOWS\system32\dllcache\nddeapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ndisip.sys - Ok

    C:\WINDOWS\system32\dllcache\ndisnpp.dll - Ok

    C:\WINDOWS\system32\dllcache\ndisuio.sys - Ok

    C:\WINDOWS\system32\dllcache\ne2000.sys - Ok

    C:\WINDOWS\system32\dllcache\neo20xx.dll - Ok

    C:\WINDOWS\system32\dllcache\ndproxy.sys - Ok

    C:\WINDOWS\system32\dllcache\ndptsp.tsp - Ok

    C:\WINDOWS\system32\dllcache\ndiswan.sys - Ok

    C:\WINDOWS\system32\dllcache\neo20xx.sys - Ok

    C:\WINDOWS\system32\dllcache\netapi.dll - Ok

    C:\WINDOWS\system32\dllcache\net.exe - Ok

    C:\WINDOWS\system32\dllcache\netbios.sys - Ok

    C:\WINDOWS\system32\dllcache\net1.exe - Ok

    C:\WINDOWS\system32\dllcache\ndis.sys - Ok

    C:\WINDOWS\system32\dllcache\netflx3.sys - Ok

    C:\WINDOWS\system32\dllcache\netapi32.dll - Ok

    C:\WINDOWS\system32\dllcache\netbt.sys - Ok

    C:\WINDOWS\system32\dllcache\netevent.dll - Ok

    C:\WINDOWS\system32\dllcache\netdde.exe - Ok

    C:\WINDOWS\system32\dllcache\neth.dll - Ok

    C:\WINDOWS\system32\dllcache\netid.dll - Ok

    C:\WINDOWS\system32\dllcache\netmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\netrap.dll - Ok

    C:\WINDOWS\system32\dllcache\netman.dll - Ok

    C:\WINDOWS\system32\dllcache\netoc.dll - Ok

    C:\WINDOWS\system32\dllcache\netsetup.cpl - Ok

    C:\WINDOWS\system32\dllcache\netlogon.dll - Ok

    C:\WINDOWS\system32\dllcache\netcfgx.dll - Ok

    C:\WINDOWS\system32\dllcache\netsh.exe - Ok

    C:\WINDOWS\system32\dllcache\netstat.exe - Ok

    C:\WINDOWS\system32\dllcache\netui0.dll - Ok

    C:\WINDOWS\system32\dllcache\netwlan5.sys - Ok

    >C:\WINDOWS\system32\dllcache\netsetup.exe is CAB archive

    C:\WINDOWS\system32\dllcache\netsetup.exe - Ok

    C:\WINDOWS\system32\dllcache\netsetup.exe - archive

    C:\WINDOWS\system32\dllcache\netui1.dll - Ok

    C:\WINDOWS\system32\dllcache\netui2.dll - Ok

    C:\WINDOWS\system32\dllcache\ngrpci.sys - Ok

    C:\WINDOWS\system32\dllcache\nic1394.sys - Ok

    C:\WINDOWS\system32\dllcache\nikedrv.sys - Ok

    C:\WINDOWS\system32\dllcache\newdev.dll - Ok

    >C:\WINDOWS\system32\dllcache\nlsfunc.exe - packed by EXEPACK

    C:\WINDOWS\system32\dllcache\nlsfunc.exe - Ok

    C:\WINDOWS\system32\dllcache\nls302en.lex - Ok

    C:\WINDOWS\system32\dllcache\netplwiz.dll - Ok

    C:\WINDOWS\system32\dllcache\nlhtml.dll - Ok

    C:\WINDOWS\system32\dllcache\nm6wdm.sys - Ok

    C:\WINDOWS\system32\dllcache\nm5a2wdm.sys - Ok

    C:\WINDOWS\system32\dllcache\nmevtmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\nmchat.dll - Ok

    C:\WINDOWS\system32\dllcache\nmcom.dll - Ok

    C:\WINDOWS\system32\dllcache\nmmkcert.dll - Ok

    C:\WINDOWS\system32\dllcache\nmnt.sys - Ok

    C:\WINDOWS\system32\dllcache\nmft.dll - Ok

    C:\WINDOWS\system32\dllcache\nmas.dll - Ok

    C:\WINDOWS\system32\dllcache\nmwb.dll - Ok

    C:\WINDOWS\system32\dllcache\netshell.dll - Ok

    C:\WINDOWS\system32\dllcache\notepad.exe - Ok

    C:\WINDOWS\system32\dllcache\nmoldwb.dll - Ok

    >C:\WINDOWS\system32\dllcache\npds.zip is ZIP archive

    C:\WINDOWS\system32\dllcache\npds.zip - Ok

    C:\WINDOWS\system32\dllcache\npds.zip - archive

    C:\WINDOWS\system32\dllcache\npfs.sys - Ok

    >C:\WINDOWS\system32\dllcache\npdrmv2.zip is ZIP archive

    C:\WINDOWS\system32\dllcache\npdrmv2.zip - Ok

    C:\WINDOWS\system32\dllcache\npdrmv2.zip - archive

    C:\WINDOWS\system32\dllcache\notiflag.exe - Ok

    C:\WINDOWS\system32\dllcache\nmasnt.dll - Ok

    C:\WINDOWS\system32\dllcache\npwmsdrm.dll - Ok

    C:\WINDOWS\system32\dllcache\npptools.dll - Ok

    C:\WINDOWS\system32\dllcache\nscirda.sys - Ok

    C:\WINDOWS\system32\dllcache\nsmmc.sys - Ok

    C:\WINDOWS\system32\dllcache\npdrmv2.dll - Ok

    C:\WINDOWS\system32\dllcache\ntapm.sys - Ok

    C:\WINDOWS\system32\dllcache\nslookup.exe - Ok

    C:\WINDOWS\system32\dllcache\NT5IIS.CAT - Ok

    C:\WINDOWS\system32\dllcache\ntdos.sys - Ok

    C:\WINDOWS\system32\dllcache\ntdos404.sys - Ok

    C:\WINDOWS\system32\dllcache\ntdos411.sys - Ok

    C:\WINDOWS\system32\dllcache\ntdos412.sys - Ok

    C:\WINDOWS\system32\dllcache\ntdos804.sys - Ok

    >C:\WINDOWS\system32\dllcache\npdsplay.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\npdsplay.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\npdsplay.dll - container

    C:\WINDOWS\system32\dllcache\ntdsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ntio.sys - Ok

    C:\WINDOWS\system32\dllcache\ntio404.sys - Ok

    C:\WINDOWS\system32\dllcache\ntgrip.sys - Ok

    C:\WINDOWS\system32\dllcache\ntio411.sys - Ok

    C:\WINDOWS\system32\dllcache\ntio412.sys - Ok

    C:\WINDOWS\system32\dllcache\nppagent.exe - Ok

    C:\WINDOWS\system32\dllcache\ntio804.sys - Ok

    C:\WINDOWS\system32\dllcache\ntevt.dll - Ok

    C:\WINDOWS\system32\dllcache\ntlanman.dll - Ok

    C:\WINDOWS\system32\dllcache\ntlanui.dll - Ok

    C:\WINDOWS\system32\dllcache\ntlanui2.dll - Ok

    C:\WINDOWS\system32\dllcache\ntlsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ntdll.dll - Ok

    C:\WINDOWS\system32\dllcache\ntmsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ntfs.sys - Ok

    C:\WINDOWS\system32\dllcache\ntmarta.dll - Ok

    C:\WINDOWS\system32\dllcache\ntmsevt.dll - Ok

    C:\WINDOWS\system32\dllcache\ntmsdba.dll - Ok

    C:\WINDOWS\system32\dllcache\ntmtlfax.sys - Ok

    C:\WINDOWS\system32\dllcache\ntmsmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\ntoc.dll - Ok

    C:\WINDOWS\system32\dllcache\ntmssvc.dll - Ok

    C:\WINDOWS\system32\dllcache\ntprint.cat - Ok

    C:\WINDOWS\system32\dllcache\ntprint.dll - Ok

    C:\WINDOWS\system32\dllcache\ntsdexts.dll - Ok

    C:\WINDOWS\system32\dllcache\ntkrnlpa.exe - Ok

    C:\WINDOWS\system32\dllcache\ntsd.exe - Ok

    C:\WINDOWS\system32\dllcache\ntvdmd.dll - Ok

    C:\WINDOWS\system32\dllcache\null.sys - Ok

    C:\WINDOWS\system32\dllcache\ntshrui.dll - Ok

    C:\WINDOWS\system32\dllcache\ntkrpamp.exe - Ok

    C:\WINDOWS\system32\dllcache\nuskin.wmv - Ok

    C:\WINDOWS\system32\dllcache\nv3.dll - Ok

    >C:\WINDOWS\system32\dllcache\nusrmgr.cpl is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ntkrnlmp.exe - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ntvdm.exe - Ok

    C:\WINDOWS\system32\dllcache\nv3.sys - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data003 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data004 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data005 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data006 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nwlnkflt.sys - Ok

    C:\WINDOWS\system32\dllcache\nwlnkfwd.sys - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data007 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data008 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data009 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data010 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data011 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data012 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nwlnknb.sys - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data013 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nwlnkipx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data014 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nwlnkspx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data015 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data016 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data017 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nwprovau.dll - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data018 is JS-HTML container

    C:\WINDOWS\system32\dllcache\oakley.dll - Ok

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data019 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data020 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data021 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data022 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\nusrmgr.cpl\data023 is JS-HTML container

    C:\WINDOWS\system32\dllcache\nusrmgr.cpl - container

    C:\WINDOWS\system32\dllcache\obrb041b.dll - Ok

    C:\WINDOWS\system32\dllcache\objsel.dll - Ok

    C:\WINDOWS\system32\dllcache\ocgen.dll - Ok

    C:\WINDOWS\system32\dllcache\occache.dll - Ok

    C:\WINDOWS\system32\dllcache\obrb0424.dll - Ok

    C:\WINDOWS\system32\dllcache\odbc16gt.dll - Ok

    C:\WINDOWS\system32\dllcache\ocmanage.dll - Ok

    C:\WINDOWS\system32\dllcache\ocmsn.dll - Ok

    C:\WINDOWS\system32\dllcache\odbc32gt.dll - Ok

    C:\WINDOWS\system32\dllcache\odbc32.dll - Ok

    C:\WINDOWS\system32\dllcache\odbcconf.dll - Ok

    C:\WINDOWS\system32\dllcache\ntoskrnl.exe - Ok

    C:\WINDOWS\system32\dllcache\odbcconf.rsp - Ok

    C:\WINDOWS\system32\dllcache\odbcad32.exe - Ok

    C:\WINDOWS\system32\dllcache\odbccp32.cpl - Ok

    C:\WINDOWS\system32\dllcache\odbcconf.exe - Ok

    C:\WINDOWS\system32\dllcache\odbccr32.dll - Ok

    C:\WINDOWS\system32\dllcache\odbccp32.dll - Ok

    C:\WINDOWS\system32\dllcache\odbcji32.dll - Ok

    C:\WINDOWS\system32\dllcache\odbcint.dll - Ok

    C:\WINDOWS\system32\dllcache\odbccu32.dll - Ok

    C:\WINDOWS\system32\dllcache\odbcp32r.dll - Ok

    C:\WINDOWS\system32\dllcache\oddbse32.dll - Ok

    C:\WINDOWS\system32\dllcache\nv4_disp.dll - Ok

    C:\WINDOWS\system32\dllcache\odexl32.dll - Ok

    C:\WINDOWS\system32\dllcache\odfox32.dll - Ok

    C:\WINDOWS\system32\dllcache\odtext32.dll - Ok

    C:\WINDOWS\system32\dllcache\odpdx32.dll - Ok

    C:\WINDOWS\system32\dllcache\OEMBIOS.CAT - Ok

    C:\WINDOWS\system32\dllcache\odbctrac.dll - Ok

    C:\WINDOWS\system32\dllcache\oembios.bin - Ok

    C:\WINDOWS\system32\dllcache\oembios.sig - Ok

    C:\WINDOWS\system32\dllcache\oembios.dat - Ok

    C:\WINDOWS\system32\dllcache\odbcjt32.dll - Ok

    C:\WINDOWS\system32\dllcache\oeimport.dll - Ok

    C:\WINDOWS\system32\dllcache\ohci1394.sys - Ok

    C:\WINDOWS\system32\dllcache\ole2.dll - Ok

    C:\WINDOWS\system32\dllcache\oemig50.exe - Ok

    C:\WINDOWS\system32\dllcache\ole2disp.dll - Ok

    C:\WINDOWS\system32\dllcache\ole2nls.dll - Ok

    C:\WINDOWS\system32\dllcache\offfilt.dll - Ok

    C:\WINDOWS\system32\dllcache\oleaccrc.dll - Ok

    C:\WINDOWS\system32\dllcache\olecli.dll - Ok

    C:\WINDOWS\system32\dllcache\nv4_mini.sys - Ok

    C:\WINDOWS\system32\dllcache\oleacc.dll - Ok

    C:\WINDOWS\system32\dllcache\olecli32.dll - Ok

    C:\WINDOWS\system32\dllcache\olecnv32.dll - Ok

    C:\WINDOWS\system32\dllcache\oledb32r.dll - Ok

    C:\WINDOWS\system32\dllcache\oleaut32.dll - Ok

    C:\WINDOWS\system32\dllcache\oemiglib.dll - Ok

    C:\WINDOWS\system32\dllcache\olesvr.dll - Ok

    C:\WINDOWS\system32\dllcache\olesvr32.dll - Ok

    C:\WINDOWS\system32\dllcache\oleprn.dll - Ok

    C:\WINDOWS\system32\dllcache\olepro32.dll - Ok

    C:\WINDOWS\system32\dllcache\oledlg.dll - Ok

    C:\WINDOWS\system32\dllcache\olethk32.dll - Ok

    C:\WINDOWS\system32\dllcache\onex.dll - Ok

    C:\WINDOWS\system32\dllcache\oobebaln.exe - Ok

    C:\WINDOWS\system32\dllcache\oprghdlr.sys - Ok

    C:\WINDOWS\system32\dllcache\opl3sax.sys - Ok

    C:\WINDOWS\system32\dllcache\osuninst.exe - Ok

    C:\WINDOWS\system32\dllcache\osuninst.dll - Ok

    C:\WINDOWS\system32\dllcache\oledb32.dll - Ok

    C:\WINDOWS\system32\dllcache\otceth5.sys - Ok

    C:\WINDOWS\system32\dllcache\otc06x5.sys - Ok

    C:\WINDOWS\system32\dllcache\otcsercb.sys - Ok

    C:\WINDOWS\system32\dllcache\ovca.sys - Ok

    C:\WINDOWS\system32\dllcache\ovcd.sys - Ok

    C:\WINDOWS\system32\dllcache\osk.exe - Ok

    C:\WINDOWS\system32\dllcache\ovcam2.sys - Ok

    C:\WINDOWS\system32\dllcache\ovce.sys - Ok

    >C:\WINDOWS\system32\dllcache\ole32.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\ole32.dll - container

    C:\WINDOWS\system32\dllcache\ovsound2.sys - Ok

    C:\WINDOWS\system32\dllcache\ovcodec2.dll - Ok

    C:\WINDOWS\system32\dllcache\ovcomc.dll - Ok

    C:\WINDOWS\system32\dllcache\opengl32.dll - Ok

    C:\WINDOWS\system32\dllcache\ovcoms.exe - Ok

    C:\WINDOWS\system32\dllcache\ovui2rc.dll - Ok

    C:\WINDOWS\system32\dllcache\ovcodek2.sys - Ok

    C:\WINDOWS\system32\dllcache\p2pgasvc.dll - Ok

    C:\WINDOWS\system32\dllcache\p2p.dll - Ok

    C:\WINDOWS\system32\dllcache\p3.sys - Ok

    C:\WINDOWS\system32\dllcache\p2pnetsh.dll - Ok

    C:\WINDOWS\system32\dllcache\p2pgraph.dll - Ok

    C:\WINDOWS\system32\dllcache\ovui2.dll - Ok

    C:\WINDOWS\system32\dllcache\packager.exe - Ok

    C:\WINDOWS\system32\dllcache\padrs412.dll - Ok

    C:\WINDOWS\system32\dllcache\panmap.dll - Ok

    C:\WINDOWS\system32\dllcache\padrs411.dll - Ok

    C:\WINDOWS\system32\dllcache\padrs404.dll - Ok

    C:\WINDOWS\system32\dllcache\padrs804.dll - Ok

    C:\WINDOWS\system32\dllcache\pathping.exe - Ok

    C:\WINDOWS\system32\dllcache\partmgr.sys - Ok

    C:\WINDOWS\system32\dllcache\parvdm.sys - Ok

    C:\WINDOWS\system32\dllcache\parport.sys - Ok

    C:\WINDOWS\system32\dllcache\pc100nds.sys - Ok

    C:\WINDOWS\system32\dllcache\pca200e.sys - Ok

    C:\WINDOWS\system32\dllcache\pautoenr.dll - Ok

    C:\WINDOWS\system32\dllcache\pciide.sys - Ok

    C:\WINDOWS\system32\dllcache\pchsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\paqsp.dll - Ok

    C:\WINDOWS\system32\dllcache\pciidex.sys - Ok

    C:\WINDOWS\system32\dllcache\pci.sys - Ok

    C:\WINDOWS\system32\dllcache\pcmlm56.sys - Ok

    C:\WINDOWS\system32\dllcache\pcntn5hl.sys - Ok

    C:\WINDOWS\system32\dllcache\pchshell.dll - Ok

    C:\WINDOWS\system32\dllcache\pcmcia.sys - Ok

    C:\WINDOWS\system32\dllcache\pcntn5m.sys - Ok

    C:\WINDOWS\system32\dllcache\pcntpci5.sys - Ok

    C:\WINDOWS\system32\dllcache\pentnt.exe - Ok

    C:\WINDOWS\system32\dllcache\p2psvc.dll - Ok

    C:\WINDOWS\system32\dllcache\perc2.sys - Ok

    C:\WINDOWS\system32\dllcache\perc2hib.sys - Ok

    C:\WINDOWS\system32\dllcache\perfctrs.dll - Ok

    >C:\WINDOWS\system32\dllcache\pcx500.sys - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\perfdisk.dll - Ok

    C:\WINDOWS\system32\dllcache\pdh.dll - Ok

    C:\WINDOWS\system32\dllcache\perfnet.dll - Ok

    C:\WINDOWS\system32\dllcache\perfmon.exe - Ok

    C:\WINDOWS\system32\dllcache\perfos.dll - Ok

    C:\WINDOWS\system32\dllcache\perfproc.dll - Ok

    >C:\WINDOWS\system32\dllcache\perfts.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\pctspk.exe - Ok

    C:\WINDOWS\system32\dllcache\perm2.sys - Ok

    C:\WINDOWS\system32\dllcache\perm3.sys - Ok

    C:\WINDOWS\system32\dllcache\perfts.dll - Ok

    C:\WINDOWS\system32\dllcache\philcam1.dll - Ok

    C:\WINDOWS\system32\dllcache\philcam1.sys - Ok

    C:\WINDOWS\system32\dllcache\phdsext.ax - Ok

    C:\WINDOWS\system32\dllcache\perm2dll.dll - Ok

    C:\WINDOWS\system32\dllcache\philtune.sys - Ok

    C:\WINDOWS\system32\dllcache\philcam2.sys - Ok

    C:\WINDOWS\system32\dllcache\phildec.sys - Ok

    C:\WINDOWS\system32\dllcache\perm3dd.dll - Ok

    C:\WINDOWS\system32\dllcache\pid.inf - Ok

    C:\WINDOWS\system32\dllcache\pid.dll - Ok

    C:\WINDOWS\system32\dllcache\phon.ime - Ok

    C:\WINDOWS\system32\dllcache\pidgen.dll - Ok

    C:\WINDOWS\system32\dllcache\pifmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\pcx500.sys - Ok

    C:\WINDOWS\system32\dllcache\ping.exe - Ok

    C:\WINDOWS\system32\dllcache\photowiz.dll - Ok

    C:\WINDOWS\system32\dllcache\ping6.exe - Ok

    C:\WINDOWS\system32\dllcache\phvfwext.dll - Ok

    C:\WINDOWS\system32\dllcache\pintlcsd.dll - Ok

    >C:\WINDOWS\system32\dllcache\pjlmon.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\pintlcsa.dll - Ok

    C:\WINDOWS\system32\dllcache\plustab.dll - Ok

    C:\WINDOWS\system32\dllcache\pjlmon.dll - Ok

    C:\WINDOWS\system32\dllcache\plylst1.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst10.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst11.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst12.wpl - Ok

    C:\WINDOWS\system32\dllcache\pintlphr.exe - Ok

    C:\WINDOWS\system32\dllcache\plylst13.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst14.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst15.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst4.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst5.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst2.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst6.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst3.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst7.wpl - Ok

    C:\WINDOWS\system32\dllcache\plylst8.wpl - Ok

    C:\WINDOWS\system32\dllcache\pinball.exe - Ok

    C:\WINDOWS\system32\dllcache\plylst9.wpl - Ok

    C:\WINDOWS\system32\dllcache\pmxgl.dll - Ok

    >C:\WINDOWS\system32\dllcache\plyr_err.chm is CHM container

    C:\WINDOWS\system32\dllcache\pmspl.dll - Ok

    C:\WINDOWS\system32\dllcache\pmigrate.dll - Ok

    C:\WINDOWS\system32\dllcache\pngfilt.dll - Ok

    C:\WINDOWS\system32\dllcache\pnrmc.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\Glossary.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\pmxviceo.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\80040218_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\80040241_0x00000000.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\pmxmcro.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\pnrpnsp.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\80040255_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\80041002_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\pintlgnt.ime - Ok

    C:\WINDOWS\system32\dllcache\polstore.dll - Ok

    C:\WINDOWS\system32\dllcache\portcls.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\8007001f_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\powerfil.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\800704cf_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\800c000d_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\powrprof.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d000f_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\powercfg.cpl - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d001f_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ppa.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d07f1_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ppa3.sys - Ok

    C:\WINDOWS\system32\dllcache\powercfg.exe - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d07f2_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\pmxmcro.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0bc1_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\prflbmsg.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0bc2_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0bc8_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\print.exe - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0bce_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\prcp.nls - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fa3_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fa4_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\prc.nls - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0faa_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fab_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\processr.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fb0_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fb2_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fb3_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fcd_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\profmap.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fd6_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d0fd9_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\progman.exe - Ok

    C:\WINDOWS\system32\dllcache\proctexe.ocx - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1057_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d106a_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1074_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1076_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\proxycfg.exe - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1090_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d10b6_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\psapi.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d10ba_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\printui.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1104_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1163_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1167_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\pschdprf.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1168_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d116a_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d116b_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\proquota.exe - Ok

    C:\WINDOWS\system32\dllcache\psbase.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d116e_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\provthrd.dll - Ok

    C:\WINDOWS\system32\dllcache\pscr.sys - Ok

    C:\WINDOWS\system32\dllcache\psched.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1171_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1176_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1178_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d117a_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1194_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\psnppagn.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1196_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1197_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\psisrndr.ax - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1198_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\pstorec.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d1199_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\pstorsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\ptilink.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d119a_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d119c_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d119d_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ptpusb.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d119f_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\psisload.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11ab_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11ac_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ptserlp.sys - Ok

    C:\WINDOWS\system32\dllcache\ptserli.sys - Ok

    C:\WINDOWS\system32\dllcache\ptpusd.dll - Ok

    C:\WINDOWS\system32\dllcache\ptserlv.sys - Ok

    C:\WINDOWS\system32\dllcache\pubprn.vbs - Ok

    C:\WINDOWS\system32\dllcache\psisdecd.dll - Ok

    C:\WINDOWS\system32\dllcache\qappsrv.exe - Ok

    C:\WINDOWS\system32\dllcache\qcliprov.dll - Ok

    C:\WINDOWS\system32\dllcache\qagent.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11b3_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\qcap.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11b6_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11ba_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11bb_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11bd_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11be_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\qasf.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11bf_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11c0_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11c4_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11c9_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\qagentrt.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11cb_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11d1_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11d2_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\qic157.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d11f8_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d2720_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\qdv.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d274b_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d274d_0x00000000.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d2eec_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ql1080.sys - Ok

    C:\WINDOWS\system32\dllcache\qdvd.dll - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\htm\c00d2eee_0x00000000.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\ql10wnt.sys - Ok

    C:\WINDOWS\system32\dllcache\ql12160.sys - Ok

    C:\WINDOWS\system32\dllcache\ql1280.sys - Ok

    C:\WINDOWS\system32\dllcache\ql1240.sys - Ok

    >>C:\WINDOWS\system32\dllcache\plyr_err.chm\redirect.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\qedwipes.dll - Ok

    C:\WINDOWS\system32\dllcache\qmgrprxy.dll - Ok

    C:\WINDOWS\system32\dllcache\qosname.dll - Ok

    C:\WINDOWS\system32\dllcache\qprocess.exe - Ok

    C:\WINDOWS\system32\dllcache\qedit.dll - Ok

    C:\WINDOWS\system32\dllcache\plyr_err.chm - container

    >C:\WINDOWS\system32\dllcache\query.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\quser.exe - Ok

    C:\WINDOWS\system32\dllcache\query.exe - Ok

    C:\WINDOWS\system32\dllcache\quick.ime - Ok

    C:\WINDOWS\system32\dllcache\qmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\qutil.dll - Ok

    C:\WINDOWS\system32\dllcache\qv2kux.sys - Ok

    C:\WINDOWS\system32\dllcache\qvusd.dll - Ok

    C:\WINDOWS\system32\dllcache\qwinsta.exe - Ok

    C:\WINDOWS\system32\dllcache\racpldlg.dll - Ok

    C:\WINDOWS\system32\dllcache\r1033tts.lxa - Ok

    C:\WINDOWS\system32\dllcache\ramdisk.sys - Ok

    C:\WINDOWS\system32\dllcache\rasacd.sys - Ok

    C:\WINDOWS\system32\dllcache\rasadhlp.dll - Ok

    C:\WINDOWS\system32\dllcache\rasauto.dll - Ok

    C:\WINDOWS\system32\dllcache\rasapi32.dll - Ok

    C:\WINDOWS\system32\dllcache\rasautou.exe - Ok

    C:\WINDOWS\system32\dllcache\rasctrs.dll - Ok

    C:\WINDOWS\system32\dllcache\raschap.dll - Ok

    C:\WINDOWS\system32\dllcache\rasdial.exe - Ok

    C:\WINDOWS\system32\dllcache\rasirda.sys - Ok

    C:\WINDOWS\system32\dllcache\rasl2tp.sys - Ok

    C:\WINDOWS\system32\dllcache\r2mdmkxx.sys - Ok

    C:\WINDOWS\system32\dllcache\rasman.dll - Ok

    C:\WINDOWS\system32\dllcache\query.dll - Ok

    C:\WINDOWS\system32\dllcache\r2mdkxga.sys - Ok

    C:\WINDOWS\system32\dllcache\rasmontr.dll - Ok

    C:\WINDOWS\system32\dllcache\rasmxs.dll - Ok

    C:\WINDOWS\system32\dllcache\rasmans.dll - Ok

    C:\WINDOWS\system32\dllcache\quartz.dll - Ok

    C:\WINDOWS\system32\dllcache\raspppoe.sys - Ok

    C:\WINDOWS\system32\dllcache\raspti.sys - Ok

    C:\WINDOWS\system32\dllcache\rasppp.dll - Ok

    C:\WINDOWS\system32\dllcache\rasqec.dll - Ok

    C:\WINDOWS\system32\dllcache\raspptp.sys - Ok

    C:\WINDOWS\system32\dllcache\rasdlg.dll - Ok

    C:\WINDOWS\system32\dllcache\rasrad.dll - Ok

    C:\WINDOWS\system32\dllcache\rassapi.dll - Ok

    >C:\WINDOWS\system32\dllcache\rasser.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\rastapi.dll - Ok

    C:\WINDOWS\system32\dllcache\rawwan.sys - Ok

    C:\WINDOWS\system32\dllcache\rcp.exe - Ok

    C:\WINDOWS\system32\dllcache\rasser.dll - Ok

    C:\WINDOWS\system32\dllcache\rcbdyctl.dll - Ok

    C:\WINDOWS\system32\dllcache\rcimlby.exe - Ok

    C:\WINDOWS\system32\dllcache\rastls.dll - Ok

    C:\WINDOWS\system32\dllcache\rdpcfgex.dll - Ok

    C:\WINDOWS\system32\dllcache\rdpcdd.sys - Ok

    C:\WINDOWS\system32\dllcache\rdchost.dll - Ok

    C:\WINDOWS\system32\dllcache\rdbss.sys - Ok

    C:\WINDOWS\system32\dllcache\rasphone.exe - Ok

    C:\WINDOWS\system32\dllcache\rdpdd.dll - Ok

    C:\WINDOWS\system32\dllcache\rdpsnd.dll - Ok

    C:\WINDOWS\system32\dllcache\rdpwd.sys - Ok

    C:\WINDOWS\system32\dllcache\rdpwsx.dll - Ok

    C:\WINDOWS\system32\dllcache\rdshost.exe - Ok

    C:\WINDOWS\system32\dllcache\recagent.sys - Ok

    C:\WINDOWS\system32\dllcache\rdpdr.sys - Ok

    C:\WINDOWS\system32\dllcache\redir.exe - Ok

    C:\WINDOWS\system32\dllcache\recover.exe - Ok

    C:\WINDOWS\system32\dllcache\redbook.sys - Ok

    C:\WINDOWS\system32\dllcache\reg.exe - Ok

    C:\WINDOWS\system32\dllcache\rdpclip.exe - Ok

    C:\WINDOWS\system32\dllcache\rdsaddin.exe - Ok

    C:\WINDOWS\system32\dllcache\regapi.dll - Ok

    C:\WINDOWS\system32\dllcache\regedt32.exe - Ok

    C:\WINDOWS\system32\dllcache\regwiz.exe - Ok

    C:\WINDOWS\system32\dllcache\register.exe - Ok

    C:\WINDOWS\system32\dllcache\regini.exe - Ok

    C:\WINDOWS\system32\dllcache\regsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\remotepg.dll - Ok

    C:\WINDOWS\system32\dllcache\regedit.exe - Ok

    C:\WINDOWS\system32\dllcache\regsvr32.exe - Ok

    C:\WINDOWS\system32\dllcache\remotesp.tsp - Ok

    C:\WINDOWS\system32\dllcache\replace.exe - Ok

    >C:\WINDOWS\system32\dllcache\reset.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\resutils.dll - Ok

    C:\WINDOWS\system32\dllcache\reslog32.dll - Ok

    C:\WINDOWS\system32\dllcache\rend.dll - Ok

    >C:\WINDOWS\system32\dllcache\revert.wmz is ZIP archive

    C:\WINDOWS\system32\dllcache\revert.wmz - Ok

    C:\WINDOWS\system32\dllcache\revert.wmz - archive

    C:\WINDOWS\system32\dllcache\repdrvfs.dll - Ok

    C:\WINDOWS\system32\dllcache\reset.exe - Ok

    C:\WINDOWS\system32\dllcache\rfcomm.sys - Ok

    C:\WINDOWS\system32\dllcache\rexec.exe - Ok

    C:\WINDOWS\system32\dllcache\riched32.dll - Ok

    C:\WINDOWS\system32\dllcache\regwizc.dll - Ok

    C:\WINDOWS\system32\dllcache\rio8drv.sys - Ok

    C:\WINDOWS\system32\dllcache\riodrv.sys - Ok

    C:\WINDOWS\system32\dllcache\rlnet5.sys - Ok

    C:\WINDOWS\system32\dllcache\rndismp.sys - Ok

    C:\WINDOWS\system32\dllcache\rnr20.dll - Ok

    C:\WINDOWS\system32\dllcache\rndismpx.sys - Ok

    C:\WINDOWS\system32\dllcache\rocket.sys - Ok

    C:\WINDOWS\system32\dllcache\romanime.ime - Ok

    C:\WINDOWS\system32\dllcache\rootmdm.sys - Ok

    C:\WINDOWS\system32\dllcache\rmcast.sys - Ok

    C:\WINDOWS\system32\dllcache\rhttpaa.dll - Ok

    C:\WINDOWS\system32\dllcache\route.exe - Ok

    C:\WINDOWS\system32\dllcache\routetab.dll - Ok

    C:\WINDOWS\system32\dllcache\rpcns4.dll - Ok

    C:\WINDOWS\system32\dllcache\routemon.exe - Ok

    C:\WINDOWS\system32\dllcache\rpfun.sys - Ok

    C:\WINDOWS\system32\dllcache\rsh.exe - Ok

    C:\WINDOWS\system32\dllcache\rsaenh.dll - Ok

    C:\WINDOWS\system32\dllcache\riched20.dll - Ok

    C:\WINDOWS\system32\dllcache\rrcm.dll - Ok

    C:\WINDOWS\system32\dllcache\rshx32.dll - Ok

    C:\WINDOWS\system32\dllcache\rsm.exe - Ok

    C:\WINDOWS\system32\dllcache\rsmgrstr.dll - Ok

    C:\WINDOWS\system32\dllcache\rsmps.dll - Ok

    C:\WINDOWS\system32\dllcache\rpcrt4.dll - Ok

    C:\WINDOWS\system32\dllcache\rpcss.dll - Ok

    C:\WINDOWS\system32\dllcache\rsvpmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\rsmsink.exe - Ok

    >C:\WINDOWS\system32\dllcache\rsvpperf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\rsvpperf.dll - Ok

    C:\WINDOWS\system32\dllcache\rsvp.exe - Ok

    C:\WINDOWS\system32\dllcache\rsmui.exe - Ok

    C:\WINDOWS\system32\dllcache\rthwcls.sys - Ok

    C:\WINDOWS\system32\dllcache\rtipxmib.dll - Ok

    C:\WINDOWS\system32\dllcache\rtl8029.sys - Ok

    C:\WINDOWS\system32\dllcache\rsvpsp.dll - Ok

    C:\WINDOWS\system32\dllcache\rtl8139.sys - Ok

    C:\WINDOWS\system32\dllcache\rtcshare.exe - Ok

    C:\WINDOWS\system32\dllcache\rtuner.wmv - Ok

    C:\WINDOWS\system32\dllcache\runas.exe - Ok

    C:\WINDOWS\system32\dllcache\rtutils.dll - Ok

    C:\WINDOWS\system32\dllcache\runonce.exe - Ok

    C:\WINDOWS\system32\dllcache\rtm.dll - Ok

    C:\WINDOWS\system32\dllcache\rundll32.exe - Ok

    C:\WINDOWS\system32\dllcache\rvse.dll - Ok

    C:\WINDOWS\system32\dllcache\rw001ext.dll - Ok

    C:\WINDOWS\system32\dllcache\rw330ext.dll - Ok

    C:\WINDOWS\system32\dllcache\rw430ext.dll - Ok

    >C:\WINDOWS\system32\dllcache\rstrui.exe is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\rwia001.dll - Ok

    C:\WINDOWS\system32\dllcache\rwia330.dll - Ok

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\rvsezm.exe - Ok

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data003 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data005 is JS-HTML container

    C:\WINDOWS\system32\dllcache\rwinsta.exe - Ok

    C:\WINDOWS\system32\dllcache\rw450ext.dll - Ok

    C:\WINDOWS\system32\dllcache\rwia430.dll - Ok

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data006 is JS-HTML container

    C:\WINDOWS\system32\dllcache\rwia450.dll - Ok

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data009 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data010 is JS-HTML container

    C:\WINDOWS\system32\dllcache\s3legacy.dll - Ok

    >>C:\WINDOWS\system32\dllcache\rstrui.exe\data011 is JS-HTML container

    C:\WINDOWS\system32\dllcache\rstrui.exe - container

    C:\WINDOWS\system32\dllcache\s3legacy.sys - Ok

    C:\WINDOWS\system32\dllcache\rvseres.dll - Ok

    C:\WINDOWS\system32\dllcache\s3gnbm.sys - Ok

    C:\WINDOWS\system32\dllcache\s3mt3d.sys - Ok

    C:\WINDOWS\system32\dllcache\s3mtrio.dll - Ok

    C:\WINDOWS\system32\dllcache\s3gnb.dll - Ok

    C:\WINDOWS\system32\dllcache\s3sav3dm.sys - Ok

    C:\WINDOWS\system32\dllcache\s3mt3d.dll - Ok

    C:\WINDOWS\system32\dllcache\s3m.sys - Ok

    C:\WINDOWS\system32\dllcache\s3sav3d.dll - Ok

    C:\WINDOWS\system32\dllcache\s3mvirge.dll - Ok

    C:\WINDOWS\system32\dllcache\s3sav4.dll - Ok

    C:\WINDOWS\system32\dllcache\safrdm.dll - Ok

    C:\WINDOWS\system32\dllcache\safrcdlg.dll - Ok

    C:\WINDOWS\system32\dllcache\safrslv.dll - Ok

    C:\WINDOWS\system32\dllcache\s3savmxm.sys - Ok

    C:\WINDOWS\system32\dllcache\sam.sdf - Ok

    C:\WINDOWS\system32\dllcache\s3sav4m.sys - Ok

    C:\WINDOWS\system32\dllcache\s3savmx.dll - Ok

    C:\WINDOWS\system32\dllcache\sam.spd - Ok

    C:\WINDOWS\system32\dllcache\samlib.dll - Ok

    C:\WINDOWS\system32\dllcache\sapisvr.exe - Ok

    C:\WINDOWS\system32\dllcache\sapi.cpl - Ok

    C:\WINDOWS\system32\dllcache\savedump.exe - Ok

    C:\WINDOWS\system32\dllcache\sbe.dll - Ok

    C:\WINDOWS\system32\dllcache\samsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\sbp2port.sys - Ok

    C:\WINDOWS\system32\dllcache\sc.exe - Ok

    C:\WINDOWS\system32\dllcache\sbeio.dll - Ok

    C:\WINDOWS\system32\dllcache\scardssp.dll - Ok

    C:\WINDOWS\system32\dllcache\scarddlg.dll - Ok

    C:\WINDOWS\system32\dllcache\sccmn50m.sys - Ok

    C:\WINDOWS\system32\dllcache\scardsvr.exe - Ok

    C:\WINDOWS\system32\dllcache\sccmusbm.sys - Ok

    C:\WINDOWS\system32\dllcache\sccbase.dll - Ok

    C:\WINDOWS\system32\dllcache\sapi.dll - Ok

    C:\WINDOWS\system32\dllcache\schannel.dll - Ok

    C:\WINDOWS\system32\dllcache\sccsccp.dll - Ok

    C:\WINDOWS\system32\dllcache\scecli.dll - Ok

    C:\WINDOWS\system32\dllcache\sblfx.dll - Ok

    C:\WINDOWS\system32\dllcache\scr111.sys - Ok

    C:\WINDOWS\system32\dllcache\scmstcs.sys - Ok

    C:\WINDOWS\system32\dllcache\sclgntfy.dll - Ok

    C:\WINDOWS\system32\dllcache\script.fon - Ok

    C:\WINDOWS\system32\dllcache\scredir.dll - Ok

    C:\WINDOWS\system32\dllcache\scesrv.dll - Ok

    C:\WINDOWS\system32\dllcache\schedsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\scrcons.exe - Ok

    C:\WINDOWS\system32\dllcache\script.dll - Ok

    C:\WINDOWS\system32\dllcache\scripta.dll - Ok

    C:\WINDOWS\system32\dllcache\script_a.dll - Ok

    C:\WINDOWS\system32\dllcache\scsiprnt.sys - Ok

    C:\WINDOWS\system32\dllcache\scsiport.sys - Ok

    C:\WINDOWS\system32\dllcache\scrnsave.scr - Ok

    C:\WINDOWS\system32\dllcache\scsiscan.sys - Ok

    C:\WINDOWS\system32\dllcache\scrobj.dll - Ok

    C:\WINDOWS\system32\dllcache\sdhcinst.dll - Ok

    C:\WINDOWS\system32\dllcache\sdbus.sys - Ok

    C:\WINDOWS\system32\dllcache\seaddsmc.sys - Ok

    C:\WINDOWS\system32\dllcache\secupd.dat - Ok

    C:\WINDOWS\system32\dllcache\scrrun.dll - Ok

    C:\WINDOWS\system32\dllcache\secupd.sig - Ok

    C:\WINDOWS\system32\dllcache\seclogon.dll - Ok

    C:\WINDOWS\system32\dllcache\security.dll - Ok

    C:\WINDOWS\system32\dllcache\sdbinst.exe - Ok

    C:\WINDOWS\system32\dllcache\sdpblb.dll - Ok

    C:\WINDOWS\system32\dllcache\secur32.dll - Ok

    C:\WINDOWS\system32\dllcache\sensapi.dll - Ok

    C:\WINDOWS\system32\dllcache\senscfg.dll - Ok

    C:\WINDOWS\system32\dllcache\sendmail.dll - Ok

    C:\WINDOWS\system32\dllcache\sens.dll - Ok

    C:\WINDOWS\system32\dllcache\sermouse.sys - Ok

    C:\WINDOWS\system32\dllcache\serenum.sys - Ok

    C:\WINDOWS\system32\dllcache\serscan.sys - Ok

    C:\WINDOWS\system32\dllcache\serialui.dll - Ok

    C:\WINDOWS\system32\dllcache\serial.sys - Ok

    C:\WINDOWS\system32\dllcache\sendcmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\serwvdrv.dll - Ok

    C:\WINDOWS\system32\dllcache\setup.exe - Ok

    C:\WINDOWS\system32\dllcache\sessmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\services.exe - Ok

    C:\WINDOWS\system32\dllcache\servdeps.dll - Ok

    C:\WINDOWS\system32\dllcache\sethc.exe - Ok

    C:\WINDOWS\system32\dllcache\setup50.exe - Ok

    C:\WINDOWS\system32\dllcache\setupqry.dll - Ok

    C:\WINDOWS\system32\dllcache\sfc.dll - Ok

    C:\WINDOWS\system32\dllcache\sfc.exe - Ok

    C:\WINDOWS\system32\dllcache\setupdll.dll - Ok

    C:\WINDOWS\system32\dllcache\setupn.exe - Ok

    C:\WINDOWS\system32\dllcache\sfc_os.dll - Ok

    C:\WINDOWS\system32\dllcache\sffdisk.sys - Ok

    C:\WINDOWS\system32\dllcache\sffp_sd.sys - Ok

    C:\WINDOWS\system32\dllcache\sfmanm.sys - Ok

    C:\WINDOWS\system32\dllcache\sfloppy.sys - Ok

    C:\WINDOWS\system32\dllcache\sfmapi.dll - Ok

    C:\WINDOWS\system32\dllcache\sgsmld.sys - Ok

    C:\WINDOWS\system32\dllcache\setup_wm.exe - Ok

    C:\WINDOWS\system32\dllcache\sgiulnt5.sys - Ok

    >C:\WINDOWS\system32\dllcache\setupapi.dll - packed by BINARYRES

    >>C:\WINDOWS\system32\dllcache\setupapi.dll - packed by MS COMPRESS

    C:\WINDOWS\system32\dllcache\setupapi.dll - Ok

    >C:\WINDOWS\system32\dllcache\share.exe - packed by EXEPACK

    >>C:\WINDOWS\system32\dllcache\share.exe - packed by COM2EXE

    C:\WINDOWS\system32\dllcache\share.exe - Ok

    C:\WINDOWS\system32\dllcache\shadow.exe - Ok

    C:\WINDOWS\system32\dllcache\sgiul50.dll - Ok

    C:\WINDOWS\system32\dllcache\shell.dll - Ok

    C:\WINDOWS\system32\dllcache\sgsmusb.sys - Ok

    C:\WINDOWS\system32\dllcache\shfolder.dll - Ok

    C:\WINDOWS\system32\dllcache\shgina.dll - Ok

    C:\WINDOWS\system32\dllcache\shimeng.dll - Ok

    C:\WINDOWS\system32\dllcache\sfcfiles.dll - Ok

    >C:\WINDOWS\system32\dllcache\shdoclc.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\dllcache\shlwapi.dll - Ok

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\dllcache\shmedia.dll - Ok

    >C:\WINDOWS\system32\dllcache\shimgvw.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data005 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\shimgvw.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\shdoclc.dll\data006 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\shimgvw.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\shimgvw.dll - container

    C:\WINDOWS\system32\dllcache\shmgrate.exe - Ok

    C:\WINDOWS\system32\dllcache\shdoclc.dll - container

    C:\WINDOWS\system32\dllcache\shrpubw.exe - Ok

    C:\WINDOWS\system32\dllcache\shscrap.dll - Ok

    C:\WINDOWS\system32\dllcache\shtml.exe - Ok

    C:\WINDOWS\system32\dllcache\shtml.dll - Ok

    C:\WINDOWS\system32\dllcache\shsvcs.dll - Ok

    C:\WINDOWS\system32\dllcache\shutdown.exe - Ok

    C:\WINDOWS\system32\dllcache\shvl.dll - Ok

    C:\WINDOWS\system32\dllcache\sigtab.dll - Ok

    C:\WINDOWS\system32\dllcache\siint5.dll - Ok

    C:\WINDOWS\system32\dllcache\shvlzm.exe - Ok

    C:\WINDOWS\system32\dllcache\sigverif.exe - Ok

    C:\WINDOWS\system32\dllcache\simpdata.tlb - Ok

    C:\WINDOWS\system32\dllcache\simptcp.dll - Ok

    C:\WINDOWS\system32\dllcache\shdocvw.dll - Ok

    C:\WINDOWS\system32\dllcache\sis6306p.sys - Ok

    C:\WINDOWS\system32\dllcache\sis300ip.sys - Ok

    C:\WINDOWS\system32\dllcache\sis6306v.dll - Ok

    C:\WINDOWS\system32\dllcache\sis300iv.dll - Ok

    C:\WINDOWS\system32\dllcache\sisbkup.dll - Ok

    C:\WINDOWS\system32\dllcache\sisagp.sys - Ok

    C:\WINDOWS\system32\dllcache\sisgrp.sys - Ok

    C:\WINDOWS\system32\dllcache\sisnic.sys - Ok

    C:\WINDOWS\system32\dllcache\sisv.sys - Ok

    C:\WINDOWS\system32\dllcache\skdll.dll - Ok

    C:\WINDOWS\system32\dllcache\sk98xwin.sys - Ok

    C:\WINDOWS\system32\dllcache\sisv256.dll - Ok

    C:\WINDOWS\system32\dllcache\sisgrv.dll - Ok

    C:\WINDOWS\system32\dllcache\skins.inf - Ok

    C:\WINDOWS\system32\dllcache\skfpwin.sys - Ok

    C:\WINDOWS\system32\dllcache\sla30nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\slayerxp.dll - Ok

    C:\WINDOWS\system32\dllcache\slbrccsp.dll - Ok

    C:\WINDOWS\system32\dllcache\skeys.exe - Ok

    C:\WINDOWS\system32\dllcache\slbiop.dll - Ok

    C:\WINDOWS\system32\dllcache\slcoinst.dll - Ok

    C:\WINDOWS\system32\dllcache\slbcsp.dll - Ok

    C:\WINDOWS\system32\dllcache\slip.sys - Ok

    C:\WINDOWS\system32\dllcache\slgen.dll - Ok

    C:\WINDOWS\system32\dllcache\slextspk.dll - Ok

    C:\WINDOWS\system32\dllcache\shvlres.dll - Ok

    C:\WINDOWS\system32\dllcache\slnt7554.sys - Ok

    C:\WINDOWS\system32\dllcache\slnthal.sys - Ok

    C:\WINDOWS\system32\dllcache\slwdmsup.sys - Ok

    C:\WINDOWS\system32\dllcache\sl_anet.acm - Ok

    C:\WINDOWS\system32\dllcache\sm81w.dll - Ok

    C:\WINDOWS\system32\dllcache\slserv.exe - Ok

    C:\WINDOWS\system32\dllcache\sm59w.dll - Ok

    >C:\WINDOWS\system32\dllcache\shell32.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\shell32.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\shell32.dll - container

    C:\WINDOWS\system32\dllcache\slntamr.sys - Ok

    C:\WINDOWS\system32\dllcache\sm87w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm8aw.dll - Ok

    C:\WINDOWS\system32\dllcache\sm89w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm8cw.dll - Ok

    C:\WINDOWS\system32\dllcache\sm8dw.dll - Ok

    C:\WINDOWS\system32\dllcache\sm90w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm91w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm93w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm92w.dll - Ok

    C:\WINDOWS\system32\dllcache\sma0w.dll - Ok

    C:\WINDOWS\system32\dllcache\sma3w.dll - Ok

    C:\WINDOWS\system32\dllcache\smb0w.dll - Ok

    C:\WINDOWS\system32\dllcache\sm9aw.dll - Ok

    C:\WINDOWS\system32\dllcache\smbali.sys - Ok

    C:\WINDOWS\system32\dllcache\smbbatt.sys - Ok

    C:\WINDOWS\system32\dllcache\smbclass.sys - Ok

    C:\WINDOWS\system32\dllcache\smb3w.dll - Ok

    C:\WINDOWS\system32\dllcache\smbhc.sys - Ok

    C:\WINDOWS\system32\dllcache\smb6w.dll - Ok

    C:\WINDOWS\system32\dllcache\smc8000n.sys - Ok

    C:\WINDOWS\system32\dllcache\smbinst.exe - Ok

    C:\WINDOWS\system32\dllcache\smcirda.sys - Ok

    C:\WINDOWS\system32\dllcache\smclib.sys - Ok

    C:\WINDOWS\system32\dllcache\smierrsy.dll - Ok

    C:\WINDOWS\system32\dllcache\smcpwr2n.sys - Ok

    C:\WINDOWS\system32\dllcache\smierrsm.dll - Ok

    C:\WINDOWS\system32\dllcache\slrundll.exe - Ok

    C:\WINDOWS\system32\dllcache\smimsgif.dll - Ok

    C:\WINDOWS\system32\dllcache\smiminib.sys - Ok

    C:\WINDOWS\system32\dllcache\smidispb.dll - Ok

    C:\WINDOWS\system32\dllcache\smtpcons.dll - Ok

    C:\WINDOWS\system32\dllcache\smss.exe - Ok

    >C:\WINDOWS\system32\dllcache\snd.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\smlogsvc.exe - Ok

    C:\WINDOWS\system32\dllcache\smi2smir.exe - Ok

    C:\WINDOWS\system32\dllcache\snd.htm - container

    C:\WINDOWS\system32\dllcache\smlogcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\sniffpol.dll - Ok

    C:\WINDOWS\system32\dllcache\snmp.exe - Ok

    C:\WINDOWS\system32\dllcache\snmpapi.dll - Ok

    C:\WINDOWS\system32\dllcache\sndrec32.exe - Ok

    C:\WINDOWS\system32\dllcache\smtpsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\snmpmib.dll - Ok

    C:\WINDOWS\system32\dllcache\snmpstup.dll - Ok

    C:\WINDOWS\system32\dllcache\sndvol32.exe - Ok

    C:\WINDOWS\system32\dllcache\snmptrap.exe - Ok

    C:\WINDOWS\system32\dllcache\snmpthrd.dll - Ok

    C:\WINDOWS\system32\dllcache\snmpsnap.dll - Ok

    C:\WINDOWS\system32\dllcache\snyaitmc.sys - Ok

    C:\WINDOWS\system32\dllcache\snmpcl.dll - Ok

    C:\WINDOWS\system32\dllcache\snmpsmir.dll - Ok

    C:\WINDOWS\system32\dllcache\softpub.dll - Ok

    C:\WINDOWS\system32\dllcache\sonyait.sys - Ok

    C:\WINDOWS\system32\dllcache\sonydcam.sys - Ok

    C:\WINDOWS\system32\dllcache\snmpincl.dll - Ok

    C:\WINDOWS\system32\dllcache\sonync.sys - Ok

    C:\WINDOWS\system32\dllcache\sonymc.sys - Ok

    C:\WINDOWS\system32\dllcache\softkey.dll - Ok

    C:\WINDOWS\system32\dllcache\softkbd.dll - Ok

    C:\WINDOWS\system32\dllcache\sonypvu1.sys - Ok

    C:\WINDOWS\system32\dllcache\sonypi.sys - Ok

    C:\WINDOWS\system32\dllcache\sorttbls.nls - Ok

    C:\WINDOWS\system32\dllcache\sound.drv - Ok

    C:\WINDOWS\system32\dllcache\sort.exe - Ok

    C:\WINDOWS\system32\dllcache\sol.exe - Ok

    C:\WINDOWS\system32\dllcache\sonypi.dll - Ok

    C:\WINDOWS\system32\dllcache\sparrow.sys - Ok

    C:\WINDOWS\system32\dllcache\sortkey.nls - Ok

    C:\WINDOWS\system32\dllcache\SP2.CAT - Ok

    C:\WINDOWS\system32\dllcache\spcommon.dll - Ok

    C:\WINDOWS\system32\dllcache\speed.sys - Ok

    C:\WINDOWS\system32\dllcache\spcplui.dll - Ok

    C:\WINDOWS\system32\dllcache\splitter.sys - Ok

    C:\WINDOWS\system32\dllcache\spdports.dll - Ok

    C:\WINDOWS\system32\dllcache\spgrmr.dll - Ok

    C:\WINDOWS\system32\dllcache\spoolss.dll - Ok

    C:\WINDOWS\system32\dllcache\spnike.dll - Ok

    C:\WINDOWS\system32\dllcache\spra041b.dll - Ok

    C:\WINDOWS\system32\dllcache\spnpinst.exe - Ok

    C:\WINDOWS\system32\dllcache\spra0424.dll - Ok

    C:\WINDOWS\system32\dllcache\spoolsv.exe - Ok

    C:\WINDOWS\system32\dllcache\sprestrt.exe - Ok

    >C:\WINDOWS\system32\dllcache\sprb041b.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\sprb041b.dll\data001 is JS-HTML container

    >C:\WINDOWS\system32\dllcache\sprc0424.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\sprc0424.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprc0424.dll - container

    C:\WINDOWS\system32\dllcache\spider.exe - Ok

    >C:\WINDOWS\system32\dllcache\sprc041b.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\sprc041b.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprc041b.dll - container

    >>C:\WINDOWS\system32\dllcache\sprb041b.dll\data002 is JS-HTML container

    >C:\WINDOWS\system32\dllcache\sprb0424.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\sprb0424.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprio600.dll - Ok

    >>C:\WINDOWS\system32\dllcache\sprb041b.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprio800.dll - Ok

    >>C:\WINDOWS\system32\dllcache\sprb0424.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\sprb041b.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprb041b.dll - container

    >>C:\WINDOWS\system32\dllcache\sprb0424.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\dllcache\spxupchk.dll - Ok

    C:\WINDOWS\system32\dllcache\spxcoins.dll - Ok

    >>C:\WINDOWS\system32\dllcache\sprb0424.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\dllcache\sprb0424.dll - container

    C:\WINDOWS\system32\dllcache\sptip.dll - Ok

    C:\WINDOWS\system32\dllcache\sqldb20.dll - Ok

    C:\WINDOWS\system32\dllcache\sqlse20.dll - Ok

    C:\WINDOWS\system32\dllcache\sqmapi.dll - Ok

    C:\WINDOWS\system32\dllcache\sqlunirl.dll - Ok

    C:\WINDOWS\system32\dllcache\sr.sys - Ok

    C:\WINDOWS\system32\dllcache\srchctls.dll - Ok

    C:\WINDOWS\system32\dllcache\spttseng.dll - Ok

    C:\WINDOWS\system32\dllcache\srclient.dll - Ok

    C:\WINDOWS\system32\dllcache\sqlxmlx.dll - Ok

    C:\WINDOWS\system32\dllcache\srgb.icm - Ok

    C:\WINDOWS\system32\dllcache\sqlqp20.dll - Ok

    C:\WINDOWS\system32\dllcache\srframe.mmf - Ok

    C:\WINDOWS\system32\dllcache\srdiag.exe - Ok

    C:\WINDOWS\system32\dllcache\srusbusd.dll - Ok

    C:\WINDOWS\system32\dllcache\srusd.dll - Ok

    C:\WINDOWS\system32\dllcache\srsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\srwlnd5.sys - Ok

    C:\WINDOWS\system32\dllcache\srrstr.dll - Ok

    C:\WINDOWS\system32\dllcache\srvsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\ssdpapi.dll - Ok

    C:\WINDOWS\system32\dllcache\srv.sys - Ok

    C:\WINDOWS\system32\dllcache\ssdpsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\srchui.dll - Ok

    C:\WINDOWS\system32\dllcache\ssbezier.scr - Ok

    C:\WINDOWS\system32\dllcache\ssmypics.scr - Ok

    C:\WINDOWS\system32\dllcache\ssflwbox.scr - Ok

    C:\WINDOWS\system32\dllcache\ssmarque.scr - Ok

    C:\WINDOWS\system32\dllcache\ssmyst.scr - Ok

    C:\WINDOWS\system32\dllcache\sstub.dll - Ok

    C:\WINDOWS\system32\dllcache\startoc.dll - Ok

    C:\WINDOWS\system32\dllcache\ssstars.scr - Ok

    >C:\WINDOWS\system32\dllcache\ss3dfo.scr is ZLIB container

    C:\WINDOWS\system32\dllcache\stdole.tlb - Ok

    C:\WINDOWS\system32\dllcache\stcusb.sys - Ok

    C:\WINDOWS\system32\dllcache\stclient.dll - Ok

    C:\WINDOWS\system32\dllcache\stdole2.tlb - Ok

    C:\WINDOWS\system32\dllcache\stdole32.tlb - Ok

    C:\WINDOWS\system32\dllcache\sspipes.scr - Ok

    C:\WINDOWS\system32\dllcache\stimon.exe - Ok

    C:\WINDOWS\system32\dllcache\ss3dfo.scr - container

    C:\WINDOWS\system32\dllcache\stdprov.dll - Ok

    C:\WINDOWS\system32\dllcache\sti.dll - Ok

    C:\WINDOWS\system32\dllcache\sti_ci.dll - Ok

    C:\WINDOWS\system32\dllcache\stobject.dll - Ok

    C:\WINDOWS\system32\dllcache\storage.dll - Ok

    C:\WINDOWS\system32\dllcache\sstext3d.scr - Ok

    C:\WINDOWS\system32\dllcache\stream.sys - Ok

    C:\WINDOWS\system32\dllcache\stlnprop.dll - Ok

    C:\WINDOWS\system32\dllcache\streamip.sys - Ok

    C:\WINDOWS\system32\dllcache\streamci.dll - Ok

    C:\WINDOWS\system32\dllcache\storprop.dll - Ok

    C:\WINDOWS\system32\dllcache\stlnata.sys - Ok

    C:\WINDOWS\system32\dllcache\strmfilt.dll - Ok

    C:\WINDOWS\system32\dllcache\subst.exe - Ok

    C:\WINDOWS\system32\dllcache\svchost.exe - Ok

    C:\WINDOWS\system32\dllcache\swenum.sys - Ok

    C:\WINDOWS\system32\dllcache\svcpack.dll - Ok

    C:\WINDOWS\system32\dllcache\swpdflt2.dll - Ok

    C:\WINDOWS\system32\dllcache\swpidflt.dll - Ok

    C:\WINDOWS\system32\dllcache\swmidi.sys - Ok

    C:\WINDOWS\system32\dllcache\swusbflt.sys - Ok

    C:\WINDOWS\system32\dllcache\sw_effct.dll - Ok

    C:\WINDOWS\system32\dllcache\sw_wheel.dll - Ok

    C:\WINDOWS\system32\dllcache\strmdll.dll - Ok

    C:\WINDOWS\system32\dllcache\symc810.sys - Ok

    C:\WINDOWS\system32\dllcache\sxports.dll - Ok

    C:\WINDOWS\system32\dllcache\sx.sys - Ok

    C:\WINDOWS\system32\dllcache\swprv.dll - Ok

    C:\WINDOWS\system32\dllcache\symc8xx.sys - Ok

    C:\WINDOWS\system32\dllcache\stlncoin.dll - Ok

    C:\WINDOWS\system32\dllcache\sym_hi.sys - Ok

    C:\WINDOWS\system32\dllcache\sym_u3.sys - Ok

    C:\WINDOWS\system32\dllcache\synceng.dll - Ok

    C:\WINDOWS\system32\dllcache\sysedit.exe - Ok

    C:\WINDOWS\system32\dllcache\sysaudio.sys - Ok

    C:\WINDOWS\system32\dllcache\sysinv.dll - Ok

    C:\WINDOWS\system32\dllcache\sysmain.sdb - Ok

    C:\WINDOWS\system32\dllcache\syncapp.exe - Ok

    C:\WINDOWS\system32\dllcache\syncui.dll - Ok

    C:\WINDOWS\system32\dllcache\sysdm.cpl - Ok

    C:\WINDOWS\system32\dllcache\syskey.exe - Ok

    C:\WINDOWS\system32\dllcache\sysmod.dll - Ok

    C:\WINDOWS\system32\dllcache\sysmoda.dll - Ok

    C:\WINDOWS\system32\dllcache\system.drv - Ok

    C:\WINDOWS\system32\dllcache\sysmod_a.dll - Ok

    C:\WINDOWS\system32\dllcache\systray.exe - Ok

    C:\WINDOWS\system32\dllcache\sxs.dll - Ok

    C:\WINDOWS\system32\dllcache\sysmon.ocx - Ok

    C:\WINDOWS\system32\dllcache\sysocmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\t2r4mini.sys - Ok

    C:\WINDOWS\system32\dllcache\t2embed.dll - Ok

    C:\WINDOWS\system32\dllcache\t2r4disp.dll - Ok

    C:\WINDOWS\system32\dllcache\taoff.gif - Ok

    C:\WINDOWS\system32\dllcache\taoffh.gif - Ok

    C:\WINDOWS\system32\dllcache\tahoma.ttf - Ok

    C:\WINDOWS\system32\dllcache\tandqic.sys - Ok

    C:\WINDOWS\system32\dllcache\taonh.gif - Ok

    C:\WINDOWS\system32\dllcache\taon.gif - Ok

    C:\WINDOWS\system32\dllcache\tapi.dll - Ok

    C:\WINDOWS\system32\dllcache\tape.sys - Ok

    C:\WINDOWS\system32\dllcache\tapiperf.dll - Ok

    C:\WINDOWS\system32\dllcache\tahomabd.ttf - Ok

    C:\WINDOWS\system32\dllcache\tapiui.dll - Ok

    C:\WINDOWS\system32\dllcache\tapi32.dll - Ok

    C:\WINDOWS\system32\dllcache\tbatm155.sys - Ok

    C:\WINDOWS\system32\dllcache\tapisrv.dll - Ok

    C:\WINDOWS\system32\dllcache\taskman.exe - Ok

    C:\WINDOWS\system32\dllcache\taskmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\syssetup.dll - Ok

    C:\WINDOWS\system32\dllcache\tcpmib.dll - Ok

    C:\WINDOWS\system32\dllcache\tcpmon.dll - Ok

    C:\WINDOWS\system32\dllcache\tcpmonui.dll - Ok

    C:\WINDOWS\system32\dllcache\tcpsvcs.exe - Ok

    C:\WINDOWS\system32\dllcache\tcpip6.sys - Ok

    C:\WINDOWS\system32\dllcache\tcptsat.dll - Ok

    C:\WINDOWS\system32\dllcache\tdc.ocx - Ok

    C:\WINDOWS\system32\dllcache\tdasync.sys - Ok

    C:\WINDOWS\system32\dllcache\tdi.sys - Ok

    C:\WINDOWS\system32\dllcache\tcpip.sys - Ok

    C:\WINDOWS\system32\dllcache\tapi3.dll - Ok

    C:\WINDOWS\system32\dllcache\tdk100b.sys - Ok

    C:\WINDOWS\system32\dllcache\tdkcd31.sys - Ok

    C:\WINDOWS\system32\dllcache\tdpipe.sys - Ok

    C:\WINDOWS\system32\dllcache\tdipx.sys - Ok

    C:\WINDOWS\system32\dllcache\tdspx.sys - Ok

    C:\WINDOWS\system32\dllcache\tdtcp.sys - Ok

    C:\WINDOWS\system32\dllcache\telephon.cpl - Ok

    C:\WINDOWS\system32\dllcache\termdd.sys - Ok

    >C:\WINDOWS\system32\dllcache\telnet.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\tffsport.sys - Ok

    C:\WINDOWS\system32\dllcache\tcmsetup.exe - Ok

    C:\WINDOWS\system32\dllcache\tftp.exe - Ok

    C:\WINDOWS\system32\dllcache\termsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\tgiul50.dll - Ok

    C:\WINDOWS\system32\dllcache\termmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\tcptest.exe - Ok

    C:\WINDOWS\system32\dllcache\timer.drv - Ok

    C:\WINDOWS\system32\dllcache\tgiulnt5.sys - Ok

    C:\WINDOWS\system32\dllcache\telnet.exe - Ok

    C:\WINDOWS\system32\dllcache\thawbrkr.dll - Ok

    C:\WINDOWS\system32\dllcache\timedate.cpl - Ok

    C:\WINDOWS\system32\dllcache\tjisdn.sys - Ok

    C:\WINDOWS\system32\dllcache\tintsetp.exe - Ok

    C:\WINDOWS\system32\dllcache\toolhelp.dll - Ok

    C:\WINDOWS\system32\dllcache\tos4mo.sys - Ok

    C:\WINDOWS\system32\dllcache\tintlphr.exe - Ok

    C:\WINDOWS\system32\dllcache\themeui.dll - Ok

    C:\WINDOWS\system32\dllcache\tmplprov.dll - Ok

    C:\WINDOWS\system32\dllcache\tintlgnt.ime - Ok

    C:\WINDOWS\system32\dllcache\tmigrate.dll - Ok

    C:\WINDOWS\system32\dllcache\toside.sys - Ok

    C:\WINDOWS\system32\dllcache\tourbg.gif - Ok

    >C:\WINDOWS\system32\dllcache\tour.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\tour.js - container

    C:\WINDOWS\system32\dllcache\tosdvd.sys - Ok

    C:\WINDOWS\system32\dllcache\tosdvd02.sys - Ok

    C:\WINDOWS\system32\dllcache\tosdvd03.sys - Ok

    C:\WINDOWS\system32\dllcache\tp4res.dll - Ok

    C:\WINDOWS\system32\dllcache\tpause.gif - Ok

    C:\WINDOWS\system32\dllcache\tpauseh.gif - Ok

    C:\WINDOWS\system32\dllcache\tplay.gif - Ok

    C:\WINDOWS\system32\dllcache\tp4mon.exe - Ok

    C:\WINDOWS\system32\dllcache\tplayh.gif - Ok

    C:\WINDOWS\system32\dllcache\tracert.exe - Ok

    C:\WINDOWS\system32\dllcache\tp4.dll - Ok

    C:\WINDOWS\system32\dllcache\tracert6.exe - Ok

    C:\WINDOWS\system32\dllcache\tpro4.sys - Ok

    C:\WINDOWS\system32\dllcache\tourstrt.exe - Ok

    C:\WINDOWS\system32\dllcache\traffic.dll - Ok

    C:\WINDOWS\system32\dllcache\trialoc.dll - Ok

    C:\WINDOWS\system32\dllcache\tridkbm.sys - Ok

    C:\WINDOWS\system32\dllcache\trid3dm.sys - Ok

    C:\WINDOWS\system32\dllcache\trid3d.dll - Ok

    C:\WINDOWS\system32\dllcache\tridkb.dll - Ok

    C:\WINDOWS\system32\dllcache\tridxp.dll - Ok

    C:\WINDOWS\system32\dllcache\trnsprov.dll - Ok

    C:\WINDOWS\system32\dllcache\trkwks.dll - Ok

    C:\WINDOWS\system32\dllcache\tridxpm.sys - Ok

    C:\WINDOWS\system32\dllcache\tsappcmp.dll - Ok

    C:\WINDOWS\system32\dllcache\tsbvcap.sys - Ok

    C:\WINDOWS\system32\dllcache\triedit.dll - Ok

    C:\WINDOWS\system32\dllcache\tsbyuv.dll - Ok

    C:\WINDOWS\system32\dllcache\tscon.exe - Ok

    C:\WINDOWS\system32\dllcache\tsd32.dll - Ok

    C:\WINDOWS\system32\dllcache\tsddd.dll - Ok

    C:\WINDOWS\system32\dllcache\tsdiscon.exe - Ok

    C:\WINDOWS\system32\dllcache\tsgqec.dll - Ok

    C:\WINDOWS\system32\dllcache\tscfgwmi.dll - Ok

    C:\WINDOWS\system32\dllcache\tskill.exe - Ok

    C:\WINDOWS\system32\dllcache\tscupgrd.exe - Ok

    C:\WINDOWS\system32\dllcache\tsprof.exe - Ok

    C:\WINDOWS\system32\dllcache\tspkg.dll - Ok

    C:\WINDOWS\system32\dllcache\tunmp.sys - Ok

    C:\WINDOWS\system32\dllcache\tsshutdn.exe - Ok

    C:\WINDOWS\system32\dllcache\twain.dll - Ok

    C:\WINDOWS\system32\dllcache\tsoc.dll - Ok

    C:\WINDOWS\system32\dllcache\twunk_16.exe - Ok

    C:\WINDOWS\system32\dllcache\twain_32.dll - Ok

    C:\WINDOWS\system32\dllcache\twext.dll - Ok

    C:\WINDOWS\system32\dllcache\twotrack.sys - Ok

    >C:\WINDOWS\system32\dllcache\tshoot.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\tshoot.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\uagp35.sys - Ok

    C:\WINDOWS\system32\dllcache\tshoot.dll - container

    C:\WINDOWS\system32\dllcache\typelib.dll - Ok

    C:\WINDOWS\system32\dllcache\twunk_32.exe - Ok

    C:\WINDOWS\system32\dllcache\udfs.sys - Ok

    C:\WINDOWS\system32\dllcache\txflog.dll - Ok

    C:\WINDOWS\system32\dllcache\udhisapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ufat.dll - Ok

    C:\WINDOWS\system32\dllcache\ultra.sys - Ok

    C:\WINDOWS\system32\dllcache\umandlg.dll - Ok

    C:\WINDOWS\system32\dllcache\ulib.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxpcls.sys - Ok

    C:\WINDOWS\system32\dllcache\umaxcam.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxp60.dll - Ok

    C:\WINDOWS\system32\dllcache\um54scan.dll - Ok

    C:\WINDOWS\system32\dllcache\um34scan.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxu22.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxscan.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxu40.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxu12.dll - Ok

    C:\WINDOWS\system32\dllcache\umdmxfrm.dll - Ok

    C:\WINDOWS\system32\dllcache\umaxud32.dll - Ok

    C:\WINDOWS\system32\dllcache\unicode.nls - Ok

    C:\WINDOWS\system32\dllcache\unicdime.ime - Ok

    C:\WINDOWS\system32\dllcache\umpnpmgr.dll - Ok

    >C:\WINDOWS\system32\dllcache\uniplat.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\uniansi.dll - Ok

    C:\WINDOWS\system32\dllcache\unimdmat.dll - Ok

    C:\WINDOWS\system32\dllcache\uniime.dll - Ok

    C:\WINDOWS\system32\dllcache\uniplat.dll - Ok

    C:\WINDOWS\system32\dllcache\unlodctr.exe - Ok

    C:\WINDOWS\system32\dllcache\unimdm.tsp - Ok

    C:\WINDOWS\system32\dllcache\updprov.dll - Ok

    C:\WINDOWS\system32\dllcache\unsecapp.exe - Ok

    C:\WINDOWS\system32\dllcache\unregmp2.exe - Ok

    >C:\WINDOWS\system32\dllcache\tourP.exe is ZLIB container

    C:\WINDOWS\system32\dllcache\update.sys - Ok

    C:\WINDOWS\system32\dllcache\tourP.exe - container

    C:\WINDOWS\system32\dllcache\untfs.dll - Ok

    C:\WINDOWS\system32\dllcache\uploadm.exe - Ok

    C:\WINDOWS\system32\dllcache\ureg.dll - Ok

    C:\WINDOWS\system32\dllcache\upnp.dll - Ok

    C:\WINDOWS\system32\dllcache\ups.exe - Ok

    C:\WINDOWS\system32\dllcache\upnphost.dll - Ok

    C:\WINDOWS\system32\dllcache\usb101et.sys - Ok

    C:\WINDOWS\system32\dllcache\usb8023.sys - Ok

    C:\WINDOWS\system32\dllcache\upnpcont.exe - Ok

    C:\WINDOWS\system32\dllcache\url.dll - Ok

    C:\WINDOWS\system32\dllcache\usbcamd.sys - Ok

    C:\WINDOWS\system32\dllcache\usb8023x.sys - Ok

    C:\WINDOWS\system32\dllcache\usbcamd2.sys - Ok

    C:\WINDOWS\system32\dllcache\usbaudio.sys - Ok

    C:\WINDOWS\system32\dllcache\upnpui.dll - Ok

    C:\WINDOWS\system32\dllcache\usbd.sys - Ok

    C:\WINDOWS\system32\dllcache\usbccgp.sys - Ok

    C:\WINDOWS\system32\dllcache\usbehci.sys - Ok

    C:\WINDOWS\system32\dllcache\usbintel.sys - Ok

    C:\WINDOWS\system32\dllcache\usbohci.sys - Ok

    C:\WINDOWS\system32\dllcache\usbhub.sys - Ok

    C:\WINDOWS\system32\dllcache\usbmon.dll - Ok

    C:\WINDOWS\system32\dllcache\usbprint.sys - Ok

    C:\WINDOWS\system32\dllcache\usbuhci.sys - Ok

    C:\WINDOWS\system32\dllcache\usbstor.sys - Ok

    C:\WINDOWS\system32\dllcache\usbser.sys - Ok

    C:\WINDOWS\system32\dllcache\usbscan.sys - Ok

    C:\WINDOWS\system32\dllcache\user.exe - Ok

    C:\WINDOWS\system32\dllcache\usbport.sys - Ok

    C:\WINDOWS\system32\dllcache\usbvideo.sys - Ok

    C:\WINDOWS\system32\dllcache\usbui.dll - Ok

    C:\WINDOWS\system32\dllcache\userinit.exe - Ok

    C:\WINDOWS\system32\dllcache\user32.dll - Ok

    C:\WINDOWS\system32\dllcache\usp10.dll - Ok

    C:\WINDOWS\system32\dllcache\userenv.dll - Ok

    C:\WINDOWS\system32\dllcache\urlmon.dll - Ok

    C:\WINDOWS\system32\dllcache\usrcntra.dll - Ok

    C:\WINDOWS\system32\dllcache\usr1801.sys - Ok

    C:\WINDOWS\system32\dllcache\usr1806.sys - Ok

    C:\WINDOWS\system32\dllcache\usrcoina.dll - Ok

    C:\WINDOWS\system32\dllcache\usr1807a.sys - Ok

    C:\WINDOWS\system32\dllcache\usrdpa.dll - Ok

    C:\WINDOWS\system32\dllcache\usrlbva.dll - Ok

    C:\WINDOWS\system32\dllcache\usroslba.sys - Ok

    C:\WINDOWS\system32\dllcache\usrfaxa.dll - Ok

    C:\WINDOWS\system32\dllcache\usrmlnka.exe - Ok

    C:\WINDOWS\system32\dllcache\usrrtosa.dll - Ok

    C:\WINDOWS\system32\dllcache\usrpda.sys - Ok

    C:\WINDOWS\system32\dllcache\usrdtea.dll - Ok

    C:\WINDOWS\system32\dllcache\usrsdpia.dll - Ok

    C:\WINDOWS\system32\dllcache\usr1806v.sys - Ok

    C:\WINDOWS\system32\dllcache\usrsvpia.dll - Ok

    C:\WINDOWS\system32\dllcache\usrshuta.exe - Ok

    C:\WINDOWS\system32\dllcache\usrv80a.dll - Ok

    C:\WINDOWS\system32\dllcache\usrvoica.dll - Ok

    >C:\WINDOWS\system32\dllcache\usrv42a.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\utildll.dll - Ok

    C:\WINDOWS\system32\dllcache\usrvpa.dll - Ok

    C:\WINDOWS\system32\dllcache\uxtheme.dll - Ok

    C:\WINDOWS\system32\dllcache\usrprbda.exe - Ok

    C:\WINDOWS\system32\dllcache\usrv42a.dll - Ok

    C:\WINDOWS\system32\dllcache\vbisurf.ax - Ok

    C:\WINDOWS\system32\dllcache\vcdex.dll - Ok

    C:\WINDOWS\system32\dllcache\vchnt5.dll - Ok

    C:\WINDOWS\system32\dllcache\usrti.sys - Ok

    C:\WINDOWS\system32\dllcache\vdmdbg.dll - Ok

    C:\WINDOWS\system32\dllcache\vdmindvd.sys - Ok

    C:\WINDOWS\system32\dllcache\vdmredir.dll - Ok

    C:\WINDOWS\system32\dllcache\ver.dll - Ok

    C:\WINDOWS\system32\dllcache\vbajet32.dll - Ok

    C:\WINDOWS\system32\dllcache\usrwdxjs.sys - Ok

    C:\WINDOWS\system32\dllcache\verifier.dll - Ok

    C:\WINDOWS\system32\dllcache\version.dll - Ok

    C:\WINDOWS\system32\dllcache\vga.dll - Ok

    C:\WINDOWS\system32\dllcache\verifier.exe - Ok

    C:\WINDOWS\system32\dllcache\vga.drv - Ok

    C:\WINDOWS\system32\dllcache\vga.sys - Ok

    C:\WINDOWS\system32\dllcache\vbscript.dll - Ok

    C:\WINDOWS\system32\dllcache\vgaoem.fon - Ok

    C:\WINDOWS\system32\dllcache\vga256.dll - Ok

    C:\WINDOWS\system32\dllcache\vga64k.dll - Ok

    C:\WINDOWS\system32\dllcache\viaide.sys - Ok

    C:\WINDOWS\system32\dllcache\utilman.exe - Ok

    C:\WINDOWS\system32\dllcache\viairda.sys - Ok

    C:\WINDOWS\system32\dllcache\viaagp.sys - Ok

    C:\WINDOWS\system32\dllcache\vidcap.ax - Ok

    C:\WINDOWS\system32\dllcache\vidsamp.gif - Ok

    C:\WINDOWS\system32\dllcache\videobg.gif - Ok

    C:\WINDOWS\system32\dllcache\viz.wmv - Ok

    C:\WINDOWS\system32\dllcache\videoprt.sys - Ok

    C:\WINDOWS\system32\dllcache\vjoy.dll - Ok

    C:\WINDOWS\system32\dllcache\vmmreg32.dll - Ok

    C:\WINDOWS\system32\dllcache\viewprov.dll - Ok

    C:\WINDOWS\system32\dllcache\vinwm.sys - Ok

    C:\WINDOWS\system32\dllcache\volsnap.sys - Ok

    C:\WINDOWS\system32\dllcache\voicesub.dll - Ok

    C:\WINDOWS\system32\dllcache\vssadmin.exe - Ok

    C:\WINDOWS\system32\dllcache\vmodem.sys - Ok

    C:\WINDOWS\system32\dllcache\voicepad.dll - Ok

    C:\WINDOWS\system32\dllcache\vpctcom.sys - Ok

    C:\WINDOWS\system32\dllcache\vfwwdm32.dll - Ok

    C:\WINDOWS\system32\dllcache\vvoice.sys - Ok

    C:\WINDOWS\system32\dllcache\vss_ps.dll - Ok

    C:\WINDOWS\system32\dllcache\w32.dll - Ok

    C:\WINDOWS\system32\dllcache\vgx.dll - Ok

    C:\WINDOWS\system32\dllcache\w32topl.dll - Ok

    C:\WINDOWS\system32\dllcache\w3ssl.dll - Ok

    C:\WINDOWS\system32\dllcache\vssapi.dll - Ok

    C:\WINDOWS\system32\dllcache\w32tm.exe - Ok

    C:\WINDOWS\system32\dllcache\w840nd.sys - Ok

    C:\WINDOWS\system32\dllcache\w32time.dll - Ok

    C:\WINDOWS\system32\dllcache\w926nd.sys - Ok

    C:\WINDOWS\system32\dllcache\w940nd.sys - Ok

    C:\WINDOWS\system32\dllcache\vssvc.exe - Ok

    C:\WINDOWS\system32\dllcache\wabfind.dll - Ok

    C:\WINDOWS\system32\dllcache\wacompen.sys - Ok

    C:\WINDOWS\system32\dllcache\wabimp.dll - Ok

    C:\WINDOWS\system32\dllcache\wab32res.dll - Ok

    C:\WINDOWS\system32\dllcache\wadv01nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv02nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv05nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv07nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv08nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv09nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wab.exe - Ok

    C:\WINDOWS\system32\dllcache\watchdog.sys - Ok

    C:\WINDOWS\system32\dllcache\wadv11nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wanarp.sys - Ok

    C:\WINDOWS\system32\dllcache\watv01nt.sys - Ok

    C:\WINDOWS\system32\dllcache\watv04nt.sys - Ok

    C:\WINDOWS\system32\dllcache\watv02nt.sys - Ok

    C:\WINDOWS\system32\dllcache\watv06nt.sys - Ok

    >C:\WINDOWS\system32\dllcache\wb32.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\watv10nt.sys - Ok

    C:\WINDOWS\system32\dllcache\wbemads.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemads.tlb - Ok

    C:\WINDOWS\system32\dllcache\wb32.exe - Ok

    C:\WINDOWS\system32\dllcache\wbemcons.dll - Ok

    C:\WINDOWS\system32\dllcache\wavemsp.dll - Ok

    C:\WINDOWS\system32\dllcache\wabmig.exe - Ok

    C:\WINDOWS\system32\dllcache\wbemcomn.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemcntl.dll - Ok

    C:\WINDOWS\system32\dllcache\wab32.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemdisp.tlb - Ok

    C:\WINDOWS\system32\dllcache\wbemprox.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemperf.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\wbfirdma.sys - Ok

    C:\WINDOWS\system32\dllcache\wbemdisp.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemtest.exe - Ok

    C:\WINDOWS\system32\dllcache\wceusbsh.sys - Ok

    C:\WINDOWS\system32\dllcache\wch7xxnt.sys - Ok

    C:\WINDOWS\system32\dllcache\wdigest.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemupgd.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemess.dll - Ok

    C:\WINDOWS\system32\dllcache\wbemcore.dll - Ok

    C:\WINDOWS\system32\dllcache\wdmaud.drv - Ok

    C:\WINDOWS\system32\dllcache\wdmaud.sys - Ok

    C:\WINDOWS\system32\dllcache\weitekp9.dll - Ok

    C:\WINDOWS\system32\dllcache\webhits.dll - Ok

    C:\WINDOWS\system32\dllcache\webclnt.dll - Ok

    C:\WINDOWS\system32\dllcache\webcheck.dll - Ok

    C:\WINDOWS\system32\dllcache\weitekp9.sys - Ok

    C:\WINDOWS\system32\dllcache\wfwnet.drv - Ok

    C:\WINDOWS\system32\dllcache\webvw.dll - Ok

    C:\WINDOWS\system32\dllcache\wiafbdrv.dll - Ok

    C:\WINDOWS\system32\dllcache\wiadss.dll - Ok

    C:\WINDOWS\system32\dllcache\wiamsmud.dll - Ok

    C:\WINDOWS\system32\dllcache\wdhaalba.sys - Ok

    C:\WINDOWS\system32\dllcache\wiascr.dll - Ok

    C:\WINDOWS\system32\dllcache\wextract.exe - Ok

    C:\WINDOWS\system32\dllcache\wiadefui.dll - Ok

    C:\WINDOWS\system32\dllcache\wiasf.ax - Ok

    C:\WINDOWS\system32\dllcache\wifeman.dll - Ok

    C:\WINDOWS\system32\dllcache\wiaacmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\wiavusd.dll - Ok

    C:\WINDOWS\system32\dllcache\win87em.dll - Ok

    C:\WINDOWS\system32\dllcache\wiavideo.dll - Ok

    C:\WINDOWS\system32\dllcache\wiaservc.dll - Ok

    C:\WINDOWS\system32\dllcache\win32spl.dll - Ok

    C:\WINDOWS\system32\dllcache\winar30.ime - Ok

    C:\WINDOWS\system32\dllcache\winfax.dll - Ok

    C:\WINDOWS\system32\dllcache\wiashext.dll - Ok

    C:\WINDOWS\system32\dllcache\wingb.ime - Ok

    C:\WINDOWS\system32\dllcache\winhelp.exe - Ok

    C:\WINDOWS\system32\dllcache\winchat.exe - Ok

    C:\WINDOWS\system32\dllcache\winacisa.sys - Ok

    C:\WINDOWS\system32\dllcache\winhlp32.exe - Ok

    C:\WINDOWS\system32\dllcache\winhttp.dll - Ok

    C:\WINDOWS\system32\dllcache\winhstb.exe - Ok

    C:\WINDOWS\system32\dllcache\winime.ime - Ok

    C:\WINDOWS\system32\dllcache\winipsec.dll - Ok

    C:\WINDOWS\system32\dllcache\winmgmtr.dll - Ok

    C:\WINDOWS\system32\dllcache\winbrand.dll - Ok

    C:\WINDOWS\system32\dllcache\winmine.exe - Ok

    C:\WINDOWS\system32\dllcache\winmgmt.exe - Ok

    C:\WINDOWS\system32\dllcache\winlogon.exe - Ok

    C:\WINDOWS\system32\dllcache\winnls.dll - Ok

    C:\WINDOWS\system32\dllcache\wininet.dll - Ok

    >C:\WINDOWS\system32\dllcache\winrnr.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\winmm.dll - Ok

    C:\WINDOWS\system32\dllcache\winmsd.exe - Ok

    C:\WINDOWS\system32\dllcache\winshfhc.dll - Ok

    C:\WINDOWS\system32\dllcache\winsock.dll - Ok

    C:\WINDOWS\system32\dllcache\winscard.dll - Ok

    C:\WINDOWS\system32\dllcache\winrnr.dll - Ok

    C:\WINDOWS\system32\dllcache\winspool.exe - Ok

    C:\WINDOWS\system32\dllcache\winpy.ime - Ok

    C:\WINDOWS\system32\dllcache\win32k.sys - Ok

    >C:\WINDOWS\system32\dllcache\winsta.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\winspool.drv - Ok

    C:\WINDOWS\system32\dllcache\winsp.ime - Ok

    C:\WINDOWS\system32\dllcache\winstrm.dll - Ok

    C:\WINDOWS\system32\dllcache\winver.exe - Ok

    C:\WINDOWS\system32\dllcache\winsta.dll - Ok

    C:\WINDOWS\system32\dllcache\wisc10.dll - Ok

    C:\WINDOWS\system32\dllcache\winsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\winntbbu.dll - Ok

    C:\WINDOWS\system32\dllcache\wintrust.dll - Ok

    C:\WINDOWS\system32\dllcache\wlanapi.dll - Ok

    C:\WINDOWS\system32\dllcache\winzm.ime - Ok

    C:\WINDOWS\system32\dllcache\wkssvc.dll - Ok

    C:\WINDOWS\system32\dllcache\wlandrv2.sys - Ok

    C:\WINDOWS\system32\dllcache\wm2.gif - Ok

    C:\WINDOWS\system32\dllcache\wm1.gif - Ok

    C:\WINDOWS\system32\dllcache\wm3.gif - Ok

    C:\WINDOWS\system32\dllcache\wm4.gif - Ok

    C:\WINDOWS\system32\dllcache\wm6.gif - Ok

    C:\WINDOWS\system32\dllcache\wm5.gif - Ok

    C:\WINDOWS\system32\dllcache\wm7.gif - Ok

    C:\WINDOWS\system32\dllcache\wlnotify.dll - Ok

    C:\WINDOWS\system32\dllcache\wm8.gif - Ok

    C:\WINDOWS\system32\dllcache\wm9.gif - Ok

    C:\WINDOWS\system32\dllcache\wlluc48.sys - Ok

    C:\WINDOWS\system32\dllcache\wldap32.dll - Ok

    C:\WINDOWS\system32\dllcache\wmdmps.dll - Ok

    C:\WINDOWS\system32\dllcache\wmerrenu.cat - Ok

    C:\WINDOWS\system32\dllcache\wmerrenu.dll - Ok

    C:\WINDOWS\system32\dllcache\wmdm.inf - Ok

    C:\WINDOWS\system32\dllcache\wmasf.dll - Ok

    C:\WINDOWS\system32\dllcache\wmi.dll - Ok

    C:\WINDOWS\system32\dllcache\wmerror.dll - Ok

    C:\WINDOWS\system32\dllcache\wmfsdk.inf - Ok

    C:\WINDOWS\system32\dllcache\wmi2xml.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiacpi.sys - Ok

    C:\WINDOWS\system32\dllcache\wmiapres.dll - Ok

    C:\WINDOWS\system32\dllcache\wmadmod.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiaprpl.dll - Ok

    C:\WINDOWS\system32\dllcache\wmicookr.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiapsrv.exe - Ok

    C:\WINDOWS\system32\dllcache\wmadmoe.dll - Ok

    C:\WINDOWS\system32\dllcache\wmilib.sys - Ok

    C:\WINDOWS\system32\dllcache\wmiadap.exe - Ok

    C:\WINDOWS\system32\dllcache\wmimsg.dll - Ok

    C:\WINDOWS\system32\dllcache\wmipcima.dll - Ok

    C:\WINDOWS\system32\dllcache\wmdmlog.dll - Ok

    C:\WINDOWS\system32\dllcache\wmidcprv.dll - Ok

    C:\WINDOWS\system32\dllcache\wmipicmp.dll - Ok

    C:\WINDOWS\system32\dllcache\wmidx.dll - Ok

    C:\WINDOWS\system32\dllcache\wmipdskq.dll - Ok

    >C:\WINDOWS\system32\dllcache\wmiprop.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\wmipiprt.dll - Ok

    C:\WINDOWS\system32\dllcache\wmipjobj.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiprop.dll - Ok

    C:\WINDOWS\system32\dllcache\wmipsess.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiprov.dll - Ok

    C:\WINDOWS\system32\dllcache\wmisvc.dll - Ok

    C:\WINDOWS\system32\dllcache\wmitimep.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiprvse.exe - Ok

    C:\WINDOWS\system32\dllcache\wmiutils.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2eres.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2ext.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2ae.dll - Ok

    C:\WINDOWS\system32\dllcache\wmiprvsd.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2res2.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2fxb.dll - Ok

    C:\WINDOWS\system32\dllcache\wmp.inf - Ok

    C:\WINDOWS\system32\dllcache\wmp.ocx - Ok

    C:\WINDOWS\system32\dllcache\wmm2filt.dll - Ok

    C:\WINDOWS\system32\dllcache\wmm2fxa.dll - Ok

    C:\WINDOWS\system32\dllcache\wmpaud1.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud2.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud4.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud3.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud5.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpasf.dll - Ok

    C:\WINDOWS\system32\dllcache\wmpaud6.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud7.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud8.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpaud9.wav - Ok

    C:\WINDOWS\system32\dllcache\wmpcd.dll - Ok

    C:\WINDOWS\system32\dllcache\wmpcore.dll - Ok

    >C:\WINDOWS\system32\dllcache\wmplay.chm is CHM container

    C:\WINDOWS\system32\dllcache\wmpband.dll - Ok

    C:\WINDOWS\system32\dllcache\wmplayer.adm - Ok

    C:\WINDOWS\system32\dllcache\wmpdxm.dll - Ok

    C:\WINDOWS\system32\dllcache\WMNetmgr.dll - Ok

    >C:\WINDOWS\system32\dllcache\wmplayer.chm is CHM container

    C:\WINDOWS\system32\dllcache\wmplayer.exe - Ok

    >C:\WINDOWS\system32\dllcache\wmploc.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmploc.js - container

    C:\WINDOWS\system32\dllcache\wmplay.chm - container

    C:\WINDOWS\system32\dllcache\wmpocm.inf - Ok

    C:\WINDOWS\system32\dllcache\wmpns.dll - Ok

    C:\WINDOWS\system32\dllcache\wmptour.css - Ok

    C:\WINDOWS\system32\dllcache\wmpshell.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\Glossary.js is JS-HTML container

    >C:\WINDOWS\system32\dllcache\wmptour.hta is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmpui.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\aboutcopyrights.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmptour.hta - container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\accessibilityfeaturesinyourproductnamehelp.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\accessibilityforpeoplewithdisabilities.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\accessibilityofmicrosoftwindows.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\accessiblefeaturesinyourproductnamewindowsmediapla.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\accessibleproductsandservicesfrommicrosoft.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\addingaradiostationtoaplaylist.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\adjustingmicrosoftproductsforpeoplewithaccessibili.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\adjustingthevolume.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmsdmoe.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\advancededit.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\advancededitsynchronizedlyrics.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\advancededitwebsites.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\anchorwindowmenu.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\assistivetechnologyforwindows.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\audiocdproperties.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\audiodeviceproperties.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmm2res.dll - Ok

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\basicsecuritymeasure.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\cdaudiofeature.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\cdcopyprocess.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\cddrivepropertiesdatacdtab.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingdvdviewingoptions.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changinghowtheplayerlooks.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingportabledevicesettings.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingthecoloroftheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingthesizeoftheplayer.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingthesizeofthevideowindow.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\changingyouraudioandvideosettings.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\choosingavisualization.htm is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\wmplayer.chm\htm\commontasks.htm is JS-HTML container

    C:\WINDOWS\system32\dllcache\wmsdmod.dll - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\system32\dllcache\dc240usd.dll - Ok

    C:\WINDOWS\system32\dllcache\dc260usd.dll - Ok

    C:\WINDOWS\system32\dllcache\dciman32.dll - Ok

    C:\WINDOWS\system32\dllcache\dcomcnfg.exe - Ok

    C:\WINDOWS\system32\dllcache\d3d9.dll - Ok

    C:\WINDOWS\system32\dllcache\dcap32.dll - Ok

    C:\WINDOWS\system32\dllcache\ddeml.dll - Ok

    C:\WINDOWS\system32\dllcache\ddrawex.dll - Ok

    C:\WINDOWS\system32\dllcache\ddsmc.sys - Ok

    C:\WINDOWS\system32\dllcache\danim.dll - Ok

    >C:\WINDOWS\system32\dllcache\debug.exe - packed by EXEPACK

    C:\WINDOWS\system32\dllcache\dbghelp.dll - Ok

    C:\WINDOWS\system32\dllcache\debug.exe - Ok

    C:\WINDOWS\system32\dllcache\ddraw.dll - Ok

    C:\WINDOWS\system32\dllcache\dbgeng.dll - Ok

    C:\WINDOWS\system32\dllcache\defrag.exe - Ok

    C:\WINDOWS\system32\dllcache\defpa.sys - Ok

    C:\WINDOWS\system32\dllcache\deskadp.dll - Ok

    >C:\WINDOWS\system32\dllcache\deskmon.dll - packed by FLY-CODE

    >C:\WINDOWS\system32\dllcache\deskperf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\devenum.dll - Ok

    C:\WINDOWS\system32\dllcache\desk.cpl - Ok

    C:\WINDOWS\system32\dllcache\deskmon.dll - Ok

    C:\WINDOWS\system32\dllcache\deskperf.dll - Ok

    C:\WINDOWS\system32\dllcache\dfe650.sys - Ok

    C:\WINDOWS\system32\dllcache\devcon32.dll - Ok

    C:\WINDOWS\system32\dllcache\dfe650d.sys - Ok

    C:\WINDOWS\system32\dllcache\ddeshare.exe - Ok

    C:\WINDOWS\system32\dllcache\devmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\dfrgfat.exe - Ok

    C:\WINDOWS\system32\dllcache\devldr32.exe - Ok

    >C:\WINDOWS\system32\dllcache\dfrgres.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\dfrgres.dll - container

    C:\WINDOWS\system32\dllcache\dgapci.sys - Ok

    C:\WINDOWS\system32\dllcache\dfrgsnap.dll - Ok

    C:\WINDOWS\system32\dllcache\dfrgntfs.exe - Ok

    C:\WINDOWS\system32\dllcache\dfrgui.dll - Ok

    C:\WINDOWS\system32\dllcache\dgnet.dll - Ok

    C:\WINDOWS\system32\dllcache\dgsetup.dll - Ok

    C:\WINDOWS\system32\dllcache\dfsshlex.dll - Ok

    C:\WINDOWS\system32\dllcache\dhcpcsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\dgrpsetu.dll - Ok

    C:\WINDOWS\system32\dllcache\dhcpqec.dll - Ok

    C:\WINDOWS\system32\dllcache\dhcpsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\dhtmled.ocx - Ok

    C:\WINDOWS\system32\dllcache\diantz.exe - Ok

    C:\WINDOWS\system32\dllcache\dhcpmon.dll - Ok

    C:\WINDOWS\system32\dllcache\diapi2.sys - Ok

    C:\WINDOWS\system32\dllcache\digest.dll - Ok

    C:\WINDOWS\system32\dllcache\diactfrm.dll - Ok

    C:\WINDOWS\system32\dllcache\dgconfig.dll - Ok

    C:\WINDOWS\system32\dllcache\digiasyn.sys - Ok

    C:\WINDOWS\system32\dllcache\dialer.exe - Ok

    C:\WINDOWS\system32\dllcache\digifep5.sys - Ok

    C:\WINDOWS\system32\dllcache\digidbp.dll - Ok

    C:\WINDOWS\system32\dllcache\digidxb.sys - Ok

    C:\WINDOWS\system32\dllcache\digiasyn.dll - Ok

    C:\WINDOWS\system32\dllcache\digiisdn.sys - Ok

    C:\WINDOWS\system32\dllcache\digiisdn.dll - Ok

    C:\WINDOWS\system32\dllcache\digiinf.dll - Ok

    C:\WINDOWS\system32\dllcache\digihlc.dll - Ok

    C:\WINDOWS\system32\dllcache\digifwrk.dll - Ok

    C:\WINDOWS\system32\dllcache\digirlpt.dll - Ok

    C:\WINDOWS\system32\dllcache\digirlpt.sys - Ok

    C:\WINDOWS\system32\dllcache\dimap.dll - Ok

    C:\WINDOWS\system32\dllcache\diapi2NT.dll - Ok

    C:\WINDOWS\system32\dllcache\dimsroam.dll - Ok

    C:\WINDOWS\system32\dllcache\dimsntfy.dll - Ok

    C:\WINDOWS\system32\dllcache\dimaint.sys - Ok

    C:\WINDOWS\system32\dllcache\disk.sys - Ok

    C:\WINDOWS\system32\dllcache\diskdump.sys - Ok

    C:\WINDOWS\system32\dllcache\directdb.dll - Ok

    C:\WINDOWS\system32\dllcache\dinput.dll - Ok

    C:\WINDOWS\system32\dllcache\diskperf.exe - Ok

    C:\WINDOWS\system32\dllcache\dinput8.dll - Ok

    C:\WINDOWS\system32\dllcache\dispex.dll - Ok

    C:\WINDOWS\system32\dllcache\disrvci.dll - Ok

    C:\WINDOWS\system32\dllcache\diskpart.exe - Ok

    C:\WINDOWS\system32\dllcache\disrvpp.dll - Ok

    >C:\WINDOWS\system32\dllcache\divaci.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\disrvsu.dll - Ok

    C:\WINDOWS\system32\dllcache\divaci.dll - Ok

    C:\WINDOWS\system32\dllcache\divaprop.dll - Ok

    C:\WINDOWS\system32\dllcache\divasu.dll - Ok

    C:\WINDOWS\system32\dllcache\dlh5xnd5.sys - Ok

    C:\WINDOWS\system32\dllcache\digiview.exe - Ok

    C:\WINDOWS\system32\dllcache\dllhost.exe - Ok

    C:\WINDOWS\system32\dllcache\dlttape.sys - Ok

    C:\WINDOWS\system32\dllcache\ditrace.exe - Ok

    C:\WINDOWS\system32\dllcache\dllhst3g.exe - Ok

    C:\WINDOWS\system32\dllcache\dm9pci5.sys - Ok

    C:\WINDOWS\system32\dllcache\dmband.dll - Ok

    C:\WINDOWS\system32\dllcache\dlimport.exe - Ok

    C:\WINDOWS\system32\dllcache\dmadmin.exe - Ok

    C:\WINDOWS\system32\dllcache\dmcompos.dll - Ok

    C:\WINDOWS\system32\dllcache\diskcopy.dll - Ok

    C:\WINDOWS\system32\dllcache\diwan.sys - Ok

    C:\WINDOWS\system32\dllcache\dmboot.sys - Ok

    C:\WINDOWS\system32\dllcache\dmdskres.dll - Ok

    C:\WINDOWS\system32\dllcache\dmintf.dll - Ok

    C:\WINDOWS\system32\dllcache\dmdlgs.dll - Ok

    C:\WINDOWS\system32\dllcache\dmconfig.dll - Ok

    C:\WINDOWS\system32\dllcache\dmdskmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\dmload.sys - Ok

    C:\WINDOWS\system32\dllcache\dmocx.dll - Ok

    C:\WINDOWS\system32\dllcache\dmime.dll - Ok

    C:\WINDOWS\system32\dllcache\dmloader.dll - Ok

    C:\WINDOWS\system32\dllcache\dmserver.dll - Ok

    C:\WINDOWS\system32\dllcache\dmscript.dll - Ok

    C:\WINDOWS\system32\dllcache\dmio.sys - Ok

    C:\WINDOWS\system32\dllcache\dmusic.sys - Ok

    >C:\WINDOWS\system32\dllcache\dmutil.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\dmremote.exe - Ok

    C:\WINDOWS\system32\dllcache\dmutil.dll - Ok

    C:\WINDOWS\system32\dllcache\dmstyle.dll - Ok

    C:\WINDOWS\system32\dllcache\dmview.ocx - Ok

    C:\WINDOWS\system32\dllcache\dmsynth.dll - Ok

    C:\WINDOWS\system32\dllcache\dmusic.dll - Ok

    C:\WINDOWS\system32\dllcache\dosapp.fon - Ok

    C:\WINDOWS\system32\dllcache\doskey.exe - Ok

    C:\WINDOWS\system32\dllcache\dosx.exe - Ok

    C:\WINDOWS\system32\dllcache\dnsrslvr.dll - Ok

    C:\WINDOWS\system32\dllcache\docprop2.dll - Ok

    C:\WINDOWS\system32\dllcache\docprop.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3api.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3cfg.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3dlg.dll - Ok

    C:\WINDOWS\system32\dllcache\dnsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3clnt.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3msm.dll - Ok

    C:\WINDOWS\system32\dllcache\dot4usb.sys - Ok

    C:\WINDOWS\system32\dllcache\dot4prt.sys - Ok

    C:\WINDOWS\system32\dllcache\dot4scan.sys - Ok

    C:\WINDOWS\system32\dllcache\dp83820.sys - Ok

    C:\WINDOWS\system32\dllcache\dplay.dll - Ok

    C:\WINDOWS\system32\dllcache\dpcdll.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3svc.dll - Ok

    C:\WINDOWS\system32\dllcache\dot4.sys - Ok

    C:\WINDOWS\system32\dllcache\dpnaddr.dll - Ok

    C:\WINDOWS\system32\dllcache\dpmodemx.dll - Ok

    C:\WINDOWS\system32\dllcache\dpnhupnp.dll - Ok

    C:\WINDOWS\system32\dllcache\dplaysvr.exe - Ok

    C:\WINDOWS\system32\dllcache\dpnhpast.dll - Ok

    C:\WINDOWS\system32\dllcache\dplayx.dll - Ok

    C:\WINDOWS\system32\dllcache\dpnlobby.dll - Ok

    C:\WINDOWS\system32\dllcache\dot3ui.dll - Ok

    C:\WINDOWS\system32\dllcache\dpserial.dll - Ok

    C:\WINDOWS\system32\dllcache\dpti2o.sys - Ok

    C:\WINDOWS\system32\dllcache\dpvacm.dll - Ok

    C:\WINDOWS\system32\dllcache\dpnmodem.dll - Ok

    C:\WINDOWS\system32\dllcache\dpnsvr.exe - Ok

    C:\WINDOWS\system32\dllcache\dpnwsock.dll - Ok

    C:\WINDOWS\system32\dllcache\dpvsetup.exe - Ok

    C:\WINDOWS\system32\dllcache\dpwsock.dll - Ok

    C:\WINDOWS\system32\dllcache\dpvvox.dll - Ok

    C:\WINDOWS\system32\dllcache\dpnet.dll - Ok

    C:\WINDOWS\system32\dllcache\dpvoice.dll - Ok

    C:\WINDOWS\system32\dllcache\drmkaud.sys - Ok

    C:\WINDOWS\system32\dllcache\dpwsockx.dll - Ok

    C:\WINDOWS\system32\dllcache\drvmain.sdb - Ok

    C:\WINDOWS\system32\dllcache\drwatson.exe - Ok

    C:\WINDOWS\system32\dllcache\drprov.dll - Ok

    C:\WINDOWS\system32\dllcache\drmk.sys - Ok

    C:\WINDOWS\system32\dllcache\ds16gt.dll - Ok

    C:\WINDOWS\system32\dllcache\drmstor.dll - Ok

    C:\WINDOWS\system32\dllcache\ds32gt.dll - Ok

    C:\WINDOWS\system32\dllcache\drwtsn32.exe - Ok

    C:\WINDOWS\system32\dllcache\dsauth.dll - Ok

    C:\WINDOWS\system32\dllcache\drmclien.dll - Ok

    C:\WINDOWS\system32\dllcache\ds1wdm.sys - Ok

    C:\WINDOWS\system32\dllcache\dshowext.ax - Ok

    C:\WINDOWS\system32\dllcache\dsdmo.dll - Ok

    C:\WINDOWS\system32\dllcache\dsdmoprp.dll - Ok

    C:\WINDOWS\system32\dllcache\dskquota.dll - Ok

    C:\WINDOWS\system32\dllcache\dsprop.dll - Ok

    C:\WINDOWS\system32\dllcache\dsprov.dll - Ok

    C:\WINDOWS\system32\dllcache\dsprpres.dll - Ok

    C:\WINDOWS\system32\dllcache\dskquoui.dll - Ok

    C:\WINDOWS\system32\dllcache\dssec.dll - Ok

    C:\WINDOWS\system32\dllcache\dsound.dll - Ok

    C:\WINDOWS\system32\dllcache\drmv2clt.dll - Ok

    C:\WINDOWS\system32\dllcache\dssenh.dll - Ok

    C:\WINDOWS\system32\dllcache\dsuiext.dll - Ok

    C:\WINDOWS\system32\dllcache\dswave.dll - Ok

    C:\WINDOWS\system32\dllcache\dsquery.dll - Ok

    C:\WINDOWS\system32\dllcache\dwil1033.dll - Ok

    C:\WINDOWS\system32\dllcache\dumprep.exe - Ok

    C:\WINDOWS\system32\dllcache\dvdplay.exe - Ok

    C:\WINDOWS\system32\dllcache\dvdupgrd.exe - Ok

    C:\WINDOWS\system32\dllcache\dxapi.sys - Ok

    C:\WINDOWS\system32\dllcache\duser.dll - Ok

    C:\WINDOWS\system32\dllcache\dsound3d.dll - Ok

    C:\WINDOWS\system32\dllcache\dwwin.exe - Ok

    C:\WINDOWS\system32\dllcache\dxgthk.sys - Ok

    C:\WINDOWS\system32\dllcache\dxg.sys - Ok

    C:\WINDOWS\system32\dllcache\dx7vb.dll - Ok

    C:\WINDOWS\system32\dllcache\dxtmsft.dll - Ok

    C:\WINDOWS\system32\dllcache\e1000nt5.sys - Ok

    C:\WINDOWS\system32\dllcache\dxtrans.dll - Ok

    C:\WINDOWS\system32\dllcache\dxmasf.dll - Ok

    C:\WINDOWS\system32\dllcache\e100isa4.sys - Ok

    C:\WINDOWS\system32\dllcache\e100b325.sys - Ok

    C:\WINDOWS\system32\dllcache\dx8vb.dll - Ok

    C:\WINDOWS\system32\dllcache\eapolqec.dll - Ok

    C:\WINDOWS\system32\dllcache\eappgnui.dll - Ok

    C:\WINDOWS\system32\dllcache\eappcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\eapphost.dll - Ok

    C:\WINDOWS\system32\dllcache\eapp3hst.dll - Ok

    C:\WINDOWS\system32\dllcache\eappprxy.dll - Ok

    >C:\WINDOWS\system32\dllcache\edlin.exe - packed by EXEPACK

    C:\WINDOWS\system32\dllcache\edlin.exe - Ok

    C:\WINDOWS\system32\dllcache\eapsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\eapqec.dll - Ok

    C:\WINDOWS\system32\dllcache\el574nd4.sys - Ok

    C:\WINDOWS\system32\dllcache\el515.sys - Ok

    C:\WINDOWS\system32\dllcache\el556nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\el589nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\el656cd5.sys - Ok

    C:\WINDOWS\system32\dllcache\el575nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\el656nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\dxdiag.exe - Ok

    C:\WINDOWS\system32\dllcache\el656se5.sys - Ok

    C:\WINDOWS\system32\dllcache\edb500.dll - Ok

    C:\WINDOWS\system32\dllcache\el90xbc5.sys - Ok

    C:\WINDOWS\system32\dllcache\el98xn5.sys - Ok

    C:\WINDOWS\system32\dllcache\el90xnd5.sys - Ok

    C:\WINDOWS\system32\dllcache\elmsmc.sys - Ok

    C:\WINDOWS\system32\dllcache\el656ct5.sys - Ok

    C:\WINDOWS\system32\dllcache\elnk3.sys - Ok

    C:\WINDOWS\system32\dllcache\em556n4.sys - Ok

    C:\WINDOWS\system32\dllcache\el985n51.sys - Ok

    C:\WINDOWS\system32\dllcache\el99xn51.sys - Ok

    C:\WINDOWS\system32\dllcache\encapi.dll - Ok

    C:\WINDOWS\system32\dllcache\enum1394.sys - Ok

    C:\WINDOWS\system32\dllcache\els.dll - Ok

    C:\WINDOWS\system32\dllcache\dxdiagn.dll - Ok

    C:\WINDOWS\system32\dllcache\epro4.sys - Ok

    C:\WINDOWS\system32\dllcache\encdec.dll - Ok

    C:\WINDOWS\system32\dllcache\epcfw2k.sys - Ok

    C:\WINDOWS\system32\dllcache\epstw2k.sys - Ok

    C:\WINDOWS\system32\dllcache\emu10k1m.sys - Ok

    C:\WINDOWS\system32\dllcache\eqnclass.dll - Ok

    C:\WINDOWS\system32\dllcache\ersvc.dll - Ok

    C:\WINDOWS\system32\dllcache\es1370mp.sys - Ok

    C:\WINDOWS\system32\dllcache\es1371mp.sys - Ok

    C:\WINDOWS\system32\dllcache\eqndiag.exe - Ok

    C:\WINDOWS\system32\dllcache\eqn.sys - Ok

    C:\WINDOWS\system32\dllcache\es.dll - Ok

    C:\WINDOWS\system32\dllcache\es1969.sys - Ok

    C:\WINDOWS\system32\dllcache\es198x.sys - Ok

    C:\WINDOWS\system32\dllcache\eqnlogr.exe - Ok

    C:\WINDOWS\system32\dllcache\eqnloop.exe - Ok

    >C:\WINDOWS\system32\dllcache\esentprf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\es56tpi.sys - Ok

    C:\WINDOWS\system32\dllcache\es56hpi.sys - Ok

    C:\WINDOWS\system32\dllcache\es56cvmp.sys - Ok

    C:\WINDOWS\system32\dllcache\esentprf.dll - Ok

    C:\WINDOWS\system32\dllcache\ess.sys - Ok

    C:\WINDOWS\system32\dllcache\esentutl.exe - Ok

    C:\WINDOWS\system32\dllcache\esucmd.dll - Ok

    C:\WINDOWS\system32\dllcache\esucm.dll - Ok

    C:\WINDOWS\system32\dllcache\essm2e.sys - Ok

    C:\WINDOWS\system32\dllcache\esent.dll - Ok

    C:\WINDOWS\system32\dllcache\esuimg.dll - Ok

    C:\WINDOWS\system32\dllcache\esuimgd.dll - Ok

    C:\WINDOWS\system32\dllcache\esunib.dll - Ok

    C:\WINDOWS\system32\dllcache\et4000.sys - Ok

    C:\WINDOWS\system32\dllcache\esunid.dll - Ok

    C:\WINDOWS\system32\dllcache\esuni.dll - Ok

    C:\WINDOWS\system32\dllcache\esscli.dll - Ok

    C:\WINDOWS\system32\dllcache\eventcls.dll - Ok

    >C:\WINDOWS\system32\dllcache\events.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\eventlog.dll - Ok

    C:\WINDOWS\system32\dllcache\events.js - container

    C:\WINDOWS\system32\dllcache\evntrprv.dll - Ok

    C:\WINDOWS\system32\dllcache\evntagnt.dll - Ok

    C:\WINDOWS\system32\dllcache\evntcmd.exe - Ok

    C:\WINDOWS\system32\dllcache\eudcedit.exe - Ok

    C:\WINDOWS\system32\dllcache\ex10.sys - Ok

    C:\WINDOWS\system32\dllcache\exabyte2.sys - Ok

    C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll - Ok

    C:\WINDOWS\system32\dllcache\evntwin.exe - Ok

    C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll - Ok

    C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll - Ok

    C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\esent97.dll - Ok

    C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll - Ok

    C:\WINDOWS\system32\dllcache\EXCH_seos.dll - Ok

    C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll - Ok

    >C:\WINDOWS\system32\dllcache\exe2bin.exe - packed by EXEPACK

    C:\WINDOWS\system32\dllcache\exe2bin.exe - Ok

    C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll - Ok

    >C:\WINDOWS\system32\dllcache\EXCH_scripto.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\EXCH_scripto.dll - container

    >C:\WINDOWS\system32\dllcache\expand.exe - packed by BINARYRES

    >>C:\WINDOWS\system32\dllcache\expand.exe - packed by MS COMPRESS

    C:\WINDOWS\system32\dllcache\expand.exe - Ok

    C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe - Ok

    C:\WINDOWS\system32\dllcache\extmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\f3ab18xi.sys - Ok

    C:\WINDOWS\system32\dllcache\eventvwr.exe - Ok

    C:\WINDOWS\system32\dllcache\f3ahvoas.dll - Ok

    C:\WINDOWS\system32\dllcache\fa312nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\exts.dll - Ok

    C:\WINDOWS\system32\dllcache\f3ab18xj.sys - Ok

    C:\WINDOWS\system32\dllcache\extrac32.exe - Ok

    >C:\WINDOWS\system32\dllcache\fastopen.exe - packed by EXEPACK

    >>C:\WINDOWS\system32\dllcache\fastopen.exe - packed by COM2EXE

    C:\WINDOWS\system32\dllcache\fastopen.exe - Ok

    C:\WINDOWS\system32\dllcache\fa410nd5.sys - Ok

    C:\WINDOWS\system32\dllcache\expsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\fc.exe - Ok

    C:\WINDOWS\system32\dllcache\fdc.sys - Ok

    C:\WINDOWS\system32\dllcache\fem556n5.sys - Ok

    C:\WINDOWS\system32\dllcache\feclient.dll - Ok

    C:\WINDOWS\system32\dllcache\faultrep.dll - Ok

    C:\WINDOWS\system32\dllcache\fetnd5.sys - Ok

    C:\WINDOWS\system32\dllcache\fastfat.sys - Ok

    C:\WINDOWS\system32\dllcache\findstr.exe - Ok

    C:\WINDOWS\system32\dllcache\find.exe - Ok

    C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll - Ok

    C:\WINDOWS\system32\dllcache\finger.exe - Ok

    C:\WINDOWS\system32\dllcache\fips.sys - Ok

    C:\WINDOWS\system32\dllcache\fixmapi.exe - Ok

    C:\WINDOWS\system32\dllcache\fastprox.dll - Ok

    C:\WINDOWS\system32\dllcache\flattemp.exe - Ok

    C:\WINDOWS\system32\dllcache\flpydisk.sys - Ok

    C:\WINDOWS\system32\dllcache\firewall.cpl - Ok

    C:\WINDOWS\system32\dllcache\filemgmt.dll - Ok

    C:\WINDOWS\system32\dllcache\fldrclnr.dll - Ok

    C:\WINDOWS\system32\dllcache\fltlib.dll - Ok

    C:\WINDOWS\system32\dllcache\fltmc.exe - Ok

    C:\WINDOWS\system32\dllcache\fmifs.dll - Ok

    C:\WINDOWS\system32\dllcache\explorer.exe - Ok

    C:\WINDOWS\system32\dllcache\fontsub.dll - Ok

    C:\WINDOWS\system32\dllcache\fltmgr.sys - Ok

    C:\WINDOWS\system32\dllcache\forcedos.exe - Ok

    C:\WINDOWS\system32\dllcache\fnfilter.dll - Ok

    C:\WINDOWS\system32\dllcache\forehe.sys - Ok

    C:\WINDOWS\system32\dllcache\fp40ext.dll - Ok

    C:\WINDOWS\system32\dllcache\fontview.exe - Ok

    C:\WINDOWS\system32\dllcache\fp4anscp.dll - Ok

    C:\WINDOWS\system32\dllcache\fp4areg.dll - Ok

    C:\WINDOWS\system32\dllcache\fp4avnb.dll - Ok

    C:\WINDOWS\system32\dllcache\fp4apws.dll - Ok

    >C:\WINDOWS\system32\dllcache\fontext.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\fontext.dll\data001 - packed by MS COMPRESS

    C:\WINDOWS\system32\dllcache\fp4atxt.dll - Ok

    C:\WINDOWS\system32\dllcache\fp4avss.dll - Ok

    >>C:\WINDOWS\system32\dllcache\fontext.dll\data002 - packed by MS COMPRESS

    C:\WINDOWS\system32\dllcache\fontext.dll - container

    C:\WINDOWS\system32\dllcache\fp4awebs.dll - Ok

    C:\WINDOWS\system32\dllcache\fp98sadm.exe - Ok

    C:\WINDOWS\system32\dllcache\fpadmcgi.exe - Ok

    C:\WINDOWS\system32\dllcache\fpadmdll.dll - Ok

    C:\WINDOWS\system32\dllcache\fp98swin.exe - Ok

    C:\WINDOWS\system32\dllcache\fp4amsft.dll - Ok

    >C:\WINDOWS\system32\dllcache\fp4autl.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\fpencode.dll - Ok

    C:\WINDOWS\system32\dllcache\fp4autl.dll - container

    C:\WINDOWS\system32\dllcache\fpcount.exe - Ok

    C:\WINDOWS\system32\dllcache\fpcibase.sys - Ok

    C:\WINDOWS\system32\dllcache\fpexedll.dll - Ok

    C:\WINDOWS\system32\dllcache\fpcmbase.sys - Ok

    C:\WINDOWS\system32\dllcache\framd.ttf - Ok

    C:\WINDOWS\system32\dllcache\fpremadm.exe - Ok

    C:\WINDOWS\system32\dllcache\fpmmcsat.dll - Ok

    C:\WINDOWS\system32\dllcache\framebuf.dll - Ok

    C:\WINDOWS\system32\dllcache\framdit.ttf - Ok

    C:\WINDOWS\system32\dllcache\fsconins.dll - Ok

    C:\WINDOWS\system32\dllcache\fpnpbase.sys - Ok

    C:\WINDOWS\system32\dllcache\framedyn.dll - Ok

    >C:\WINDOWS\system32\dllcache\fp4awel.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\fp4awel.dll - container

    C:\WINDOWS\system32\dllcache\fpmmc.dll - Ok

    C:\WINDOWS\system32\dllcache\fsutil.exe - Ok

    C:\WINDOWS\system32\dllcache\fsquirt.exe - Ok

    C:\WINDOWS\system32\dllcache\freecell.exe - Ok

    C:\WINDOWS\system32\dllcache\fsvga.sys - Ok

    C:\WINDOWS\system32\dllcache\fs_rec.sys - Ok

    C:\WINDOWS\system32\dllcache\fsusd.dll - Ok

    C:\WINDOWS\system32\dllcache\ftlx041e.dll - Ok

    C:\WINDOWS\system32\dllcache\ftp.exe - Ok

    C:\WINDOWS\system32\dllcache\ftdisk.sys - Ok

    C:\WINDOWS\system32\dllcache\fwcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\fuusd.dll - Ok

    C:\WINDOWS\system32\dllcache\fwdprov.dll - Ok

    C:\WINDOWS\system32\dllcache\ftsrch.dll - Ok

    C:\WINDOWS\system32\dllcache\fxscfgwz.dll - Ok

    C:\WINDOWS\system32\dllcache\fus2base.sys - Ok

    C:\WINDOWS\system32\dllcache\fxsclnt.exe - Ok

    C:\WINDOWS\system32\dllcache\fxsclntr.dll - Ok

    C:\WINDOWS\system32\dllcache\fusbbase.sys - Ok

    C:\WINDOWS\system32\dllcache\fxsdrv.dll - Ok

    C:\WINDOWS\system32\dllcache\fxscom.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsapi.dll - Ok

    >C:\WINDOWS\system32\dllcache\fxsevent.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\fxsext32.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsmon.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsperf.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsevent.dll - Ok

    >C:\WINDOWS\system32\dllcache\fxsres.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\fxscomex.dll - Ok

    C:\WINDOWS\system32\dllcache\fxscover.exe - Ok

    C:\WINDOWS\system32\dllcache\fxsres.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsocm.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsroute.dll - Ok

    C:\WINDOWS\system32\dllcache\fxssend.exe - Ok

    C:\WINDOWS\system32\dllcache\fxssvc.exe - Ok

    C:\WINDOWS\system32\dllcache\fxsui.dll - Ok

    C:\WINDOWS\system32\dllcache\fxst30.dll - Ok

    C:\WINDOWS\system32\dllcache\fxstiff.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsst.dll - Ok

    C:\WINDOWS\system32\dllcache\fxswzrd.dll - Ok

    C:\WINDOWS\system32\dllcache\fxsxp32.dll - Ok

    C:\WINDOWS\system32\dllcache\g200d.dll - Ok

    C:\WINDOWS\system32\dllcache\fxusbase.sys - Ok

    C:\WINDOWS\system32\dllcache\g200m.sys - Ok

    C:\WINDOWS\system32\dllcache\g711codc.ax - Ok

    C:\WINDOWS\system32\dllcache\gameenum.sys - Ok

    C:\WINDOWS\system32\dllcache\gagp30kx.sys - Ok

    C:\WINDOWS\system32\dllcache\gdi.exe - Ok

    C:\WINDOWS\system32\dllcache\geo.nls - Ok

    C:\WINDOWS\system32\dllcache\gckernel.sys - Ok

    C:\WINDOWS\system32\dllcache\gcdef.dll - Ok

    C:\WINDOWS\system32\dllcache\gdi32.dll - Ok

    C:\WINDOWS\system32\dllcache\glu32.dll - Ok

    C:\WINDOWS\system32\dllcache\g400m.sys - Ok

    C:\WINDOWS\system32\dllcache\gm.dls - Ok

    C:\WINDOWS\system32\dllcache\gpkrsrc.dll - Ok

    C:\WINDOWS\system32\dllcache\gpr400.sys - Ok

    C:\WINDOWS\system32\dllcache\getuname.dll - Ok

    C:\WINDOWS\system32\dllcache\gpkcsp.dll - Ok

    C:\WINDOWS\system32\dllcache\glmf32.dll - Ok

    C:\WINDOWS\system32\dllcache\grserial.sys - Ok

    C:\WINDOWS\system32\dllcache\grclass.sys - Ok

    C:\WINDOWS\system32\dllcache\grpconv.exe - Ok

    C:\WINDOWS\system32\dllcache\guitrn.dll - Ok

    C:\WINDOWS\system32\dllcache\guitrna.dll - Ok

    C:\WINDOWS\system32\dllcache\hanja.lex - Ok

    C:\WINDOWS\system32\dllcache\h323cc.dll - Ok

    C:\WINDOWS\system32\dllcache\guitrn_a.dll - Ok

    C:\WINDOWS\system32\dllcache\hcappres.dll - Ok

    C:\WINDOWS\system32\dllcache\hccoin.dll - Ok

    C:\WINDOWS\system32\dllcache\h323.tsp - Ok

    C:\WINDOWS\system32\dllcache\help.exe - Ok

    C:\WINDOWS\system32\dllcache\hdwwiz.cpl - Ok

    C:\WINDOWS\system32\dllcache\g400d.dll - Ok

    C:\WINDOWS\system32\dllcache\hanjadic.dll - Ok

    C:\WINDOWS\system32\dllcache\hh.exe - Ok

    C:\WINDOWS\system32\dllcache\helphost.exe - Ok

    C:\WINDOWS\system32\dllcache\h323msp.dll - Ok

    C:\WINDOWS\system32\dllcache\hhctrl.ocx - Ok

    C:\WINDOWS\system32\dllcache\hhctrlui.dll - Ok

    C:\WINDOWS\system32\dllcache\hhsetup.dll - Ok

    C:\WINDOWS\system32\dllcache\hid.dll - Ok

    C:\WINDOWS\system32\dllcache\hidclass.sys - Ok

    C:\WINDOWS\system32\dllcache\hidbth.sys - Ok

    C:\WINDOWS\system32\dllcache\hidgame.sys - Ok

    C:\WINDOWS\system32\dllcache\hidbatt.sys - Ok

    C:\WINDOWS\system32\dllcache\hidir.sys - Ok

    C:\WINDOWS\system32\dllcache\hidparse.sys - Ok

    >C:\WINDOWS\system32\dllcache\helpsvc.exe is BINARYRES container

    C:\WINDOWS\system32\dllcache\hidphone.tsp - Ok

    C:\WINDOWS\system32\dllcache\helpsvc.exe - container

    C:\WINDOWS\system32\dllcache\hidserv.dll - Ok

    C:\WINDOWS\system32\dllcache\himem.sys - Ok

    C:\WINDOWS\system32\dllcache\hidswvd.sys - Ok

    C:\WINDOWS\system32\dllcache\hidusb.sys - Ok

    C:\WINDOWS\system32\dllcache\helpctr.exe - Ok

    C:\WINDOWS\system32\dllcache\hcf_msft.sys - Ok

    C:\WINDOWS\system32\dllcache\hlink.dll - Ok

    C:\WINDOWS\system32\dllcache\hmmapi.dll - Ok

    C:\WINDOWS\system32\dllcache\hnetmon.dll - Ok

    C:\WINDOWS\system32\dllcache\hostname.exe - Ok

    C:\WINDOWS\system32\dllcache\hostmib.dll - Ok

    C:\WINDOWS\system32\dllcache\HPCRDP.CAT - Ok

    C:\WINDOWS\system32\dllcache\home_ss.dll - Ok

    C:\WINDOWS\system32\dllcache\hnetcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\hotplug.dll - Ok

    C:\WINDOWS\system32\dllcache\hpdigwia.dll - Ok

    C:\WINDOWS\system32\dllcache\hnetwiz.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt21.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt33tk.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt33.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt34.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt42tk.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt34tk.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt21tk.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt42.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgt53tk.dll - Ok

    C:\WINDOWS\system32\dllcache\hpn.sys - Ok

    C:\WINDOWS\system32\dllcache\hpsjmcro.dll - Ok

    C:\WINDOWS\system32\dllcache\hpt4qic.sys - Ok

    C:\WINDOWS\system32\dllcache\hpgt53.dll - Ok

    C:\WINDOWS\system32\dllcache\hr1w.dll - Ok

    C:\WINDOWS\system32\dllcache\hrtz.dll - Ok

    C:\WINDOWS\system32\dllcache\hscupd.exe - Ok

    C:\WINDOWS\system32\dllcache\hsfcisp2.dll - Ok

    C:\WINDOWS\system32\dllcache\hpojwia.dll - Ok

    C:\WINDOWS\system32\dllcache\hrtzzm.exe - Ok

    C:\WINDOWS\system32\dllcache\hsfbs2s2.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_amos.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_bsc2.sys - Ok

    C:\WINDOWS\system32\dllcache\hrtzres.dll - Ok

    C:\WINDOWS\system32\dllcache\hsf_fall.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_faxx.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_inst.dll - Ok

    C:\WINDOWS\system32\dllcache\hpgtmcro.dll - Ok

    C:\WINDOWS\system32\dllcache\hsf_fsks.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_samp.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_soar.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_tone.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_k56k.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_spkp.sys - Ok

    C:\WINDOWS\system32\dllcache\htrn_jis.dll - Ok

    C:\WINDOWS\system32\dllcache\hsfdpsp2.sys - Ok

    C:\WINDOWS\system32\dllcache\httpapi.dll - Ok

    C:\WINDOWS\system32\dllcache\htui.dll - Ok

    C:\WINDOWS\system32\dllcache\http.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_v124.sys - Ok

    C:\WINDOWS\system32\dllcache\hsf_msft.sys - Ok

    C:\WINDOWS\system32\dllcache\i2omgmt.sys - Ok

    C:\WINDOWS\system32\dllcache\i2omp.sys - Ok

    C:\WINDOWS\system32\dllcache\hsfcxts2.sys - Ok

    C:\WINDOWS\system32\dllcache\i740nt5.sys - Ok

    C:\WINDOWS\system32\dllcache\i8042prt.sys - Ok

    C:\WINDOWS\system32\dllcache\i740dnt5.dll - Ok

    C:\WINDOWS\system32\dllcache\iacenc.dll - Ok

    C:\WINDOWS\system32\dllcache\i81xnt5.sys - Ok

    C:\WINDOWS\system32\dllcache\iasads.dll - Ok

    C:\WINDOWS\system32\dllcache\iasacct.dll - Ok

    C:\WINDOWS\system32\dllcache\iashlpr.dll - Ok

    C:\WINDOWS\system32\dllcache\IASNT4.CAT - Ok

    C:\WINDOWS\system32\dllcache\iasnap.dll - Ok

    >C:\WINDOWS\system32\dllcache\iaspolcy.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\i81xdnt5.dll - Ok

    C:\WINDOWS\system32\dllcache\iaspolcy.dll - Ok

    C:\WINDOWS\system32\dllcache\iasrad.dll - Ok

    C:\WINDOWS\system32\dllcache\iassam.dll - Ok

    C:\WINDOWS\system32\dllcache\iasrecst.dll - Ok

    C:\WINDOWS\system32\dllcache\iassvcs.dll - Ok

    C:\WINDOWS\system32\dllcache\ibmexmp.sys - Ok

    C:\WINDOWS\system32\dllcache\iassdo.dll - Ok

    C:\WINDOWS\system32\dllcache\ibmtok.sys - Ok

    C:\WINDOWS\system32\dllcache\ibmsgnet.dll - Ok

    C:\WINDOWS\system32\dllcache\ibmvcap.sys - Ok

    C:\WINDOWS\system32\dllcache\icaapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ibmtrp.sys - Ok

    C:\WINDOWS\system32\dllcache\icam3ext.dll - Ok

    C:\WINDOWS\system32\dllcache\icam3.sys - Ok

    C:\WINDOWS\system32\dllcache\icam4com.dll - Ok

    C:\WINDOWS\system32\dllcache\icam4ext.dll - Ok

    C:\WINDOWS\system32\dllcache\icam4usb.sys - Ok

    C:\WINDOWS\system32\dllcache\icam5com.dll - Ok

    C:\WINDOWS\system32\dllcache\icfgnt5.dll - Ok

    C:\WINDOWS\system32\dllcache\icam5ext.dll - Ok

    C:\WINDOWS\system32\dllcache\icam5usb.sys - Ok

    C:\WINDOWS\system32\dllcache\icmp.dll - Ok

    C:\WINDOWS\system32\dllcache\icmui.dll - Ok

    C:\WINDOWS\system32\dllcache\hwxcht.dll - Ok

    C:\WINDOWS\system32\dllcache\icwconn.dll - Ok

    C:\WINDOWS\system32\dllcache\hwxjpn.dll - Ok

    C:\WINDOWS\system32\dllcache\icm32.dll - Ok

    C:\WINDOWS\system32\dllcache\icwdl.dll - Ok

    C:\WINDOWS\system32\dllcache\icwdial.dll - Ok

    C:\WINDOWS\system32\dllcache\hwxkor.dll - Ok

    C:\WINDOWS\system32\dllcache\icwconn1.exe - Ok

    C:\WINDOWS\system32\dllcache\icwconn2.exe - Ok

    C:\WINDOWS\system32\dllcache\icwres.dll - Ok

    C:\WINDOWS\system32\dllcache\icwrmind.exe - Ok

    C:\WINDOWS\system32\dllcache\icwphbk.dll - Ok

    C:\WINDOWS\system32\dllcache\iconf32.dll - Ok

    C:\WINDOWS\system32\dllcache\icwutil.dll - Ok

    C:\WINDOWS\system32\dllcache\idq.dll - Ok

    C:\WINDOWS\system32\dllcache\ieakeng.dll - Ok

    C:\WINDOWS\system32\dllcache\icwhelp.dll - Ok

    C:\WINDOWS\system32\dllcache\ie4uinit.exe - Ok

    >C:\WINDOWS\system32\dllcache\icwtutor.exe is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\icwtutor.exe\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\icwtutor.exe - container

    C:\WINDOWS\system32\dllcache\ieakui.dll - Ok

    C:\WINDOWS\system32\dllcache\ieencode.dll - Ok

    C:\WINDOWS\system32\dllcache\ieaksie.dll - Ok

    C:\WINDOWS\system32\dllcache\ieinfo5.ocx - Ok

    C:\WINDOWS\system32\dllcache\iepeers.dll - Ok

    C:\WINDOWS\system32\dllcache\iedkcs32.dll - Ok

    C:\WINDOWS\system32\dllcache\iedw.exe - Ok

    C:\WINDOWS\system32\dllcache\ieproxy.dll - Ok

    C:\WINDOWS\system32\dllcache\iesetup.dll - Ok

    C:\WINDOWS\system32\dllcache\iedvtool.dll - Ok

    C:\WINDOWS\system32\dllcache\iernonce.dll - Ok

    C:\WINDOWS\system32\dllcache\iexpress.exe - Ok

    C:\WINDOWS\system32\dllcache\igmpagnt.dll - Ok

    C:\WINDOWS\system32\dllcache\ifsutil.dll - Ok

    C:\WINDOWS\system32\dllcache\ifmon.dll - Ok

    C:\WINDOWS\system32\dllcache\ils.dll - Ok

    C:\WINDOWS\system32\dllcache\iexplore.exe - Ok

    C:\WINDOWS\system32\dllcache\imapi.sys - Ok

    C:\WINDOWS\system32\dllcache\imekr.lex - Ok

    C:\WINDOWS\system32\dllcache\imagehlp.dll - Ok

    C:\WINDOWS\system32\dllcache\iis.dll - Ok

    C:\WINDOWS\system32\dllcache\imapi.exe - Ok

    C:\WINDOWS\system32\dllcache\imekr61.ime - Ok

    C:\WINDOWS\system32\dllcache\imekrcic.dll - Ok

    C:\WINDOWS\system32\dllcache\imekrmbx.dll - Ok

    C:\WINDOWS\system32\dllcache\imepadsm.dll - Ok

    C:\WINDOWS\system32\dllcache\imeshare.dll - Ok

    C:\WINDOWS\system32\dllcache\imgutil.dll - Ok

    C:\WINDOWS\system32\dllcache\imekrmig.exe - Ok

    C:\WINDOWS\system32\dllcache\iertutil.dll - Ok

    C:\WINDOWS\system32\dllcache\imjp81.ime - Ok

    C:\WINDOWS\system32\dllcache\imepadsv.exe - Ok

    C:\WINDOWS\system32\dllcache\imjpdadm.exe - Ok

    C:\WINDOWS\system32\dllcache\imjpdct.dll - Ok

    C:\WINDOWS\system32\dllcache\imjpcic.dll - Ok

    C:\WINDOWS\system32\dllcache\imjp81k.dll - Ok

    C:\WINDOWS\system32\dllcache\imjpinst.exe - Ok

    C:\WINDOWS\system32\dllcache\imjpcus.dll - Ok

    C:\WINDOWS\system32\dllcache\imjpmig.exe - Ok

    C:\WINDOWS\system32\dllcache\imjpdct.exe - Ok

    C:\WINDOWS\system32\dllcache\imjpdsvr.exe - Ok

    C:\WINDOWS\system32\dllcache\ieframe.dll - Ok

    C:\WINDOWS\system32\dllcache\imlang.dll - Ok

    C:\WINDOWS\system32\dllcache\imjprw.exe - Ok

    C:\WINDOWS\system32\dllcache\imjputy.exe - Ok

    C:\WINDOWS\system32\dllcache\imjputyc.dll - Ok

    C:\WINDOWS\system32\dllcache\imsinsnt.dll - Ok

    C:\WINDOWS\system32\dllcache\imm32.dll - Ok

    C:\WINDOWS\system32\dllcache\imscinst.exe - Ok

    C:\WINDOWS\system32\dllcache\inetcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\imskdic.dll - Ok

    C:\WINDOWS\system32\dllcache\imskf.dll - Ok

    C:\WINDOWS\system32\dllcache\inetmib1.dll - Ok

    C:\WINDOWS\system32\dllcache\inetcomm.dll - Ok

    C:\WINDOWS\system32\dllcache\inetcplc.dll - Ok

    C:\WINDOWS\system32\dllcache\imjpuex.exe - Ok

    C:\WINDOWS\system32\dllcache\inetpp.dll - Ok

    C:\WINDOWS\system32\dllcache\inetppui.dll - Ok

    >C:\WINDOWS\system32\dllcache\inetres.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\inetres.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ini910u.sys - Ok

    C:\WINDOWS\system32\dllcache\inetres.dll - container

    C:\WINDOWS\system32\dllcache\imkrinst.exe - Ok

    C:\WINDOWS\system32\dllcache\inport.sys - Ok

    C:\WINDOWS\system32\dllcache\initpki.dll - Ok

    C:\WINDOWS\system32\dllcache\intelide.sys - Ok

    C:\WINDOWS\system32\dllcache\inseng.dll - Ok

    C:\WINDOWS\system32\dllcache\inetwiz.exe - Ok

    C:\WINDOWS\system32\dllcache\intelppm.sys - Ok

    C:\WINDOWS\system32\dllcache\input.dll - Ok

    C:\WINDOWS\system32\dllcache\iologmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\infosoft.dll - Ok

    C:\WINDOWS\system32\dllcache\io8.sys - Ok

    C:\WINDOWS\system32\dllcache\ip6fw.sys - Ok

    C:\WINDOWS\system32\dllcache\ip5515.sys - Ok

    C:\WINDOWS\system32\dllcache\io8ports.dll - Ok

    C:\WINDOWS\system32\dllcache\ipfltdrv.sys - Ok

    C:\WINDOWS\system32\dllcache\intl.cpl - Ok

    C:\WINDOWS\system32\dllcache\ipconf.tsp - Ok

    C:\WINDOWS\system32\dllcache\ipconfig.exe - Ok

    C:\WINDOWS\system32\dllcache\ipinip.sys - Ok

    C:\WINDOWS\system32\dllcache\iphlpapi.dll - Ok

    C:\WINDOWS\system32\dllcache\iprip.dll - Ok

    C:\WINDOWS\system32\dllcache\iprop.dll - Ok

    C:\WINDOWS\system32\dllcache\inetcpl.cpl - Ok

    C:\WINDOWS\system32\dllcache\ipmontr.dll - Ok

    C:\WINDOWS\system32\dllcache\iprtprio.dll - Ok

    C:\WINDOWS\system32\dllcache\ipnat.sys - Ok

    C:\WINDOWS\system32\dllcache\ippromon.dll - Ok

    C:\WINDOWS\system32\dllcache\ipnathlp.dll - Ok

    C:\WINDOWS\system32\dllcache\ipsec6.exe - Ok

    C:\WINDOWS\system32\dllcache\ipsink.ax - Ok

    C:\WINDOWS\system32\dllcache\iprtrmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\ipsecsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\ipv6mon.dll - Ok

    C:\WINDOWS\system32\dllcache\ipv6.exe - Ok

    C:\WINDOWS\system32\dllcache\ipxmontr.dll - Ok

    C:\WINDOWS\system32\dllcache\ipxrip.dll - Ok

    C:\WINDOWS\system32\dllcache\ipxroute.exe - Ok

    C:\WINDOWS\system32\dllcache\ipxpromn.dll - Ok

    C:\WINDOWS\system32\dllcache\ipxrtmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\ipsec.sys - Ok

    C:\WINDOWS\system32\dllcache\ipsecsnp.dll - Ok

    C:\WINDOWS\system32\dllcache\ipxwan.dll - Ok

    C:\WINDOWS\system32\dllcache\irclass.dll - Ok

    C:\WINDOWS\system32\dllcache\ipxsap.dll - Ok

    C:\WINDOWS\system32\dllcache\irenum.sys - Ok

    C:\WINDOWS\system32\dllcache\irmk7.sys - Ok

    >C:\WINDOWS\system32\dllcache\irmon.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\irda.sys - Ok

    C:\WINDOWS\system32\dllcache\ipsmsnap.dll - Ok

    C:\WINDOWS\system32\dllcache\irsir.sys - Ok

    C:\WINDOWS\system32\dllcache\irstusb.sys - Ok

    C:\WINDOWS\system32\dllcache\isapnp.sys - Ok

    C:\WINDOWS\system32\dllcache\irmon.dll - Ok

    C:\WINDOWS\system32\dllcache\isrdbg32.dll - Ok

    C:\WINDOWS\system32\dllcache\irftp.exe - Ok

    C:\WINDOWS\system32\dllcache\isign32.dll - Ok

    C:\WINDOWS\system32\dllcache\irprops.cpl - Ok

    C:\WINDOWS\system32\dllcache\ixsso.dll - Ok

    C:\WINDOWS\system32\dllcache\itircl.dll - Ok

    C:\WINDOWS\system32\dllcache\itss.dll - Ok

    C:\WINDOWS\system32\dllcache\iuengine.dll - Ok

    C:\WINDOWS\system32\dllcache\iyuv_32.dll - Ok

    C:\WINDOWS\system32\dllcache\joy.cpl - Ok

    C:\WINDOWS\system32\dllcache\jsproxy.dll - Ok

    C:\WINDOWS\system32\dllcache\jet500.dll - Ok

    C:\WINDOWS\system32\dllcache\jupiw.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd101.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd101a.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd101b.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd101c.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd103.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd106.dll - Ok

    C:\WINDOWS\system32\dllcache\kbd106n.dll - Ok

    C:\WINDOWS\system32\dllcache\kbda1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbda2.dll - Ok

    C:\WINDOWS\system32\dllcache\jobexec.dll - Ok

    C:\WINDOWS\system32\dllcache\kbda3.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdal.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdarme.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdarmw.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdax2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdbe.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdazel.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdaze.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdbene.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdbhc.dll - Ok

    C:\WINDOWS\system32\dllcache\isignup.exe - Ok

    C:\WINDOWS\system32\dllcache\kbdbr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdblr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdbu.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdclass.sys - Ok

    C:\WINDOWS\system32\dllcache\kbdca.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdcan.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdcr.dll - Ok

    C:\WINDOWS\system32\dllcache\jsdbgui.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdcz.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdcz2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdda.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdcz1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbddv.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdes.dll - Ok

    C:\WINDOWS\system32\dllcache\kbddiv1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbddiv2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfa.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfc.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdest.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfi.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfi1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfo.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdfr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdgeo.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdgae.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdgr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdgr1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhe.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdgkl.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhe220.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhe319.dll - Ok

    C:\WINDOWS\system32\dllcache\jscript.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhela2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdheb.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhela3.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhept.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhid.sys - Ok

    C:\WINDOWS\system32\dllcache\kbdhu.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdibm02.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdic.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinbe1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinben.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdhu1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinguj.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinmal.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdindev.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinhin.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinkan.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinmar.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdinpun.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdintam.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdintel.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdir.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdit.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdit142.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdjpn.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdiultn.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdkor.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlk41a.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdkaz.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdkyr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdla.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlt1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlv.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdmac.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlk41j.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlt.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdlv1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdmaori.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdmlt48.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdmon.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdmlt47.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdnec.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdnec95.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdne.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdnecat.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdnepr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdnecnt.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdno1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdpash.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdpl.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdno.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdro.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdpl1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdpo.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdru1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdru.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsg.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsl.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsl1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsmsno.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsf.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsmsfi.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsw.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsp.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdtat.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsyr1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdsyr2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdth0.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdth1.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdth2.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdtuf.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdth3.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdtuq.dll - Ok

    C:\WINDOWS\system32\dllcache\kbduk.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdur.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdukx.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdusr.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdurdu.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdusl.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdus.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdusx.dll - Ok

    C:\WINDOWS\system32\dllcache\kbduzb.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdusa.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdvntc.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdycc.dll - Ok

    C:\WINDOWS\system32\dllcache\kbdycl.dll - Ok

    C:\WINDOWS\system32\dllcache\kd1394.dll - Ok

    C:\WINDOWS\system32\dllcache\kdcom.dll - Ok

    C:\WINDOWS\system32\dllcache\keyboard.drv - Ok

    C:\WINDOWS\system32\dllcache\key01.sys - Ok

    C:\WINDOWS\system32\dllcache\keyboard.sys - Ok

    C:\WINDOWS\system32\dllcache\kdsui.dll - Ok

    C:\WINDOWS\system32\dllcache\kmddsp.tsp - Ok

    C:\WINDOWS\system32\dllcache\kerberos.dll - Ok

    C:\WINDOWS\system32\dllcache\kmixer.sys - Ok

    C:\WINDOWS\system32\dllcache\kmsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\keymgr.dll - Ok

    C:\WINDOWS\system32\dllcache\kdsusd.dll - Ok

    C:\WINDOWS\system32\dllcache\krnlprov.dll - Ok

    C:\WINDOWS\system32\dllcache\kousd.dll - Ok

    C:\WINDOWS\system32\dllcache\krnl386.exe - Ok

    C:\WINDOWS\system32\dllcache\korwbrkr.dll - Ok

    C:\WINDOWS\system32\dllcache\korwbrkr.lex - Ok

    C:\WINDOWS\system32\dllcache\ksc.nls - Ok

    C:\WINDOWS\system32\dllcache\ksuser.dll - Ok

    C:\WINDOWS\system32\dllcache\ksecdd.sys - Ok

    C:\WINDOWS\system32\dllcache\ks.sys - Ok

    C:\WINDOWS\system32\dllcache\kstvtune.ax - Ok

    C:\WINDOWS\system32\dllcache\ktc111.sys - Ok

    C:\WINDOWS\system32\dllcache\ksxbar.ax - Ok

    C:\WINDOWS\system32\dllcache\ksproxy.ax - Ok

    C:\WINDOWS\system32\dllcache\kswdmcap.ax - Ok

    C:\WINDOWS\system32\dllcache\label.exe - Ok

    C:\WINDOWS\system32\dllcache\l2store.dll - Ok

    C:\WINDOWS\system32\dllcache\lanepic5.sys - Ok

    C:\WINDOWS\system32\dllcache\laprxy.dll - Ok

    C:\WINDOWS\system32\dllcache\kernel32.dll - Ok

    C:\WINDOWS\system32\dllcache\lbrtfdc.sys - Ok

    C:\WINDOWS\system32\dllcache\langwrbk.dll - Ok

    C:\WINDOWS\system32\dllcache\licmgr10.dll - Ok

    C:\WINDOWS\system32\dllcache\l3codeca.acm - Ok

    C:\WINDOWS\system32\dllcache\licwmi.dll - Ok

    C:\WINDOWS\system32\dllcache\lit220p.sys - Ok

    >C:\WINDOWS\system32\dllcache\linkinfo.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\lmhsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\lights.exe - Ok

    C:\WINDOWS\system32\dllcache\lmmib2.dll - Ok

    C:\WINDOWS\system32\dllcache\linkinfo.dll - Ok

    C:\WINDOWS\system32\dllcache\lmndis3.sys - Ok

    C:\WINDOWS\system32\dllcache\licdll.dll - Ok

    C:\WINDOWS\system32\dllcache\lne100.sys - Ok

    C:\WINDOWS\system32\dllcache\lne100tx.sys - Ok

    C:\WINDOWS\system32\dllcache\loadperf.dll - Ok

    C:\WINDOWS\system32\dllcache\locale.nls - Ok

    C:\WINDOWS\system32\dllcache\lhmstsc.exe - Ok

    C:\WINDOWS\system32\dllcache\lnkstub.exe - Ok

    C:\WINDOWS\system32\dllcache\localui.dll - Ok

    C:\WINDOWS\system32\dllcache\lodctr.exe - Ok

    C:\WINDOWS\system32\dllcache\localsec.dll - Ok

    C:\WINDOWS\system32\dllcache\locator.exe - Ok

    C:\WINDOWS\system32\dllcache\lmrt.dll - Ok

    C:\WINDOWS\system32\dllcache\log.dll - Ok

    C:\WINDOWS\system32\dllcache\localspl.dll - Ok

    C:\WINDOWS\system32\dllcache\loghours.dll - Ok

    C:\WINDOWS\system32\dllcache\logoff.exe - Ok

    C:\WINDOWS\system32\dllcache\logman.exe - Ok

    C:\WINDOWS\system32\dllcache\loop.sys - Ok

    C:\WINDOWS\system32\dllcache\logagent.exe - Ok

    >C:\WINDOWS\system32\dllcache\lpk.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\lpdsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\lpq.exe - Ok

    C:\WINDOWS\system32\dllcache\lpr.exe - Ok

    C:\WINDOWS\system32\dllcache\lprhelp.dll - Ok

    C:\WINDOWS\system32\dllcache\lpk.dll - Ok

    C:\WINDOWS\system32\dllcache\lprmon.dll - Ok

    C:\WINDOWS\system32\dllcache\lprmonui.dll - Ok

    C:\WINDOWS\system32\dllcache\logon.scr - Ok

    C:\WINDOWS\system32\dllcache\lsass.exe - Ok

    C:\WINDOWS\system32\dllcache\logonui.exe - Ok

    C:\WINDOWS\system32\dllcache\ltmdmntl.sys - Ok

    C:\WINDOWS\system32\dllcache\ltmdmnt.sys - Ok

    C:\WINDOWS\system32\dllcache\ltotape.sys - Ok

    C:\WINDOWS\system32\dllcache\lsasrv.dll - Ok

    C:\WINDOWS\system32\dllcache\ltck000c.sys - Ok

    C:\WINDOWS\system32\dllcache\lhmstscx.dll - Ok

    C:\WINDOWS\system32\dllcache\ltts1033.lxa - Ok

    C:\WINDOWS\system32\dllcache\lwadihid.sys - Ok

    C:\WINDOWS\system32\dllcache\lz32.dll - Ok

    C:\WINDOWS\system32\dllcache\lzexpand.dll - Ok

    C:\WINDOWS\system32\dllcache\lwusbhid.sys - Ok

    C:\WINDOWS\system32\dllcache\l_except.nls - Ok

    C:\WINDOWS\system32\dllcache\l_intl.nls - Ok

    C:\WINDOWS\system32\dllcache\ltmdmntt.sys - Ok

    C:\WINDOWS\system32\dllcache\maestro.sys - Ok

    C:\WINDOWS\system32\dllcache\m3091dc.dll - Ok

    C:\WINDOWS\system32\dllcache\mag_hook.dll - Ok

    C:\WINDOWS\system32\dllcache\magnify.exe - Ok

    C:\WINDOWS\system32\dllcache\m3092dc.dll - Ok

    >C:\WINDOWS\system32\dllcache\ltsm.sys - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\mammoth.sys - Ok

    C:\WINDOWS\system32\dllcache\makecab.exe - Ok

    C:\WINDOWS\system32\dllcache\main.cpl - Ok

    C:\WINDOWS\system32\dllcache\marlett.ttf - Ok

    C:\WINDOWS\system32\dllcache\mcd.sys - Ok

    C:\WINDOWS\system32\dllcache\mcastmib.dll - Ok

    C:\WINDOWS\system32\dllcache\MAPIMIG.CAT - Ok

    C:\WINDOWS\system32\dllcache\mcdsrv32.dll - Ok

    >C:\WINDOWS\system32\dllcache\ltsmt.sys - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\mcd32.dll - Ok

    C:\WINDOWS\system32\dllcache\mciavi.drv - Ok

    C:\WINDOWS\system32\dllcache\mchgrcoi.dll - Ok

    C:\WINDOWS\system32\dllcache\mciole16.dll - Ok

    C:\WINDOWS\system32\dllcache\mcicda.dll - Ok

    C:\WINDOWS\system32\dllcache\mciavi32.dll - Ok

    C:\WINDOWS\system32\dllcache\mciqtz32.dll - Ok

    C:\WINDOWS\system32\dllcache\mciseq.drv - Ok

    >C:\WINDOWS\system32\dllcache\mciseq.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\mciole32.dll - Ok

    C:\WINDOWS\system32\dllcache\mciwave.dll - Ok

    C:\WINDOWS\system32\dllcache\mciwave.drv - Ok

    C:\WINDOWS\system32\dllcache\mciseq.dll - Ok

    C:\WINDOWS\system32\dllcache\mdlib.wmv - Ok

    C:\WINDOWS\system32\dllcache\mdhcp.dll - Ok

    C:\WINDOWS\system32\dllcache\mdgndis5.sys - Ok

    >C:\WINDOWS\system32\dllcache\mem.exe - packed by EXEPACK

    C:\WINDOWS\system32\dllcache\mdminst.dll - Ok

    C:\WINDOWS\system32\dllcache\mem.exe - Ok

    C:\WINDOWS\system32\dllcache\mdwmdmsp.dll - Ok

    C:\WINDOWS\system32\dllcache\memcard.sys - Ok

    C:\WINDOWS\system32\dllcache\memstpci.sys - Ok

    C:\WINDOWS\system32\dllcache\ltsm.sys - Ok

    C:\WINDOWS\system32\dllcache\memgrp.dll - Ok

    C:\WINDOWS\system32\dllcache\mf.sys - Ok

    C:\WINDOWS\system32\dllcache\mf3216.dll - Ok

    C:\WINDOWS\system32\dllcache\luna.mst - Ok

    C:\WINDOWS\system32\dllcache\metal_ss.dll - Ok

    C:\WINDOWS\system32\dllcache\ltsmt.sys - Ok

    C:\WINDOWS\system32\dllcache\mfcsubs.dll - Ok

    C:\WINDOWS\system32\dllcache\mga.dll - Ok

    C:\WINDOWS\system32\dllcache\mga.sys - Ok

    C:\WINDOWS\system32\dllcache\mgaud.dll - Ok

    C:\WINDOWS\system32\dllcache\mgmtapi.dll - Ok

    C:\WINDOWS\system32\dllcache\micross.ttf - Ok

    C:\WINDOWS\system32\dllcache\midimap.dll - Ok

    C:\WINDOWS\system32\dllcache\mfc40u.dll - Ok

    C:\WINDOWS\system32\dllcache\mgaum.sys - Ok

    C:\WINDOWS\system32\dllcache\mfc40.dll - Ok

    C:\WINDOWS\system32\dllcache\mfc42u.dll - Ok

    C:\WINDOWS\system32\dllcache\mfc42.dll - Ok

    C:\WINDOWS\system32\dllcache\migism.dll - Ok

    C:\WINDOWS\system32\dllcache\migism_a.dll - Ok

    C:\WINDOWS\system32\dllcache\miglibnt.dll - Ok

    C:\WINDOWS\system32\dllcache\migregdb.exe - Ok

    C:\WINDOWS\system32\dllcache\migisma.dll - Ok

    C:\WINDOWS\system32\dllcache\migisol.exe - Ok

    C:\WINDOWS\system32\dllcache\migload.exe - Ok

    C:\WINDOWS\system32\dllcache\mimefilt.dll - Ok

    C:\WINDOWS\system32\dllcache\miniqic.sys - Ok

    C:\WINDOWS\system32\dllcache\migwiz_a.exe - Ok

    C:\WINDOWS\system32\dllcache\mlang.dat - Ok

    C:\WINDOWS\system32\dllcache\mll_hp.dll - Ok

    C:\WINDOWS\system32\dllcache\migwiza.exe - Ok

    C:\WINDOWS\system32\dllcache\mll_mtf.dll - Ok

    C:\WINDOWS\system32\dllcache\migwiz.exe - Ok

    C:\WINDOWS\system32\dllcache\mll_qic.dll - Ok

    C:\WINDOWS\system32\dllcache\mmc30.dll - Ok

    C:\WINDOWS\system32\dllcache\mmcbase.dll - Ok

    C:\WINDOWS\system32\dllcache\Mmcfxc.dll - Ok

    C:\WINDOWS\system32\dllcache\mmcex.dll - Ok

    C:\WINDOWS\system32\dllcache\mlang.dll - Ok

    C:\WINDOWS\system32\dllcache\mmcperf.exe - Ok

    C:\WINDOWS\system32\dllcache\mmdrv.dll - Ok

    C:\WINDOWS\system32\dllcache\migrate.exe - Ok

    C:\WINDOWS\system32\dllcache\mmfutil.dll - Ok

    C:\WINDOWS\system32\dllcache\mmsystem.dll - Ok

    C:\WINDOWS\system32\dllcache\mmtask.tsk - Ok

    C:\WINDOWS\system32\dllcache\mnmdd.dll - Ok

    C:\WINDOWS\system32\dllcache\mnmdd.sys - Ok

    C:\WINDOWS\system32\dllcache\mmutilse.dll - Ok

    C:\WINDOWS\system32\dllcache\mmcshext.dll - Ok

    C:\WINDOWS\system32\dllcache\mnmsrvc.exe - Ok

    C:\WINDOWS\system32\dllcache\mmsys.cpl - Ok

    C:\WINDOWS\system32\dllcache\modem.sys - Ok

    C:\WINDOWS\system32\dllcache\modemcsa.sys - Ok

    C:\WINDOWS\system32\dllcache\modern.fon - Ok

    C:\WINDOWS\system32\dllcache\mobsync.dll - Ok

    C:\WINDOWS\system32\dllcache\mobsync.exe - Ok

    C:\WINDOWS\system32\dllcache\modex.dll - Ok

    C:\WINDOWS\system32\dllcache\mofcomp.exe - Ok

    C:\WINDOWS\system32\dllcache\mouclass.sys - Ok

    C:\WINDOWS\system32\dllcache\mouhid.sys - Ok

    C:\WINDOWS\system32\dllcache\modemui.dll - Ok

    C:\WINDOWS\system32\dllcache\mountmgr.sys - Ok

    C:\WINDOWS\system32\dllcache\mouse.drv - Ok

    C:\WINDOWS\system32\dllcache\mofd.dll - Ok

    C:\WINDOWS\system32\dllcache\moricons.dll - Ok

    C:\WINDOWS\system32\dllcache\mountvol.exe - Ok

    C:\WINDOWS\system32\dllcache\mpe.sys - Ok

    >C:\WINDOWS\system32\dllcache\mmc.exe is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\mpg2data.ax - Ok

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data003 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data004 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data005 is JS-HTML container

    C:\WINDOWS\system32\dllcache\mp43dmod.dll - Ok

    C:\WINDOWS\system32\dllcache\mp4sdmod.dll - Ok

    >>C:\WINDOWS\system32\dllcache\mmc.exe\data006 is JS-HTML container

    C:\WINDOWS\system32\dllcache\mmc.exe - container

    C:\WINDOWS\system32\dllcache\mpg2splt.ax - Ok

    C:\WINDOWS\system32\dllcache\mplayer2.cnt - Ok

    >C:\WINDOWS\system32\dllcache\mmcndmgr.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\mmcndmgr.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\mmcndmgr.dll - container

    C:\WINDOWS\system32\dllcache\mplayer2.hlp - Ok

    C:\WINDOWS\system32\dllcache\mpg4ds32.ax - Ok

    C:\WINDOWS\system32\dllcache\mplayer2.exe - Ok

    C:\WINDOWS\system32\dllcache\mpg4dmod.dll - Ok

    C:\WINDOWS\system32\dllcache\mplay32.exe - Ok

    C:\WINDOWS\system32\dllcache\mplogo.gif - Ok

    C:\WINDOWS\system32\dllcache\mplogoh.gif - Ok

    C:\WINDOWS\system32\dllcache\mplayer2.inf - Ok

    C:\WINDOWS\system32\dllcache\mpr.dll - Ok

    C:\WINDOWS\system32\dllcache\mprddm.dll - Ok

    C:\WINDOWS\system32\dllcache\mpnotify.exe - Ok

    C:\WINDOWS\system32\dllcache\mprdim.dll - Ok

    C:\WINDOWS\system32\dllcache\mprapi.dll - Ok

    C:\WINDOWS\system32\dllcache\mraid35x.sys - Ok

    C:\WINDOWS\system32\dllcache\mrinfo.exe - Ok

    C:\WINDOWS\system32\dllcache\mprui.dll - Ok

    C:\WINDOWS\system32\dllcache\mprmsg.dll - Ok

    C:\WINDOWS\system32\dllcache\msacm.dll - Ok

    C:\WINDOWS\system32\dllcache\msaatext.dll - Ok

    C:\WINDOWS\system32\dllcache\mrxdav.sys - Ok

    C:\WINDOWS\system32\dllcache\msacm32.dll - Ok

    C:\WINDOWS\system32\dllcache\msadcer.dll - Ok

    C:\WINDOWS\system32\dllcache\msadcfr.dll - Ok

    C:\WINDOWS\system32\dllcache\mpvis.dll - Ok

    C:\WINDOWS\system32\dllcache\msadcf.dll - Ok

    C:\WINDOWS\system32\dllcache\msadcor.dll - Ok

    C:\WINDOWS\system32\dllcache\msadcs.dll - Ok

    C:\WINDOWS\system32\dllcache\msadco.dll - Ok

    C:\WINDOWS\system32\dllcache\mrxsmb.sys - Ok

    C:\WINDOWS\system32\dllcache\msadce.dll - Ok

    C:\WINDOWS\system32\dllcache\msaddsr.dll - Ok

    C:\WINDOWS\system32\dllcache\msader15.dll - Ok

    C:\WINDOWS\system32\dllcache\msadds.dll - Ok

    C:\WINDOWS\system32\dllcache\msado20.tlb - Ok

    C:\WINDOWS\system32\dllcache\msado21.tlb - Ok

    C:\WINDOWS\system32\dllcache\msado25.tlb - Ok

    C:\WINDOWS\system32\dllcache\msado27.tlb - Ok

    C:\WINDOWS\system32\dllcache\msado26.tlb - Ok

    C:\WINDOWS\system32\dllcache\msadds32.ax - Ok

    C:\WINDOWS\system32\dllcache\msador15.dll - Ok

    C:\WINDOWS\system32\dllcache\msadrh15.dll - Ok

    C:\WINDOWS\system32\dllcache\msafd.dll - Ok

    C:\WINDOWS\system32\dllcache\msadox.dll - Ok

    C:\WINDOWS\system32\dllcache\msasn1.dll - Ok

    C:\WINDOWS\system32\dllcache\msadomd.dll - Ok

    C:\WINDOWS\system32\dllcache\msapsspc.dll - Ok

    C:\WINDOWS\system32\dllcache\msado15.dll - Ok

    C:\WINDOWS\system32\dllcache\mscat32.dll - Ok

    C:\WINDOWS\system32\dllcache\mscdexnt.exe - Ok

    C:\WINDOWS\system32\dllcache\msaudite.dll - Ok

    C:\WINDOWS\system32\dllcache\mscms.dll - Ok

    C:\WINDOWS\system32\dllcache\msconf.dll - Ok

    C:\WINDOWS\system32\dllcache\mscpx32r.dll - Ok

    C:\WINDOWS\system32\dllcache\mscpxl32.dll - Ok

    C:\WINDOWS\system32\dllcache\msaud32.acm - Ok

    C:\WINDOWS\system32\dllcache\mscandui.dll - Ok

    C:\WINDOWS\system32\dllcache\msconfig.exe - Ok

    C:\WINDOWS\system32\dllcache\msdadc.dll - Ok

    C:\WINDOWS\system32\dllcache\msctfp.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaer.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaenum.dll - Ok

    C:\WINDOWS\system32\dllcache\moviemk.exe - Ok

    C:\WINDOWS\system32\dllcache\msdadiag.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaorar.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaprsr.dll - Ok

    C:\WINDOWS\system32\dllcache\msctfime.ime - Ok

    C:\WINDOWS\system32\dllcache\msdaosp.dll - Ok

    C:\WINDOWS\system32\dllcache\msctf.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaremr.dll - Ok

    C:\WINDOWS\system32\dllcache\msdarem.dll - Ok

    C:\WINDOWS\system32\dllcache\msdasc.dll - Ok

    C:\WINDOWS\system32\dllcache\msdasqlr.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaps.dll - Ok

    C:\WINDOWS\system32\dllcache\msdatsrc.tlb - Ok

    C:\WINDOWS\system32\dllcache\msdaora.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaprst.dll - Ok

    C:\WINDOWS\system32\dllcache\msdart.dll - Ok

    C:\WINDOWS\system32\dllcache\msdaurl.dll - Ok

    C:\WINDOWS\system32\dllcache\msdatt.dll - Ok

    C:\WINDOWS\system32\dllcache\msdatl3.dll - Ok

    C:\WINDOWS\system32\dllcache\msdmo.dll - Ok

    C:\WINDOWS\system32\dllcache\msdfmap.dll - Ok

    C:\WINDOWS\system32\dllcache\msdtcstp.dll - Ok

    C:\WINDOWS\system32\dllcache\msdtc.exe - Ok

    C:\WINDOWS\system32\dllcache\msdtcuiu.dll - Ok

    C:\WINDOWS\system32\dllcache\msdasql.dll - Ok

    C:\WINDOWS\system32\dllcache\msdv.sys - Ok

    C:\WINDOWS\system32\dllcache\msdtcprx.dll - Ok

    C:\WINDOWS\system32\dllcache\msdxmlc.dll - Ok

    C:\WINDOWS\system32\dllcache\msdvbnp.ax - Ok

    C:\WINDOWS\system32\dllcache\msdtctm.dll - Ok

    C:\WINDOWS\system32\dllcache\msexch40.dll - Ok

    C:\WINDOWS\system32\dllcache\msdtclog.dll - Ok

    C:\WINDOWS\system32\dllcache\msfeedsbs.dll - Ok

    C:\WINDOWS\system32\dllcache\msfs.sys - Ok

    C:\WINDOWS\system32\dllcache\msfeeds.dll - Ok

    C:\WINDOWS\system32\dllcache\msexcl40.dll - Ok

    C:\WINDOWS\system32\dllcache\msfsio.sys - Ok

    C:\WINDOWS\system32\dllcache\msgpc.sys - Ok

    C:\WINDOWS\system32\dllcache\msg.exe - Ok

    C:\WINDOWS\system32\dllcache\msgame.sys - Ok

    C:\WINDOWS\system32\dllcache\msdxm.ocx - Ok

    C:\WINDOWS\system32\dllcache\msgrocm.dll - Ok

    C:\WINDOWS\system32\dllcache\msgsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\mshearts.exe - Ok

    C:\WINDOWS\system32\dllcache\mshta.exe - Ok

    C:\WINDOWS\system32\dllcache\msftedit.dll - Ok

    C:\WINDOWS\system32\dllcache\msgina.dll - Ok

    C:\WINDOWS\system32\dllcache\mshtmler.dll - Ok

    C:\WINDOWS\system32\dllcache\mshtmled.dll - Ok

    C:\WINDOWS\system32\dllcache\msident.dll - Ok

    C:\WINDOWS\system32\dllcache\msidntld.dll - Ok

    C:\WINDOWS\system32\dllcache\msidle.dll - Ok

    C:\WINDOWS\system32\dllcache\mshtml.tlb - Ok

    C:\WINDOWS\system32\dllcache\msieftp.dll - Ok

    C:\WINDOWS\system32\dllcache\msiexec.exe - Ok

    C:\WINDOWS\system32\dllcache\msimain.sdb - Ok

    C:\WINDOWS\system32\dllcache\msimg32.dll - Ok

    C:\WINDOWS\system32\dllcache\msihnd.dll - Ok

    C:\WINDOWS\system32\dllcache\msimn.exe - Ok

    C:\WINDOWS\system32\dllcache\msimtf.dll - Ok

    C:\WINDOWS\system32\dllcache\msimsg.dll - Ok

    C:\WINDOWS\system32\dllcache\msinfo.dll - Ok

    C:\WINDOWS\system32\dllcache\msinfo32.exe - Ok

    C:\WINDOWS\system32\dllcache\msi.dll - Ok

    C:\WINDOWS\system32\dllcache\msircomm.sys - Ok

    C:\WINDOWS\system32\dllcache\msgr3en.dll - Ok

    C:\WINDOWS\system32\dllcache\msir3jp.dll - Ok

    >C:\WINDOWS\system32\dllcache\msisip.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\msisip.dll - Ok

    C:\WINDOWS\system32\dllcache\msiprov.dll - Ok

    C:\WINDOWS\system32\dllcache\msjint40.dll - Ok

    C:\WINDOWS\system32\dllcache\msjetol1.dll - Ok

    C:\WINDOWS\system32\dllcache\msjro.dll - Ok

    C:\WINDOWS\system32\dllcache\msjet40.dll - Ok

    C:\WINDOWS\system32\dllcache\mskssrv.sys - Ok

    C:\WINDOWS\system32\dllcache\msiregmv.exe - Ok

    C:\WINDOWS\system32\dllcache\msjter40.dll - Ok

    C:\WINDOWS\system32\dllcache\msls31.dll - Ok

    C:\WINDOWS\system32\dllcache\msjtes40.dll - Ok

    C:\WINDOWS\system32\dllcache\mslwvtts.dll - Ok

    C:\WINDOWS\system32\dllcache\msltus40.dll - Ok

    C:\WINDOWS\system32\dllcache\mslbui.dll - Ok

    C:\WINDOWS\system32\dllcache\msmpu401.sys - Ok

    C:\WINDOWS\system32\dllcache\msir3jp.lex - Ok

    C:\WINDOWS\system32\dllcache\msobdl.dll - Ok

    C:\WINDOWS\system32\dllcache\msobjs.dll - Ok

    C:\WINDOWS\system32\dllcache\msnetobj.dll - Ok

    C:\WINDOWS\system32\dllcache\msobcomm.dll - Ok

    C:\WINDOWS\system32\dllcache\mshtml.dll - Ok

    C:\WINDOWS\system32\dllcache\msnsspc.dll - Ok

    C:\WINDOWS\system32\dllcache\msobweb.dll - Ok

    >C:\WINDOWS\system32\dllcache\msobshel.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\msobshel.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\msobshel.dll - container

    C:\WINDOWS\system32\dllcache\msoert2.dll - Ok

    C:\WINDOWS\system32\dllcache\msoobe.exe - Ok

    C:\WINDOWS\system32\dllcache\msorc32r.dll - Ok

    C:\WINDOWS\system32\dllcache\msoeacct.dll - Ok

    C:\WINDOWS\system32\dllcache\msobmain.dll - Ok

    C:\WINDOWS\system32\dllcache\mspatcha.dll - Ok

    C:\WINDOWS\system32\dllcache\msorcl32.dll - Ok

    C:\WINDOWS\system32\dllcache\mspclock.sys - Ok

    C:\WINDOWS\system32\dllcache\mspaint.exe - Ok

    C:\WINDOWS\system32\dllcache\mspbde40.dll - Ok

    C:\WINDOWS\system32\dllcache\mspqm.sys - Ok

    C:\WINDOWS\system32\dllcache\mspmsp.dll - Ok

    C:\WINDOWS\system32\dllcache\msprivs.dll - Ok

    >C:\WINDOWS\system32\dllcache\msoe.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\msoe.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\msoe.dll - container

    C:\WINDOWS\system32\dllcache\msports.dll - Ok

    C:\WINDOWS\system32\dllcache\msr2cenu.dll - Ok

    C:\WINDOWS\system32\dllcache\msr2c.dll - Ok

    C:\WINDOWS\system32\dllcache\msratelc.dll - Ok

    C:\WINDOWS\system32\dllcache\mspmsnsv.dll - Ok

    C:\WINDOWS\system32\dllcache\msrating.dll - Ok

    C:\WINDOWS\system32\dllcache\msriffwv.sys - Ok

    C:\WINDOWS\system32\dllcache\msrle32.dll - Ok

    C:\WINDOWS\system32\dllcache\mssap.dll - Ok

    C:\WINDOWS\system32\dllcache\msscds32.ax - Ok

    C:\WINDOWS\system32\dllcache\msrepl40.dll - Ok

    C:\WINDOWS\system32\dllcache\msrd2x40.dll - Ok

    >C:\WINDOWS\system32\dllcache\msoeres.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\msoeres.dll - container

    C:\WINDOWS\system32\dllcache\msshamsg.dll - Ok

    C:\WINDOWS\system32\dllcache\msscript.ocx - Ok

    C:\WINDOWS\system32\dllcache\mssip32.dll - Ok

    C:\WINDOWS\system32\dllcache\mssmbios.sys - Ok

    C:\WINDOWS\system32\dllcache\mssha.dll - Ok

    C:\WINDOWS\system32\dllcache\mssign32.dll - Ok

    C:\WINDOWS\system32\dllcache\msswch.dll - Ok

    C:\WINDOWS\system32\dllcache\mssoapr.dll - Ok

    C:\WINDOWS\system32\dllcache\msrd3x40.dll - Ok

    C:\WINDOWS\system32\dllcache\msscp.dll - Ok

    C:\WINDOWS\system32\dllcache\mst123.dll - Ok

    C:\WINDOWS\system32\dllcache\msswchx.exe - Ok

    C:\WINDOWS\system32\dllcache\mstape.sys - Ok

    C:\WINDOWS\system32\dllcache\mstee.sys - Ok

    C:\WINDOWS\system32\dllcache\mssoap1.dll - Ok

    C:\WINDOWS\system32\dllcache\mst120.dll - Ok

    C:\WINDOWS\system32\dllcache\mstlsapi.dll - Ok

    C:\WINDOWS\system32\dllcache\mstask.dll - Ok

    C:\WINDOWS\system32\dllcache\mstinit.exe - Ok

    C:\WINDOWS\system32\dllcache\mstext40.dll - Ok

    C:\WINDOWS\system32\dllcache\msv1_0.dll - Ok

    C:\WINDOWS\system32\dllcache\mstime.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcirt.dll - Ok

    C:\WINDOWS\system32\dllcache\mstsc.exe - Ok

    C:\WINDOWS\system32\dllcache\msutb.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcrt40.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcp60.dll - Ok

    C:\WINDOWS\system32\dllcache\msvidc32.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcrt.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcp50.dll - Ok

    C:\WINDOWS\system32\dllcache\msvideo.dll - Ok

    C:\WINDOWS\system32\dllcache\msvcrt20.dll - Ok

    C:\WINDOWS\system32\dllcache\msvfw32.dll - Ok

    C:\WINDOWS\system32\dllcache\msw3prt.dll - Ok

    C:\WINDOWS\system32\dllcache\mswebdvd.dll - Ok

    C:\WINDOWS\system32\dllcache\mswmdm.dll - Ok

    C:\WINDOWS\system32\dllcache\mswsock.dll - Ok

    C:\WINDOWS\system32\dllcache\msxactps.dll - Ok

    C:\WINDOWS\system32\dllcache\mswdat10.dll - Ok

    C:\WINDOWS\system32\dllcache\mswstr10.dll - Ok

    C:\WINDOWS\system32\dllcache\msxbde40.dll - Ok

    C:\WINDOWS\system32\dllcache\msxml2r.dll - Ok

    C:\WINDOWS\system32\dllcache\mstscax.dll - Ok

    C:\WINDOWS\system32\dllcache\msxml3r.dll - Ok

    C:\WINDOWS\system32\dllcache\msxml6r.dll - Ok

    C:\WINDOWS\system32\dllcache\msvidctl.dll - Ok

    C:\WINDOWS\system32\dllcache\msxmlr.dll - Ok

    C:\WINDOWS\system32\dllcache\msyuv.dll - Ok

    >C:\WINDOWS\system32\dllcache\msxml.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\mtlmnt5.sys - Ok

    >>C:\WINDOWS\system32\dllcache\msxml.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\msxml.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\msxml.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\dllcache\msxml.dll - container

    C:\WINDOWS\system32\dllcache\mtsadmin.tlb - Ok

    C:\WINDOWS\system32\dllcache\mtxclu.dll - Ok

    C:\WINDOWS\system32\dllcache\mtstocom.exe - Ok

    >C:\WINDOWS\system32\dllcache\msxml2.dll is BINARYRES container

    C:\WINDOWS\system32\dllcache\mtxex.dll - Ok

    >>C:\WINDOWS\system32\dllcache\msxml2.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\msxml2.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\msxml2.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\dllcache\msxml2.dll - container

    C:\WINDOWS\system32\dllcache\mtxlegih.dll - Ok

    C:\WINDOWS\system32\dllcache\mtxoci.dll - Ok

    C:\WINDOWS\system32\dllcache\mtxdm.dll - Ok

    C:\WINDOWS\system32\dllcache\mtxvideo.sys - Ok

    C:\WINDOWS\system32\dllcache\msxml3.dll - Ok

    C:\WINDOWS\system32\dllcache\mup.sys - Ok

    C:\WINDOWS\system32\dllcache\mutohpen.sys - Ok

    C:\WINDOWS\system32\dllcache\mtlstrm.sys - Ok

    C:\WINDOWS\system32\dllcache\MW770.CAT - Ok

    C:\WINDOWS\system32\dllcache\mxcard.sys - Ok

    C:\WINDOWS\system32\dllcache\multibox.dll - Ok

    C:\WINDOWS\system32\dllcache\mxicfg.dll - Ok

    C:\WINDOWS\system32\dllcache\mtxparhm.sys - Ok

    C:\WINDOWS\system32\dllcache\mxport.dll - Ok

    C:\WINDOWS\system32\dllcache\mxnic.sys - Ok

    C:\WINDOWS\system32\dllcache\msxml6.dll - Ok

    C:\WINDOWS\system32\dllcache\mxport.sys - Ok

    C:\WINDOWS\system32\dllcache\mycomput.dll - Ok

    C:\WINDOWS\system32\dllcache\n1000nt5.sys - Ok

    C:\WINDOWS\system32\dllcache\n9i128.dll - Ok

    C:\WINDOWS\system32\dllcache\mydocs.dll - Ok

    C:\WINDOWS\system32\dllcache\n9i128.sys - Ok

    C:\WINDOWS\system32\dllcache\n9i3d.sys - Ok

    C:\WINDOWS\system32\dllcache\n9i128v2.dll - Ok

    C:\WINDOWS\system32\dllcache\n100325.sys - Ok

    C:\WINDOWS\system32\dllcache\n9i128v2.sys - Ok

    C:\WINDOWS\system32\dllcache\napipsec.dll - Ok

    C:\WINDOWS\system32\dllcache\n9i3disp.dll - Ok

    C:\WINDOWS\system32\dllcache\nabtsfec.sys - Ok

    C:\WINDOWS\system32\dllcache\nac.dll - Ok

    C:\WINDOWS\system32\dllcache\narrhook.dll - Ok

    C:\WINDOWS\system32\dllcache\napmontr.dll - Ok

    C:\WINDOWS\system32\dllcache\mtxparhd.dll - Ok

    C:\WINDOWS\system32\dllcache\nbtstat.exe - Ok

    C:\WINDOWS\system32\dllcache\ncpa.cpl - Ok

    C:\WINDOWS\system32\dllcache\narrator.exe - Ok

    C:\WINDOWS\system32\dllcache\ncobjapi.dll - Ok

    C:\WINDOWS\system32\dllcache\ncxpnt.dll - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\cpu.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\cpu.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\usbport.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0014\DriverFiles\cpu.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\intelppm.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0014\DriverFiles\cpu.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0015\DriverFiles\cpu.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\i386\intelppm.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0015\DriverFiles\cpu.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0016\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0014\DriverFiles\i386\intelppm.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0015\DriverFiles\i386\intelppm.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\hdaudbus.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\hdaudbus.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\hdaudbus.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\hdaudbus.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0016\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\license.txt - Ok

    C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\hdaudbus.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\hdaudbus.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nv4_disp.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\dbInstaller.exe - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nv4_disp.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvapi.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nv4_mini.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nv4_disp.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvcuvenc.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvdata.bin - Ok

    >C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvcuvid.dll - packed by FLY-CODE

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvcuda.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvdispco32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvdrsdb.bin - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvinfo.pb - Ok

    >C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_135.ocx is BINARYRES container

    >>C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_135.ocx\data001 - packed by BINARYRES

    >>>C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_135.ocx\data001 is WISE container

    >>C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_135.ocx\data002 is ZLIB container

    C:\WINDOWS\system32\Macromed\Flash\Flash32_11_5_502_135.ocx - container

    >C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll is BINARYRES container

    >>C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll\data001 - packed by BINARYRES

    >>>C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll\data001 is WISE container

    >>C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll\data002 is ZLIB container

    C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll - container

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvcompiler.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvhda.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvhda.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvhda32.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvgenco32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\drmk.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\OpenCL.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvgenco32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\ksuser.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvcuvid.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\ks.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\portcls.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\ksproxy.ax - Ok

    >C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvhdap32.dll - packed by PESTUB

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvhda.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\wdmaud.drv - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\i386\stream.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvhda.PNF - Ok

    >C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvhdap32.dll - packed by PESTUB

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\drmk.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvhdap32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvhda32.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\ksuser.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\ks.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\portcls.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0020\DriverFiles\nvhdap32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\ksproxy.ax - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\stream.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\i386\wdmaud.drv - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvhda.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvhda.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\drmk.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvhda32.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\ks.sys - Ok

    >C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvhdap32.dll - packed by PESTUB

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\ksuser.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\ksproxy.ax - Ok

    C:\WINDOWS\system32\ReinstallBackups\0021\DriverFiles\nvgenco32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\portcls.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\stream.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\i386\wdmaud.drv - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvhdap32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvhda.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvhda.PNF - Ok

    >C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvhdap32.dll - packed by PESTUB

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\drmk.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvhda32.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvhdap32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\ksuser.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\ksproxy.ax - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\ks.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0022\DriverFiles\nvgenco32.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\stream.sys - Ok

    C:\WINDOWS\system32\Restore\MachineGuid.txt - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\wdmaud.drv - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\i386\portcls.sys - Ok

    C:\WINDOWS\system32\Restore\filelist.xml - Ok

    C:\WINDOWS\system32\Restore\srframe.mmf - Ok

    C:\WINDOWS\system32\Restore\srdiag.exe - Ok

    C:\WINDOWS\system32\Setup\fsconins.dll - Ok

    C:\WINDOWS\system32\Setup\fp40ext.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0023\DriverFiles\nvgenco32.dll - Ok

    C:\WINDOWS\system32\Setup\imsinsnt.dll - Ok

    C:\WINDOWS\system32\Setup\comsetup.dll - Ok

    >C:\WINDOWS\system32\Restore\rstrui.exe is BINARYRES container

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data001 is JS-HTML container

    C:\WINDOWS\system32\Setup\fxsocm.dll - Ok

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data002 is JS-HTML container

    >C:\WINDOWS\system32\Setup\koc.dll - packed by FLY-CODE

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data003 is JS-HTML container

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data005 is JS-HTML container

    C:\WINDOWS\system32\Setup\msgrocm.dll - Ok

    C:\WINDOWS\system32\Setup\msdtcstp.dll - Ok

    C:\WINDOWS\system32\Setup\koc.dll - Ok

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data006 is JS-HTML container

    C:\WINDOWS\system32\Setup\iis.dll - Ok

    C:\WINDOWS\system32\Setup\ocgen.dll - Ok

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data009 is JS-HTML container

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data010 is JS-HTML container

    C:\WINDOWS\system32\Setup\netoc.dll - Ok

    C:\WINDOWS\system32\Setup\ntoc.dll - Ok

    C:\WINDOWS\system32\Setup\ocmsn.dll - Ok

    >>C:\WINDOWS\system32\Restore\rstrui.exe\data011 is JS-HTML container

    C:\WINDOWS\system32\Restore\rstrui.exe - container

    C:\WINDOWS\system32\Setup\setupqry.dll - Ok

    C:\WINDOWS\system32\Setup\zoneoc.dll - Ok

    C:\WINDOWS\system32\Setup\startoc.dll - Ok

    C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll - Ok

    C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll - Ok

    C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll - Ok

    C:\WINDOWS\system32\XPSViewer\en-US\XPSViewer.exe.mui - Ok

    C:\WINDOWS\system32\XPSViewer\XPSViewerManifest.xml - Ok

    C:\WINDOWS\system32\Setup\tsoc.dll - Ok

    C:\WINDOWS\system32\cache\272512937d9e61a4.fb - Ok

    C:\WINDOWS\system32\cache\287204568329e189.fb - Ok

    >C:\WINDOWS\system32\cache\0025579d476751f2.fb is JS-HTML container

    C:\WINDOWS\system32\cache\0025579d476751f2.fb - container

    C:\WINDOWS\system32\cache\28bc8f716fd76a47.fb - Ok

    C:\WINDOWS\system32\cache\31a0997e9a5b5eb3.fb - Ok

    C:\WINDOWS\system32\cache\32c84fe32bb74d60.fb - Ok

    C:\WINDOWS\system32\cache\3917078cb68ec657.fb - Ok

    C:\WINDOWS\system32\cache\610289e025a3ee9a.fb - Ok

    C:\WINDOWS\system32\cache\590ba23ce359fd0c.fb - Ok

    C:\WINDOWS\system32\cache\6c59ac5e7e7a3ad0.fb - Ok

    C:\WINDOWS\system32\cache\6d03dad1035885d3.fb - Ok

    C:\WINDOWS\system32\cache\651c5d3cdbfb8bd1.fb - Ok

    C:\WINDOWS\system32\cache\ad10a52aff5e038d.fb - Ok

    C:\WINDOWS\system32\cache\c1fa887b03019701.fb - Ok

    C:\WINDOWS\system32\cache\c4d28dca2e7648be.fb - Ok

    C:\WINDOWS\system32\cache\a8556537add6dfc5.fb - Ok

    C:\WINDOWS\system32\cache\d2e94710a5708128.fb - Ok

    C:\WINDOWS\system32\cache\d79b9dfe81484ec4.fb - Ok

    C:\WINDOWS\system32\cache\d201ef9910cd39de.fb - Ok

    C:\WINDOWS\system32\config\AppEvent.Evt - Ok

    C:\WINDOWS\system32\config\default - read error

    C:\WINDOWS\system32\config\default.LOG - read error

    C:\WINDOWS\system32\XPSViewer\XPSViewer.exe - Ok

    C:\WINDOWS\system32\config\Doctor Web.evt - Ok

    C:\WINDOWS\system32\config\default.sav - Ok

    C:\WINDOWS\system32\config\SAM - read error

    C:\WINDOWS\system32\config\SAM.LOG - read error

    C:\WINDOWS\system32\config\Internet.evt - Ok

    C:\WINDOWS\system32\config\SECURITY - read error

    C:\WINDOWS\system32\config\SECURITY.LOG - read error

    C:\WINDOWS\system32\config\software - read error

    C:\WINDOWS\system32\config\software.LOG - read error

    C:\WINDOWS\system32\config\SecEvent.Evt - Ok

    C:\WINDOWS\system32\cache\f998975c9cc711ee.fb - Ok

    C:\WINDOWS\system32\config\system - read error

    C:\WINDOWS\system32\config\system.LOG - read error

    C:\WINDOWS\system32\config\SysEvent.Evt - Ok

    C:\WINDOWS\system32\config\TempKey.LOG - Ok

    C:\WINDOWS\system32\config\software.sav - Ok

    C:\WINDOWS\system32\config\userdiff.LOG - Ok

    C:\WINDOWS\system32\config\system.sav - Ok

    C:\WINDOWS\system32\config\WindowsPowerShell.evt - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 - Ok

    C:\WINDOWS\system32\config\userdiff - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 - Ok

    C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.4.7600.226\wuapi.dll - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F - Ok

    C:\WINDOWS\system32\bits\qmgr.dll - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\12236C41CDDF9E40BA5606CDF086B821 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\12236C41CDDF9E40BA5606CDF086B821 - Ok

    >C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 is CAB archive

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 - archive

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 - Ok

    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD - Ok

    C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.bak - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\History\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012012122920121230\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\chrome_installer.log - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\G1MFG5MJ\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GPQVOLUV\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\S1ERC9YR\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\SendTo\Compressed (zipped) Folder.ZFSendToTarget - Ok

    C:\WINDOWS\system32\config\systemprofile\SendTo\Desktop (create shortcut).DeskLink - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SDQBS523\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\SendTo\Mail Recipient.MAPIMail - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012012123020121231\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\SendTo\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Windows Media Player.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Remote Assistance.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\IETldCache\index.dat - Ok

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Command Prompt.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Synchronize.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Notepad.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Tour Windows XP.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Windows Explorer.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\excel4.xls - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\amipro.sam - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\presenta.shw - Ok

    C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\sndrec.wav - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\lotus.wk4 - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\powerpnt.ppt - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\wordpfct.wpd - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\quattro.wb2 - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\wordpfct.wpg - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\winword2.doc - Ok

    C:\WINDOWS\system32\dllcache\12520850.cpx - Ok

    C:\WINDOWS\system32\dllcache\12520437.cpx - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\excel.xls - Ok

    C:\WINDOWS\system32\dllcache\1394bus.sys - Ok

    C:\WINDOWS\system32\dllcache\1394vdbg.sys - Ok

    C:\WINDOWS\system32\config\systemprofile\Templates\winword.doc - Ok

    C:\WINDOWS\system32\dllcache\4mmdat.sys - Ok

    C:\WINDOWS\system32\dllcache\61883.sys - Ok

    C:\WINDOWS\system32\dllcache\8514a.dll - Ok

    C:\WINDOWS\system32\dllcache\6to4svc.dll - Ok

    C:\WINDOWS\system32\dllcache\3dfxvsm.sys - Ok

    C:\WINDOWS\system32\dllcache\aaaamon.dll - Ok

    C:\WINDOWS\system32\dllcache\a3d.dll - Ok

    C:\WINDOWS\system32\dllcache\abp480n5.sys - Ok

    C:\WINDOWS\system32\dllcache\aaclient.dll - Ok

    C:\WINDOWS\system32\dllcache\3dfxvs.dll - Ok

    C:\WINDOWS\system32\dllcache\ac97ali.sys - Ok

    C:\WINDOWS\system32\dllcache\ac97intc.sys - Ok

    C:\WINDOWS\system32\dllcache\3cwmcru.sys - Ok

    C:\WINDOWS\system32\dllcache\ac97via.sys - Ok

    C:\WINDOWS\system32\dllcache\a3dapi.dll - Ok

    C:\WINDOWS\system32\dllcache\acctres.dll - Ok

    C:\WINDOWS\system32\dllcache\ac97sis.sys - Ok

    C:\WINDOWS\system32\dllcache\access.cpl - Ok

    C:\WINDOWS\system32\dllcache\acerscad.dll - Ok

    C:\WINDOWS\system32\dllcache\accwiz.exe - Ok

    C:\WINDOWS\system32\dllcache\aclua.dll - Ok

    C:\WINDOWS\system32\dllcache\acledit.dll - Ok

    C:\WINDOWS\system32\dllcache\acpiec.sys - Ok

    C:\WINDOWS\system32\dllcache\aclui.dll - Ok

    C:\WINDOWS\system32\dllcache\acpi.sys - Ok

    C:\WINDOWS\system32\dllcache\activeds.dll - Ok

    C:\WINDOWS\system32\dllcache\actmovie.exe - Ok

    C:\WINDOWS\system32\dllcache\activeds.tlb - Ok

    C:\WINDOWS\system32\dllcache\aclayers.dll - Ok

    C:\WINDOWS\system32\dllcache\adicvls.sys - Ok

    C:\WINDOWS\system32\dllcache\actxprxy.dll - Ok

    C:\WINDOWS\system32\dllcache\adm8511.sys - Ok

    C:\WINDOWS\system32\dllcache\acspecfc.dll - Ok

    C:\WINDOWS\system32\dllcache\acxtrnal.dll - Ok

    C:\WINDOWS\system32\dllcache\admin.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\nvoglnt.dll - Ok

    C:\WINDOWS\system32\dllcache\admin.exe - Ok

    C:\WINDOWS\system32\dllcache\admjoy.sys - Ok

    C:\WINDOWS\system32\dllcache\adptif.dll - Ok

    >C:\WINDOWS\system32\dllcache\admparse.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\adptsf50.sys - Ok

    C:\WINDOWS\system32\dllcache\admparse.dll - Ok

    C:\WINDOWS\system32\dllcache\adm8820.sys - Ok

    C:\WINDOWS\system32\dllcache\adm8810.sys - Ok

    C:\WINDOWS\system32\dllcache\adpu160m.sys - Ok

    C:\WINDOWS\system32\dllcache\adsmsext.dll - Ok

    C:\WINDOWS\system32\dllcache\adsldpc.dll - Ok

    C:\WINDOWS\system32\dllcache\adv01nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adm8830.sys - Ok

    C:\WINDOWS\system32\dllcache\adv02nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adv05nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adsldp.dll - Ok

    C:\WINDOWS\system32\dllcache\adv08nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adv07nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\acgenral.dll - Ok

    C:\WINDOWS\system32\dllcache\adv09nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adv11nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\adsnt.dll - Ok

    C:\WINDOWS\system32\dllcache\agcgauge.ax - Ok

    C:\WINDOWS\system32\dllcache\agentanm.dll - Ok

    C:\WINDOWS\system32\dllcache\agentdp2.dll - Ok

    C:\WINDOWS\system32\dllcache\aec.sys - Ok

    C:\WINDOWS\system32\dllcache\advpack.dll - Ok

    C:\WINDOWS\system32\dllcache\afd.sys - Ok

    C:\WINDOWS\system32\dllcache\agentpsh.dll - Ok

    C:\WINDOWS\system32\dllcache\agentctl.dll - Ok

    C:\WINDOWS\system32\dllcache\agentmpx.dll - Ok

    C:\WINDOWS\system32\dllcache\agentsr.dll - Ok

    C:\WINDOWS\system32\dllcache\agentdpv.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0404.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0401.dll - Ok

    C:\WINDOWS\system32\dllcache\agpcpq.sys - Ok

    C:\WINDOWS\system32\dllcache\agp440.sys - Ok

    C:\WINDOWS\system32\dllcache\agt0405.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0406.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0408.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0407.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0409.dll - Ok

    C:\WINDOWS\system32\dllcache\advapi32.dll - Ok

    C:\WINDOWS\system32\dllcache\agt040b.dll - Ok

    C:\WINDOWS\system32\dllcache\agt040e.dll - Ok

    C:\WINDOWS\system32\dllcache\agt040c.dll - Ok

    C:\WINDOWS\system32\dllcache\agt040d.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0410.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0411.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0412.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0414.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0415.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0413.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0416.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0419.dll - Ok

    C:\WINDOWS\system32\dllcache\agt041f.dll - Ok

    C:\WINDOWS\system32\dllcache\agentsvr.exe - Ok

    C:\WINDOWS\system32\dllcache\agt041d.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0816.dll - Ok

    C:\WINDOWS\system32\dllcache\agtctl15.tlb - Ok

    C:\WINDOWS\system32\dllcache\agt0c0a.dll - Ok

    C:\WINDOWS\system32\dllcache\agt0804.dll - Ok

    C:\WINDOWS\system32\dllcache\agtintl.dll - Ok

    C:\WINDOWS\system32\dllcache\aha154x.sys - Ok

    C:\WINDOWS\system32\dllcache\aic78u2.sys - Ok

    C:\WINDOWS\system32\dllcache\aic78xx.sys - Ok

    C:\WINDOWS\system32\dllcache\alifir.sys - Ok

    C:\WINDOWS\system32\dllcache\aliide.sys - Ok

    C:\WINDOWS\system32\dllcache\ali5261.sys - Ok

    C:\WINDOWS\system32\dllcache\alim1541.sys - Ok

    C:\WINDOWS\system32\dllcache\ahui.exe - Ok

    C:\WINDOWS\system32\dllcache\amb8002.sys - Ok

    C:\WINDOWS\system32\dllcache\alrsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\amdagp.sys - Ok

    C:\WINDOWS\system32\dllcache\amsint.sys - Ok

    C:\WINDOWS\system32\dllcache\amdk7.sys - Ok

    C:\WINDOWS\system32\dllcache\amdk6.sys - Ok

    C:\WINDOWS\system32\dllcache\ansi.sys - Ok

    C:\WINDOWS\system32\dllcache\append.exe - Ok

    C:\WINDOWS\system32\dllcache\an983.sys - Ok

    C:\WINDOWS\system32\dllcache\apmbatt.sys - Ok

    C:\WINDOWS\system32\dllcache\alg.exe - Ok

    C:\WINDOWS\system32\dllcache\amstream.dll - Ok

    C:\WINDOWS\system32\dllcache\apph_sp.sdb - Ok

    C:\WINDOWS\system32\dllcache\apphelp.sdb - Ok

    C:\WINDOWS\system32\dllcache\apcups.dll - Ok

    C:\WINDOWS\system32\dllcache\apphelp.dll - Ok

    C:\WINDOWS\system32\dllcache\archvapp.inf - Ok

    C:\WINDOWS\system32\dllcache\arp.exe - Ok

    C:\WINDOWS\system32\dllcache\arp1394.sys - Ok

    C:\WINDOWS\system32\dllcache\asc.sys - Ok

    C:\WINDOWS\system32\dllcache\asc3350p.sys - Ok

    >C:\WINDOWS\system32\dllcache\apps.chm is CHM container

    C:\WINDOWS\system32\dllcache\asc3550.sys - Ok

    C:\WINDOWS\system32\dllcache\asferror.dll - Ok

    C:\WINDOWS\system32\dllcache\aspndis3.sys - Ok

    C:\WINDOWS\system32\dllcache\asyncmac.sys - Ok

    C:\WINDOWS\system32\dllcache\asycfilt.dll - Ok

    C:\WINDOWS\system32\dllcache\asctrls.ocx - Ok

    C:\WINDOWS\system32\dllcache\at.exe - Ok

    C:\WINDOWS\system32\dllcache\atapi.sys - Ok

    C:\WINDOWS\system32\dllcache\ati.sys - Ok

    C:\WINDOWS\system32\dllcache\ati.dll - Ok

    C:\WINDOWS\system32\dllcache\ati1mdxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1pdxx.sys - Ok

    C:\WINDOWS\system32\dllcache\aqueue.dll - Ok

    C:\WINDOWS\system32\dllcache\ati1btxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1raxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1snxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1ttxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1tuxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1rvxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ati1xbxx.sys - Ok

    >C:\WINDOWS\system32\dllcache\appwiz.cpl is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data001 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data003 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data004 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data006 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ati1xsxx.sys - Ok

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data008 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ati2cqag.dll - Ok

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data009 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data011 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ati2dvag.dll - Ok

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data012 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data014 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data015 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ati2dvaa.dll - Ok

    >>C:\WINDOWS\system32\dllcache\appwiz.cpl\data016 is JS-HTML container

    C:\WINDOWS\system32\dllcache\appwiz.cpl - container

    C:\WINDOWS\system32\dllcache\ati2mtaa.sys - Ok

    C:\WINDOWS\system32\dllcache\atibt829.sys - Ok

    C:\WINDOWS\system32\dllcache\atidrae.dll - Ok

    C:\WINDOWS\system32\dllcache\atidrab.dll - Ok

    C:\WINDOWS\system32\dllcache\ati3d1ag.dll - Ok

    C:\WINDOWS\system32\dllcache\ati2mtag.sys - Ok

    C:\WINDOWS\system32\dllcache\atimpae.sys - Ok

    C:\WINDOWS\system32\dllcache\atidvai.dll - Ok

    C:\WINDOWS\system32\dllcache\atinbtxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atimpab.sys - Ok

    C:\WINDOWS\system32\dllcache\atinmdxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atievxx.exe - Ok

    C:\WINDOWS\system32\dllcache\atinpdxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atinraxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atinsnxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atimtai.sys - Ok

    C:\WINDOWS\system32\dllcache\atinrvxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atinttxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atintuxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atipcxxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atinxbxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atinxsxx.sys - Ok

    C:\WINDOWS\system32\dllcache\atirtcap.sys - Ok

    C:\WINDOWS\system32\dllcache\atiragem.sys - Ok

    C:\WINDOWS\system32\dllcache\atiraged.dll - Ok

    C:\WINDOWS\system32\dllcache\atitunep.sys - Ok

    C:\WINDOWS\system32\dllcache\atirtsnd.sys - Ok

    C:\WINDOWS\system32\dllcache\atitvsnd.sys - Ok

    C:\WINDOWS\system32\dllcache\ativdaxx.ax - Ok

    C:\WINDOWS\system32\dllcache\ativmdcd.sys - Ok

    C:\WINDOWS\system32\dllcache\ativmvxx.ax - Ok

    C:\WINDOWS\system32\dllcache\ativttxx.sys - Ok

    C:\WINDOWS\system32\dllcache\ativtmxx.dll - Ok

    C:\WINDOWS\system32\dllcache\ativxbar.sys - Ok

    C:\WINDOWS\system32\dllcache\atixbar.sys - Ok

    C:\WINDOWS\system32\dllcache\atkctrs.dll - Ok

    C:\WINDOWS\system32\dllcache\atl.dll - Ok

    C:\WINDOWS\system32\dllcache\atmadm.exe - Ok

    C:\WINDOWS\system32\dllcache\atmarpc.sys - Ok

    C:\WINDOWS\system32\dllcache\atmepvc.sys - Ok

    C:\WINDOWS\system32\dllcache\atmlane.sys - Ok

    C:\WINDOWS\system32\dllcache\ati3duag.dll - Ok

    C:\WINDOWS\system32\dllcache\atmlib.dll - Ok

    C:\WINDOWS\system32\dllcache\atmpvcno.dll - Ok

    C:\WINDOWS\system32\dllcache\ativvaxx.dll - Ok

    C:\WINDOWS\system32\dllcache\atrace.dll - Ok

    C:\WINDOWS\system32\dllcache\attrib.exe - Ok

    C:\WINDOWS\system32\dllcache\atv02nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\atv01nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\atmfd.dll - Ok

    C:\WINDOWS\system32\dllcache\atv04nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\atv06nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\auditusr.exe - Ok

    C:\WINDOWS\system32\dllcache\atv10nt5.dll - Ok

    C:\WINDOWS\system32\dllcache\audstub.sys - Ok

    C:\WINDOWS\system32\dllcache\audiosrv.dll - Ok

    C:\WINDOWS\system32\dllcache\author.exe - Ok

    C:\WINDOWS\system32\dllcache\author.dll - Ok

    C:\WINDOWS\system32\dllcache\authz.dll - Ok

    C:\WINDOWS\system32\dllcache\autodisc.dll - Ok

    C:\WINDOWS\system32\dllcache\atmuni.sys - Ok

    >C:\WINDOWS\system32\dllcache\autolfn.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\avc.sys - Ok

    C:\WINDOWS\system32\dllcache\avcaudio.sys - Ok

    C:\WINDOWS\system32\dllcache\avcstrm.sys - Ok

    C:\WINDOWS\system32\dllcache\avicap.dll - Ok

    C:\WINDOWS\system32\dllcache\autoconv.exe - Ok

    C:\WINDOWS\system32\dllcache\autochk.exe - Ok

    C:\WINDOWS\system32\dllcache\avifile.dll - Ok

    C:\WINDOWS\system32\dllcache\avifil32.dll - Ok

    C:\WINDOWS\system32\dllcache\avicap32.dll - Ok

    C:\WINDOWS\system32\dllcache\avmcoxp.dll - Ok

    C:\WINDOWS\system32\dllcache\avmeter.dll - Ok

    C:\WINDOWS\system32\dllcache\autofmt.exe - Ok

    C:\WINDOWS\system32\dllcache\avmenum.dll - Ok

    C:\WINDOWS\system32\dllcache\avmwan.sys - Ok

    C:\WINDOWS\system32\dllcache\avwav.dll - Ok

    C:\WINDOWS\system32\dllcache\aztw2320.sys - Ok

    C:\WINDOWS\system32\dllcache\b1cbase.sys - Ok

    C:\WINDOWS\system32\dllcache\b57xp32.sys - Ok

    C:\WINDOWS\system32\dllcache\azroles.dll - Ok

    C:\WINDOWS\system32\dllcache\banshee.sys - Ok

    C:\WINDOWS\system32\dllcache\avtapi.dll - Ok

    C:\WINDOWS\system32\dllcache\basesrv.dll - Ok

    C:\WINDOWS\system32\dllcache\batt.dll - Ok

    C:\WINDOWS\system32\dllcache\battc.sys - Ok

    C:\WINDOWS\system32\dllcache\autolfn.exe - Ok

    C:\WINDOWS\system32\dllcache\banshee.dll - Ok

    C:\WINDOWS\system32\dllcache\bckg.dll - Ok

    C:\WINDOWS\system32\dllcache\batmeter.dll - Ok

    C:\WINDOWS\system32\dllcache\bcm4e5.sys - Ok

    C:\WINDOWS\system32\dllcache\bcm42xx5.sys - Ok

    C:\WINDOWS\system32\dllcache\bcm42u.sys - Ok

    C:\WINDOWS\system32\dllcache\bdaplgin.ax - Ok

    C:\WINDOWS\system32\dllcache\bdasup.sys - Ok

    C:\WINDOWS\system32\dllcache\bckgzm.exe - Ok

    C:\WINDOWS\system32\dllcache\beep.sys - Ok

    C:\WINDOWS\system32\dllcache\big5.nls - Ok

    C:\WINDOWS\system32\dllcache\bidispl.dll - Ok

    C:\WINDOWS\system32\dllcache\bitsprx2.dll - Ok

    C:\WINDOWS\system32\dllcache\bitsprx3.dll - Ok

    C:\WINDOWS\system32\dllcache\bktrh.gif - Ok

    C:\WINDOWS\system32\dllcache\binlsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\bitsprx4.dll - Ok

    C:\WINDOWS\system32\dllcache\blastcln.exe - Ok

    C:\WINDOWS\system32\dllcache\blue_ss.dll - Ok

    C:\WINDOWS\system32\dllcache\bootok.exe - Ok

    C:\WINDOWS\system32\dllcache\blackbox.dll - Ok

    C:\WINDOWS\system32\dllcache\bootvid.dll - Ok

    C:\WINDOWS\system32\dllcache\bootvrfy.exe - Ok

    C:\WINDOWS\system32\dllcache\bopomofo.nls - Ok

    C:\WINDOWS\system32\dllcache\bckgres.dll - Ok

    C:\WINDOWS\system32\dllcache\bnts.dll - Ok

    C:\WINDOWS\system32\dllcache\brcoinst.dll - Ok

    C:\WINDOWS\system32\dllcache\brevif.dll - Ok

    C:\WINDOWS\system32\dllcache\brfilt.sys - Ok

    >C:\WINDOWS\system32\dllcache\bcmdm.sys - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\brfiltlo.sys - Ok

    C:\WINDOWS\system32\dllcache\brfiltup.sys - Ok

    C:\WINDOWS\system32\dllcache\brbidiif.dll - Ok

    C:\WINDOWS\system32\dllcache\brmfbidi.dll - Ok

    C:\WINDOWS\system32\dllcache\brmflpt.dll - Ok

    C:\WINDOWS\system32\dllcache\bridge.sys - Ok

    C:\WINDOWS\system32\dllcache\brmfcwia.dll - Ok

    >C:\WINDOWS\system32\dllcache\browselc.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\browselc.dll\data004 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\browselc.dll\data008 is JS-HTML container

    C:\WINDOWS\system32\dllcache\brmfusb.dll - Ok

    C:\WINDOWS\system32\dllcache\brmfrsmg.exe - Ok

    >>C:\WINDOWS\system32\dllcache\browselc.dll\data012 is JS-HTML container

    >>C:\WINDOWS\system32\dllcache\browselc.dll\data013 is ZLIB container

    C:\WINDOWS\system32\dllcache\browser.dll - Ok

    C:\WINDOWS\system32\dllcache\browselc.dll - container

    C:\WINDOWS\system32\dllcache\brparimg.sys - Ok

    C:\WINDOWS\system32\dllcache\browsewm.dll - Ok

    C:\WINDOWS\system32\dllcache\brparwdm.sys - Ok

    C:\WINDOWS\system32\dllcache\brscnrsm.dll - Ok

    C:\WINDOWS\system32\dllcache\brpinfo.dll - Ok

    >C:\WINDOWS\system32\dllcache\brserif.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\brusbmdm.sys - Ok

    C:\WINDOWS\system32\dllcache\brserwdm.sys - Ok

    C:\WINDOWS\system32\dllcache\brserif.dll - Ok

    C:\WINDOWS\system32\dllcache\brusbscn.sys - Ok

    C:\WINDOWS\system32\dllcache\brzwlan.sys - Ok

    C:\WINDOWS\system32\dllcache\bthenum.sys - Ok

    C:\WINDOWS\system32\dllcache\bthci.dll - Ok

    C:\WINDOWS\system32\dllcache\apps.chm - container

    C:\WINDOWS\system32\dllcache\bthmodem.sys - Ok

    C:\WINDOWS\system32\dllcache\bthprint.sys - Ok

    C:\WINDOWS\system32\dllcache\bcmdm.sys - Ok

    C:\WINDOWS\system32\dllcache\bthusb.sys - Ok

    C:\WINDOWS\system32\dllcache\bthpan.sys - Ok

    C:\WINDOWS\system32\dllcache\bthprops.cpl - Ok

    C:\WINDOWS\system32\dllcache\bthserv.dll - Ok

    C:\WINDOWS\system32\dllcache\bulltlp3.sys - Ok

    C:\WINDOWS\system32\dllcache\cacls.exe - Ok

    C:\WINDOWS\system32\dllcache\cabinet.dll - Ok

    C:\WINDOWS\system32\dllcache\cabview.dll - Ok

    C:\WINDOWS\system32\dllcache\bthport.sys - Ok

    C:\WINDOWS\system32\dllcache\btpanui.dll - Ok

    C:\WINDOWS\system32\dllcache\camdro21.sys - Ok

    C:\WINDOWS\system32\dllcache\browseui.dll - Ok

    C:\WINDOWS\system32\dllcache\calc.exe - Ok

    C:\WINDOWS\system32\dllcache\camdrv21.sys - Ok

    C:\WINDOWS\system32\dllcache\camexo20.dll - Ok

    C:\WINDOWS\system32\dllcache\camexo20.ax - Ok

    C:\WINDOWS\system32\dllcache\camdrv30.sys - Ok

    C:\WINDOWS\system32\dllcache\callcont.dll - Ok

    C:\WINDOWS\system32\dllcache\cap7146.sys - Ok

    C:\WINDOWS\system32\dllcache\camocx.dll - Ok

    C:\WINDOWS\system32\dllcache\camext30.dll - Ok

    C:\WINDOWS\system32\dllcache\camext30.ax - Ok

    C:\WINDOWS\system32\dllcache\camext20.ax - Ok

    C:\WINDOWS\system32\dllcache\catsrvps.dll - Ok

    C:\WINDOWS\system32\dllcache\camext20.dll - Ok

    C:\WINDOWS\system32\dllcache\cb102.sys - Ok

    C:\WINDOWS\system32\dllcache\cards.dll - Ok

    C:\WINDOWS\system32\dllcache\capesnpn.dll - Ok

    >C:\WINDOWS\system32\dllcache\cb32.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\cb325.sys - Ok

    C:\WINDOWS\system32\dllcache\cbidf2k.sys - Ok

    C:\WINDOWS\system32\dllcache\catsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\cb32.exe - Ok

    C:\WINDOWS\system32\dllcache\cben5.sys - Ok

    C:\WINDOWS\system32\dllcache\ccdecode.sys - Ok

    C:\WINDOWS\system32\dllcache\cd20xrnt.sys - Ok

    C:\WINDOWS\system32\dllcache\cdaudio.sys - Ok

    C:\WINDOWS\system32\dllcache\cdfs.sys - Ok

    >C:\WINDOWS\system32\dllcache\cdmodem.dll - packed by FLY-CODE

    >C:\WINDOWS\system32\dllcache\cdm.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\cdmodem.dll - Ok

    C:\WINDOWS\system32\dllcache\ccfgnt.dll - Ok

    C:\WINDOWS\system32\dllcache\catsrvut.dll - Ok

    C:\WINDOWS\system32\dllcache\cdrom.sys - Ok

    C:\WINDOWS\system32\dllcache\ce2n5.sys - Ok

    C:\WINDOWS\system32\dllcache\cdm.dll - Ok

    >C:\WINDOWS\system32\dllcache\cdfview.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\cdfview.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\ce3n5.sys - Ok

    C:\WINDOWS\system32\dllcache\cem28n5.sys - Ok

    C:\WINDOWS\system32\dllcache\cem33n5.sys - Ok

    >>C:\WINDOWS\system32\dllcache\cdfview.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\cem56n5.sys - Ok

    C:\WINDOWS\system32\dllcache\certcli.dll - Ok

    C:\WINDOWS\system32\dllcache\cdfview.dll - container

    C:\WINDOWS\system32\dllcache\cbmdmkxx.sys - Ok

    C:\WINDOWS\system32\dllcache\cfgmgr32.dll - Ok

    C:\WINDOWS\system32\dllcache\cfgbkend.dll - Ok

    C:\WINDOWS\system32\dllcache\ch7xxnt5.dll - Ok

    >C:\WINDOWS\system32\dllcache\change.exe - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\chajei.ime - Ok

    C:\WINDOWS\system32\dllcache\change.exe - Ok

    C:\WINDOWS\system32\dllcache\changer.sys - Ok

    C:\WINDOWS\system32\dllcache\cewmdm.dll - Ok

    C:\WINDOWS\system32\dllcache\chglogon.exe - Ok

    C:\WINDOWS\system32\dllcache\certmgr.dll - Ok

    C:\WINDOWS\system32\dllcache\cfgwiz.exe - Ok

    C:\WINDOWS\system32\dllcache\chgport.exe - Ok

    C:\WINDOWS\system32\dllcache\chgusr.exe - Ok

    C:\WINDOWS\system32\dllcache\chkdsk.exe - Ok

    C:\WINDOWS\system32\dllcache\chkntfs.exe - Ok

    C:\WINDOWS\system32\dllcache\charmap.exe - Ok

    C:\WINDOWS\system32\dllcache\chkr.dll - Ok

    C:\WINDOWS\system32\dllcache\chkrzm.exe - Ok

    C:\WINDOWS\system32\dllcache\chtmbx.dll - Ok

    >C:\WINDOWS\system32\dllcache\chtskdic.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dllcache\chtskdic.dll - Ok

    C:\WINDOWS\system32\dllcache\chkrres.dll - Ok

    C:\WINDOWS\system32\dllcache\chtskf.dll - Ok

    C:\WINDOWS\system32\dllcache\ciadmin.dll - Ok

    C:\WINDOWS\system32\dllcache\chtbrkr.dll - Ok

    C:\WINDOWS\system32\dllcache\cidaemon.exe - Ok

    C:\WINDOWS\system32\dllcache\cic.dll - Ok

    C:\WINDOWS\system32\dllcache\cinemclc.sys - Ok

    C:\WINDOWS\system32\dllcache\cinemst2.sys - Ok

    >C:\WINDOWS\system32\dllcache\chsbrkr.dll - packed by FLY-CODE

    >C:\WINDOWS\system32\dllcache\cdosys.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\cdosys.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\dllcache\cdosys.dll - container

    C:\WINDOWS\system32\dllcache\cintlgnt.ime - Ok

    C:\WINDOWS\system32\dllcache\cintime.dll - Ok

    C:\WINDOWS\system32\dllcache\cicap.sys - Ok

    C:\WINDOWS\system32\dllcache\cirrus.sys - Ok

    C:\WINDOWS\system32\dllcache\chsbrkr.dll - Ok

    C:\WINDOWS\system32\dllcache\cirrus.dll - Ok

    C:\WINDOWS\system32\dllcache\ciodm.dll - Ok

    C:\WINDOWS\system32\dllcache\cl5465.dll - Ok

    C:\WINDOWS\system32\dllcache\cl546x.dll - Ok

    C:\WINDOWS\system32\dllcache\cisvc.exe - Ok

    C:\WINDOWS\system32\dllcache\classpnp.sys - Ok

    C:\WINDOWS\system32\dllcache\ckcnv.exe - Ok

    C:\WINDOWS\system32\dllcache\clb.dll - Ok

    C:\WINDOWS\system32\dllcache\cl546xm.sys - Ok

    C:\WINDOWS\system32\dllcache\cintsetp.exe - Ok

    C:\WINDOWS\system32\dllcache\clbcatex.dll - Ok

    C:\WINDOWS\system32\dllcache\clipbrd.exe - Ok

    C:\WINDOWS\system32\dllcache\cloapp.gif - Ok

    C:\WINDOWS\system32\dllcache\class_ss.dll - Ok

    C:\WINDOWS\system32\dllcache\cloapph.gif - Ok

    C:\WINDOWS\system32\dllcache\clbcatq.dll - Ok

    C:\WINDOWS\system32\dllcache\cmbatt.sys - Ok

    C:\WINDOWS\system32\dllcache\clusapi.dll - Ok

    C:\WINDOWS\system32\dllcache\cmbp0wdm.sys - Ok

    C:\WINDOWS\system32\dllcache\cleanmgr.exe - Ok

    C:\WINDOWS\system32\dllcache\cmdide.sys - Ok

    C:\WINDOWS\system32\dllcache\clipsrv.exe - Ok

    C:\WINDOWS\system32\dllcache\cmcfg32.dll - Ok

    C:\WINDOWS\system32\dllcache\cmdl32.exe - Ok

    C:\WINDOWS\system32\dllcache\cimwin32.dll - Ok

    C:\WINDOWS\system32\dllcache\cmpbk32.dll - Ok

    C:\WINDOWS\system32\dllcache\cmd.exe - Ok

    C:\WINDOWS\system32\dllcache\cmdial32.dll - Ok

    C:\WINDOWS\system32\dllcache\cmsetacl.dll - Ok

    C:\WINDOWS\system32\dllcache\cmmon32.exe - Ok

    C:\WINDOWS\system32\dllcache\cmnclim.dll - Ok

    C:\WINDOWS\system32\dllcache\cmutil.dll - Ok

    C:\WINDOWS\system32\dllcache\cnbjmon.dll - Ok

    C:\WINDOWS\system32\dllcache\cnetcfg.dll - Ok

    C:\WINDOWS\system32\dllcache\cnt.gif - Ok

    C:\WINDOWS\system32\dllcache\cntd.gif - Ok

    C:\WINDOWS\system32\dllcache\cnth.gif - Ok

    C:\WINDOWS\system32\dllcache\cmprops.dll - Ok

    C:\WINDOWS\system32\dllcache\cnvfat.dll - Ok

    C:\WINDOWS\system32\dllcache\cnusd.dll - Ok

    C:\WINDOWS\system32\dllcache\cnxt1803.sys - Ok

    C:\WINDOWS\system32\dllcache\cmstp.exe - Ok

    C:\WINDOWS\system32\dllcache\cobramsg.dll - Ok

    C:\WINDOWS\system32\dllcache\comcat.dll - Ok

    C:\WINDOWS\system32\dllcache\cmnresm.dll - Ok

    C:\WINDOWS\system32\dllcache\commdlg.dll - Ok

    C:\WINDOWS\system32\dllcache\colbact.dll - Ok

    C:\WINDOWS\system32\dllcache\comp.exe - Ok

    C:\WINDOWS\system32\dllcache\comadmin.dll - Ok

    C:\WINDOWS\system32\dllcache\compact.exe - Ok

    >C:\WINDOWS\system32\dllcache\compact.wmz is ZIP archive

    C:\WINDOWS\system32\dllcache\compact.wmz - Ok

    C:\WINDOWS\system32\dllcache\compact.wmz - archive

    C:\WINDOWS\system32\dllcache\comaddin.dll - Ok

    C:\WINDOWS\system32\dllcache\compobj.dll - Ok

    C:\WINDOWS\system32\dllcache\compbatt.sys - Ok

    C:\WINDOWS\system32\dllcache\comdlg32.dll - Ok

    C:\WINDOWS\system32\dllcache\comrepl.exe - Ok

    C:\WINDOWS\system32\dllcache\comrereg.exe - Ok

    C:\WINDOWS\system32\dllcache\comrepl.dll - Ok

    >C:\WINDOWS\system32\dllcache\compatui.dll is BINARYRES container

    >>C:\WINDOWS\system32\dllcache\compatui.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\dllcache\compatui.dll - container

    C:\WINDOWS\system32\dllcache\compstui.dll - Ok

    C:\WINDOWS\system32\dllcache\comctl32.dll - Ok

    C:\WINDOWS\system32\dllcache\comsnap.dll - Ok

    C:\WINDOWS\system32\dllcache\comsetup.dll - Ok

    C:\WINDOWS\system32\dllcache\confmrsl.dll - Ok

    C:\WINDOWS\system32\dllcache\comres.dll - Ok

    C:\WINDOWS\system32\dllcache\conime.exe - Ok

    C:\WINDOWS\system32\dllcache\console.dll - Ok

    C:\WINDOWS\system32\dllcache\comuid.dll - Ok

    C:\WINDOWS\system32\dllcache\control.exe - Ok

    C:\WINDOWS\system32\dllcache\controls.css - Ok

    C:\WINDOWS\system32\dllcache\convert.exe - Ok

    C:\WINDOWS\system32\dllcache\confmsp.dll - Ok

    >C:\WINDOWS\system32\dllcache\contents.htm is JS-HTML container

    >C:\WINDOWS\system32\dllcache\controls.js is JS-HTML container

    C:\WINDOWS\system32\dllcache\copycd.wmv - Ok

    C:\WINDOWS\system32\dllcache\corpol.dll - Ok

    C:\WINDOWS\system32\dllcache\country.sys - Ok

    C:\WINDOWS\system32\dllcache\controls.js - container

    C:\WINDOWS\system32\dllcache\cpqarray.sys - Ok

    C:\WINDOWS\system32\dllcache\contents.htm - container

    C:\WINDOWS\system32\dllcache\cpqdap01.sys - Ok

    C:\WINDOWS\system32\dllcache\cpqndis5.sys - Ok

    C:\WINDOWS\system32\dllcache\cprofile.exe - Ok

    C:\WINDOWS\system32\dllcache\cpqtrnd5.sys - Ok

    C:\WINDOWS\system32\dllcache\credssp.dll - Ok

    C:\WINDOWS\system32\dllcache\comsvcs.dll - Ok

    C:\WINDOWS\system32\dllcache\crtaud.sys - Ok

    C:\WINDOWS\system32\dllcache\credui.dll - Ok

    C:\WINDOWS\system32\dllcache\crusoe.sys - Ok

    C:\WINDOWS\system32\dllcache\crtdll.dll - Ok

    C:\WINDOWS\system32\dllcache\cpscan.dll - Ok

    C:\WINDOWS\system32\dllcache\cryptdlg.dll - Ok

    C:\WINDOWS\system32\dllcache\conf.exe - Ok

    C:\WINDOWS\system32\dllcache\cryptdll.dll - Ok

    C:\WINDOWS\system32\dllcache\cryptnet.dll - Ok

    C:\WINDOWS\system32\dllcache\cryptext.dll - Ok

    C:\WINDOWS\system32\dllcache\crypt32.dll - Ok

    C:\WINDOWS\system32\dllcache\cryptsvc.dll - Ok

    C:\WINDOWS\system32\dllcache\cscdll.dll - Ok

    C:\WINDOWS\system32\dllcache\cplexe.exe - Ok

    C:\WINDOWS\system32\dllcache\csrsrv.dll - Ok

    C:\WINDOWS\system32\dllcache\csamsp.dll - Ok

    C:\WINDOWS\system32\dllcache\csrss.exe - Ok

    C:\WINDOWS\system32\dllcache\cscript.exe - Ok

    C:\WINDOWS\system32\dllcache\ctl3dv2.dll - Ok

    C:\WINDOWS\system32\dllcache\csseqchk.dll - Ok

    C:\WINDOWS\system32\dllcache\cscui.dll - Ok

    C:\WINDOWS\system32\dllcache\ctlfacem.sys - Ok

    C:\WINDOWS\system32\dllcache\ctljystk.sys - Ok

    C:\WINDOWS\system32\dllcache\cryptui.dll - Ok

    C:\WINDOWS\system32\dllcache\ctlsb16.sys - Ok

    C:\WINDOWS\system32\dllcache\ctwdm32.dll - Ok

    C:\WINDOWS\system32\dllcache\ctfmon.exe - Ok

    C:\WINDOWS\system32\dllcache\ctype.nls - Ok

    C:\WINDOWS\system32\dllcache\cwbase.sys - Ok

    C:\WINDOWS\system32\dllcache\cwbmidi.sys - Ok

    C:\WINDOWS\system32\dllcache\cwcosnt5.sys - Ok

    C:\WINDOWS\system32\dllcache\cwbwdm.sys - Ok

    C:\WINDOWS\system32\dllcache\ctmasetp.dll - Ok

    C:\WINDOWS\system32\dllcache\cwcspud.sys - Ok

    C:\WINDOWS\system32\dllcache\cwrwdm.sys - Ok

    C:\WINDOWS\system32\dllcache\cwcwdm.sys - Ok

    C:\WINDOWS\system32\dllcache\cyclad-z.sys - Ok

    C:\WINDOWS\system32\dllcache\cyycoins.dll - Ok

    C:\WINDOWS\system32\dllcache\cyclom-y.sys - Ok

    C:\WINDOWS\system32\dllcache\custsat.dll - Ok

    C:\WINDOWS\system32\dllcache\cyyport.sys - Ok

    C:\WINDOWS\system32\dllcache\cyzports.dll - Ok

    C:\WINDOWS\system32\dllcache\cyzport.sys - Ok

    C:\WINDOWS\system32\dllcache\c_037.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10000.nls - Ok

    C:\WINDOWS\system32\dllcache\ctl3d32.dll - Ok

    C:\WINDOWS\system32\dllcache\c_10001.nls - Ok

    C:\WINDOWS\system32\dllcache\cyyports.dll - Ok

    C:\WINDOWS\system32\dllcache\cyzcoins.dll - Ok

    C:\WINDOWS\system32\dllcache\c_10004.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10005.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10003.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10002.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10006.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10007.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10008.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10017.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10029.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10010.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10021.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10079.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10081.nls - Ok

    C:\WINDOWS\system32\dllcache\c_10082.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1026.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1047.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1140.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1141.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1145.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1142.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1143.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1144.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1146.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1147.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1253.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1148.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1149.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1250.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1251.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1252.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1255.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1257.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1254.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1256.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1258.nls - Ok

    C:\WINDOWS\system32\dllcache\c_1361.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20002.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20000.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20003.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20001.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20004.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20005.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20105.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20106.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20107.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20127.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20108.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20269.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20273.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20277.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20261.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20278.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20280.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20284.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20285.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20297.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20290.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20420.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20423.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20838.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20866.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20424.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20833.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20880.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20871.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20905.nls - Ok

    C:\WINDOWS\system32\dllcache\c_21025.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20924.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20936.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20949.nls - Ok

    C:\WINDOWS\system32\dllcache\c_20932.nls - Ok

    C:\WINDOWS\system32\dllcache\c_21866.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28591.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28592.nls - Ok

    C:\WINDOWS\system32\dllcache\c_21027.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28595.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28593.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28594.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28596.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28597.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28598.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28605.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28603.nls - Ok

    C:\WINDOWS\system32\dllcache\c_737.nls - Ok

    C:\WINDOWS\system32\dllcache\c_500.nls - Ok

    C:\WINDOWS\system32\dllcache\c_437.nls - Ok

    C:\WINDOWS\system32\dllcache\c_28599.nls - Ok

    C:\WINDOWS\system32\dllcache\c_720.nls - Ok

    C:\WINDOWS\system32\dllcache\c_708.nls - Ok

    C:\WINDOWS\system32\dllcache\c_855.nls - Ok

    C:\WINDOWS\system32\dllcache\c_775.nls - Ok

    C:\WINDOWS\system32\dllcache\c_852.nls - Ok

    C:\WINDOWS\system32\dllcache\c_850.nls - Ok

    C:\WINDOWS\system32\dllcache\c_858.nls - Ok

    C:\WINDOWS\system32\dllcache\c_857.nls - Ok

    C:\WINDOWS\system32\dllcache\c_860.nls - Ok

    C:\WINDOWS\system32\dllcache\c_861.nls - Ok

    C:\WINDOWS\system32\dllcache\c_862.nls - Ok

    C:\WINDOWS\system32\dllcache\c_865.nls - Ok

    C:\WINDOWS\system32\dllcache\c_864.nls - Ok

    C:\WINDOWS\system32\dllcache\c_863.nls - Ok

    C:\WINDOWS\system32\dllcache\c_869.nls - Ok

    C:\WINDOWS\system32\dllcache\c_874.nls - Ok

    C:\WINDOWS\system32\dllcache\c_866.nls - Ok

    C:\WINDOWS\system32\dllcache\c_875.nls - Ok

    C:\WINDOWS\system32\dllcache\c_870.nls - Ok

    C:\WINDOWS\system32\dllcache\c_932.nls - Ok

    C:\WINDOWS\system32\dllcache\c_is2022.dll - Ok

    C:\WINDOWS\system32\dllcache\c_936.nls - Ok

    C:\WINDOWS\system32\dllcache\c_950.nls - Ok

    C:\WINDOWS\system32\dllcache\c_949.nls - Ok

    C:\WINDOWS\system32\dllcache\c_iscii.dll - Ok

    C:\WINDOWS\system32\dllcache\d3d8thk.dll - Ok

    C:\WINDOWS\system32\dllcache\d100ib5.sys - Ok

    C:\WINDOWS\system32\dllcache\c_g18030.dll - Ok

    C:\WINDOWS\system32\dllcache\d3dpmesh.dll - Ok

    C:\WINDOWS\system32\dllcache\d3dim.dll - Ok

    C:\WINDOWS\system32\dllcache\d3drm.dll - Ok

    C:\WINDOWS\system32\dllcache\d3dxof.dll - Ok

    C:\WINDOWS\system32\dllcache\d3dramp.dll - Ok

    C:\WINDOWS\system32\dllcache\d3dim700.dll - Ok

    C:\WINDOWS\system32\dllcache\dac960nt.sys - Ok

    C:\WINDOWS\system32\dllcache\dac2w2k.sys - Ok

    C:\WINDOWS\system32\dllcache\dataclen.dll - Ok

    C:\WINDOWS\system32\dllcache\d3d8.dll - Ok

    C:\WINDOWS\system32\dllcache\davclnt.dll - Ok

    C:\WINDOWS\system32\dllcache\datime.dll - Ok

    C:\WINDOWS\system32\dllcache\dayi.ime - Ok

    C:\WINDOWS\system32\dllcache\daxctle.ocx - Ok

    C:\WINDOWS\system32\dllcache\dao360.dll - Ok

    C:\WINDOWS\system32\dllcache\dbnetlib.dll - Ok

    C:\WINDOWS\system32\dllcache\dc210usd.dll - Ok

    C:\WINDOWS\system32\dllcache\dc21x4.sys - Ok

    C:\WINDOWS\system32\dllcache\dc210_32.dll - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\system32\sigtab.dll - Ok

    C:\WINDOWS\system32\shmgrate.exe - Ok

    C:\WINDOWS\system32\shutdown.exe - Ok

    C:\WINDOWS\system32\sisbkup.dll - Ok

    C:\WINDOWS\system32\simpdata.tlb - Ok

    C:\WINDOWS\system32\shsvcs.dll - Ok

    C:\WINDOWS\system32\skdll.dll - Ok

    C:\WINDOWS\system32\slayerxp.dll - Ok

    C:\WINDOWS\system32\sigverif.exe - Ok

    C:\WINDOWS\system32\slbrccsp.dll - Ok

    C:\WINDOWS\system32\slbiop.dll - Ok

    C:\WINDOWS\system32\skeys.exe - Ok

    C:\WINDOWS\system32\slcoinst.dll - Ok

    C:\WINDOWS\system32\slbcsp.dll - Ok

    C:\WINDOWS\system32\slgen.dll - Ok

    C:\WINDOWS\system32\slextspk.dll - Ok

    C:\WINDOWS\system32\sl_anet.acm - Ok

    C:\WINDOWS\system32\smbinst.exe - Ok

    C:\WINDOWS\system32\slserv.exe - Ok

    C:\WINDOWS\system32\smlogsvc.exe - Ok

    C:\WINDOWS\system32\smss.exe - Ok

    C:\WINDOWS\system32\smlogcfg.dll - Ok

    C:\WINDOWS\system32\slrundll.exe - Ok

    C:\WINDOWS\system32\snmpapi.dll - Ok

    C:\WINDOWS\system32\softpub.dll - Ok

    C:\WINDOWS\system32\sndrec32.exe - Ok

    C:\WINDOWS\system32\sndvol32.exe - Ok

    >C:\WINDOWS\system32\shell32.dll is BINARYRES container

    >>C:\WINDOWS\system32\shell32.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\shell32.dll - container

    C:\WINDOWS\system32\sort.exe - Ok

    C:\WINDOWS\system32\sorttbls.nls - Ok

    C:\WINDOWS\system32\snmpsnap.dll - Ok

    C:\WINDOWS\system32\sound.drv - Ok

    C:\WINDOWS\system32\spmsg.dll - Ok

    C:\WINDOWS\system32\sortkey.nls - Ok

    C:\WINDOWS\system32\spdwnwxp.exe - Ok

    C:\WINDOWS\system32\spnike.dll - Ok

    C:\WINDOWS\system32\sol.exe - Ok

    C:\WINDOWS\system32\spoolss.dll - Ok

    C:\WINDOWS\system32\sprestrt.exe - Ok

    C:\WINDOWS\system32\spnpinst.exe - Ok

    C:\WINDOWS\system32\sprio600.dll - Ok

    C:\WINDOWS\system32\spupdsvc.exe - Ok

    C:\WINDOWS\system32\spupdwxp.log - Ok

    C:\WINDOWS\system32\sprio800.dll - Ok

    C:\WINDOWS\system32\spoolsv.exe - Ok

    C:\WINDOWS\system32\spupdwxp.exe - Ok

    C:\WINDOWS\system32\spxcoins.dll - Ok

    >C:\WINDOWS\system32\sqlsodbc.chm is CHM container

    C:\WINDOWS\system32\spider.exe - Ok

    C:\WINDOWS\system32\sqlsrv32.rll - Ok

    C:\WINDOWS\system32\sqlwid.dll - Ok

    C:\WINDOWS\system32\sqlunirl.dll - Ok

    C:\WINDOWS\system32\srclient.dll - Ok

    C:\WINDOWS\system32\sqlwoa.dll - Ok

    C:\WINDOWS\system32\sqlsrv32.dll - Ok

    >>C:\WINDOWS\system32\sqlsodbc.chm\Basics\mailto.js is JS-HTML container

    >>C:\WINDOWS\system32\sqlsodbc.chm\Basics\shared.js is JS-HTML container

    C:\WINDOWS\system32\srvsvc.dll - Ok

    C:\WINDOWS\system32\sqlsodbc.chm - container

    C:\WINDOWS\system32\srrstr.dll - Ok

    C:\WINDOWS\system32\srsvc.dll - Ok

    C:\WINDOWS\system32\ssdpapi.dll - Ok

    C:\WINDOWS\system32\ssdpsrv.dll - Ok

    >C:\WINDOWS\system32\ss3dfo.scr is ZLIB container

    C:\WINDOWS\system32\ssbezier.scr - Ok

    C:\WINDOWS\system32\ssmarque.scr - Ok

    C:\WINDOWS\system32\ss3dfo.scr - container

    C:\WINDOWS\system32\ssmypics.scr - Ok

    C:\WINDOWS\system32\ssflwbox.scr - Ok

    C:\WINDOWS\system32\ssmyst.scr - Ok

    C:\WINDOWS\system32\stclient.dll - Ok

    C:\WINDOWS\system32\stdole2.tlb - Ok

    C:\WINDOWS\system32\stdole32.tlb - Ok

    C:\WINDOWS\system32\stimon.exe - Ok

    C:\WINDOWS\system32\sspipes.scr - Ok

    C:\WINDOWS\system32\sti.dll - Ok

    C:\WINDOWS\system32\storage.dll - Ok

    C:\WINDOWS\system32\sstext3d.scr - Ok

    C:\WINDOWS\system32\sti_ci.dll - Ok

    C:\WINDOWS\system32\stobject.dll - Ok

    C:\WINDOWS\system32\streamci.dll - Ok

    C:\WINDOWS\system32\storprop.dll - Ok

    C:\WINDOWS\system32\subst.exe - Ok

    C:\WINDOWS\system32\strmfilt.dll - Ok

    C:\WINDOWS\system32\subrange.uce - Ok

    C:\WINDOWS\system32\ssstars.scr - Ok

    C:\WINDOWS\system32\svchost.exe - Ok

    C:\WINDOWS\system32\svcpack.dll - Ok

    C:\WINDOWS\system32\swprv.dll - Ok

    C:\WINDOWS\system32\synceng.dll - Ok

    C:\WINDOWS\system32\strmdll.dll - Ok

    C:\WINDOWS\system32\syncapp.exe - Ok

    C:\WINDOWS\system32\sysedit.exe - Ok

    C:\WINDOWS\system32\sysinv.dll - Ok

    C:\WINDOWS\system32\syncui.dll - Ok

    C:\WINDOWS\system32\sysmon.ocx - Ok

    C:\WINDOWS\system32\syskey.exe - Ok

    C:\WINDOWS\system32\sysprint.sep - Ok

    C:\WINDOWS\system32\sysprtj.sep - Ok

    C:\WINDOWS\system32\sxs.dll - Ok

    C:\WINDOWS\system32\sysdm.cpl - Ok

    C:\WINDOWS\system32\system.drv - Ok

    C:\WINDOWS\system32\systray.exe - Ok

    C:\WINDOWS\system32\tapi.dll - Ok

    C:\WINDOWS\system32\sysocmgr.exe - Ok

    C:\WINDOWS\system32\tapiperf.dll - Ok

    C:\WINDOWS\system32\t2embed.dll - Ok

    C:\WINDOWS\system32\tapi32.dll - Ok

    C:\WINDOWS\system32\tapiui.dll - Ok

    C:\WINDOWS\system32\tapisrv.dll - Ok

    C:\WINDOWS\system32\tcmsetup.exe - Ok

    C:\WINDOWS\system32\taskman.exe - Ok

    C:\WINDOWS\system32\taskmgr.exe - Ok

    C:\WINDOWS\system32\tcpmib.dll - Ok

    C:\WINDOWS\system32\tcpmon.dll - Ok

    C:\WINDOWS\system32\tcpmonui.dll - Ok

    C:\WINDOWS\system32\syssetup.dll - Ok

    C:\WINDOWS\system32\tapi3.dll - Ok

    C:\WINDOWS\system32\tcpsvcs.exe - Ok

    C:\WINDOWS\system32\tcpmon.ini - Ok

    C:\WINDOWS\system32\telephon.cpl - Ok

    C:\WINDOWS\system32\tdc.ocx - Ok

    C:\WINDOWS\system32\tftp.exe - Ok

    >C:\WINDOWS\system32\telnet.exe - packed by FLY-CODE

    C:\WINDOWS\system32\ticrf.rat - Ok

    C:\WINDOWS\system32\telnet.exe - Ok

    C:\WINDOWS\system32\timer.drv - Ok

    C:\WINDOWS\system32\toolhelp.dll - Ok

    C:\WINDOWS\system32\timedate.cpl - Ok

    C:\WINDOWS\system32\tracert.exe - Ok

    C:\WINDOWS\system32\termsrv.dll - Ok

    C:\WINDOWS\system32\traffic.dll - Ok

    C:\WINDOWS\system32\tracert6.exe - Ok

    C:\WINDOWS\system32\termmgr.dll - Ok

    C:\WINDOWS\system32\tree.com - Ok

    C:\WINDOWS\system32\themeui.dll - Ok

    C:\WINDOWS\system32\tourstart.exe - Ok

    C:\WINDOWS\system32\tsbyuv.dll - Ok

    C:\WINDOWS\system32\tsappcmp.dll - Ok

    C:\WINDOWS\system32\tsd32.dll - Ok

    C:\WINDOWS\system32\trkwks.dll - Ok

    C:\WINDOWS\system32\tscon.exe - Ok

    C:\WINDOWS\system32\tscfgwmi.dll - Ok

    C:\WINDOWS\system32\tsddd.dll - Ok

    C:\WINDOWS\system32\tsdiscon.exe - Ok

    C:\WINDOWS\system32\MRT.exe - container

    C:\WINDOWS\system32\tsgqec.dll - Ok

    C:\WINDOWS\system32\tslabels.h - Ok

    C:\WINDOWS\system32\tskill.exe - Ok

    C:\WINDOWS\system32\tssoft32.acm - Ok

    C:\WINDOWS\system32\tsshutdn.exe - Ok

    C:\WINDOWS\system32\tslabels.ini - Ok

    C:\WINDOWS\system32\tspkg.dll - Ok

    C:\WINDOWS\system32\twext.dll - Ok

    C:\WINDOWS\system32\TZLog.log - Ok

    C:\WINDOWS\system32\tscupgrd.exe - Ok

    C:\WINDOWS\system32\TsWpfWrp.exe - Ok

    C:\WINDOWS\system32\tzchange.exe - Ok

    C:\WINDOWS\system32\txflog.dll - Ok

    C:\WINDOWS\system32\typelib.dll - Ok

    C:\WINDOWS\system32\umdmxfrm.dll - Ok

    C:\WINDOWS\system32\ufat.dll - Ok

    C:\WINDOWS\system32\udhisapi.dll - Ok

    C:\WINDOWS\system32\umandlg.dll - Ok

    C:\WINDOWS\system32\unicode.nls - Ok

    C:\WINDOWS\system32\umpnpmgr.dll - Ok

    C:\WINDOWS\system32\ulib.dll - Ok

    >C:\WINDOWS\system32\uniplat.dll - packed by FLY-CODE

    C:\WINDOWS\system32\unimdmat.dll - Ok

    C:\WINDOWS\system32\unlodctr.exe - Ok

    C:\WINDOWS\system32\unicows.dll - Ok

    C:\WINDOWS\system32\unimdm.tsp - Ok

    C:\WINDOWS\system32\uniplat.dll - Ok

    C:\WINDOWS\system32\upnpcont.exe - Ok

    C:\WINDOWS\system32\upnp.dll - Ok

    C:\WINDOWS\system32\uiautomationcore.dll - Ok

    C:\WINDOWS\system32\upnphost.dll - Ok

    C:\WINDOWS\system32\ureg.dll - Ok

    C:\WINDOWS\system32\untfs.dll - Ok

    C:\WINDOWS\system32\ups.exe - Ok

    C:\WINDOWS\system32\usbmon.dll - Ok

    C:\WINDOWS\system32\upnpui.dll - Ok

    C:\WINDOWS\system32\user.exe - Ok

    C:\WINDOWS\system32\url.dll - Ok

    C:\WINDOWS\system32\usbui.dll - Ok

    C:\WINDOWS\system32\userinit.exe - Ok

    C:\WINDOWS\system32\usrcntra.dll - Ok

    C:\WINDOWS\system32\usrcoina.dll - Ok

    C:\WINDOWS\system32\usp10.dll - Ok

    C:\WINDOWS\system32\usrdpa.dll - Ok

    C:\WINDOWS\system32\user32.dll - Ok

    C:\WINDOWS\system32\usrlbva.dll - Ok

    C:\WINDOWS\system32\usrlogon.cmd - Ok

    C:\WINDOWS\system32\usrfaxa.dll - Ok

    C:\WINDOWS\system32\userenv.dll - Ok

    C:\WINDOWS\system32\usrrtosa.dll - Ok

    C:\WINDOWS\system32\urlmon.dll - Ok

    C:\WINDOWS\system32\usrsdpia.dll - Ok

    C:\WINDOWS\system32\usrsvpia.dll - Ok

    C:\WINDOWS\system32\usrmlnka.exe - Ok

    C:\WINDOWS\system32\usrdtea.dll - Ok

    C:\WINDOWS\system32\usrvoica.dll - Ok

    C:\WINDOWS\system32\usrv80a.dll - Ok

    >C:\WINDOWS\system32\usrv42a.dll - packed by FLY-CODE

    C:\WINDOWS\system32\usrvpa.dll - Ok

    C:\WINDOWS\system32\utildll.dll - Ok

    C:\WINDOWS\system32\v7vga.rom - Ok

    C:\WINDOWS\system32\usrshuta.exe - Ok

    C:\WINDOWS\system32\vbisurf.ax - Ok

    C:\WINDOWS\system32\uxtheme.dll - Ok

    C:\WINDOWS\system32\usrv42a.dll - Ok

    C:\WINDOWS\system32\vcdex.dll - Ok

    C:\WINDOWS\system32\usrprbda.exe - Ok

    C:\WINDOWS\system32\vdmdbg.dll - Ok

    C:\WINDOWS\system32\ver.dll - Ok

    C:\WINDOWS\system32\vdmredir.dll - Ok

    C:\WINDOWS\system32\verifier.dll - Ok

    C:\WINDOWS\system32\vbajet32.dll - Ok

    C:\WINDOWS\system32\verifier.exe - Ok

    C:\WINDOWS\system32\version.dll - Ok

    C:\WINDOWS\system32\vga.drv - Ok

    C:\WINDOWS\system32\vfpodbc.dll - Ok

    C:\WINDOWS\system32\utilman.exe - Ok

    C:\WINDOWS\system32\vga.dll - Ok

    C:\WINDOWS\system32\vga256.dll - Ok

    C:\WINDOWS\system32\View Channels.scf - Ok

    C:\WINDOWS\system32\vjoy.dll - Ok

    C:\WINDOWS\system32\vidcap.ax - Ok

    C:\WINDOWS\system32\vbscript.dll - Ok

    C:\WINDOWS\system32\vga64k.dll - Ok

    C:\WINDOWS\system32\vssadmin.exe - Ok

    C:\WINDOWS\system32\vss_ps.dll - Ok

    C:\WINDOWS\system32\w32topl.dll - Ok

    C:\WINDOWS\system32\w32tm.exe - Ok

    C:\WINDOWS\system32\w3ssl.dll - Ok

    C:\WINDOWS\system32\watchdog.sys - Ok

    C:\WINDOWS\system32\wbcache.deu - Ok

    C:\WINDOWS\system32\w32time.dll - Ok

    C:\WINDOWS\system32\vssvc.exe - Ok

    C:\WINDOWS\system32\wbcache.enu - Ok

    C:\WINDOWS\system32\wbcache.fra - Ok

    C:\WINDOWS\system32\wbcache.esn - Ok

    C:\WINDOWS\system32\wbcache.nld - Ok

    C:\WINDOWS\system32\wbcache.ita - Ok

    C:\WINDOWS\system32\wbcache.sve - Ok

    C:\WINDOWS\system32\wavemsp.dll - Ok

    C:\WINDOWS\system32\vssapi.dll - Ok

    C:\WINDOWS\system32\wbdbase.deu - Ok

    C:\WINDOWS\system32\verclsid.exe - Ok

    C:\WINDOWS\system32\wbdbase.esn - Ok

    C:\WINDOWS\system32\wbdbase.enu - Ok

    C:\WINDOWS\system32\wdl.trm - Ok

    C:\WINDOWS\system32\wbdbase.fra - Ok

    C:\WINDOWS\system32\wbdbase.ita - Ok

    C:\WINDOWS\system32\wdigest.dll - Ok

    C:\WINDOWS\system32\wbdbase.sve - Ok

    C:\WINDOWS\system32\wbdbase.nld - Ok

    C:\WINDOWS\system32\wdmaud.drv - Ok

    C:\WINDOWS\system32\webhits.dll - Ok

    C:\WINDOWS\system32\wfwnet.drv - Ok

    C:\WINDOWS\system32\webclnt.dll - Ok

    C:\WINDOWS\system32\webvw.dll - Ok

    >C:\WINDOWS\system32\webfldrs.msi is OLE container

    C:\WINDOWS\system32\wextract.exe - Ok

    C:\WINDOWS\system32\webcheck.dll - Ok

    C:\WINDOWS\system32\wiadss.dll - Ok

    C:\WINDOWS\system32\wiasf.ax - Ok

    C:\WINDOWS\system32\wiascr.dll - Ok

    C:\WINDOWS\system32\wiaacmgr.exe - Ok

    C:\WINDOWS\system32\wiadefui.dll - Ok

    C:\WINDOWS\system32\wifeman.dll - Ok

    C:\WINDOWS\system32\wiaservc.dll - Ok

    C:\WINDOWS\system32\wiavideo.dll - Ok

    C:\WINDOWS\system32\wiavusd.dll - Ok

    C:\WINDOWS\system32\win87em.dll - Ok

    C:\WINDOWS\system32\win.com - Ok

    C:\WINDOWS\system32\win32spl.dll - Ok

    C:\WINDOWS\system32\winchat.exe - Ok

    C:\WINDOWS\system32\wiashext.dll - Ok

    C:\WINDOWS\system32\WindowsLogon.manifest - Ok

    C:\WINDOWS\system32\winfax.dll - Ok

    C:\WINDOWS\system32\windowscodecsext.dll - Ok

    C:\WINDOWS\system32\WinFXDocObj.exe - Ok

    C:\WINDOWS\system32\winhelp.hlp - Ok

    C:\WINDOWS\system32\windowscodecs.dll - Ok

    C:\WINDOWS\system32\winhlp32.exe - Ok

    C:\WINDOWS\system32\winipsec.dll - Ok

    C:\WINDOWS\system32\winhttp.dll - Ok

    C:\WINDOWS\system32\winmine.exe - Ok

    C:\WINDOWS\system32\winlogon.exe - Ok

    C:\WINDOWS\system32\winmm.dll - Ok

    C:\WINDOWS\system32\winbrand.dll - Ok

    C:\WINDOWS\system32\winnls.dll - Ok

    C:\WINDOWS\system32\winmsd.exe - Ok

    C:\WINDOWS\system32\winoldap.mod - Ok

    >C:\WINDOWS\system32\winrnr.dll - packed by FLY-CODE

    C:\WINDOWS\system32\wininet.dll - Ok

    C:\WINDOWS\system32\winscard.dll - Ok

    C:\WINDOWS\system32\winsock.dll - Ok

    C:\WINDOWS\system32\winrnr.dll - Ok

    C:\WINDOWS\system32\winshfhc.dll - Ok

    C:\WINDOWS\system32\winspool.exe - Ok

    C:\WINDOWS\system32\win32k.sys - Ok

    C:\WINDOWS\system32\winstrm.dll - Ok

    >C:\WINDOWS\system32\winsta.dll - packed by FLY-CODE

    C:\WINDOWS\system32\winspool.drv - Ok

    C:\WINDOWS\system32\winsta.dll - Ok

    C:\WINDOWS\system32\winver.exe - Ok

    C:\WINDOWS\system32\wlanapi.dll - Ok

    C:\WINDOWS\system32\wkssvc.dll - Ok

    C:\WINDOWS\system32\wintrust.dll - Ok

    C:\WINDOWS\system32\winsrv.dll - Ok

    C:\WINDOWS\system32\winntbbu.dll - Ok

    C:\WINDOWS\system32\wlnotify.dll - Ok

    C:\WINDOWS\system32\wldap32.dll - Ok

    C:\WINDOWS\system32\wmdmps.dll - Ok

    C:\WINDOWS\system32\wmerrenu.dll - Ok

    C:\WINDOWS\system32\wmdmlog.dll - Ok

    C:\WINDOWS\system32\wmasf.dll - Ok

    C:\WINDOWS\system32\wmi.dll - Ok

    C:\WINDOWS\system32\wmerror.dll - Ok

    C:\WINDOWS\system32\wmimgmt.msc - Ok

    >C:\WINDOWS\system32\wmiprop.dll - packed by FLY-CODE

    C:\WINDOWS\system32\wmiprop.dll - Ok

    C:\WINDOWS\system32\wmadmod.dll - Ok

    C:\WINDOWS\system32\wmidx.dll - Ok

    >>C:\WINDOWS\system32\webfldrs.msi\stream001 is CAB archive

    C:\WINDOWS\system32\webfldrs.msi\stream001 - Ok

    C:\WINDOWS\system32\webfldrs.msi - Ok

    C:\WINDOWS\system32\webfldrs.msi - container

    C:\WINDOWS\system32\wmp.ocx - Ok

    C:\WINDOWS\system32\wmpcore.dll - Ok

    C:\WINDOWS\system32\wmpcd.dll - Ok

    C:\WINDOWS\system32\wmadmoe.dll - Ok

    C:\WINDOWS\system32\wmpasf.dll - Ok

    C:\WINDOWS\system32\wmpdxm.dll - Ok

    C:\WINDOWS\system32\wmphoto.dll - Ok

    C:\WINDOWS\system32\wmpshell.dll - Ok

    C:\WINDOWS\system32\wmpui.dll - Ok

    C:\WINDOWS\system32\WMNetmgr.dll - Ok

    C:\WINDOWS\system32\wmsdmoe.dll - Ok

    C:\WINDOWS\system32\wmspdmod.dll - Ok

    C:\WINDOWS\system32\wmsdmod.dll - Ok

    C:\WINDOWS\system32\wmspdmoe.dll - Ok

    C:\WINDOWS\system32\wmsdmoe2.dll - Ok

    C:\WINDOWS\system32\wmv8ds32.ax - Ok

    C:\WINDOWS\system32\wmstream.dll - Ok

    C:\WINDOWS\system32\wmploc.dll - Ok

    C:\WINDOWS\system32\wmvds32.ax - Ok

    C:\WINDOWS\system32\wow32.dll - Ok

    C:\WINDOWS\system32\wowdeb.exe - Ok

    C:\WINDOWS\system32\wowfax.dll - Ok

    C:\WINDOWS\system32\wowexec.exe - Ok

    C:\WINDOWS\system32\wowfaxui.dll - Ok

    C:\WINDOWS\system32\wpa.dbl - Ok

    C:\WINDOWS\system32\wpa.bak - Ok

    C:\WINDOWS\system32\wmvdmod.dll - Ok

    C:\WINDOWS\system32\wpabaln.exe - Ok

    C:\WINDOWS\system32\wmvdmoe2.dll - Ok

    C:\WINDOWS\system32\wpnpinst.exe - Ok

    C:\WINDOWS\system32\write.exe - Ok

    C:\WINDOWS\system32\ws2help.dll - Ok

    C:\WINDOWS\system32\ws2_32.dll - Ok

    C:\WINDOWS\system32\wscntfy.exe - Ok

    C:\WINDOWS\system32\wscsvc.dll - Ok

    C:\WINDOWS\system32\wshatm.dll - Ok

    C:\WINDOWS\system32\wscript.exe - Ok

    C:\WINDOWS\system32\wshbth.dll - Ok

    >C:\WINDOWS\system32\wscui.cpl is ZLIB container

    C:\WINDOWS\system32\wship6.dll - Ok

    C:\WINDOWS\system32\wshisn.dll - Ok

    C:\WINDOWS\system32\WMVCore.dll - Ok

    C:\WINDOWS\system32\wshnetbs.dll - Ok

    C:\WINDOWS\system32\wscui.cpl - container

    C:\WINDOWS\system32\wshrm.dll - Ok

    C:\WINDOWS\system32\wshcon.dll - Ok

    C:\WINDOWS\system32\wshtcpip.dll - Ok

    C:\WINDOWS\system32\wmp.dll - Ok

    C:\WINDOWS\system32\wshom.ocx - Ok

    C:\WINDOWS\system32\wshext.dll - Ok

    C:\WINDOWS\system32\wtsapi32.dll - Ok

    C:\WINDOWS\system32\wsnmp32.dll - Ok

    C:\WINDOWS\system32\wsock32.dll - Ok

    C:\WINDOWS\system32\wuapi.dll.mui - Ok

    C:\WINDOWS\system32\wuaucpl.cpl.manifest - Ok

    C:\WINDOWS\system32\wuaucpl.cpl.mui - Ok

    >C:\WINDOWS\system32\wuaucpl.cpl - packed by FLY-CODE

    >C:\WINDOWS\system32\wuauclt1.exe is BINARYRES container

    >>C:\WINDOWS\system32\wuauclt1.exe\data001 is JS-HTML container

    C:\WINDOWS\system32\wuauclt1.exe - container

    C:\WINDOWS\system32\wuauclt.exe - Ok

    C:\WINDOWS\system32\wuaueng.dll.mui - Ok

    C:\WINDOWS\system32\wuaucpl.cpl - Ok

    C:\WINDOWS\system32\wuauserv.dll - Ok

    C:\WINDOWS\system32\wuapi.dll - Ok

    C:\WINDOWS\system32\wupdmgr.exe - Ok

    C:\WINDOWS\system32\wstdecod.dll - Ok

    C:\WINDOWS\system32\wuaueng1.dll - Ok

    C:\WINDOWS\system32\wups.dll - Ok

    C:\WINDOWS\system32\wups2.dll - Ok

    C:\WINDOWS\system32\wucltui.dll - Ok

    C:\WINDOWS\system32\wzcsapi.dll - Ok

    >C:\WINDOWS\system32\xactsrv.dll - packed by FLY-CODE

    C:\WINDOWS\system32\wuweb.dll - Ok

    C:\WINDOWS\system32\wucltui.dll.mui - Ok

    C:\WINDOWS\system32\xactsrv.dll - Ok

    C:\WINDOWS\system32\XAPOFX1_1.dll - Ok

    C:\WINDOWS\system32\xcopy.exe - Ok

    C:\WINDOWS\system32\wzcdlg.dll - Ok

    C:\WINDOWS\system32\wzcsvc.dll - Ok

    C:\WINDOWS\system32\xenroll.dll - Ok

    C:\WINDOWS\system32\xmllite.dll - Ok

    C:\WINDOWS\system32\xmlprovi.dll - Ok

    C:\WINDOWS\system32\XAudio2_2.dll - Ok

    C:\WINDOWS\system32\xmlprov.dll - Ok

    C:\WINDOWS\system32\xpsp1res.dll - Ok

    C:\WINDOWS\system32\wuaueng.dll - Ok

    C:\WINDOWS\system32\xpob2res.dll - Ok

    C:\WINDOWS\system32\xolehlp.dll - Ok

    >C:\WINDOWS\system32\xpsp3res.dll is BINARYRES container

    C:\WINDOWS\system32\xpsp4res.dll - Ok

    >>C:\WINDOWS\system32\xpsp3res.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\xpsp3res.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\1033\dwintl.dll - Ok

    >>C:\WINDOWS\system32\xpsp3res.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\xpsp3res.dll - container

    C:\WINDOWS\system32\CatRoot2\edb.chk - Ok

    C:\WINDOWS\system32\CatRoot2\edb.log - read error

    C:\WINDOWS\system32\CatRoot2\dberr.txt - Ok

    C:\WINDOWS\system32\xpsshhdr.dll - Ok

    C:\WINDOWS\system32\CatRoot2\edb0015F.log - Ok

    C:\WINDOWS\system32\CatRoot2\tmp.edb - read error

    C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb - Ok

    C:\WINDOWS\system32\CatRoot2\res1.log - Ok

    C:\WINDOWS\system32\CatRoot2\res2.log - Ok

    C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp - Ok

    C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp - Ok

    C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp - Ok

    C:\WINDOWS\system32\zipfldr.dll - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HPCRDP.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IASNT4.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\1.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2229593.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2115168.cat - Ok

    C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2296011.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ie8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2360937.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2347290.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2345886.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2378111.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2393802.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2423089.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2387149.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2419632.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2440591.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2443105.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2478960.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2476490.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2479943.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2478971.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2483185.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2481109.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2507938.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2485663.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2508429.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2506212.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2510531-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2544521-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2536276-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2535512.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2509553.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2544893-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2584146.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2566454.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2564958.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2585542.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2570947.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2592799.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2598479.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2619339.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2618451.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2603381.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2620712.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2624667.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2631813.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2653956.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2646524.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2661637.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2655992.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2661254-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2659262.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2686509.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2676562.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2712808.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2705219-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2691442.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2723135-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2698365.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2724197.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2719985.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2749655.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2736233.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2727528.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2770660.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2761465-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2753842-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2779030.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2758857.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB892130.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888111WXPSP2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB2779562.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893803v2_wxp.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB926139-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB950762.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB950974.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB946648.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951376-v2.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951978.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923561.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB952004.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB951748.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB952069.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB952287.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB954155.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB952954.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB954550-v5.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956572.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB955759.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB955069.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956744.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956802.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956803.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB958644.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB956844.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB960225.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB958869.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB960803.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB960859.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB961501.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB959426.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB967715.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB969059.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB961118.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB968389.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB970238.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB971029.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB970430.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB971468.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB971657.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB971961-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB972270.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973540.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973507.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973687.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973904.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973815.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB973869.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB974112.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB974318.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB974392.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975025.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB974571.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975558.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975467.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975562.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975561.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975713.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB975560.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB977914.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978037.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB976662-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB977816.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978338.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978542.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978695.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978601.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979309.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB978706.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979402.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979482.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979559.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979687.cat - Ok

    C:\WINDOWS\system32\xpssvcs.dll - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB980195.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB980218.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB981322.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB981793.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB979683.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB980232.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB982381-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB981332-IE8.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB982132.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB982665.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB981997.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MW770.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msxpsdrv.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MAPIMIG.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5IIS.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntprint.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5inf.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem1.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem10.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\OEMBIOS.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp3.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WIC.cat - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\SP2.CAT - Ok

    C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\startoc.cat - Ok

    C:\WINDOWS\system32\Com\comrereg.exe - Ok

    C:\WINDOWS\system32\Com\comempty.dat - Ok

    C:\WINDOWS\system32\Com\comexp.msc - Ok

    C:\WINDOWS\system32\Com\comrepl.exe - Ok

    C:\WINDOWS\system32\Com\mtsadmin.tlb - Ok

    C:\WINDOWS\system32\DRVSTORE\HECI_CC47D7DB081BDADC726A35DD31A48F0D70365DD6\HECI.cat - Ok

    C:\WINDOWS\system32\DRVSTORE\HECI_CC47D7DB081BDADC726A35DD31A48F0D70365DD6\HECI.inf - Ok

    C:\WINDOWS\system32\DRVSTORE\SNB2009_5775E781315762F8B8430ECCC7359C226A9DEEC8\SNB2009.inf - Ok

    >C:\WINDOWS\system32\xpsp2res.dll is BINARYRES container

    >>C:\WINDOWS\system32\xpsp2res.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\DRVSTORE\SNB2009_5775E781315762F8B8430ECCC7359C226A9DEEC8\SNB2009.cat - Ok

    C:\WINDOWS\system32\DRVSTORE\HECI_CC47D7DB081BDADC726A35DD31A48F0D70365DD6\HECIx64.sys - Ok

    C:\WINDOWS\system32\DRVSTORE\HECI_CC47D7DB081BDADC726A35DD31A48F0D70365DD6\HECI.sys - Ok

    C:\WINDOWS\system32\DRVSTORE\cougcore_E839670E2B8E421D8E43C07D82FEE77BCE5DE2FA\cougcore.cat - Ok

    C:\WINDOWS\system32\DRVSTORE\cougide_A12D2FCAF5A84FB3625271087279B8008B3DE27A\cougide.cat - Ok

    C:\WINDOWS\system32\DRVSTORE\cougcore_E839670E2B8E421D8E43C07D82FEE77BCE5DE2FA\cougcore.inf - Ok

    C:\WINDOWS\system32\DRVSTORE\cougsmb_A898C5300C4E969896DCF896351CD84F4892311E\cougsmb.cat - Ok

    C:\WINDOWS\system32\DRVSTORE\cougide_A12D2FCAF5A84FB3625271087279B8008B3DE27A\cougide.inf - Ok

    >>C:\WINDOWS\system32\xpsp2res.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\DRVSTORE\cougsmb_A898C5300C4E969896DCF896351CD84F4892311E\cougsmb.inf - Ok

    C:\WINDOWS\system32\DRVSTORE\cougusb_9A94710AD738C3628C36025DA8EFD50E545CB0AA\cougusb.inf - Ok

    C:\WINDOWS\system32\DRVSTORE\cougusb_9A94710AD738C3628C36025DA8EFD50E545CB0AA\cougusb.cat - Ok

    C:\WINDOWS\system32\DirectX\Dinput\actc094.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\glmda.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\act_rs.png - Ok

    >>C:\WINDOWS\system32\xpsp2res.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\DirectX\Dinput\glmdiggp.png - Ok

    C:\WINDOWS\system32\Com\comadmin.dll - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr3001.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\glmda.ini - Ok

    >>C:\WINDOWS\system32\xpsp2res.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\xpsp2res.dll - container

    C:\WINDOWS\system32\DirectX\Dinput\gr3001.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\glmdiggp.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4001.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4001.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr3001_g.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4001_g.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4003.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4003.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4005.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ia3002_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4001_g.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\gr4005.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc202.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc202.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ia3002_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc209.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc209.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ia3002.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\hammer.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc207.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc291.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc291.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc20a.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc207.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_02.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_01.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_03.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_04.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_05.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_07.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_06.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_09.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_08.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\lgc20a.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_01.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_02.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_03.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_05.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_04.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_06.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_07.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26_08.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms1b.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms27_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms26.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_01.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_02.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms28.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_03.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_07.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_04.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_06.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_05.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34_08.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms34.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_m.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_t.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_a.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms3b_c.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms56.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms6.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms7_g.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\ms8_g.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_10.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_9.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\mse_g.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_2.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msf1f.ini - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_5.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_7.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_8.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\msprw_6.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\SV-262e1.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\sv2511.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\SV-262e4.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\SV-262e3.png - Ok

    C:\WINDOWS\system32\DirectX\Dinput\sv2512.png - Ok

    C:\WINDOWS\system32\Macromed\Flash\flashplayer.xpt - Ok

    C:\WINDOWS\system32\DirectX\Dinput\raiderpd.ini - Ok

    C:\WINDOWS\system32\Macromed\Flash\FlashInstall.log - Ok

    C:\WINDOWS\system32\Macromed\Flash\activex.vch - Ok

    C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe - Ok

    C:\WINDOWS\system32\Macromed\Flash\KB923789.inf - Ok

    C:\WINDOWS\system32\Macromed\Flash\mms.cfg - Ok

    C:\WINDOWS\system32\Macromed\Flash\genuinst.exe - Ok

    C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.dll - Ok

    C:\WINDOWS\system32\Macromed\Flash\plugin.vch - Ok

    C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Preferred - Ok

    C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\80dbdd53-18cb-4d6d-abac-e5b3faf8c417 - Ok

    C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log - Ok

    C:\WINDOWS\system32\MsDtc\MSDTC.LOG - Ok

    C:\WINDOWS\system32\MsDtc\Trace\msdtctr.mof - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\spcustom.dll.ref - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\spmsg.dll.ref - Ok

    C:\WINDOWS\system32\MsDtc\Trace\msdtcvtr.bat - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\spupdsvc.exe.ref - Ok

    C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe - Ok

    C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\spuninst.exe.ref - Ok

    C:\WINDOWS\system32\RTCOM\RTLCPAPI.dll - Ok

    >C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\updspapi.dll.ref - packed by BINARYRES

    >>C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\updspapi.dll.ref - packed by MS COMPRESS

    C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\updspapi.dll.ref - Ok

    C:\WINDOWS\system32\RTCOM\RTCOMDLL.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\pci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\pci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\pci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\PreInstall\WinSE\wxp_x86_0409_v1\update.exe.ref - Ok

    C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\pci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\pci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\mshdc.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\machine.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\isapnp.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\machine.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\mshdc.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\mshdc.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\pciidex.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\pciide.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\pciidex.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\pciide.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\mshdc.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\usbport.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbehci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\usbport.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\hccoin.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbhub.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\usbport.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\usbport.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\hccoin.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\usbehci.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbui.dll - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\usbhub.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbport.sys - Ok

    C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\cougME.cat - Ok

    C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\cougme.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\cougme.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\cpu.PNF - Ok

    C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\cpu.inf - Ok

    C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\usbui.dll - Ok

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\WINDOWS\system32\fastopen.exe - Ok

    C:\WINDOWS\system32\esent.dll - Ok

    C:\WINDOWS\system32\exts.dll - Ok

    C:\WINDOWS\system32\faultrep.dll - Ok

    C:\WINDOWS\system32\expsrv.dll - Ok

    C:\WINDOWS\system32\fc.exe - Ok

    C:\WINDOWS\system32\evr.dll - Ok

    C:\WINDOWS\system32\find.exe - Ok

    C:\WINDOWS\system32\feclient.dll - Ok

    C:\WINDOWS\system32\esent97.dll - Ok

    C:\WINDOWS\system32\finger.exe - Ok

    C:\WINDOWS\system32\findstr.exe - Ok

    C:\WINDOWS\system32\fixmapi.exe - Ok

    C:\WINDOWS\system32\firewall.cpl - Ok

    C:\WINDOWS\system32\filemgmt.dll - Ok

    C:\WINDOWS\system32\FlashPlayerCPLApp.cpl - Ok

    C:\WINDOWS\system32\fldrclnr.dll - Ok

    C:\WINDOWS\system32\fltmc.exe - Ok

    C:\WINDOWS\system32\fmifs.dll - Ok

    C:\WINDOWS\system32\FNTCACHE.DAT - Ok

    C:\WINDOWS\system32\fltlib.dll - Ok

    C:\WINDOWS\system32\forcedos.exe - Ok

    C:\WINDOWS\system32\fontsub.dll - Ok

    C:\WINDOWS\system32\format.com - Ok

    C:\WINDOWS\system32\framebuf.dll - Ok

    C:\WINDOWS\system32\faxpatch.exe - Ok

    C:\WINDOWS\system32\fontview.exe - Ok

    C:\WINDOWS\system32\fsmgmt.msc - Ok

    C:\WINDOWS\system32\fsutil.exe - Ok

    C:\WINDOWS\system32\fsusd.dll - Ok

    C:\WINDOWS\system32\freecell.exe - Ok

    C:\WINDOWS\system32\ftp.exe - Ok

    C:\WINDOWS\system32\fsquirt.exe - Ok

    C:\WINDOWS\system32\FlashPlayerApp.exe - Ok

    C:\WINDOWS\system32\gb2312.uce - Ok

    >C:\WINDOWS\system32\fontext.dll is BINARYRES container

    >>C:\WINDOWS\system32\fontext.dll\data001 - packed by MS COMPRESS

    C:\WINDOWS\system32\gdi.exe - Ok

    C:\WINDOWS\system32\g711codc.ax - Ok

    C:\WINDOWS\system32\fwcfg.dll - Ok

    >>C:\WINDOWS\system32\fontext.dll\data002 - packed by MS COMPRESS

    C:\WINDOWS\system32\fontext.dll - container

    C:\WINDOWS\system32\geo.nls - Ok

    C:\WINDOWS\system32\ftsrch.dll - Ok

    C:\WINDOWS\system32\gcdef.dll - Ok

    C:\WINDOWS\system32\gpkrsrc.dll - Ok

    C:\WINDOWS\system32\gpkcsp.dll - Ok

    C:\WINDOWS\system32\graftabl.com - Ok

    C:\WINDOWS\system32\graphics.com - Ok

    C:\WINDOWS\system32\glu32.dll - Ok

    C:\WINDOWS\system32\GVTunner.ref - Ok

    C:\WINDOWS\system32\graphics.pro - Ok

    C:\WINDOWS\system32\h323log.txt - Ok

    C:\WINDOWS\system32\gdi32.dll - Ok

    C:\WINDOWS\system32\glmf32.dll - Ok

    C:\WINDOWS\system32\grpconv.exe - Ok

    C:\WINDOWS\system32\hccoin.dll - Ok

    C:\WINDOWS\system32\HAL.DLL - Ok

    >C:\WINDOWS\system32\HdAProp.dll - packed by FLY-CODE

    C:\WINDOWS\system32\HdAudRes.dll - Ok

    C:\WINDOWS\system32\getuname.dll - Ok

    C:\WINDOWS\system32\h323.tsp - Ok

    C:\WINDOWS\system32\help.exe - Ok

    C:\WINDOWS\system32\hdwwiz.cpl - Ok

    C:\WINDOWS\system32\HdAShCut.exe - Ok

    C:\WINDOWS\system32\hid.dll - Ok

    C:\WINDOWS\system32\himem.sys - Ok

    C:\WINDOWS\system32\hidphone.tsp - Ok

    C:\WINDOWS\system32\HdAProp.dll - Ok

    C:\WINDOWS\system32\hhsetup.dll - Ok

    C:\WINDOWS\system32\hnetmon.dll - Ok

    C:\WINDOWS\system32\homepage.inf - Ok

    C:\WINDOWS\system32\hostname.exe - Ok

    C:\WINDOWS\system32\hlink.dll - Ok

    C:\WINDOWS\system32\h323msp.dll - Ok

    C:\WINDOWS\system32\hsfcisp2.dll - Ok

    C:\WINDOWS\system32\hhctrl.ocx - Ok

    C:\WINDOWS\system32\hticons.dll - Ok

    C:\WINDOWS\system32\httpapi.dll - Ok

    C:\WINDOWS\system32\hotplug.dll - Ok

    C:\WINDOWS\system32\hnetcfg.dll - Ok

    C:\WINDOWS\system32\htui.dll - Ok

    C:\WINDOWS\system32\iasacct.dll - Ok

    C:\WINDOWS\system32\hnetwiz.dll - Ok

    C:\WINDOWS\system32\iacenc.dll - Ok

    C:\WINDOWS\system32\iashlpr.dll - Ok

    >C:\WINDOWS\system32\html.iec - packed by PESTUB

    >C:\WINDOWS\system32\iaspolcy.dll - packed by FLY-CODE

    C:\WINDOWS\system32\iasads.dll - Ok

    C:\WINDOWS\system32\iasnap.dll - Ok

    C:\WINDOWS\system32\iac25_32.ax - Ok

    C:\WINDOWS\system32\html.iec - Ok

    C:\WINDOWS\system32\iasrad.dll - Ok

    C:\WINDOWS\system32\iaspolcy.dll - Ok

    C:\WINDOWS\system32\hypertrm.dll - Ok

    C:\WINDOWS\system32\iassvcs.dll - Ok

    C:\WINDOWS\system32\icaapi.dll - Ok

    C:\WINDOWS\system32\iassam.dll - Ok

    C:\WINDOWS\system32\icardres.dll - Ok

    C:\WINDOWS\system32\iasrecst.dll - Ok

    C:\WINDOWS\system32\icfgnt5.dll - Ok

    C:\WINDOWS\system32\icardie.dll - Ok

    C:\WINDOWS\system32\icmp.dll - Ok

    C:\WINDOWS\system32\iassdo.dll - Ok

    C:\WINDOWS\system32\iccvid.dll - Ok

    C:\WINDOWS\system32\icrav03.rat - Ok

    C:\WINDOWS\system32\icmui.dll - Ok

    C:\WINDOWS\system32\ideograf.uce - Ok

    C:\WINDOWS\system32\icwphbk.dll - Ok

    C:\WINDOWS\system32\icwdial.dll - Ok

    C:\WINDOWS\system32\icm32.dll - Ok

    C:\WINDOWS\system32\idndl.dll - Ok

    C:\WINDOWS\system32\ie4uinit.exe.mui - Ok

    C:\WINDOWS\system32\idq.dll - Ok

    >C:\WINDOWS\system32\icardres.dll.mui is BINARYRES container

    C:\WINDOWS\system32\IE8Eula.rtf - Ok

    C:\WINDOWS\system32\ieakeng.dll - Ok

    C:\WINDOWS\system32\ie4uinit.exe - Ok

    C:\WINDOWS\system32\ieaksie.dll - Ok

    C:\WINDOWS\system32\ieakui.dll - Ok

    C:\WINDOWS\system32\icardres.dll.mui - container

    C:\WINDOWS\system32\icardagt.exe - Ok

    C:\WINDOWS\system32\ieencode.dll - Ok

    C:\WINDOWS\system32\iedkcs32.dll.mui - Ok

    C:\WINDOWS\system32\iedkcs32.dll - Ok

    C:\WINDOWS\system32\iepeers.dll - Ok

    C:\WINDOWS\system32\ieapfltr.dll - Ok

    C:\WINDOWS\system32\iesetup.dll - Ok

    C:\WINDOWS\system32\iernonce.dll - Ok

    C:\WINDOWS\system32\ieudinit.exe - Ok

    C:\WINDOWS\system32\ieui.dll - Ok

    C:\WINDOWS\system32\ieframe.dll.mui - Ok

    C:\WINDOWS\system32\ifmon.dll - Ok

    C:\WINDOWS\system32\ieuinit.inf - Ok

    C:\WINDOWS\system32\iexpress.exe - Ok

    C:\WINDOWS\system32\igmpagnt.dll - Ok

    C:\WINDOWS\system32\imaadp32.acm - Ok

    C:\WINDOWS\system32\ifsutil.dll - Ok

    C:\WINDOWS\system32\ils.dll - Ok

    C:\WINDOWS\system32\imeshare.dll - Ok

    C:\WINDOWS\system32\imgutil.dll - Ok

    C:\WINDOWS\system32\imapi.exe - Ok

    C:\WINDOWS\system32\iertutil.dll - Ok

    C:\WINDOWS\system32\imagehlp.dll - Ok

    C:\WINDOWS\system32\imm32.dll - Ok

    C:\WINDOWS\system32\inetcplc.dll - Ok

    C:\WINDOWS\system32\inetcfg.dll - Ok

    C:\WINDOWS\system32\ieapfltr.dat - Ok

    C:\WINDOWS\system32\inetmib1.dll - Ok

    C:\WINDOWS\system32\inetppui.dll - Ok

    C:\WINDOWS\system32\inetpp.dll - Ok

    >C:\WINDOWS\system32\inetres.dll is BINARYRES container

    >>C:\WINDOWS\system32\inetres.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\inetres.dll - container

    C:\WINDOWS\system32\infocardcpl.cpl - Ok

    C:\WINDOWS\system32\infocardapi.dll - Ok

    C:\WINDOWS\system32\inetcomm.dll - Ok

    C:\WINDOWS\system32\initpki.dll - Ok

    C:\WINDOWS\system32\input.dll - Ok

    C:\WINDOWS\system32\inseng.dll - Ok

    C:\WINDOWS\system32\iologmsg.dll - Ok

    C:\WINDOWS\system32\ipconf.tsp - Ok

    C:\WINDOWS\system32\infosoft.dll - Ok

    C:\WINDOWS\system32\intl.cpl - Ok

    C:\WINDOWS\system32\ipconfig.exe - Ok

    C:\WINDOWS\system32\instcat.sql - Ok

    C:\WINDOWS\system32\iphlpapi.dll - Ok

    C:\WINDOWS\system32\iprop.dll - Ok

    C:\WINDOWS\system32\ipmontr.dll - Ok

    C:\WINDOWS\system32\iprtprio.dll - Ok

    C:\WINDOWS\system32\inetcpl.cpl - Ok

    C:\WINDOWS\system32\ipsec6.exe - Ok

    C:\WINDOWS\system32\ipnathlp.dll - Ok

    C:\WINDOWS\system32\iprtrmgr.dll - Ok

    C:\WINDOWS\system32\ippromon.dll - Ok

    C:\WINDOWS\system32\ieframe.dll - Ok

    C:\WINDOWS\system32\ipsecsvc.dll - Ok

    C:\WINDOWS\system32\ipv6.exe - Ok

    C:\WINDOWS\system32\ipv6mon.dll - Ok

    C:\WINDOWS\system32\ipxmontr.dll - Ok

    C:\WINDOWS\system32\ipxrip.dll - Ok

    C:\WINDOWS\system32\ipsecsnp.dll - Ok

    C:\WINDOWS\system32\ipxpromn.dll - Ok

    C:\WINDOWS\system32\ipxroute.exe - Ok

    C:\WINDOWS\system32\ipxrtmgr.dll - Ok

    C:\WINDOWS\system32\ipxwan.dll - Ok

    C:\WINDOWS\system32\ipxsap.dll - Ok

    >C:\WINDOWS\system32\ir41_qc.dll - packed by FLY-CODE

    C:\WINDOWS\system32\ir32_32.dll - Ok

    C:\WINDOWS\system32\ipsmsnap.dll - Ok

    C:\WINDOWS\system32\ir41_qcx.dll - Ok

    C:\WINDOWS\system32\irclass.dll - Ok

    >C:\WINDOWS\system32\ir50_qcx.dll - packed by FLY-CODE

    C:\WINDOWS\system32\ir50_qc.dll - Ok

    C:\WINDOWS\system32\isign32.dll - Ok

    C:\WINDOWS\system32\ir41_qc.dll - Ok

    C:\WINDOWS\system32\ir41_32.ax - Ok

    C:\WINDOWS\system32\isrdbg32.dll - Ok

    C:\WINDOWS\system32\ir50_32.dll - Ok

    C:\WINDOWS\system32\irprops.cpl - Ok

    C:\WINDOWS\system32\ir50_qcx.dll - Ok

    C:\WINDOWS\system32\ixsso.dll - Ok

    C:\WINDOWS\system32\itircl.dll - Ok

    C:\WINDOWS\system32\itss.dll - Ok

    C:\WINDOWS\system32\iuengine.dll - Ok

    C:\WINDOWS\system32\iyuv_32.dll - Ok

    C:\WINDOWS\system32\ivfsrc.ax - Ok

    C:\WINDOWS\system32\jgpl400.dll - Ok

    C:\WINDOWS\system32\jgsd400.dll - Ok

    C:\WINDOWS\system32\jgsh400.dll - Ok

    C:\WINDOWS\system32\jgmd400.dll - Ok

    C:\WINDOWS\system32\jgdw400.dll - Ok

    C:\WINDOWS\system32\jsproxy.dll - Ok

    C:\WINDOWS\system32\jet500.dll - Ok

    C:\WINDOWS\system32\kanji_1.uce - Ok

    C:\WINDOWS\system32\kanji_2.uce - Ok

    C:\WINDOWS\system32\kb16.com - Ok

    C:\WINDOWS\system32\KBDAL.DLL - Ok

    C:\WINDOWS\system32\joy.cpl - Ok

    C:\WINDOWS\system32\kbdaze.dll - Ok

    C:\WINDOWS\system32\kbdbe.dll - Ok

    C:\WINDOWS\system32\kbdazel.dll - Ok

    C:\WINDOWS\system32\jobexec.dll - Ok

    C:\WINDOWS\system32\kbdbene.dll - Ok

    C:\WINDOWS\system32\kbdbhc.dll - Ok

    C:\WINDOWS\system32\kbdbr.dll - Ok

    C:\WINDOWS\system32\kbdblr.dll - Ok

    C:\WINDOWS\system32\kbdbu.dll - Ok

    C:\WINDOWS\system32\kbdcan.dll - Ok

    C:\WINDOWS\system32\kbdca.dll - Ok

    C:\WINDOWS\system32\kbdcz.dll - Ok

    C:\WINDOWS\system32\kbdcr.dll - Ok

    C:\WINDOWS\system32\kbdcz1.dll - Ok

    C:\WINDOWS\system32\kbdda.dll - Ok

    C:\WINDOWS\system32\kbdcz2.dll - Ok

    C:\WINDOWS\system32\kbdest.dll - Ok

    C:\WINDOWS\system32\kbddv.dll - Ok

    C:\WINDOWS\system32\kbdfc.dll - Ok

    C:\WINDOWS\system32\kbdes.dll - Ok

    C:\WINDOWS\system32\kbdfi.dll - Ok

    C:\WINDOWS\system32\kbdfi1.dll - Ok

    C:\WINDOWS\system32\kbdfo.dll - Ok

    C:\WINDOWS\system32\kbdgae.dll - Ok

    C:\WINDOWS\system32\kbdfr.dll - Ok

    C:\WINDOWS\system32\kbdgr.dll - Ok

    C:\WINDOWS\system32\kbdgr1.dll - Ok

    C:\WINDOWS\system32\kbdhe.dll - Ok

    C:\WINDOWS\system32\kbdhe220.dll - Ok

    C:\WINDOWS\system32\kbdgkl.dll - Ok

    C:\WINDOWS\system32\kbdhe319.dll - Ok

    C:\WINDOWS\system32\kbdhela2.dll - Ok

    C:\WINDOWS\system32\kbdhept.dll - Ok

    C:\WINDOWS\system32\kbdhela3.dll - Ok

    C:\WINDOWS\system32\jgaw400.dll - Ok

    C:\WINDOWS\system32\kbdhu.dll - Ok

    C:\WINDOWS\system32\kbdhu1.dll - Ok

    C:\WINDOWS\system32\kbdinbe1.dll - Ok

    C:\WINDOWS\system32\kbdinmal.dll - Ok

    C:\WINDOWS\system32\kbdinben.dll - Ok

    C:\WINDOWS\system32\kbdic.dll - Ok

    C:\WINDOWS\system32\kbdir.dll - Ok

    C:\WINDOWS\system32\kbdit.dll - Ok

    C:\WINDOWS\system32\kbdit142.dll - Ok

    C:\WINDOWS\system32\kbdkyr.dll - Ok

    C:\WINDOWS\system32\kbdkaz.dll - Ok

    C:\WINDOWS\system32\kbdlt.dll - Ok

    C:\WINDOWS\system32\jscript.dll - Ok

    C:\WINDOWS\system32\kbdiultn.dll - Ok

    C:\WINDOWS\system32\kbdmac.dll - Ok

    C:\WINDOWS\system32\kbdla.dll - Ok

    C:\WINDOWS\system32\kbdlv.dll - Ok

    C:\WINDOWS\system32\kbdlt1.dll - Ok

    C:\WINDOWS\system32\kbdlv1.dll - Ok

    C:\WINDOWS\system32\kbdmlt47.dll - Ok

    C:\WINDOWS\system32\kbdmlt48.dll - Ok

    C:\WINDOWS\system32\kbdne.dll - Ok

    C:\WINDOWS\system32\kbdmaori.dll - Ok

    C:\WINDOWS\system32\kbdmon.dll - Ok

    C:\WINDOWS\system32\kbdnec.dll - Ok

    C:\WINDOWS\system32\kbdpl.dll - Ok

    C:\WINDOWS\system32\kbdnepr.dll - Ok

    C:\WINDOWS\system32\kbdno.dll - Ok

    C:\WINDOWS\system32\kbdpash.dll - Ok

    C:\WINDOWS\system32\kbdpl1.dll - Ok

    C:\WINDOWS\system32\kbdno1.dll - Ok

    C:\WINDOWS\system32\kbdpo.dll - Ok

    C:\WINDOWS\system32\kbdsf.dll - Ok

    C:\WINDOWS\system32\kbdro.dll - Ok

    C:\WINDOWS\system32\kbdru.dll - Ok

    C:\WINDOWS\system32\kbdsg.dll - Ok

    C:\WINDOWS\system32\kbdru1.dll - Ok

    C:\WINDOWS\system32\kbdsl.dll - Ok

    C:\WINDOWS\system32\kbdsl1.dll - Ok

    C:\WINDOWS\system32\kbdsmsno.dll - Ok

    C:\WINDOWS\system32\kbdsp.dll - Ok

    C:\WINDOWS\system32\kbdtat.dll - Ok

    C:\WINDOWS\system32\kbdsmsfi.dll - Ok

    C:\WINDOWS\system32\kbdsw.dll - Ok

    C:\WINDOWS\system32\kbdtuq.dll - Ok

    C:\WINDOWS\system32\kbduk.dll - Ok

    C:\WINDOWS\system32\kbdtuf.dll - Ok

    C:\WINDOWS\system32\kbdur.dll - Ok

    C:\WINDOWS\system32\kbduzb.dll - Ok

    C:\WINDOWS\system32\kbdukx.dll - Ok

    C:\WINDOWS\system32\kbdus.dll - Ok

    C:\WINDOWS\system32\kbdycc.dll - Ok

    C:\WINDOWS\system32\kbdusl.dll - Ok

    C:\WINDOWS\system32\kbdusx.dll - Ok

    C:\WINDOWS\system32\kbdusr.dll - Ok

    C:\WINDOWS\system32\kbdycl.dll - Ok

    C:\WINDOWS\system32\kd1394.dll - Ok

    C:\WINDOWS\system32\kdcom.dll - Ok

    C:\WINDOWS\system32\keyboard.drv - Ok

    C:\WINDOWS\system32\key01.sys - Ok

    C:\WINDOWS\system32\keyboard.sys - Ok

    C:\WINDOWS\system32\korean.uce - Ok

    C:\WINDOWS\system32\kmddsp.tsp - Ok

    C:\WINDOWS\system32\kmsvc.dll - Ok

    C:\WINDOWS\system32\ksuser.dll - Ok

    C:\WINDOWS\system32\krnl386.exe - Ok

    C:\WINDOWS\system32\keymgr.dll - Ok

    C:\WINDOWS\system32\l2gpstore.dll - Ok

    C:\WINDOWS\system32\ksproxy.ax - Ok

    C:\WINDOWS\system32\kerberos.dll - Ok

    C:\WINDOWS\system32\label.exe - Ok

    C:\WINDOWS\system32\laprxy.dll - Ok

    C:\WINDOWS\system32\langwrbk.dll - Ok

    C:\WINDOWS\system32\l3codecx.ax - Ok

    C:\WINDOWS\system32\lanman.drv - Ok

    C:\WINDOWS\system32\licwmi.dll - Ok

    C:\WINDOWS\system32\licmgr10.dll - Ok

    >C:\WINDOWS\system32\linkinfo.dll - packed by FLY-CODE

    C:\WINDOWS\system32\l3codeca.acm - Ok

    C:\WINDOWS\system32\linkinfo.dll - Ok

    C:\WINDOWS\system32\lights.exe - Ok

    C:\WINDOWS\system32\lmhsvc.dll - Ok

    C:\WINDOWS\system32\loadfix.com - Ok

    C:\WINDOWS\system32\licdll.dll - Ok

    C:\WINDOWS\system32\kernel32.dll - Ok

    C:\WINDOWS\system32\locale.nls - Ok

    C:\WINDOWS\system32\lnkstub.exe - Ok

    C:\WINDOWS\system32\loadperf.dll - Ok

    C:\WINDOWS\system32\localui.dll - Ok

    C:\WINDOWS\system32\lmrt.dll - Ok

    C:\WINDOWS\system32\log.txt - read error

    C:\WINDOWS\system32\locator.exe - Ok

    C:\WINDOWS\system32\lodctr.exe - Ok

    C:\WINDOWS\system32\localsec.dll - Ok

    C:\WINDOWS\system32\logman.exe - Ok

    C:\WINDOWS\system32\loghours.dll - Ok

    C:\WINDOWS\system32\logoff.exe - Ok

    C:\WINDOWS\system32\logonui.exe.manifest - Ok

    C:\WINDOWS\system32\localspl.dll - Ok

    C:\WINDOWS\system32\logagent.exe - Ok

    >C:\WINDOWS\system32\lpk.dll - packed by FLY-CODE

    C:\WINDOWS\system32\lpq.exe - Ok

    C:\WINDOWS\system32\lpr.exe - Ok

    C:\WINDOWS\system32\lpk.dll - Ok

    C:\WINDOWS\system32\LegitCheckControl.DLL - Ok

    C:\WINDOWS\system32\lprhelp.dll - Ok

    C:\WINDOWS\system32\LoopyMusic.wav - Ok

    C:\WINDOWS\system32\lprmonui.dll - Ok

    C:\WINDOWS\system32\lz32.dll - Ok

    C:\WINDOWS\system32\lzexpand.dll - Ok

    C:\WINDOWS\system32\l_except.nls - Ok

    C:\WINDOWS\system32\lusrmgr.msc - Ok

    C:\WINDOWS\system32\lsass.exe - Ok

    C:\WINDOWS\system32\logon.scr - Ok

    C:\WINDOWS\system32\mag_hook.dll - Ok

    C:\WINDOWS\system32\l_intl.nls - Ok

    C:\WINDOWS\system32\magnify.exe - Ok

    C:\WINDOWS\system32\makecab.exe - Ok

    C:\WINDOWS\system32\mapi32.dll - Ok

    C:\WINDOWS\system32\mcastmib.dll - Ok

    C:\WINDOWS\system32\main.cpl - Ok

    C:\WINDOWS\system32\mcdsrv32.dll - Ok

    C:\WINDOWS\system32\mchgrcoi.dll - Ok

    C:\WINDOWS\system32\mcd32.dll - Ok

    C:\WINDOWS\system32\mciavi.drv - Ok

    C:\WINDOWS\system32\mciole16.dll - Ok

    C:\WINDOWS\system32\logonui.exe - Ok

    C:\WINDOWS\system32\lsasrv.dll - Ok

    C:\WINDOWS\system32\mcicda.dll - Ok

    C:\WINDOWS\system32\mapistub.dll - Ok

    >C:\WINDOWS\system32\mciseq.dll - packed by FLY-CODE

    C:\WINDOWS\system32\mciqtz32.dll - Ok

    C:\WINDOWS\system32\mciseq.drv - Ok

    C:\WINDOWS\system32\mciwave.drv - Ok

    C:\WINDOWS\system32\mciwave.dll - Ok

    C:\WINDOWS\system32\mciavi32.dll - Ok

    C:\WINDOWS\system32\mdhcp.dll - Ok

    C:\WINDOWS\system32\mciole32.dll - Ok

    C:\WINDOWS\system32\mciseq.dll - Ok

    >C:\WINDOWS\system32\mem.exe - packed by EXEPACK

    C:\WINDOWS\system32\mem.exe - Ok

    C:\WINDOWS\system32\mdmxsdk.dll - Ok

    C:\WINDOWS\system32\mf3216.dll - Ok

    C:\WINDOWS\system32\mdminst.dll - Ok

    C:\WINDOWS\system32\mdwmdmsp.dll - Ok

    C:\WINDOWS\system32\mfcsubs.dll - Ok

    C:\WINDOWS\system32\mfevtps.exe.378c.deleteme - Ok

    C:\WINDOWS\system32\mfevtps.exe.8a67.deleteme - Ok

    C:\WINDOWS\system32\mgmtapi.dll - Ok

    C:\WINDOWS\system32\mib.bin - Ok

    C:\WINDOWS\system32\midimap.dll - Ok

    C:\WINDOWS\system32\microsoft.managementconsole.dll - Ok

    C:\WINDOWS\system32\miglibnt.dll - Ok

    C:\WINDOWS\system32\mimefilt.dll - Ok

    C:\WINDOWS\system32\mfc40u.dll - Ok

    C:\WINDOWS\system32\mlang.dat - Ok

    C:\WINDOWS\system32\mfc42.dll - Ok

    C:\WINDOWS\system32\mll_hp.dll - Ok

    C:\WINDOWS\system32\mfc40.dll - Ok

    C:\WINDOWS\system32\mfc42u.dll - Ok

    C:\WINDOWS\system32\mll_mtf.dll - Ok

    C:\WINDOWS\system32\mll_qic.dll - Ok

    C:\WINDOWS\system32\mmcfxcommon.dll - Ok

    C:\WINDOWS\system32\migpwd.exe - Ok

    C:\WINDOWS\system32\mmcbase.dll - Ok

    C:\WINDOWS\system32\mmcperf.exe - Ok

    C:\WINDOWS\system32\mmcex.dll - Ok

    C:\WINDOWS\system32\mmdriver.inf - Ok

    C:\WINDOWS\system32\mmdrv.dll - Ok

    C:\WINDOWS\system32\mmfutil.dll - Ok

    C:\WINDOWS\system32\mlang.dll - Ok

    C:\WINDOWS\system32\mmtask.tsk - Ok

    C:\WINDOWS\system32\mmsystem.dll - Ok

    C:\WINDOWS\system32\mnmdd.dll - Ok

    C:\WINDOWS\system32\mmutilse.dll - Ok

    C:\WINDOWS\system32\mnmsrvc.exe - Ok

    C:\WINDOWS\system32\mobsync.dll - Ok

    C:\WINDOWS\system32\mmsys.cpl - Ok

    C:\WINDOWS\system32\mobsync.exe - Ok

    C:\WINDOWS\system32\mmcshext.dll - Ok

    C:\WINDOWS\system32\mode.com - Ok

    C:\WINDOWS\system32\modex.dll - Ok

    C:\WINDOWS\system32\more.com - Ok

    C:\WINDOWS\system32\mouse.drv - Ok

    C:\WINDOWS\system32\mountvol.exe - Ok

    >C:\WINDOWS\system32\mmc.exe is BINARYRES container

    >>C:\WINDOWS\system32\mmc.exe\data001 is JS-HTML container

    C:\WINDOWS\system32\moricons.dll - Ok

    >>C:\WINDOWS\system32\mmc.exe\data002 is JS-HTML container

    C:\WINDOWS\system32\modemui.dll - Ok

    >>C:\WINDOWS\system32\mmc.exe\data003 is JS-HTML container

    >>C:\WINDOWS\system32\mmc.exe\data004 is JS-HTML container

    >>C:\WINDOWS\system32\mmc.exe\data005 is JS-HTML container

    C:\WINDOWS\system32\mp43dmod.dll - Ok

    >>C:\WINDOWS\system32\mmc.exe\data006 is JS-HTML container

    C:\WINDOWS\system32\mpeg2data.ax - Ok

    C:\WINDOWS\system32\mmc.exe - container

    C:\WINDOWS\system32\mp4sdmod.dll - Ok

    C:\WINDOWS\system32\mpg2splt.ax - Ok

    C:\WINDOWS\system32\mpg4dmod.dll - Ok

    C:\WINDOWS\system32\mpr.dll - Ok

    C:\WINDOWS\system32\mprapi.dll - Ok

    C:\WINDOWS\system32\mprddm.dll - Ok

    C:\WINDOWS\system32\mplay32.exe - Ok

    C:\WINDOWS\system32\mpnotify.exe - Ok

    C:\WINDOWS\system32\mprmsg.dll - Ok

    C:\WINDOWS\system32\mprdim.dll - Ok

    C:\WINDOWS\system32\mprui.dll - Ok

    C:\WINDOWS\system32\mrinfo.exe - Ok

    C:\WINDOWS\system32\mpg4ds32.ax - Ok

    >C:\WINDOWS\system32\mmcndmgr.dll is BINARYRES container

    C:\WINDOWS\system32\msacm.dll - Ok

    >>C:\WINDOWS\system32\mmcndmgr.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\mmcndmgr.dll - container

    >C:\WINDOWS\system32\msacm32.drv - packed by FLY-CODE

    C:\WINDOWS\system32\msaatext.dll - Ok

    C:\WINDOWS\system32\MpSigStub.exe - Ok

    C:\WINDOWS\system32\msacm32.dll - Ok

    C:\WINDOWS\system32\msadp32.acm - Ok

    C:\WINDOWS\system32\msafd.dll - Ok

    C:\WINDOWS\system32\msacm32.drv - Ok

    C:\WINDOWS\system32\msaudite.dll - Ok

    C:\WINDOWS\system32\msasn1.dll - Ok

    C:\WINDOWS\system32\msapsspc.dll - Ok

    C:\WINDOWS\system32\mscdexnt.exe - Ok

    C:\WINDOWS\system32\msadds32.ax - Ok

    C:\WINDOWS\system32\mscat32.dll - Ok

    C:\WINDOWS\system32\mscms.dll - Ok

    C:\WINDOWS\system32\msconf.dll - Ok

    C:\WINDOWS\system32\mscpx32r.dll - Ok

    C:\WINDOWS\system32\mscorier.dll - Ok

    C:\WINDOWS\system32\mscpxl32.dll - Ok

    C:\WINDOWS\system32\msaud32.acm - Ok

    C:\WINDOWS\system32\mscories.dll - Ok

    C:\WINDOWS\system32\mscoree.dll - Ok

    C:\WINDOWS\system32\msctfp.dll - Ok

    C:\WINDOWS\system32\msdatsrc.tlb - Ok

    C:\WINDOWS\system32\msctfime.ime - Ok

    C:\WINDOWS\system32\msdadiag.dll - Ok

    C:\WINDOWS\system32\msdmo.dll - Ok

    C:\WINDOWS\system32\msdart.dll - Ok

    C:\WINDOWS\system32\msctf.dll - Ok

    C:\WINDOWS\system32\msdtc.exe - Ok

    C:\WINDOWS\system32\msdtcprf.ini - Ok

    C:\WINDOWS\system32\msdtcprf.h - Ok

    C:\WINDOWS\system32\msdbg2.dll - Ok

    C:\WINDOWS\system32\msdtcuiu.dll - Ok

    C:\WINDOWS\system32\msdxmlc.dll - Ok

    C:\WINDOWS\system32\msdtcprx.dll - Ok

    C:\WINDOWS\system32\msencode.dll - Ok

    C:\WINDOWS\system32\msdtclog.dll - Ok

    C:\WINDOWS\system32\msexch40.dll - Ok

    C:\WINDOWS\system32\msdtctm.dll - Ok

    C:\WINDOWS\system32\msfeedsbs.dll - Ok

    C:\WINDOWS\system32\msexcl40.dll - Ok

    C:\WINDOWS\system32\msdxm.ocx - Ok

    C:\WINDOWS\system32\msg.exe - Ok

    C:\WINDOWS\system32\msg711.acm - Ok

    C:\WINDOWS\system32\msg723.acm - Ok

    C:\WINDOWS\system32\msgsm32.acm - Ok

    C:\WINDOWS\system32\msfeeds.dll - Ok

    C:\WINDOWS\system32\msgsvc.dll - Ok

    C:\WINDOWS\system32\msftedit.dll - Ok

    C:\WINDOWS\system32\msh261.drv - Ok

    C:\WINDOWS\system32\msfeedssync.exe - Ok

    C:\WINDOWS\system32\mshta.exe.mui - Ok

    C:\WINDOWS\system32\mshearts.exe - Ok

    C:\WINDOWS\system32\msh263.drv - Ok

    C:\WINDOWS\system32\mshta.exe - Ok

    C:\WINDOWS\system32\mshtmled.dll - Ok

    C:\WINDOWS\system32\msgina.dll - Ok

    C:\WINDOWS\system32\mshtmler.dll - Ok

    C:\WINDOWS\system32\msident.dll - Ok

    C:\WINDOWS\system32\msidntld.dll - Ok

    C:\WINDOWS\system32\msidle.dll - Ok

    C:\WINDOWS\system32\msiexec.exe - Ok

    C:\WINDOWS\system32\msieftp.dll - Ok

    C:\WINDOWS\system32\msimg32.dll - Ok

    C:\WINDOWS\system32\mshtml.tlb - Ok

    C:\WINDOWS\system32\msihnd.dll - Ok

    >C:\WINDOWS\system32\msisip.dll - packed by FLY-CODE

    C:\WINDOWS\system32\msisip.dll - Ok

    C:\WINDOWS\system32\msimtf.dll - Ok

    >C:\WINDOWS\system32\MRT.exe is BINARYRES container

    C:\WINDOWS\system32\msimsg.dll - Ok

    C:\WINDOWS\system32\msjint40.dll - Ok

    C:\WINDOWS\system32\msjetoledb40.dll - Ok

    C:\WINDOWS\system32\msjter40.dll - Ok

    C:\WINDOWS\system32\msi.dll - Ok

    C:\WINDOWS\system32\msls31.dll - Ok

    C:\WINDOWS\system32\msjet40.dll - Ok

    C:\WINDOWS\system32\mslbui.dll - Ok

    C:\WINDOWS\system32\msjtes40.dll - Ok

    C:\WINDOWS\system32\msobjs.dll - Ok

    C:\WINDOWS\system32\msltus40.dll - Ok

    C:\WINDOWS\system32\msnsspc.dll - Ok

    C:\WINDOWS\system32\msnetobj.dll - Ok

    C:\WINDOWS\system32\msorc32r.dll - Ok

    C:\WINDOWS\system32\msoeacct.dll - Ok

    C:\WINDOWS\system32\msoert2.dll - Ok

    C:\WINDOWS\system32\msorcl32.dll - Ok

    C:\WINDOWS\system32\mspatcha.dll - Ok

    C:\WINDOWS\system32\mspbde40.dll - Ok

    C:\WINDOWS\system32\mspmsp.dll - Ok

    C:\WINDOWS\system32\mspaint.exe - Ok

    C:\WINDOWS\system32\msprivs.dll - Ok

    C:\WINDOWS\system32\msports.dll - Ok

    C:\WINDOWS\system32\msr2c.dll - Ok

    C:\WINDOWS\system32\msr2cenu.dll - Ok

    C:\WINDOWS\system32\msratelc.dll - Ok

    C:\WINDOWS\system32\msrating.dll.mui - Ok

    C:\WINDOWS\system32\msrating.dll - Ok

    C:\WINDOWS\system32\msrclr40.dll - Ok

    C:\WINDOWS\system32\mspmsnsv.dll - Ok

    C:\WINDOWS\system32\msrecr40.dll - Ok

    C:\WINDOWS\system32\msrle32.dll - Ok

    C:\WINDOWS\system32\mssap.dll - Ok

    C:\WINDOWS\system32\msscds32.ax - Ok

    C:\WINDOWS\system32\msrd2x40.dll - Ok

    C:\WINDOWS\system32\msrepl40.dll - Ok

    C:\WINDOWS\system32\msrd3x40.dll - Ok

    C:\WINDOWS\system32\mshtml.dll - Ok

    C:\WINDOWS\system32\msscript.ocx - Ok

    C:\WINDOWS\system32\mssip32.dll - Ok

    C:\WINDOWS\system32\msshavmsg.dll - Ok

    C:\WINDOWS\system32\mssha.dll - Ok

    C:\WINDOWS\system32\msswch.dll - Ok

    C:\WINDOWS\system32\mssign32.dll - Ok

    C:\WINDOWS\system32\msscp.dll - Ok

    C:\WINDOWS\system32\msswchx.exe - Ok

    C:\WINDOWS\system32\mstlsapi.dll - Ok

    C:\WINDOWS\system32\mstinit.exe - Ok

    C:\WINDOWS\system32\mstask.dll - Ok

    >>C:\WINDOWS\system32\MRT.exe\data001 is BINARYRES container

    C:\WINDOWS\system32\mstext40.dll - Ok

    C:\WINDOWS\system32\msv1_0.dll - Ok

    C:\WINDOWS\system32\msutb.dll - Ok

    C:\WINDOWS\system32\mstime.dll - Ok

    C:\WINDOWS\system32\msvcirt.dll - Ok

    C:\WINDOWS\system32\mstsc.exe - Ok

    C:\WINDOWS\system32\msvcp50.dll - Ok

    C:\WINDOWS\system32\msvcp60.dll - Ok

    C:\WINDOWS\system32\msvcrt.dll - Ok

    C:\WINDOWS\system32\msvbvm50.dll - Ok

    C:\WINDOWS\system32\msvcrt40.dll - Ok

    C:\WINDOWS\system32\msvcrt20.dll - Ok

    C:\WINDOWS\system32\msvidc32.dll - Ok

    C:\WINDOWS\system32\msvideo.dll - Ok

    C:\WINDOWS\system32\mstscax.dll - Ok

    C:\WINDOWS\system32\msvfw32.dll - Ok

    C:\WINDOWS\system32\msvbvm60.dll - Ok

    C:\WINDOWS\system32\msw3prt.dll - Ok

    C:\WINDOWS\system32\mswmdm.dll - Ok

    C:\WINDOWS\system32\mswebdvd.dll - Ok

    C:\WINDOWS\system32\mswsock.dll - Ok

    C:\WINDOWS\system32\mswdat10.dll - Ok

    C:\WINDOWS\system32\msxbde40.dll - Ok

    C:\WINDOWS\system32\msxml2r.dll - Ok

    C:\WINDOWS\system32\mswstr10.dll - Ok

    C:\WINDOWS\system32\msxml3r.dll - Ok

    C:\WINDOWS\system32\msvidctl.dll - Ok

    >C:\WINDOWS\system32\msxml.dll is BINARYRES container

    >>C:\WINDOWS\system32\msxml.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\msxml.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\msxml.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\msxml.dll - container

    C:\WINDOWS\system32\msxml6r.dll - Ok

    C:\WINDOWS\system32\msxmlr.dll - Ok

    C:\WINDOWS\system32\msyuv.dll - Ok

    >C:\WINDOWS\system32\msxml2.dll is BINARYRES container

    >>C:\WINDOWS\system32\msxml2.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\msxml2.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\msxml2.dll\data003 is JS-HTML container

    C:\WINDOWS\system32\msxml2.dll - container

    C:\WINDOWS\system32\mtxclu.dll - Ok

    C:\WINDOWS\system32\mtxex.dll - Ok

    C:\WINDOWS\system32\mtxoci.dll - Ok

    C:\WINDOWS\system32\mtxlegih.dll - Ok

    C:\WINDOWS\system32\mucltui.dll - Ok

    C:\WINDOWS\system32\mucltui.dll.mui - Ok

    C:\WINDOWS\system32\mtxdm.dll - Ok

    C:\WINDOWS\system32\msxml3.dll - Ok

    C:\WINDOWS\system32\mycomput.dll - Ok

    C:\WINDOWS\system32\napipsec.dll - Ok

    >C:\WINDOWS\system32\muweb.dll is CAB archive

    C:\WINDOWS\system32\muweb.dll - Ok

    C:\WINDOWS\system32\muweb.dll - archive

    C:\WINDOWS\system32\mydocs.dll - Ok

    C:\WINDOWS\system32\narrator.exe - Ok

    C:\WINDOWS\system32\napmontr.dll - Ok

    C:\WINDOWS\system32\msxml6.dll - Ok

    C:\WINDOWS\system32\nbtstat.exe - Ok

    C:\WINDOWS\system32\narrhook.dll - Ok

    C:\WINDOWS\system32\ncpa.cpl.manifest - Ok

    C:\WINDOWS\system32\napstat.exe - Ok

    C:\WINDOWS\system32\ncxpnt.dll - Ok

    C:\WINDOWS\system32\ncpa.cpl - Ok

    C:\WINDOWS\system32\ncobjapi.dll - Ok

    C:\WINDOWS\system32\nddeapir.exe - Ok

    C:\WINDOWS\system32\nddenb32.dll - Ok

    >C:\WINDOWS\system32\nddeapi.dll - packed by FLY-CODE

    C:\WINDOWS\system32\ndptsp.tsp - Ok

    C:\WINDOWS\system32\net.hlp - Ok

    C:\WINDOWS\system32\nddeapi.dll - Ok

    C:\WINDOWS\system32\net.exe - Ok

    C:\WINDOWS\system32\netapi.dll - Ok

    C:\WINDOWS\system32\net1.exe - Ok

    C:\WINDOWS\system32\mtxparhd.dll - Ok

    C:\WINDOWS\system32\netfxperf.dll - Ok

    C:\WINDOWS\system32\netevent.dll - Ok

    C:\WINDOWS\system32\netdde.exe - Ok

    C:\WINDOWS\system32\netapi32.dll - Ok

    C:\WINDOWS\system32\neth.dll - Ok

    C:\WINDOWS\system32\netid.dll - Ok

    C:\WINDOWS\system32\netcfgx.dll - Ok

    C:\WINDOWS\system32\netman.dll - Ok

    C:\WINDOWS\system32\netrap.dll - Ok

    C:\WINDOWS\system32\netmsg.dll - Ok

    C:\WINDOWS\system32\netsetup.cpl - Ok

    C:\WINDOWS\system32\netlogon.dll - Ok

    C:\WINDOWS\system32\netsh.exe - Ok

    C:\WINDOWS\system32\netstat.exe - Ok

    C:\WINDOWS\system32\netui0.dll - Ok

    C:\WINDOWS\system32\netui1.dll - Ok

    C:\WINDOWS\system32\netplwiz.dll - Ok

    >C:\WINDOWS\system32\netsetup.exe is CAB archive

    C:\WINDOWS\system32\netsetup.exe - Ok

    C:\WINDOWS\system32\netsetup.exe - archive

    C:\WINDOWS\system32\nlsdl.dll - Ok

    C:\WINDOWS\system32\netui2.dll - Ok

    >C:\WINDOWS\system32\nlsfunc.exe - packed by EXEPACK

    C:\WINDOWS\system32\nlsfunc.exe - Ok

    C:\WINDOWS\system32\nmevtmsg.dll - Ok

    C:\WINDOWS\system32\nlhtml.dll - Ok

    C:\WINDOWS\system32\nmmkcert.dll - Ok

    C:\WINDOWS\system32\noise.chs - Ok

    C:\WINDOWS\system32\noise.cht - Ok

    C:\WINDOWS\system32\noise.eng - Ok

    C:\WINDOWS\system32\noise.dat - Ok

    C:\WINDOWS\system32\noise.enu - Ok

    C:\WINDOWS\system32\noise.esn - Ok

    C:\WINDOWS\system32\noise.ita - Ok

    C:\WINDOWS\system32\noise.fra - Ok

    C:\WINDOWS\system32\noise.sve - Ok

    C:\WINDOWS\system32\noise.deu - Ok

    C:\WINDOWS\system32\noise.nld - Ok

    C:\WINDOWS\system32\noise.tha - Ok

    C:\WINDOWS\system32\normaliz.dll - Ok

    C:\WINDOWS\system32\normidna.nls - Ok

    C:\WINDOWS\system32\normnfc.nls - Ok

    C:\WINDOWS\system32\newdev.dll - Ok

    C:\WINDOWS\system32\normnfkd.nls - Ok

    C:\WINDOWS\system32\normnfkc.nls - Ok

    C:\WINDOWS\system32\normnfd.nls - Ok

    C:\WINDOWS\system32\nscompat.tlb - Ok

    C:\WINDOWS\system32\npptools.dll - Ok

    C:\WINDOWS\system32\ntdos.sys - Ok

    C:\WINDOWS\system32\notepad.exe - Ok

    C:\WINDOWS\system32\ntdos404.sys - Ok

    C:\WINDOWS\system32\ntdos412.sys - Ok

    C:\WINDOWS\system32\ntdos411.sys - Ok

    C:\WINDOWS\system32\nslookup.exe - Ok

    C:\WINDOWS\system32\ntdos804.sys - Ok

    C:\WINDOWS\system32\ntimage.gif - Ok

    C:\WINDOWS\system32\ntio404.sys - Ok

    C:\WINDOWS\system32\ntio.sys - Ok

    C:\WINDOWS\system32\ntio412.sys - Ok

    C:\WINDOWS\system32\ntdsapi.dll - Ok

    C:\WINDOWS\system32\ntio411.sys - Ok

    C:\WINDOWS\system32\netshell.dll - Ok

    C:\WINDOWS\system32\ntio804.sys - Ok

    C:\WINDOWS\system32\ntlanui2.dll - Ok

    C:\WINDOWS\system32\ntlanman.dll - Ok

    C:\WINDOWS\system32\ntlanui.dll - Ok

    C:\WINDOWS\system32\ntlsapi.dll - Ok

    C:\WINDOWS\system32\ntdll.dll - Ok

    C:\WINDOWS\system32\ntmsapi.dll - Ok

    C:\WINDOWS\system32\ntmsevt.dll - Ok

    C:\WINDOWS\system32\ntmsmgr.msc - Ok

    C:\WINDOWS\system32\ntmsoprq.msc - Ok

    C:\WINDOWS\system32\ntmarta.dll - Ok

    C:\WINDOWS\system32\ntmsdba.dll - Ok

    C:\WINDOWS\system32\ntprint.dll - Ok

    C:\WINDOWS\system32\ntmsmgr.dll - Ok

    C:\WINDOWS\system32\ntsd.exe - Ok

    C:\WINDOWS\system32\ntmssvc.dll - Ok

    C:\WINDOWS\system32\ntsdexts.dll - Ok

    C:\WINDOWS\system32\ntvdmd.dll - Ok

    C:\WINDOWS\system32\ntshrui.dll - Ok

    >C:\WINDOWS\system32\nusrmgr.cpl is BINARYRES container

    C:\WINDOWS\system32\ntvdm.exe - Ok

    >>C:\WINDOWS\system32\nusrmgr.cpl\data001 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data002 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data003 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data004 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data005 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data006 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data007 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data008 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data009 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data010 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data011 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data012 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data013 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data014 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data015 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data016 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data017 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data018 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data019 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data020 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data021 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data022 is JS-HTML container

    >>C:\WINDOWS\system32\nusrmgr.cpl\data023 is JS-HTML container

    C:\WINDOWS\system32\nusrmgr.cpl - container

    C:\WINDOWS\system32\ntkrnlpa.exe - Ok

    C:\WINDOWS\system32\nvcolor.exe - Ok

    C:\WINDOWS\system32\ntoskrnl.exe - Ok

    C:\WINDOWS\system32\nvapi.dll - Ok

    C:\WINDOWS\system32\nv4_disp.dll - Ok

    C:\WINDOWS\system32\nvcuvenc.dll - Ok

    C:\WINDOWS\system32\nvdata.bin - Ok

    C:\WINDOWS\system32\nvdata.data - Ok

    C:\WINDOWS\system32\nvdispco32.dll - Ok

    C:\WINDOWS\system32\nvcpl.dll - Ok

    C:\WINDOWS\system32\nvcuvid.dll - Ok

    C:\WINDOWS\system32\nvdrsdb0.bin - Ok

    C:\WINDOWS\system32\nvdrsdb1.bin - Ok

    C:\WINDOWS\system32\nvdrssel.bin - Ok

    C:\WINDOWS\system32\nvdrswr.lk - Ok

    C:\WINDOWS\system32\nvcuda.dll - Ok

    C:\WINDOWS\system32\nvdispco3220140.dll - Ok

    C:\WINDOWS\system32\nvdispgenco32.dll - Ok

    C:\WINDOWS\system32\nvgenco322060.dll - Ok

    C:\WINDOWS\system32\nvinfo.pb - Ok

    >C:\WINDOWS\system32\nvhdap32.dll - packed by PESTUB

    C:\WINDOWS\system32\nvhdagenco3220103.dll - Ok

    >C:\WINDOWS\system32\nvmccs.dll is ZLIB container

    C:\WINDOWS\system32\nvmccs.dll - container

    C:\WINDOWS\system32\nvhdap32.dll - Ok

    C:\WINDOWS\system32\nvmctray.dll - Ok

    C:\WINDOWS\system32\nvhdagenco322040.dll - Ok

    C:\WINDOWS\system32\nvcompiler.dll - Ok

    C:\WINDOWS\system32\nvrscs.dll - Ok

    C:\WINDOWS\system32\nvrsda.dll - Ok

    C:\WINDOWS\system32\nvrsar.dll - Ok

    C:\WINDOWS\system32\nvrsde.dll - Ok

    C:\WINDOWS\system32\nvrseng.dll - Ok

    C:\WINDOWS\system32\nvrsel.dll - Ok

    C:\WINDOWS\system32\nvrses.dll - Ok

    C:\WINDOWS\system32\nvrsesm.dll - Ok

    C:\WINDOWS\system32\nvrsfi.dll - Ok

    C:\WINDOWS\system32\nvrsfr.dll - Ok

    C:\WINDOWS\system32\nvrshu.dll - Ok

    C:\WINDOWS\system32\nvrshe.dll - Ok

    C:\WINDOWS\system32\nvrsit.dll - Ok

    C:\WINDOWS\system32\nvrsko.dll - Ok

    C:\WINDOWS\system32\nvrsja.dll - Ok

    C:\WINDOWS\system32\nvrsno.dll - Ok

    C:\WINDOWS\system32\nvrsnl.dll - Ok

    C:\WINDOWS\system32\nvrspl.dll - Ok

    C:\WINDOWS\system32\nvrsptb.dll - Ok

    C:\WINDOWS\system32\nvrspt.dll - Ok

    C:\WINDOWS\system32\nvrsru.dll - Ok

    C:\WINDOWS\system32\nvrssl.dll - Ok

    C:\WINDOWS\system32\nvrssk.dll - Ok

    C:\WINDOWS\system32\nvrssv.dll - Ok

    C:\WINDOWS\system32\nvrsth.dll - Ok

    C:\WINDOWS\system32\nvrstr.dll - Ok

    C:\WINDOWS\system32\nvrszht.dll - Ok

    C:\WINDOWS\system32\nvrszhc.dll - Ok

    C:\WINDOWS\system32\nvwddi.dll - Ok

    C:\WINDOWS\system32\nwc.cpl.manifest - Ok

    C:\WINDOWS\system32\nvsvc32.exe - Ok

    C:\WINDOWS\system32\nwprovau.dll - Ok

    C:\WINDOWS\system32\oakley.dll - Ok

    C:\WINDOWS\system32\objsel.dll - Ok

    C:\WINDOWS\system32\occache.dll - Ok

    C:\WINDOWS\system32\odbc16gt.dll - Ok

    C:\WINDOWS\system32\odbc32gt.dll - Ok

    C:\WINDOWS\system32\ocmanage.dll - Ok

    C:\WINDOWS\system32\odbc32.dll - Ok

    C:\WINDOWS\system32\odbcbcp.dll - Ok

    C:\WINDOWS\system32\odbcad32.exe - Ok

    C:\WINDOWS\system32\odbcconf.rsp - Ok

    C:\WINDOWS\system32\odbcconf.dll - Ok

    C:\WINDOWS\system32\odbccp32.cpl - Ok

    C:\WINDOWS\system32\odbcconf.exe - Ok

    C:\WINDOWS\system32\odbccr32.dll - Ok

    C:\WINDOWS\system32\odbccu32.dll - Ok

    C:\WINDOWS\system32\odbccp32.dll - Ok

    C:\WINDOWS\system32\odbcji32.dll - Ok

    C:\WINDOWS\system32\odbcint.dll - Ok

    C:\WINDOWS\system32\odbcp32r.dll - Ok

    C:\WINDOWS\system32\oddbse32.dll - Ok

    C:\WINDOWS\system32\odexl32.dll - Ok

    C:\WINDOWS\system32\odfox32.dll - Ok

    C:\WINDOWS\system32\odpdx32.dll - Ok

    C:\WINDOWS\system32\odbctrac.dll - Ok

    C:\WINDOWS\system32\odtext32.dll - Ok

    C:\WINDOWS\system32\oembios.dat - Ok

    C:\WINDOWS\system32\odbcjt32.dll - Ok

    C:\WINDOWS\system32\oembios.sig - Ok

    C:\WINDOWS\system32\oembios.bin - Ok

    C:\WINDOWS\system32\ole2.dll - Ok

    C:\WINDOWS\system32\ole2disp.dll - Ok

    C:\WINDOWS\system32\ole2nls.dll - Ok

    C:\WINDOWS\system32\nvopencl.dll - Ok

    C:\WINDOWS\system32\oleaccrc.dll - Ok

    C:\WINDOWS\system32\offfilt.dll - Ok

    C:\WINDOWS\system32\olecli.dll - Ok

    C:\WINDOWS\system32\oleacc.dll - Ok

    C:\WINDOWS\system32\olecli32.dll - Ok

    C:\WINDOWS\system32\olecnv32.dll - Ok

    C:\WINDOWS\system32\oledlg.dll - Ok

    C:\WINDOWS\system32\oleprn.dll - Ok

    C:\WINDOWS\system32\olesvr.dll - Ok

    C:\WINDOWS\system32\oleaut32.dll - Ok

    C:\WINDOWS\system32\olepro32.dll - Ok

    C:\WINDOWS\system32\olesvr32.dll - Ok

    C:\WINDOWS\system32\olethk32.dll - Ok

    C:\WINDOWS\system32\onex.dll - Ok

    >C:\WINDOWS\system32\ole32.dll is BINARYRES container

    C:\WINDOWS\system32\ole32.dll - container

    C:\WINDOWS\system32\osuninst.dll - Ok

    C:\WINDOWS\system32\osk.exe - Ok

    C:\WINDOWS\system32\opengl32.dll - Ok

    C:\WINDOWS\system32\osuninst.exe - Ok

    C:\WINDOWS\system32\p2pgasvc.dll - Ok

    C:\WINDOWS\system32\p2p.dll - Ok

    C:\WINDOWS\system32\OpenCL.dll - Ok

    C:\WINDOWS\system32\packager.exe - Ok

    C:\WINDOWS\system32\p2pgraph.dll - Ok

    C:\WINDOWS\system32\p2pnetsh.dll - Ok

    C:\WINDOWS\system32\panmap.dll - Ok

    C:\WINDOWS\system32\pathping.exe - Ok

    C:\WINDOWS\system32\pcl.sep - Ok

    C:\WINDOWS\system32\pautoenr.dll - Ok

    C:\WINDOWS\system32\paqsp.dll - Ok

    C:\WINDOWS\system32\pentnt.exe - Ok

    C:\WINDOWS\system32\perfci.h - Ok

    C:\WINDOWS\system32\perfci.ini - Ok

    C:\WINDOWS\system32\perfc009.dat - Ok

    C:\WINDOWS\system32\perfd009.dat - Ok

    C:\WINDOWS\system32\pdh.dll - Ok

    C:\WINDOWS\system32\perffilt.h - Ok

    C:\WINDOWS\system32\perfctrs.dll - Ok

    C:\WINDOWS\system32\perffilt.ini - Ok

    C:\WINDOWS\system32\perfdisk.dll - Ok

    C:\WINDOWS\system32\p2psvc.dll - Ok

    C:\WINDOWS\system32\perfmon.exe - Ok

    C:\WINDOWS\system32\perfmon.msc - Ok

    C:\WINDOWS\system32\perfh009.dat - Ok

    C:\WINDOWS\system32\perfi009.dat - Ok

    C:\WINDOWS\system32\perfnet.dll - Ok

    C:\WINDOWS\system32\perfos.dll - Ok

    C:\WINDOWS\system32\perfwci.h - Ok

    C:\WINDOWS\system32\perfproc.dll - Ok

    C:\WINDOWS\system32\perfwci.ini - Ok

    >C:\WINDOWS\system32\perfts.dll - packed by FLY-CODE

    C:\WINDOWS\system32\perfts.dll - Ok

    C:\WINDOWS\system32\pid.dll - Ok

    C:\WINDOWS\system32\PerfStringBackup.INI - Ok

    C:\WINDOWS\system32\pid.inf - Ok

    C:\WINDOWS\system32\pidgen.dll - Ok

    C:\WINDOWS\system32\pifmgr.dll - Ok

    C:\WINDOWS\system32\ping.exe - Ok

    C:\WINDOWS\system32\photowiz.dll - Ok

    C:\WINDOWS\system32\ping6.exe - Ok

    >C:\WINDOWS\system32\pjlmon.dll - packed by FLY-CODE

    C:\WINDOWS\system32\pmspl.dll - Ok

    C:\WINDOWS\system32\plustab.dll - Ok

    C:\WINDOWS\system32\pjlmon.dll - Ok

    C:\WINDOWS\system32\photometadatahandler.dll - Ok

    C:\WINDOWS\system32\pngfilt.dll - Ok

    C:\WINDOWS\system32\pnrpnsp.dll - Ok

    C:\WINDOWS\system32\powrprof.dll - Ok

    C:\WINDOWS\system32\polstore.dll - Ok

    C:\WINDOWS\system32\powercfg.exe - Ok

    C:\WINDOWS\system32\powercfg.cpl - Ok

    C:\WINDOWS\system32\PresentationHostProxy.dll - Ok

    C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll - Ok

    C:\WINDOWS\system32\prflbmsg.dll - Ok

    C:\WINDOWS\system32\print.exe - Ok

    C:\WINDOWS\system32\PresentationHost.exe - Ok

    C:\WINDOWS\system32\prntvpt.dll - Ok

    C:\WINDOWS\system32\prodspec.ini - Ok

    C:\WINDOWS\system32\profmap.dll - Ok

    C:\WINDOWS\system32\proctexe.ocx - Ok

    C:\WINDOWS\system32\progman.exe - Ok

    C:\WINDOWS\system32\proxycfg.exe - Ok

    C:\WINDOWS\system32\psapi.dll - Ok

    C:\WINDOWS\system32\PresentationNative_v0300.dll - Ok

    C:\WINDOWS\system32\proquota.exe - Ok

    C:\WINDOWS\system32\pschdcnt.h - Ok

    C:\WINDOWS\system32\printui.dll - Ok

    C:\WINDOWS\system32\pschdprf.dll - Ok

    C:\WINDOWS\system32\pscript.sep - Ok

    C:\WINDOWS\system32\psnppagn.dll - Ok

    C:\WINDOWS\system32\psbase.dll - Ok

    C:\WINDOWS\system32\pschdprf.ini - Ok

    C:\WINDOWS\system32\pubprn.vbs - Ok

    C:\WINDOWS\system32\pstorec.dll - Ok

    C:\WINDOWS\system32\pstorsvc.dll - Ok

    C:\WINDOWS\system32\qappsrv.exe - Ok

    C:\WINDOWS\system32\qagent.dll - Ok

    C:\WINDOWS\system32\qcliprov.dll - Ok

    C:\WINDOWS\system32\qcap.dll - Ok

    C:\WINDOWS\system32\qagentrt.dll - Ok

    C:\WINDOWS\system32\qasf.dll - Ok

    C:\WINDOWS\system32\qdv.dll - Ok

    C:\WINDOWS\system32\qdvd.dll - Ok

    C:\WINDOWS\system32\qmgrprxy.dll - Ok

    C:\WINDOWS\system32\qosname.dll - Ok

    C:\WINDOWS\system32\qprocess.exe - Ok

    C:\WINDOWS\system32\qedwipes.dll - Ok

    C:\WINDOWS\system32\qedit.dll - Ok

    C:\WINDOWS\system32\qmgr.dll - Ok

    C:\WINDOWS\system32\nvoglnt.dll - Ok

    C:\WINDOWS\system32\qwinsta.exe - Ok

    C:\WINDOWS\system32\qutil.dll - Ok

    C:\WINDOWS\system32\rasadhlp.dll - Ok

    C:\WINDOWS\system32\racpldlg.dll - Ok

    C:\WINDOWS\system32\rasautou.exe - Ok

    C:\WINDOWS\system32\rasauto.dll - Ok

    C:\WINDOWS\system32\rasctrnm.h - Ok

    C:\WINDOWS\system32\raschap.dll - Ok

    C:\WINDOWS\system32\rasctrs.dll - Ok

    C:\WINDOWS\system32\rasdial.exe - Ok

    C:\WINDOWS\system32\rasapi32.dll - Ok

    C:\WINDOWS\system32\rasctrs.ini - Ok

    C:\WINDOWS\system32\rasman.dll - Ok

    C:\WINDOWS\system32\rasmontr.dll - Ok

    C:\WINDOWS\system32\rasmans.dll - Ok

    C:\WINDOWS\system32\rasmxs.dll - Ok

    C:\WINDOWS\system32\rasppp.dll - Ok

    C:\WINDOWS\system32\rasdlg.dll - Ok

    C:\WINDOWS\system32\rasphone.exe - Ok

    C:\WINDOWS\system32\query.dll - Ok

    C:\WINDOWS\system32\rasrad.dll - Ok

    C:\WINDOWS\system32\rasqec.dll - Ok

    >C:\WINDOWS\system32\rasser.dll - packed by FLY-CODE

    C:\WINDOWS\system32\rassapi.dll - Ok

    C:\WINDOWS\system32\rastapi.dll - Ok

    C:\WINDOWS\system32\rasser.dll - Ok

    C:\WINDOWS\system32\rcbdyctl.dll - Ok

    C:\WINDOWS\system32\quartz.dll - Ok

    C:\WINDOWS\system32\rcp.exe - Ok

    C:\WINDOWS\system32\rastls.dll - Ok

    C:\WINDOWS\system32\rdpcfgex.dll - Ok

    C:\WINDOWS\system32\rdpsnd.dll - Ok

    C:\WINDOWS\system32\rdpdd.dll - Ok

    C:\WINDOWS\system32\rdchost.dll - Ok

    C:\WINDOWS\system32\rcimlby.exe - Ok

    C:\WINDOWS\system32\recover.exe - Ok

    C:\WINDOWS\system32\rdpwsx.dll - Ok

    C:\WINDOWS\system32\redir.exe - Ok

    C:\WINDOWS\system32\rdshost.exe - Ok

    C:\WINDOWS\system32\regapi.dll - Ok

    C:\WINDOWS\system32\regedt32.exe - Ok

    C:\WINDOWS\system32\reg.exe - Ok

    C:\WINDOWS\system32\rdsaddin.exe - Ok

    C:\WINDOWS\system32\regini.exe - Ok

    C:\WINDOWS\system32\regsvc.dll - Ok

    C:\WINDOWS\system32\regwiz.exe - Ok

    C:\WINDOWS\system32\regsvr32.exe - Ok

    C:\WINDOWS\system32\rdpclip.exe - Ok

    C:\WINDOWS\system32\remotepg.dll - Ok

    C:\WINDOWS\system32\remotesp.tsp - Ok

    C:\WINDOWS\system32\replace.exe - Ok

    >C:\WINDOWS\system32\reset.exe - packed by FLY-CODE

    C:\WINDOWS\system32\resutils.dll - Ok

    C:\WINDOWS\system32\rexec.exe - Ok

    C:\WINDOWS\system32\rend.dll - Ok

    C:\WINDOWS\system32\reset.exe - Ok

    C:\WINDOWS\system32\regwizc.dll - Ok

    C:\WINDOWS\system32\riched32.dll - Ok

    C:\WINDOWS\system32\rnr20.dll - Ok

    C:\WINDOWS\system32\route.exe - Ok

    C:\WINDOWS\system32\routemon.exe - Ok

    C:\WINDOWS\system32\routetab.dll - Ok

    C:\WINDOWS\system32\rgb9rast_2.dll - Ok

    C:\WINDOWS\system32\rpcns4.dll - Ok

    C:\WINDOWS\system32\rsaci.rat - Ok

    C:\WINDOWS\system32\rhttpaa.dll - Ok

    C:\WINDOWS\system32\rsh.exe - Ok

    C:\WINDOWS\system32\rshx32.dll - Ok

    C:\WINDOWS\system32\rsaenh.dll - Ok

    C:\WINDOWS\system32\rsm.exe - Ok

    C:\WINDOWS\system32\rsmps.dll - Ok

    C:\WINDOWS\system32\riched20.dll - Ok

    C:\WINDOWS\system32\rpcrt4.dll - Ok

    C:\WINDOWS\system32\rpcss.dll - Ok

    C:\WINDOWS\system32\rsvp.ini - Ok

    C:\WINDOWS\system32\rsvpcnts.h - Ok

    C:\WINDOWS\system32\rsvpmsg.dll - Ok

    >C:\WINDOWS\system32\rsvpperf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\rsvpperf.dll - Ok

    C:\WINDOWS\system32\rsvp.exe - Ok

    C:\WINDOWS\system32\rsmsink.exe - Ok

    C:\WINDOWS\system32\rtipxmib.dll - Ok

    C:\WINDOWS\system32\rsvpsp.dll - Ok

    C:\WINDOWS\system32\rsmui.exe - Ok

    C:\WINDOWS\system32\RtkCoLDRXP.dll - Ok

    C:\WINDOWS\system32\rtcshare.exe - Ok

    C:\WINDOWS\system32\rtm.dll - Ok

    C:\WINDOWS\system32\RtkCoInstIIXP.dll - Ok

    C:\WINDOWS\system32\RtNicProp32.dll - Ok

    C:\WINDOWS\system32\runas.exe - Ok

    C:\WINDOWS\system32\rtutils.dll - Ok

    C:\WINDOWS\system32\RTNUninst32.dll - Ok

    C:\WINDOWS\system32\runonce.exe - Ok

    C:\WINDOWS\system32\rundll32.exe - Ok

    C:\WINDOWS\system32\rwinsta.exe - Ok

    C:\WINDOWS\system32\safrdm.dll - Ok

    C:\WINDOWS\system32\safrslv.dll - Ok

    C:\WINDOWS\system32\safrcdlg.dll - Ok

    C:\WINDOWS\system32\sapi.cpl.manifest - Ok

    C:\WINDOWS\system32\samlib.dll - Ok

    C:\WINDOWS\system32\savedump.exe - Ok

    C:\WINDOWS\system32\s3gnb.dll - Ok

    C:\WINDOWS\system32\sc.exe - Ok

    C:\WINDOWS\system32\sbe.dll - Ok

    C:\WINDOWS\system32\sbeio.dll - Ok

    C:\WINDOWS\system32\samsrv.dll - Ok

    C:\WINDOWS\system32\scarddlg.dll - Ok

    C:\WINDOWS\system32\scardssp.dll - Ok

    C:\WINDOWS\system32\scardsvr.exe - Ok

    C:\WINDOWS\system32\sccbase.dll - Ok

    C:\WINDOWS\system32\RTSndMgr.CPL - Ok

    C:\WINDOWS\system32\scecli.dll - Ok

    C:\WINDOWS\system32\sccsccp.dll - Ok

    C:\WINDOWS\system32\scredir.dll - Ok

    C:\WINDOWS\system32\sclgntfy.dll - Ok

    C:\WINDOWS\system32\schannel.dll - Ok

    C:\WINDOWS\system32\scrnsave.scr - Ok

    C:\WINDOWS\system32\schedsvc.dll - Ok

    C:\WINDOWS\system32\scesrv.dll - Ok

    C:\WINDOWS\system32\sdhcinst.dll - Ok

    C:\WINDOWS\system32\scrrun.dll - Ok

    C:\WINDOWS\system32\scrobj.dll - Ok

    C:\WINDOWS\system32\secupd.dat - Ok

    C:\WINDOWS\system32\secupd.sig - Ok

    C:\WINDOWS\system32\seclogon.dll - Ok

    C:\WINDOWS\system32\security.dll - Ok

    C:\WINDOWS\system32\sdpblb.dll - Ok

    C:\WINDOWS\system32\sdbinst.exe - Ok

    C:\WINDOWS\system32\secur32.dll - Ok

    C:\WINDOWS\system32\sensapi.dll - Ok

    C:\WINDOWS\system32\senscfg.dll - Ok

    C:\WINDOWS\system32\sendmail.dll - Ok

    C:\WINDOWS\system32\serialui.dll - Ok

    C:\WINDOWS\system32\sens.dll - Ok

    C:\WINDOWS\system32\sendcmsg.dll - Ok

    C:\WINDOWS\system32\services.msc - Ok

    C:\WINDOWS\system32\serwvdrv.dll - Ok

    C:\WINDOWS\system32\services.exe - Ok

    C:\WINDOWS\system32\sessmgr.exe - Ok

    C:\WINDOWS\system32\sethc.exe - Ok

    C:\WINDOWS\system32\setup.bmp - Ok

    C:\WINDOWS\system32\servdeps.dll - Ok

    C:\WINDOWS\system32\setver.exe - Ok

    C:\WINDOWS\system32\setup.exe - Ok

    C:\WINDOWS\system32\sfc.dll - Ok

    C:\WINDOWS\system32\sfc.exe - Ok

    C:\WINDOWS\system32\setupn.exe - Ok

    C:\WINDOWS\system32\sfmapi.dll - Ok

    C:\WINDOWS\system32\sfc_os.dll - Ok

    >C:\WINDOWS\system32\share.exe - packed by EXEPACK

    >>C:\WINDOWS\system32\share.exe - packed by COM2EXE

    C:\WINDOWS\system32\setupdll.dll - Ok

    C:\WINDOWS\system32\share.exe - Ok

    C:\WINDOWS\system32\shadow.exe - Ok

    C:\WINDOWS\system32\shell.dll - Ok

    >C:\WINDOWS\system32\setupapi.dll - packed by BINARYRES

    >C:\WINDOWS\system32\shdoclc.dll is BINARYRES container

    >>C:\WINDOWS\system32\setupapi.dll - packed by MS COMPRESS

    C:\WINDOWS\system32\setupapi.dll - Ok

    >>C:\WINDOWS\system32\shdoclc.dll\data001 is JS-HTML container

    >>C:\WINDOWS\system32\shdoclc.dll\data002 is JS-HTML container

    >>C:\WINDOWS\system32\shdoclc.dll\data003 is JS-HTML container

    >>C:\WINDOWS\system32\shdoclc.dll\data004 is JS-HTML container

    C:\WINDOWS\system32\sfcfiles.dll - Ok

    C:\WINDOWS\system32\shellstyle.dll - Ok

    >>C:\WINDOWS\system32\shdoclc.dll\data005 is JS-HTML container

    C:\WINDOWS\system32\shfolder.dll - Ok

    >>C:\WINDOWS\system32\shdoclc.dll\data006 is JS-HTML container

    C:\WINDOWS\system32\shiftjis.uce - Ok

    C:\WINDOWS\system32\shdoclc.dll - container

    C:\WINDOWS\system32\shgina.dll - Ok

    C:\WINDOWS\system32\shimeng.dll - Ok

    C:\WINDOWS\system32\shmedia.dll - Ok

    C:\WINDOWS\system32\shdocvw.dll - Ok

    C:\WINDOWS\system32\shlwapi.dll - Ok

    C:\WINDOWS\system32\shscrap.dll - Ok

    >C:\WINDOWS\system32\shimgvw.dll is BINARYRES container

    >>C:\WINDOWS\system32\shimgvw.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\shrpubw.exe - Ok

    >>C:\WINDOWS\system32\shimgvw.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\shimgvw.dll - container

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000352.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000353.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000354.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000355.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000356.rbf - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000302.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000302.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000302.exe - archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000357.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000358.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000349.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000360.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000340.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000359.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000361.drv - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000351.dll - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000362.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000351.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000366.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000367.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000365.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000370.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000369.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000368.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000371.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000372.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000373.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000376.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000375.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000378.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000379.PNF - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000374.rbf is OLE container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000363.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000380.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000381.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000382.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000383.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000384.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000374.rbf - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000364.rbf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000387.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000389.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000386.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000390.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000392.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000393.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000394.ini - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000301.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000301.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000301.exe - archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000395.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000388.INI - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000385.rgs - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000396.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000397.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000377.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000401.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000400.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000404.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000399.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000403.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000407.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000405.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000398.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000410.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000411.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000412.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000413.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000414.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000415.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000416.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000417.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000418.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000419.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000420.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000421.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000422.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000423.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000424.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000425.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000426.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000427.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000428.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000429.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000430.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000431.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000432.ref - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000409.drv - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000433.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000402.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000434.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000408.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000436.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000435.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000438.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000437.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000406.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000439.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000441.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000442.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000445.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000444.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000443.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000446.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000448.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000449.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000440.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000450.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000447.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000453.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000451.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000457.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000454.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000458.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000459.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000460.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000462.ref - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000455.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000464.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000452.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000456.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000463.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000461.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\change.log.3 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\change.log.2 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000466.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\snapshot\Repository\FS\OBJECTS.DATA - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi is OLE container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi\stream000 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi\stream000 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi\stream001 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP9\A0000465.msi - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000391.dll - Ok

    C:\AUTOEXEC.BAT - Ok

    C:\CONFIG.SYS - Ok

    C:\end - Ok

    C:\extensions.sqlite - Ok

    C:\IO.SYS - Ok

    C:\MSDOS.SYS - Ok

    C:\csb.log - Ok

    C:\boot.ini - Ok

    C:\pagefile.sys - read error

    C:\Install.log - Ok

    C:\WINDOWS\system32\$winnt$.inf - Ok

    C:\WINDOWS\system32\12520437.cpx - Ok

    C:\WINDOWS\system32\12520850.cpx - Ok

    C:\NTDETECT.COM - Ok

    C:\RHDSetup.log - Ok

    C:\WINDOWS\system32\aaaamon.dll - Ok

    C:\TDSSKiller.2.8.15.0_01.01.2013_19.39.23_log.txt - Ok

    C:\ntldr - Ok

    C:\WINDOWS\system32\acctres.dll - Ok

    C:\WINDOWS\system32\access.cpl - Ok

    C:\WINDOWS\system32\6to4svc.dll - Ok

    C:\WINDOWS\system32\aaclient.dll - Ok

    C:\WINDOWS\system32\acelpdec.ax - Ok

    C:\WINDOWS\system32\activeds.tlb - Ok

    C:\WINDOWS\system32\accwiz.exe - Ok

    C:\WINDOWS\system32\actmovie.exe - Ok

    C:\WINDOWS\system32\acledit.dll - Ok

    C:\WINDOWS\system32\aclui.dll - Ok

    C:\WINDOWS\system32\actxprxy.dll - Ok

    C:\WINDOWS\system32\activeds.dll - Ok

    C:\WINDOWS\system32\adptif.dll - Ok

    >C:\WINDOWS\system32\admparse.dll - packed by FLY-CODE

    C:\WINDOWS\system32\adsmsext.dll - Ok

    C:\WINDOWS\system32\adsldpc.dll - Ok

    C:\WINDOWS\system32\adsldp.dll - Ok

    C:\WINDOWS\system32\advpack.dll.mui - Ok

    C:\WINDOWS\system32\advpack.dll - Ok

    C:\WINDOWS\system32\adsnt.dll - Ok

    C:\WINDOWS\system32\admparse.dll - Ok

    C:\WINDOWS\system32\amcompat.tlb - Ok

    C:\WINDOWS\system32\alrsvc.dll - Ok

    C:\WINDOWS\system32\ansi.sys - Ok

    C:\WINDOWS\system32\ahui.exe - Ok

    C:\WINDOWS\system32\append.exe - Ok

    C:\WINDOWS\system32\advapi32.dll - Ok

    C:\WINDOWS\system32\alg.exe - Ok

    C:\WINDOWS\system32\apcups.dll - Ok

    C:\WINDOWS\system32\AppleChargerSrv.exe - Ok

    C:\WINDOWS\system32\amstream.dll - Ok

    C:\WINDOWS\system32\arp.exe - Ok

    C:\WINDOWS\system32\asferror.dll - Ok

    C:\WINDOWS\system32\apphelp.dll - Ok

    C:\WINDOWS\system32\asycfilt.dll - Ok

    C:\WINDOWS\system32\ALSNDMGR.CPL - Ok

    C:\WINDOWS\system32\at.exe - Ok

    C:\WINDOWS\system32\asctrls.ocx - Ok

    C:\WINDOWS\system32\ati2cqag.dll - Ok

    C:\WINDOWS\system32\ati2dvag.dll - Ok

    C:\WINDOWS\system32\ativdaxx.ax - Ok

    C:\WINDOWS\system32\ati2dvaa.dll - Ok

    C:\WINDOWS\system32\ativmvxx.ax - Ok

    C:\WINDOWS\system32\atkctrs.dll - Ok

    >C:\WINDOWS\system32\appwiz.cpl is BINARYRES container

    >>C:\WINDOWS\system32\appwiz.cpl\data001 is JS-HTML container

    >>C:\WINDOWS\system32\appwiz.cpl\data003 is JS-HTML container

    >>C:\WINDOWS\system32\appwiz.cpl\data004 is JS-HTML container

    >>C:\WINDOWS\system32\appwiz.cpl\data006 is JS-HTML container

    C:\WINDOWS\system32\atl.dll - Ok

    C:\WINDOWS\system32\ativvaxx.dll - Ok

    C:\WINDOWS\system32\ati3d1ag.dll - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data008 is JS-HTML container

    >>C:\WINDOWS\system32\appwiz.cpl\data009 is JS-HTML container

    C:\WINDOWS\system32\atmadm.exe - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data011 is JS-HTML container

    C:\WINDOWS\system32\atmlib.dll - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data012 is JS-HTML container

    C:\WINDOWS\system32\atmpvcno.dll - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data014 is JS-HTML container

    C:\WINDOWS\system32\atmfd.dll - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data015 is JS-HTML container

    C:\WINDOWS\system32\attrib.exe - Ok

    >>C:\WINDOWS\system32\appwiz.cpl\data016 is JS-HTML container

    C:\WINDOWS\system32\appwiz.cpl - container

    C:\WINDOWS\system32\auditusr.exe - Ok

    C:\WINDOWS\system32\atrace.dll - Ok

    C:\WINDOWS\system32\ati3duag.dll - Ok

    C:\WINDOWS\system32\audiosrv.dll - Ok

    C:\WINDOWS\system32\AUTOEXEC.NT - Ok

    C:\WINDOWS\system32\authz.dll - Ok

    C:\WINDOWS\system32\ativtmxx.dll - Ok

    C:\WINDOWS\system32\autodisc.dll - Ok

    >C:\WINDOWS\system32\autolfn.exe - packed by FLY-CODE

    C:\WINDOWS\system32\avicap.dll - Ok

    C:\WINDOWS\system32\avicap32.dll - Ok

    C:\WINDOWS\system32\avifil32.dll - Ok

    C:\WINDOWS\system32\avifile.dll - Ok

    C:\WINDOWS\system32\avmeter.dll - Ok

    C:\WINDOWS\system32\avwav.dll - Ok

    C:\WINDOWS\system32\autochk.exe - Ok

    C:\WINDOWS\system32\autofmt.exe - Ok

    C:\WINDOWS\system32\autoconv.exe - Ok

    C:\WINDOWS\system32\avtapi.dll - Ok

    C:\WINDOWS\system32\batt.dll - Ok

    C:\WINDOWS\system32\bidispl.dll - Ok

    C:\WINDOWS\system32\basesrv.dll - Ok

    C:\WINDOWS\system32\bios1.rom - Ok

    C:\WINDOWS\system32\bios4.rom - Ok

    C:\WINDOWS\system32\bitsprx3.dll - Ok

    C:\WINDOWS\system32\bitsprx4.dll - Ok

    C:\WINDOWS\system32\bitsprx2.dll - Ok

    C:\WINDOWS\system32\azroles.dll - Ok

    C:\WINDOWS\system32\batmeter.dll - Ok

    C:\WINDOWS\system32\bootok.exe - Ok

    C:\WINDOWS\system32\bootvid.dll - Ok

    C:\WINDOWS\system32\blastcln.exe - Ok

    C:\WINDOWS\system32\autolfn.exe - Ok

    C:\WINDOWS\system32\bootvrfy.exe - Ok

    C:\WINDOWS\system32\bopomofo.uce - Ok

    >C:\WINDOWS\system32\browselc.dll is BINARYRES container

    C:\WINDOWS\system32\bthci.dll - Ok

    >>C:\WINDOWS\system32\browselc.dll\data004 is JS-HTML container

    >>C:\WINDOWS\system32\browselc.dll\data008 is JS-HTML container

    >>C:\WINDOWS\system32\browselc.dll\data012 is JS-HTML container

    C:\WINDOWS\system32\browsewm.dll - Ok

    >>C:\WINDOWS\system32\browselc.dll\data013 is ZLIB container

    C:\WINDOWS\system32\browselc.dll - container

    C:\WINDOWS\system32\browser.dll - Ok

    C:\WINDOWS\system32\bthprops.cpl - Ok

    C:\WINDOWS\system32\bthserv.dll - Ok

    C:\WINDOWS\system32\blackbox.dll - Ok

    C:\WINDOWS\system32\BuzzingBee.wav - Ok

    C:\WINDOWS\system32\cacls.exe - Ok

    C:\WINDOWS\system32\cabinet.dll - Ok

    C:\WINDOWS\system32\cabview.dll - Ok

    C:\WINDOWS\system32\camocx.dll - Ok

    C:\WINDOWS\system32\calc.exe - Ok

    C:\WINDOWS\system32\btpanui.dll - Ok

    C:\WINDOWS\system32\capesnpn.dll - Ok

    C:\WINDOWS\system32\catsrvps.dll - Ok

    C:\WINDOWS\system32\catsrv.dll - Ok

    C:\WINDOWS\system32\cards.dll - Ok

    C:\WINDOWS\system32\ccfgnt.dll - Ok

    >C:\WINDOWS\system32\cdmodem.dll - packed by FLY-CODE

    C:\WINDOWS\system32\cdmodem.dll - Ok

    >C:\WINDOWS\system32\cdfview.dll is BINARYRES container

    >C:\WINDOWS\system32\cdm.dll - packed by FLY-CODE

    >>C:\WINDOWS\system32\cdfview.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\cdplayer.exe.manifest - Ok

    >>C:\WINDOWS\system32\cdfview.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\cdfview.dll - container

    C:\WINDOWS\system32\cdm.dll - Ok

    C:\WINDOWS\system32\certcli.dll - Ok

    C:\WINDOWS\system32\browseui.dll - Ok

    C:\WINDOWS\system32\cfgbkend.dll - Ok

    C:\WINDOWS\system32\catsrvut.dll - Ok

    C:\WINDOWS\system32\cfgmgr32.dll - Ok

    C:\WINDOWS\system32\cewmdm.dll - Ok

    C:\WINDOWS\system32\chkdsk.exe - Ok

    C:\WINDOWS\system32\chcp.com - Ok

    C:\WINDOWS\system32\chkntfs.exe - Ok

    C:\WINDOWS\system32\certmgr.msc - Ok

    C:\WINDOWS\system32\charmap.exe - Ok

    C:\WINDOWS\system32\ciadmin.dll - Ok

    C:\WINDOWS\system32\cidaemon.exe - Ok

    C:\WINDOWS\system32\certmgr.dll - Ok

    C:\WINDOWS\system32\cisvc.exe - Ok

    C:\WINDOWS\system32\ciadv.msc - Ok

    C:\WINDOWS\system32\ciodm.dll - Ok

    C:\WINDOWS\system32\cic.dll - Ok

    C:\WINDOWS\system32\clb.dll - Ok

    C:\WINDOWS\system32\ckcnv.exe - Ok

    >C:\WINDOWS\system32\cliconf.chm is CHM container

    C:\WINDOWS\system32\cliconfg.dll - Ok

    C:\WINDOWS\system32\clbcatex.dll - Ok

    C:\WINDOWS\system32\cliconfg.rll - Ok

    C:\WINDOWS\system32\cliconfg.exe - Ok

    C:\WINDOWS\system32\cleanmgr.exe - Ok

    C:\WINDOWS\system32\clbcatq.dll - Ok

    C:\WINDOWS\system32\clusapi.dll - Ok

    C:\WINDOWS\system32\clipbrd.exe - Ok

    C:\WINDOWS\system32\clipsrv.exe - Ok

    C:\WINDOWS\system32\cmcfg32.dll - Ok

    >>C:\WINDOWS\system32\cliconf.chm\Basics\mailto.js is JS-HTML container

    C:\WINDOWS\system32\cmmgr32.hlp - Ok

    C:\WINDOWS\system32\cmdl32.exe - Ok

    C:\WINDOWS\system32\cmos.ram - Ok

    C:\WINDOWS\system32\cmd.exe - Ok

    >C:\WINDOWS\system32\cdosys.dll is BINARYRES container

    >>C:\WINDOWS\system32\cdosys.dll\data001 is JS-HTML container

    C:\WINDOWS\system32\cdosys.dll - container

    C:\WINDOWS\system32\cmpbk32.dll - Ok

    >>C:\WINDOWS\system32\cliconf.chm\Basics\shared.js is JS-HTML container

    C:\WINDOWS\system32\cmsetacl.dll - Ok

    C:\WINDOWS\system32\cmdial32.dll - Ok

    >>C:\WINDOWS\system32\cliconf.chm\Basics\vs70.js is JS-HTML container

    >>C:\WINDOWS\system32\cliconf.chm\Basics\vs70link.js is JS-HTML container

    C:\WINDOWS\system32\cmmon32.exe - Ok

    C:\WINDOWS\system32\cmstp.exe - Ok

    C:\WINDOWS\system32\cmutil.dll - Ok

    C:\WINDOWS\system32\cnbjmon.dll - Ok

    C:\WINDOWS\system32\cnvfat.dll - Ok

    C:\WINDOWS\system32\cnetcfg.dll - Ok

    C:\WINDOWS\system32\cmprops.dll - Ok

    C:\WINDOWS\system32\comaddin.dll - Ok

    C:\WINDOWS\system32\comcat.dll - Ok

    C:\WINDOWS\system32\cliconf.chm - container

    C:\WINDOWS\system32\comm.drv - Ok

    C:\WINDOWS\system32\commdlg.dll - Ok

    C:\WINDOWS\system32\command.com - Ok

    C:\WINDOWS\system32\comp.exe - Ok

    C:\WINDOWS\system32\colbact.dll - Ok

    C:\WINDOWS\system32\compact.exe - Ok

    C:\WINDOWS\system32\compmgmt.msc - Ok

    C:\WINDOWS\system32\compobj.dll - Ok

    C:\WINDOWS\system32\comdlg32.dll - Ok

    >C:\WINDOWS\system32\compatui.dll is BINARYRES container

    C:\WINDOWS\system32\comrepl.dll - Ok

    >>C:\WINDOWS\system32\compatui.dll\data002 is JS-HTML container

    C:\WINDOWS\system32\compatui.dll - container

    C:\WINDOWS\system32\compstui.dll - Ok

    C:\WINDOWS\system32\comctl32.dll - Ok

    C:\WINDOWS\system32\CONFIG.NT - Ok

    C:\WINDOWS\system32\CONFIG.TMP - Ok

    C:\WINDOWS\system32\comsnap.dll - Ok

    C:\WINDOWS\system32\confmsp.dll - Ok

    C:\WINDOWS\system32\conime.exe - Ok

    C:\WINDOWS\system32\comres.dll - Ok

    C:\WINDOWS\system32\console.dll - Ok

    C:\WINDOWS\system32\control.exe - Ok

    C:\WINDOWS\system32\convert.exe - Ok

    C:\WINDOWS\system32\country.sys - Ok

    C:\WINDOWS\system32\corpol.dll - Ok

    C:\WINDOWS\system32\comuid.dll - Ok

    C:\WINDOWS\system32\credssp.dll - Ok

    C:\WINDOWS\system32\cryptdll.dll - Ok

    C:\WINDOWS\system32\cryptdlg.dll - Ok

    C:\WINDOWS\system32\cryptext.dll - Ok

    C:\WINDOWS\system32\crtdll.dll - Ok

    C:\WINDOWS\system32\credui.dll - Ok

    C:\WINDOWS\system32\cryptnet.dll - Ok

    C:\WINDOWS\system32\cryptsvc.dll - Ok

    C:\WINDOWS\system32\cscdll.dll - Ok

    C:\WINDOWS\system32\comsvcs.dll - Ok

    C:\WINDOWS\system32\csrsrv.dll - Ok

    C:\WINDOWS\system32\crypt32.dll - Ok

    C:\WINDOWS\system32\cscript.exe - Ok

    C:\WINDOWS\system32\csrss.exe - Ok

    C:\WINDOWS\system32\csseqchk.dll - Ok

    C:\WINDOWS\system32\ctl3dv2.dll - Ok

    C:\WINDOWS\system32\cryptui.dll - Ok

    C:\WINDOWS\system32\ctfmon.exe - Ok

    C:\WINDOWS\system32\cscui.dll - Ok

    C:\WINDOWS\system32\ctype.nls - Ok

    C:\WINDOWS\system32\ctl3d32.dll - Ok

    C:\WINDOWS\system32\c_10000.nls - Ok

    C:\WINDOWS\system32\c_10006.nls - Ok

    C:\WINDOWS\system32\c_10010.nls - Ok

    C:\WINDOWS\system32\c_10007.nls - Ok

    C:\WINDOWS\system32\c_10017.nls - Ok

    C:\WINDOWS\system32\c_10029.nls - Ok

    C:\WINDOWS\system32\c_10081.nls - Ok

    C:\WINDOWS\system32\c_10079.nls - Ok

    C:\WINDOWS\system32\c_10082.nls - Ok

    C:\WINDOWS\system32\c_1251.nls - Ok

    C:\WINDOWS\system32\c_1250.nls - Ok

    C:\WINDOWS\system32\c_1252.nls - Ok

    C:\WINDOWS\system32\CSVer.dll - Ok

    C:\WINDOWS\system32\c_1255.nls - Ok

    C:\WINDOWS\system32\c_1253.nls - Ok

    C:\WINDOWS\system32\c_1256.nls - Ok

    C:\WINDOWS\system32\c_1254.nls - Ok

    C:\WINDOWS\system32\c_20127.nls - Ok

    C:\WINDOWS\system32\c_1258.nls - Ok

    C:\WINDOWS\system32\c_1257.nls - Ok

    C:\WINDOWS\system32\c_20866.nls - Ok

    C:\WINDOWS\system32\c_21866.nls - Ok

    C:\WINDOWS\system32\c_20261.nls - Ok

    C:\WINDOWS\system32\c_28591.nls - Ok

    C:\WINDOWS\system32\c_28592.nls - Ok

    C:\WINDOWS\system32\c_28593.nls - Ok

    C:\WINDOWS\system32\C_28594.NLS - Ok

    C:\WINDOWS\system32\C_28597.NLS - Ok

    C:\WINDOWS\system32\C_28595.NLS - Ok

    C:\WINDOWS\system32\c_28599.nls - Ok

    C:\WINDOWS\system32\c_28603.nls - Ok

    C:\WINDOWS\system32\c_28598.nls - Ok

    C:\WINDOWS\system32\c_20905.nls - Ok

    C:\WINDOWS\system32\c_1026.nls - Ok

    C:\WINDOWS\system32\c_037.nls - Ok

    C:\WINDOWS\system32\c_28605.nls - Ok

    C:\WINDOWS\system32\c_437.nls - Ok

    C:\WINDOWS\system32\c_500.nls - Ok

    C:\WINDOWS\system32\c_775.nls - Ok

    C:\WINDOWS\system32\c_850.nls - Ok

    C:\WINDOWS\system32\c_737.nls - Ok

    C:\WINDOWS\system32\c_852.nls - Ok

    C:\WINDOWS\system32\c_855.nls - Ok

    C:\WINDOWS\system32\c_857.nls - Ok

    C:\WINDOWS\system32\c_861.nls - Ok

    C:\WINDOWS\system32\c_860.nls - Ok

    C:\WINDOWS\system32\c_863.nls - Ok

    C:\WINDOWS\system32\c_865.nls - Ok

    C:\WINDOWS\system32\c_866.nls - Ok

    C:\WINDOWS\system32\c_869.nls - Ok

    C:\WINDOWS\system32\c_874.nls - Ok

    C:\WINDOWS\system32\c_875.nls - Ok

    C:\WINDOWS\system32\d3d8thk.dll - Ok

    C:\WINDOWS\system32\c_932.nls - Ok

    C:\WINDOWS\system32\d3d9caps.dat - Ok

    C:\WINDOWS\system32\c_936.nls - Ok

    C:\WINDOWS\system32\c_949.nls - Ok

    C:\WINDOWS\system32\c_950.nls - Ok

    C:\WINDOWS\system32\d3dpmesh.dll - Ok

    C:\WINDOWS\system32\d3dim.dll - Ok

    C:\WINDOWS\system32\d3dramp.dll - Ok

    C:\WINDOWS\system32\d3dim700.dll - Ok

    >C:\WINDOWS\system32\d3dx10_39.dll - packed by PESTUB

    C:\WINDOWS\system32\d3drm.dll - Ok

    C:\WINDOWS\system32\d3d8.dll - Ok

    C:\WINDOWS\system32\d3dx10_39.dll - Ok

    C:\WINDOWS\system32\d3dxof.dll - Ok

    >C:\WINDOWS\system32\D3DCompiler_39.dll - packed by PESTUB

    C:\WINDOWS\system32\dataclen.dll - Ok

    C:\WINDOWS\system32\datime.dll - Ok

    C:\WINDOWS\system32\davclnt.dll - Ok

    C:\WINDOWS\system32\daxctle.ocx - Ok

    C:\WINDOWS\system32\d3d9.dll - Ok

    C:\WINDOWS\system32\D3DCompiler_39.dll - Ok

    C:\WINDOWS\system32\dbmsrpcn.dll - Ok

    >C:\WINDOWS\system32\dbnmpntw.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dbnmpntw.dll - Ok

    C:\WINDOWS\system32\dbnetlib.dll - Ok

    C:\WINDOWS\system32\dcache.bin - Ok

    C:\WINDOWS\system32\dciman32.dll - Ok

    C:\WINDOWS\system32\dcomcnfg.exe - Ok

    C:\WINDOWS\system32\ddeml.dll - Ok

    C:\WINDOWS\system32\danim.dll - Ok

    C:\WINDOWS\system32\dbgeng.dll - Ok

    C:\WINDOWS\system32\ddrawex.dll - Ok

    >C:\WINDOWS\system32\debug.exe - packed by EXEPACK

    C:\WINDOWS\system32\ddeshare.exe - Ok

    C:\WINDOWS\system32\debug.exe - Ok

    C:\WINDOWS\system32\ddraw.dll - Ok

    C:\WINDOWS\system32\dbghelp.dll - Ok

    C:\WINDOWS\system32\deskadp.dll - Ok

    C:\WINDOWS\system32\desktop.ini - Ok

    C:\WINDOWS\system32\defrag.exe - Ok

    >C:\WINDOWS\system32\deskmon.dll - packed by FLY-CODE

    >C:\WINDOWS\system32\deskperf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\devenum.dll - Ok

    C:\WINDOWS\system32\devmgmt.msc - Ok

    C:\WINDOWS\system32\desk.cpl - Ok

    C:\WINDOWS\system32\deskmon.dll - Ok

    C:\WINDOWS\system32\deskperf.dll - Ok

    C:\WINDOWS\system32\dfrg.msc - Ok

    >C:\WINDOWS\system32\dfrgres.dll is BINARYRES container

    C:\WINDOWS\system32\dfrgres.dll - container

    C:\WINDOWS\system32\dfrgfat.exe - Ok

    C:\WINDOWS\system32\dfrgsnap.dll - Ok

    C:\WINDOWS\system32\dfrgntfs.exe - Ok

    C:\WINDOWS\system32\dfrgui.dll - Ok

    C:\WINDOWS\system32\dgnet.dll - Ok

    C:\WINDOWS\system32\devmgr.dll - Ok

    C:\WINDOWS\system32\dfsshlex.dll - Ok

    C:\WINDOWS\system32\dgsetup.dll - Ok

    C:\WINDOWS\system32\dhcpcsvc.dll - Ok

    C:\WINDOWS\system32\dhcpqec.dll - Ok

    C:\WINDOWS\system32\dgrpsetu.dll - Ok

    C:\WINDOWS\system32\dhcpsapi.dll - Ok

    C:\WINDOWS\system32\diantz.exe - Ok

    C:\WINDOWS\system32\dhcpmon.dll - Ok

    C:\WINDOWS\system32\dimap.dll - Ok

    C:\WINDOWS\system32\digest.dll - Ok

    C:\WINDOWS\system32\dimsntfy.dll - Ok

    C:\WINDOWS\system32\dimsroam.dll - Ok

    C:\WINDOWS\system32\difxapi.dll - Ok

    C:\WINDOWS\system32\diskcomp.com - Ok

    C:\WINDOWS\system32\dfshim.dll - Ok

    C:\WINDOWS\system32\diskcopy.com - Ok

    C:\WINDOWS\system32\diactfrm.dll - Ok

    C:\WINDOWS\system32\dinput8.dll - Ok

    C:\WINDOWS\system32\dinput.dll - Ok

    C:\WINDOWS\system32\diskmgmt.msc - Ok

    C:\WINDOWS\system32\diskperf.exe - Ok

    C:\WINDOWS\system32\dispex.dll - Ok

    C:\WINDOWS\system32\dllhst3g.exe - Ok

    C:\WINDOWS\system32\D3DX9_39.dll - Ok

    C:\WINDOWS\system32\diskpart.exe - Ok

    C:\WINDOWS\system32\dllhost.exe - Ok

    C:\WINDOWS\system32\dmband.dll - Ok

    C:\WINDOWS\system32\dmcompos.dll - Ok

    C:\WINDOWS\system32\dmadmin.exe - Ok

    C:\WINDOWS\system32\dmdskres.dll - Ok

    C:\WINDOWS\system32\dmdlgs.dll - Ok

    C:\WINDOWS\system32\dmdskmgr.dll - Ok

    C:\WINDOWS\system32\dmintf.dll - Ok

    C:\WINDOWS\system32\dmocx.dll - Ok

    C:\WINDOWS\system32\dmime.dll - Ok

    C:\WINDOWS\system32\dmconfig.dll - Ok

    C:\WINDOWS\system32\dmloader.dll - Ok

    C:\WINDOWS\system32\dmscript.dll - Ok

    C:\WINDOWS\system32\dmserver.dll - Ok

    C:\WINDOWS\system32\dmremote.exe - Ok

    >C:\WINDOWS\system32\dmutil.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dmstyle.dll - Ok

    C:\WINDOWS\system32\dmsynth.dll - Ok

    C:\WINDOWS\system32\dmusic.dll - Ok

    C:\WINDOWS\system32\diskcopy.dll - Ok

    C:\WINDOWS\system32\dmview.ocx - Ok

    C:\WINDOWS\system32\dmutil.dll - Ok

    C:\WINDOWS\system32\doskey.exe - Ok

    C:\WINDOWS\system32\dnsrslvr.dll - Ok

    C:\WINDOWS\system32\docprop.dll - Ok

    C:\WINDOWS\system32\docprop2.dll - Ok

    C:\WINDOWS\system32\dot3dlg.dll - Ok

    C:\WINDOWS\system32\dnsapi.dll - Ok

    C:\WINDOWS\system32\dosx.exe - Ok

    C:\WINDOWS\system32\dot3api.dll - Ok

    C:\WINDOWS\system32\dot3cfg.dll - Ok

    C:\WINDOWS\system32\dot3msm.dll - Ok

    C:\WINDOWS\system32\dot3gpclnt.dll - Ok

    C:\WINDOWS\system32\dplay.dll - Ok

    C:\WINDOWS\system32\dpcdll.dll - Ok

    C:\WINDOWS\system32\dot3svc.dll - Ok

    C:\WINDOWS\system32\dpmodemx.dll - Ok

    C:\WINDOWS\system32\dpnaddr.dll - Ok

    C:\WINDOWS\system32\dpnhpast.dll - Ok

    C:\WINDOWS\system32\dplayx.dll - Ok

    C:\WINDOWS\system32\dpnlobby.dll - Ok

    C:\WINDOWS\system32\dplaysvr.exe - Ok

    C:\WINDOWS\system32\dpnhupnp.dll - Ok

    C:\WINDOWS\system32\dpserial.dll - Ok

    C:\WINDOWS\system32\dpnsvr.exe - Ok

    C:\WINDOWS\system32\dot3ui.dll - Ok

    C:\WINDOWS\system32\dpnet.dll - Ok

    C:\WINDOWS\system32\dpnwsock.dll - Ok

    C:\WINDOWS\system32\dpnmodem.dll - Ok

    C:\WINDOWS\system32\dpvacm.dll - Ok

    C:\WINDOWS\system32\dpwsock.dll - Ok

    C:\WINDOWS\system32\dpwsockx.dll - Ok

    C:\WINDOWS\system32\dpvsetup.exe - Ok

    C:\WINDOWS\system32\dpvvox.dll - Ok

    C:\WINDOWS\system32\drmstor.dll - Ok

    C:\WINDOWS\system32\dpvoice.dll - Ok

    C:\WINDOWS\system32\drwatson.exe - Ok

    C:\WINDOWS\system32\drprov.dll - Ok

    C:\WINDOWS\system32\ds16gt.dLL - Ok

    C:\WINDOWS\system32\ds32gt.dll - Ok

    C:\WINDOWS\system32\drmclien.dll - Ok

    C:\WINDOWS\system32\dsauth.dll - Ok

    C:\WINDOWS\system32\dsdmoprp.dll - Ok

    C:\WINDOWS\system32\dskquota.dll - Ok

    C:\WINDOWS\system32\dsdmo.dll - Ok

    C:\WINDOWS\system32\dsound.vxd - Ok

    C:\WINDOWS\system32\drwtsn32.exe - Ok

    C:\WINDOWS\system32\dsprpres.dll - Ok

    C:\WINDOWS\system32\dskquoui.dll - Ok

    C:\WINDOWS\system32\dsprop.dll - Ok

    C:\WINDOWS\system32\dssec.dll - Ok

    C:\WINDOWS\system32\dsound.dll - Ok

    C:\WINDOWS\system32\dsquery.dll - Ok

    C:\WINDOWS\system32\dssenh.dll - Ok

    C:\WINDOWS\system32\drmv2clt.dll - Ok

    C:\WINDOWS\system32\dswave.dll - Ok

    C:\WINDOWS\system32\dsuiext.dll - Ok

    C:\WINDOWS\system32\dssec.dat - Ok

    C:\WINDOWS\system32\dumprep.exe - Ok

    C:\WINDOWS\system32\duser.dll - Ok

    C:\WINDOWS\system32\dvdplay.exe - Ok

    C:\WINDOWS\system32\dvdupgrd.exe - Ok

    C:\WINDOWS\system32\dwwin.exe - Ok

    C:\WINDOWS\system32\dsound3d.dll - Ok

    C:\WINDOWS\system32\dx7vb.dll - Ok

    C:\WINDOWS\system32\dx8vb.dll - Ok

    C:\WINDOWS\system32\dxtmsft.dll - Ok

    C:\WINDOWS\system32\dxmasf.dll - Ok

    C:\WINDOWS\system32\eapolqec.dll - Ok

    >C:\WINDOWS\system32\dxva2.dll - packed by FLY-CODE

    C:\WINDOWS\system32\dxtrans.dll - Ok

    C:\WINDOWS\system32\eappcfg.dll - Ok

    C:\WINDOWS\system32\dxva2.dll - Ok

    C:\WINDOWS\system32\eapp3hst.dll - Ok

    C:\WINDOWS\system32\eappgnui.dll - Ok

    C:\WINDOWS\system32\eappprxy.dll - Ok

    C:\WINDOWS\system32\eapqec.dll - Ok

    C:\WINDOWS\system32\edit.hlp - Ok

    C:\WINDOWS\system32\eapsvc.dll - Ok

    C:\WINDOWS\system32\eapphost.dll - Ok

    >C:\WINDOWS\system32\edlin.exe - packed by EXEPACK

    C:\WINDOWS\system32\edlin.exe - Ok

    >C:\WINDOWS\system32\edit.com - packed by EXEPACK

    C:\WINDOWS\system32\emptyregdb.dat - Ok

    C:\WINDOWS\system32\dxdiag.exe - Ok

    C:\WINDOWS\system32\edit.com - Ok

    C:\WINDOWS\system32\ega.cpi - Ok

    C:\WINDOWS\system32\encapi.dll - Ok

    C:\WINDOWS\system32\ersvc.dll - Ok

    C:\WINDOWS\system32\EqnClass.Dll - Ok

    C:\WINDOWS\system32\els.dll - Ok

    C:\WINDOWS\system32\encdec.dll - Ok

    >C:\WINDOWS\system32\esentprf.dll - packed by FLY-CODE

    C:\WINDOWS\system32\esentprf.hxx - Ok

    C:\WINDOWS\system32\es.dll - Ok

    C:\WINDOWS\system32\esentprf.dll - Ok

    C:\WINDOWS\system32\esentprf.ini - Ok

    C:\WINDOWS\system32\esentutl.exe - Ok

    C:\WINDOWS\system32\eula.txt - Ok

    C:\WINDOWS\system32\eventcls.dll - Ok

    C:\WINDOWS\system32\dxdiagn.dll - Ok

    C:\WINDOWS\system32\eventvwr.exe - Ok

    C:\WINDOWS\system32\eventlog.dll - Ok

    >C:\WINDOWS\system32\exe2bin.exe - packed by EXEPACK

    C:\WINDOWS\system32\eventvwr.msc - Ok

    C:\WINDOWS\system32\exe2bin.exe - Ok

    C:\WINDOWS\system32\eudcedit.exe - Ok

    >C:\WINDOWS\system32\expand.exe - packed by BINARYRES

    >>C:\WINDOWS\system32\expand.exe - packed by MS COMPRESS

    C:\WINDOWS\system32\expand.exe - Ok

    C:\WINDOWS\system32\extmgr.dll - Ok

    C:\WINDOWS\system32\extrac32.exe - Ok

    >C:\WINDOWS\system32\fastopen.exe - packed by EXEPACK

    >>C:\WINDOWS\system32\fastopen.exe - packed by COM2EXE

    Outgoing Malicious IP Blocks. Suspect Infection

    in Resolved Malware Removal Logs

    Posted

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009260.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009266.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009262.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009267.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009264.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009269.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009265.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009261.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009270.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009268.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009271.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009272.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009274.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009273.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009275.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009276.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009277.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009278.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009279.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009280.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009282.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009283.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009281.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009284.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009285.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009286.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009287.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009288.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009289.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009290.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009291.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009292.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009294.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009295.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009293.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009298.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009296.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009299.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009297.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009300.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009301.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009302.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009303.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009304.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009305.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009306.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009307.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009308.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009310.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009311.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009312.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009309.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009313.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009314.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009315.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009316.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009317.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009319.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009318.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009320.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009321.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009322.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009326.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009327.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009323.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009328.exe - packed by UPX

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009330.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009324.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009329.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009333.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009332.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009328.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009336.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009334.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009325.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009337.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009335.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009340.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009341.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009342.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009343.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009344.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009339.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009345.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009346.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009347.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009348.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009350.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009349.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009351.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009338.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009353.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009259.dll is BINARYRES container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009352.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009354.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009355.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009356.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009358.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009357.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009359.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009361.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009362.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009259.dll - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009360.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009363.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009366.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009365.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009364.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009367.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009368.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009369.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009370.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009372.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009373.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009371.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009374.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009375.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009376.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009377.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009378.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009380.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009379.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009381.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009382.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009383.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009384.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009385.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009386.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009387.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009388.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009390.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009391.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009392.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009389.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009394.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009398.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009393.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009397.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009396.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009402.old - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009403.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009404.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009405.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009406.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009407.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009408.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009395.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009409.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009411.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009412.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009413.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009414.ax - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009415.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009401.ocx is BINARYRES container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009401.ocx\data001 is ZLIB container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009401.ocx\data002 is ZLIB container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009401.ocx - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009400.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009417.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009399.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009410.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009416.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009420.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009423.dll - packed by PESTUB

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009423.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009422.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009421.dll - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009425.drv - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009426.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009427.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009428.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009429.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010399.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010400.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010401.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010402.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010403.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010404.properties - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010405.properties - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010406.cfg - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010407.properties - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010408.properties - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010409.properties - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010410.cfg - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010411.ini is JS-HTML container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010411.ini - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010412.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010413.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009419.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010415.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010416.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010417.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010414.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010419.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010420.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010421.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010422.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010423.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009418.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010424.ref:Zone.Identifier - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010424.ref - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010425.ref - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010425.ref:Zone.Identifier - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010427.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010428.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010429.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010430.ini - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010426.sys - packed by BINARYRES

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010426.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010432.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\change.log.2 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009421.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\change.log.3 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\change.log.4 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\MFEX-2.DAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\MFEX-1.DAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009424.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010433.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010435.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010436.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010437.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010438.SDB - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010431.dll is BINARYRES container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010439.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010431.dll - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010440.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010443.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010441.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010444.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010442.SDB - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010446.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010434.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010445.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010448.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010447.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010452.SYS - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010449.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010453.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010455.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010451.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010457.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010454.DLL - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010458.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010460.DLL - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010459.DLL - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010456.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010461.EXE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010464.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010465.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010466.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010467.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010468.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010469.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010470.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010463.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010462.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010471.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\change.log.2 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\snapshot\Repository\FS\INDEX.BTR - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe is BINARYRES container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe\data001 is 7-ZIP archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe\data001 - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe\data002 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe\data002 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0009331.exe - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010475.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010476.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010477.lnk - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010478.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\change.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010474.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1005 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000056.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP25\A0010450.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000057.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000058.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000061.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000059.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000063.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000060.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000064.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000066.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000067.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000068.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000069.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000070.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000071.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000065.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000072.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000073.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000074.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000075.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000076.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000078.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000077.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000079.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000080.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000082.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000081.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000083.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000084.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000085.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000086.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000087.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000088.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000090.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000091.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000089.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000092.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000093.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000094.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000095.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000096.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000097.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000098.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000100.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000099.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000102.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000062.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000101.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000104.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000103.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000106.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000108.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000109.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000110.ver - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000111.inf - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000107.dll - packed by BINARYRES

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000107.dll - packed by MS COMPRESS

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000107.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000113.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000112.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000114.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000116.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000115.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000105.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000118.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000120.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_MACHINE_SAM - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010472.dll is BINARYRES container

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010473.dll is BINARYRES container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000117.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010472.dll - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP26\A0010473.dll - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000121.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000123.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000126.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000127.ver - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000128.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000125.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000122.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000124.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000129.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000130.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000134.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000135.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000133.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000132.dll - packed by BINARYRES

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000132.dll - packed by MS COMPRESS

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000132.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000137.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000136.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000140.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000138.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000141.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000142.INI - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP2\A0000119.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000143.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000139.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\A0000131.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\A0000145.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\A0000144.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP3\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\A0000146.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP4\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000147.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000148.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000150.ppd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP5\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000153.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000154.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000156.ppd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000149.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000155.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000159.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000160.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000161.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000162.ppd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000151.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000152.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000163.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000164.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000167.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000168.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000157.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000170.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000171.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000172.ppd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000173.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000174.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000175.ppd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000176.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000169.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000165.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000179.ver - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000178.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000177.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000182.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000183.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000184.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000185.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000180.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000186.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000187.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000181.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000158.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000189.exe - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000188.dll - packed by BINARYRES

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000188.dll - packed by MS COMPRESS

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000191.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000188.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000194.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe is BINARYRES container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe\data001 is 7-ZIP archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe\data001 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000192.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000195.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000166.dll - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe\data002 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe\data002 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP24\A0010418.exe - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000193.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000197.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000198.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000201.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000203.hlp - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000199.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000204.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000205.gpd - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000206.config - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000196.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000207.config - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000190.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000209.config - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000210.config - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000208.INI - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000202.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000212.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000213.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000215.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000214.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000218.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000216.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000211.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000217.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000221.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000219.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000220.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000222.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000200.dll - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000225.dll is BINARYRES container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000223.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000226.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000227.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000224.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000228.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000229.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000230.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000225.dll - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000231.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000232.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000235.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000233.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000237.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000234.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000236.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000239.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000238.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000241.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000242.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000240.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000247.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000246.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000248.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000251.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000250.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000249.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000243.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000253.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000254.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000252.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000255.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000256.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000258.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000257.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000259.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000260.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000261.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000262.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000263.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000265.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000264.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000266.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000270.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000271.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000272.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000273.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000245.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000275.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000268.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000274.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000277.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000269.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000276.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000280.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000279.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000278.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000283.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000284.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000282.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000281.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000288.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000287.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000285.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000286.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000290.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000289.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000292.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000291.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000294.pdi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000267.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000293.ini - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000244.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000295.sdb - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000299.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000297.DLL - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000298.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000300.exe - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000305.msi is OLE container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000305.msi - container

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000306.msi is OLE container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000306.msi\stream000 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000306.msi\stream000 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000306.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000306.msi - container

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000307.msi is OLE container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000307.msi\stream000 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000307.msi\stream000 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000307.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000307.msi - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000296.EXE - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000309.exe - packed by FLY-CODE

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000308.exe - packed by FLY-CODE

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000309.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000309.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000309.exe - archive

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000304.exe - packed by FLY-CODE

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000308.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000308.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000308.exe - archive

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000304.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000304.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000304.exe - archive

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000312.msi is OLE container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000312.msi - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000313.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000314.msi - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi is OLE container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream000 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream000 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream001 - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000310.exe - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream002 - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000303.exe - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream003 - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000311.exe - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi\stream004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000315.msi - container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000310.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000310.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000310.exe - archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000317.sys - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi is OLE container

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi\stream000 is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi\stream000 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000318.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi\stream001 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000319.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000320.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi\stream002 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000321.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000322.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000323.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi\stream003 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000316.msi - container

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000325.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000324.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000327.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000326.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000328.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\ComDb.Dat - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000311.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000311.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000311.exe - archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000302.exe - packed by FLY-CODE

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\MAPPING2.MAP - Ok

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000303.exe is CAB archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000303.exe - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000303.exe - archive

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\change.log.1 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\RestorePointSize - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\drivetable.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\rp.log - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\domain.txt - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\ComDb.Dat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_MACHINE_SAM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_MACHINE_SECURITY - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_.DEFAULT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_MACHINE_SOFTWARE - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_MACHINE_SYSTEM - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\$WinMgmt.CFG - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2000478354-1425521274-839522115-1004 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\MAPPING.VER - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\INDEX.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\MAPPING2.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\MAPPING1.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\OBJECTS.MAP - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000329.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000330.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\INDEX.BTR - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP7\snapshot\Repository\FS\OBJECTS.DATA - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000334.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000335.PNF - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000331.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000336.CAT - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000338.ver - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000333.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000339.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000332.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000342.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000343.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000344.cat - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000337.sys - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000345.sys - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000341.dll - packed by BINARYRES

    >>C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000341.dll - packed by MS COMPRESS

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000341.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000347.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000348.inf - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000350.dll - Ok

    C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP8\A0000346.sys - Ok

    >C:\System Volume Information\_restore{9E586582-73F2-4E86-A1A7-15BAC21717D1}\RP6\A0000301.exe - packed by FLY-CODE

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.