Trojan.Siggen31.1252

Technical Information

Modifies file system

Creates the following files

%TEMP%\5a4f.tmp\5a50.tmp\5a51.bat
<Current directory>\presentationnative_v0300.jpg
<Current directory>\presentationcffrasterizernative_v0300.jpg
<Current directory>\ppcsnap.jpg
<Current directory>\powrprof.jpg
<Current directory>\powercpl.jpg
<Current directory>\pots.jpg
<Current directory>\portabledevicewmdrm.jpg
<Current directory>\portabledevicewiacompat.jpg
<Current directory>\portabledevicetypes.jpg
<Current directory>\portabledevicesyncprovider.jpg
<Current directory>\portabledevicestatus.jpg
<Current directory>\portabledeviceconnectapi.jpg
<Current directory>\p2psvc.jpg
<Current directory>\portabledeviceclassextension.jpg
<Current directory>\portabledeviceapi.jpg
<Current directory>\pnrpsvc.jpg
<Current directory>\pnrpnsp.jpg
<Current directory>\pnrphc.jpg
<Current directory>\pnrpauto.jpg
<Current directory>\pnpxassocprx.jpg
<Current directory>\pnpxassoc.jpg
<Current directory>\pnpui.jpg
<Current directory>\pnpts.jpg
<Current directory>\pnpsetup.jpg
<Current directory>\pnidui.jpg
<Current directory>\pngfilt.jpg
<Current directory>\presentationhostproxy.jpg
<Current directory>\prflbmsg.jpg
<Current directory>\qcliprov.jpg
<Current directory>\playsndsrv.jpg
<Current directory>\printfilterpipelineprxy.jpg
<Current directory>\qcap.jpg
<Current directory>\qasf.jpg
<Current directory>\qagentrt.jpg
<Current directory>\qagent.jpg
<Current directory>\pwrshplugin.jpg
<Current directory>\puiobj.jpg
<Current directory>\puiapi.jpg
<Current directory>\pstorsvc.jpg
<Current directory>\pstorec.jpg
<Current directory>\psisdecd.jpg
<Current directory>\pshed.jpg
<Current directory>\psbase.jpg
<Current directory>\psapi.jpg
<Current directory>\provthrd.jpg
<Current directory>\provsvc.jpg
<Current directory>\propsys.jpg
<Current directory>\profsvc.jpg
<Current directory>\profprov.jpg
<Current directory>\profapi.jpg
<Current directory>\procinst.jpg
<Current directory>\prntvpt.jpg
<Current directory>\prnntfy.jpg
<Current directory>\prnfldr.jpg
<Current directory>\prncache.jpg
<Current directory>\printui.jpg
<Current directory>\printisolationproxy.jpg
<Current directory>\pmcsnap.jpg
<Current directory>\polstore.jpg
<Current directory>\pla.jpg
<Current directory>\pku2u.jpg
<Current directory>\qdv.jpg
<Current directory>\oleaut32.jpg
<Current directory>\p2p.jpg
<Current directory>\osuninst.jpg
<Current directory>\osbaseln.jpg
<Current directory>\opengl32.jpg
<Current directory>\opcservices.jpg
<Current directory>\oobefldr.jpg
<Current directory>\onlineidcpl.jpg
<Current directory>\onexui.jpg
<Current directory>\onex.jpg
<Current directory>\oleres.jpg
<Current directory>\oleprn.jpg
<Current directory>\oledlg.jpg
<Current directory>\oleaccrc.jpg
<Current directory>\p2pgraph.jpg
<Current directory>\oleacchooks.jpg
<Current directory>\oleacc.jpg
<Current directory>\ole32.jpg
<Current directory>\ogldrv.jpg
<Current directory>\offfilt.jpg
<Current directory>\odbctrac.jpg
<Current directory>\odbcint.jpg
<Current directory>\odbccu32.jpg
<Current directory>\odbccr32.jpg
<Current directory>\odbccp32.jpg
<Current directory>\odbcconf.jpg
<Current directory>\p2pnetsh.jpg
<Current directory>\qdvd.jpg
<Current directory>\packager.jpg
<Current directory>\pautoenr.jpg
<Current directory>\pifmgr.jpg
<Current directory>\p2pcollab.jpg
<Current directory>\pidgenx.jpg
<Current directory>\pid.jpg
<Current directory>\photowiz.jpg
<Current directory>\photometadatahandler.jpg
<Current directory>\perfts.jpg
<Current directory>\perftrack.jpg
<Current directory>\perfproc.jpg
<Current directory>\perfos.jpg
<Current directory>\perfnet.jpg
<Current directory>\perfdisk.jpg
<Current directory>\perfctrs.jpg
<Current directory>\perfcentercpl.jpg
<Current directory>\peerdistwsddiscoprov.jpg
<Current directory>\peerdistsvc.jpg
<Current directory>\peerdistsh.jpg
<Current directory>\peerdisthttptrans.jpg
<Current directory>\peerdist.jpg
<Current directory>\pdhui.jpg
<Current directory>\pdh.jpg
<Current directory>\pcwutl.jpg
<Current directory>\pcwum.jpg
<Current directory>\pcaui.jpg
<Current directory>\pcasvc.jpg
<Current directory>\pcaevts.jpg
<Current directory>\pcadm.jpg
<Current directory>\panmap.jpg
<Current directory>\qedit.jpg
<Current directory>\qedwipes.jpg
<Current directory>\qmgr.jpg
<Current directory>\schannel.jpg
<Current directory>\scext.jpg
<Current directory>\scesrv.jpg
<Current directory>\scecli.jpg
<Current directory>\sccls.jpg
<Current directory>\scavengeui.jpg
<Current directory>\scardsvr.jpg
<Current directory>\scarddlg.jpg
<Current directory>\scansetting.jpg
<Current directory>\sberes.jpg
<Current directory>\sbeio.jpg
<Current directory>\sbe.jpg
<Current directory>\sas.jpg
<Current directory>\samsrv.jpg
<Current directory>\sampleres.jpg
<Current directory>\samlib.jpg
<Current directory>\samcli.jpg
<Current directory>\rtutils.jpg
<Current directory>\rtm.jpg
<Current directory>\rtffilt.jpg
<Current directory>\rstrtmgr.jpg
<Current directory>\rshx32.jpg
<Current directory>\rsaenh.jpg
<Current directory>\rpcss.jpg
<Current directory>\rpcrtremote.jpg
<Current directory>\rpcrt4.jpg
<Current directory>\rpcnsh.jpg
<Current directory>\odbc32gt.jpg
<Current directory>\rpcns4.jpg
<Current directory>\rpcndfp.jpg
<Current directory>\scripto.jpg
<Current directory>\schedcli.jpg
<Current directory>\sensorsapi.jpg
<Current directory>\sensapi.jpg
<Current directory>\sens.jpg
<Current directory>\sendmail.jpg
<Current directory>\security.jpg
<Current directory>\secur32.jpg
<Current directory>\secproc_ssp_isv.jpg
<Current directory>\secproc_ssp.jpg
<Current directory>\secproc_isv.jpg
<Current directory>\secproc.jpg
<Current directory>\seclogon.jpg
<Current directory>\sechost.jpg
<Current directory>\searchfolder.jpg
<Current directory>\sdshext.jpg
<Current directory>\sdrsvc.jpg
<Current directory>\sdohlp.jpg
<Current directory>\sdiagschd.jpg
<Current directory>\sdiagprv.jpg
<Current directory>\sdiageng.jpg
<Current directory>\sdhcinst.jpg
<Current directory>\sdengin2.jpg
<Current directory>\sdcpl.jpg
<Current directory>\sdautoplay.jpg
<Current directory>\scrrun.jpg
<Current directory>\scrptadm.jpg
<Current directory>\scrobj.jpg
<Current directory>\scksp.jpg
<Current directory>\odbcbcp.jpg
<Current directory>\schedsvc.jpg
<Current directory>\sensorsclassextension.jpg
<Current directory>\rasplap.jpg
<Current directory>\rasmxs.jpg
<Current directory>\rasmontr.jpg
<Current directory>\rasmm.jpg
<Current directory>\rasmbmgr.jpg
<Current directory>\rasmans.jpg
<Current directory>\rasman.jpg
<Current directory>\rasgcw.jpg
<Current directory>\rasdlg.jpg
<Current directory>\rasdiag.jpg
<Current directory>\rasctrs.jpg
<Current directory>\raschap.jpg
<Current directory>\rascfg.jpg
<Current directory>\rasauto.jpg
<Current directory>\rasapi32.jpg
<Current directory>\rasadhlp.jpg
<Current directory>\radarrs.jpg
<Current directory>\radardt.jpg
<Current directory>\racpldlg.jpg
<Current directory>\racengn.jpg
<Current directory>\qwave.jpg
<Current directory>\qutil.jpg
<Current directory>\query.jpg
<Current directory>\quartz.jpg
<Current directory>\qsvrmgmt.jpg
<Current directory>\qshvhost.jpg
<Current directory>\qmgrprxy.jpg
<Current directory>\rpcdiag.jpg
<Current directory>\rpchttp.jpg
<Current directory>\rpcepmap.jpg
<Current directory>\rastls.jpg
<Current directory>\rasppp.jpg
<Current directory>\rnr20.jpg
<Current directory>\riched32.jpg
<Current directory>\riched20.jpg
<Current directory>\rgb9rast.jpg
<Current directory>\resutils.jpg
<Current directory>\resampledmo.jpg
<Current directory>\remotepg.jpg
<Current directory>\regsvc.jpg
<Current directory>\regidle.jpg
<Current directory>\regctrl.jpg
<Current directory>\regapi.jpg
<Current directory>\recovery.jpg
<Current directory>\reagent.jpg
<Current directory>\rdpwsx.jpg
<Current directory>\rdpudd.jpg
<Current directory>\rdprefdrvapi.jpg
<Current directory>\rdprefdd.jpg
<Current directory>\rdpendp.jpg
<Current directory>\rdpencom.jpg
<Current directory>\rdpencdd.jpg
<Current directory>\rdpdd.jpg
<Current directory>\rdpd3d.jpg
<Current directory>\rdpcorets.jpg
<Current directory>\rdpcorekmts.jpg
<Current directory>\rdpcore.jpg
<Current directory>\rdpcfgex.jpg
<Current directory>\rastapi.jpg
<Current directory>\msident.jpg
<Current directory>\rasser.jpg
<Current directory>\nlsdata000c.jpg
<Current directory>\mydocs.jpg
<Current directory>\muilanguagecleanup.jpg
<Current directory>\muifontsetup.jpg
<Current directory>\mtxoci.jpg
<Current directory>\mtxex.jpg
<Current directory>\mtxdm.jpg
<Current directory>\mtxclu.jpg
<Current directory>\msyuv.jpg
<Current directory>\msxml6r.jpg
<Current directory>\msxml6.jpg
<Current directory>\msxml3r.jpg
<Current directory>\msxml3.jpg
<Current directory>\msscp.jpg
<Current directory>\mswsock.jpg
<Current directory>\mswmdm.jpg
<Current directory>\msvidc32.jpg
<Current directory>\msvfw32.jpg
<Current directory>\msvcrt.jpg
<Current directory>\msvcr90d.jpg
<Current directory>\msvcr120d.jpg
<Current directory>\msvcr120.jpg
<Current directory>\msvcr110d.jpg
<Current directory>\msvcr110.jpg
<Current directory>\msvcr100_clr0400.jpg
<Current directory>\msvcr100d.jpg
<Current directory>\msvcr100.jpg
<Current directory>\mycomput.jpg
<Current directory>\napcrypt.jpg
<Current directory>\netevent.jpg
<Current directory>\msvcp60.jpg
<Current directory>\napdsnap.jpg
<Current directory>\netdiagfx.jpg
<Current directory>\netcorehc.jpg
<Current directory>\netcfgx.jpg
<Current directory>\netcenter.jpg
<Current directory>\netbios.jpg
<Current directory>\netapi32.jpg
<Current directory>\negoexts.jpg
<Current directory>\ndproxystub.jpg
<Current directory>\ndishc.jpg
<Current directory>\ndiscapcfg.jpg
<Current directory>\ndfhcdiscovery.jpg
<Current directory>\ndfetw.jpg
<Current directory>\ndfapi.jpg
<Current directory>\nddeapi.jpg
<Current directory>\ncsi.jpg
<Current directory>\ncryptui.jpg
<Current directory>\ncrypt.jpg
<Current directory>\ncobjapi.jpg
<Current directory>\nci.jpg
<Current directory>\ncdprop.jpg
<Current directory>\naturallanguage6.jpg
<Current directory>\nativehooks.jpg
<Current directory>\napmontr.jpg
<Current directory>\napipsec.jpg
<Current directory>\napinsp.jpg
<Current directory>\naphlpr.jpg
<Current directory>\msvcp90d.jpg
<Current directory>\msvidctl.jpg
<Current directory>\msvcp140_codecvt_ids.jpg
<Current directory>\msvcp140_atomic_wait.jpg
<Current directory>\netfxperf.jpg
<Current directory>\msmpeg2vdec.jpg
<Current directory>\msrdc.jpg
<Current directory>\msrating.jpg
<Current directory>\msrahc.jpg
<Current directory>\msprivs.jpg
<Current directory>\msports.jpg
<Current directory>\mspbdacoinst.jpg
<Current directory>\mspbda.jpg
<Current directory>\mspatcha.jpg
<Current directory>\msoert2.jpg
<Current directory>\msoeacct.jpg
<Current directory>\msobjs.jpg
<Current directory>\msnetobj.jpg
<Current directory>\msmpeg2enc.jpg
<Current directory>\msrle32.jpg
<Current directory>\msmpeg2adec.jpg
<Current directory>\msmmsp.jpg
<Current directory>\msls31.jpg
<Current directory>\msisip.jpg
<Current directory>\msimtf.jpg
<Current directory>\msimsg.jpg
<Current directory>\msimg32.jpg
<Current directory>\msiltcfg.jpg
<Current directory>\msihnd.jpg
<Current directory>\msieftp.jpg
<Current directory>\msidntld.jpg
<Current directory>\msscntrs.jpg
<Current directory>\neth.jpg
<Current directory>\mssha.jpg
<Current directory>\msshooks.jpg
<Current directory>\msvcp140_2.jpg
<Current directory>\msrdpwebaccess.jpg
<Current directory>\msvcp140_1.jpg
<Current directory>\msvcp140d.jpg
<Current directory>\msvcp140.jpg
<Current directory>\msvcp120d.jpg
<Current directory>\msvcp120.jpg
<Current directory>\msvcp110d.jpg
<Current directory>\msvcp110.jpg
<Current directory>\msvcp100d.jpg
<Current directory>\msvcp100.jpg
<Current directory>\msvcm90d.jpg
<Current directory>\msvcirt.jpg
<Current directory>\msv1_0.jpg
<Current directory>\msutb.jpg
<Current directory>\mstscax.jpg
<Current directory>\mstime.jpg
<Current directory>\mstask.jpg
<Current directory>\msswch.jpg
<Current directory>\mssvp.jpg
<Current directory>\mssrch.jpg
<Current directory>\mssprxy.jpg
<Current directory>\mssphtb.jpg
<Current directory>\mssph.jpg
<Current directory>\mssitlb.jpg
<Current directory>\mssip32.jpg
<Current directory>\mssign32.jpg
<Current directory>\msshavmsg.jpg
<Current directory>\netid.jpg
<Current directory>\netiohlp.jpg
<Current directory>\netjoin.jpg
<Current directory>\nlslexicons0045.jpg
<Current directory>\nlslexicons003e.jpg
<Current directory>\nlslexicons0039.jpg
<Current directory>\nlslexicons002a.jpg
<Current directory>\nlslexicons0027.jpg
<Current directory>\nlslexicons0026.jpg
<Current directory>\nlslexicons0024.jpg
<Current directory>\nlslexicons0022.jpg
<Current directory>\nlslexicons0021.jpg
<Current directory>\nlslexicons0020.jpg
<Current directory>\nlslexicons001d.jpg
<Current directory>\nlslexicons001b.jpg
<Current directory>\nlslexicons001a.jpg
<Current directory>\nlslexicons0019.jpg
<Current directory>\nlslexicons0018.jpg
<Current directory>\nlslexicons0013.jpg
<Current directory>\nlslexicons0011.jpg
<Current directory>\nlslexicons0010.jpg
<Current directory>\nlslexicons000f.jpg
<Current directory>\nlslexicons000d.jpg
<Current directory>\nlslexicons000c.jpg
<Current directory>\nlslexicons000a.jpg
<Current directory>\nlslexicons0009.jpg
<Current directory>\nlslexicons0007.jpg
<Current directory>\nlslexicons0003.jpg
<Current directory>\nlslexicons0002.jpg
<Current directory>\nlslexicons0001.jpg
<Current directory>\ocsetapi.jpg
<Current directory>\nlsdl.jpg
<Current directory>\nlsdata0c1a.jpg
<Current directory>\nlslexicons004a.jpg
<Current directory>\nlslexicons0046.jpg
<Current directory>\objsel.jpg
<Current directory>\ntvdm64.jpg
<Current directory>\ntshrui.jpg
<Current directory>\ntprint.jpg
<Current directory>\ntmarta.jpg
<Current directory>\ntlanui2.jpg
<Current directory>\ntlanman.jpg
<Current directory>\ntdsapi.jpg
<Current directory>\ntdll.jpg
<Current directory>\nsisvc.jpg
<Current directory>\nsi.jpg
<Current directory>\nshwfp.jpg
<Current directory>\nshipsec.jpg
<Current directory>\nshhttp.jpg
<Current directory>\nrpsrv.jpg
<Current directory>\npmproxy.jpg
<Current directory>\normaliz.jpg
<Current directory>\nlsmodels0011.jpg
<Current directory>\nlslexicons0c1a.jpg
<Current directory>\nlslexicons081a.jpg
<Current directory>\nlslexicons0816.jpg
<Current directory>\nlslexicons0416.jpg
<Current directory>\nlslexicons0414.jpg
<Current directory>\nlslexicons004e.jpg
<Current directory>\nlslexicons004c.jpg
<Current directory>\nlslexicons004b.jpg
<Current directory>\nlslexicons0049.jpg
<Current directory>\odbc32.jpg
<Current directory>\nlslexicons0047.jpg
<Current directory>\occache.jpg
<Current directory>\nlsdata0009.jpg
<Current directory>\nlsdata0007.jpg
<Current directory>\nlsdata0003.jpg
<Current directory>\nlsdata0002.jpg
<Current directory>\nlsdata0001.jpg
<Current directory>\nlsdata0000.jpg
<Current directory>\nlsbres.jpg
<Current directory>\nlmsprep.jpg
<Current directory>\nlmgp.jpg
<Current directory>\nlhtml.jpg
<Current directory>\nlasvc.jpg
<Current directory>\nlahc.jpg
<Current directory>\nlaapi.jpg
<Current directory>\newdev.jpg
<Current directory>\networkmap.jpg
<Current directory>\networkitemfactory.jpg
<Current directory>\networkexplorer.jpg
<Current directory>\netutils.jpg
<Current directory>\nettrace.jpg
<Current directory>\netshell.jpg
<Current directory>\netprojw.jpg
<Current directory>\netprofm.jpg
<Current directory>\netprof.jpg
<Current directory>\netplwiz.jpg
<Current directory>\netmsg.jpg
<Current directory>\netman.jpg
<Current directory>\netlogon.jpg
<Current directory>\nlsdata0416.jpg
<Current directory>\nlsdata081a.jpg
<Current directory>\nlsdata0816.jpg
<Current directory>\nlsdata000f.jpg
<Current directory>\nlsdata000a.jpg
<Current directory>\nlsdata0414.jpg
<Current directory>\nlsdata004e.jpg
<Current directory>\nlsdata004c.jpg
<Current directory>\nlsdata004b.jpg
<Current directory>\nlsdata004a.jpg
<Current directory>\nlsdata0049.jpg
<Current directory>\nlsdata0047.jpg
<Current directory>\nlsdata0046.jpg
<Current directory>\nlsdata0045.jpg
<Current directory>\nlsdata003e.jpg
<Current directory>\nlsdata0039.jpg
<Current directory>\nlsdata002a.jpg
<Current directory>\nlsdata0027.jpg
<Current directory>\nlsdata0026.jpg
<Current directory>\nlsdata0024.jpg
<Current directory>\nlsdata0022.jpg
<Current directory>\nlsdata0021.jpg
<Current directory>\nlsdata0020.jpg
<Current directory>\nlsdata001d.jpg
<Current directory>\nlsdata001b.jpg
<Current directory>\nlsdata001a.jpg
<Current directory>\nlsdata0019.jpg
<Current directory>\nlsdata0018.jpg
<Current directory>\nlsdata0013.jpg
<Current directory>\nlsdata0011.jpg
<Current directory>\nlsdata0010.jpg
<Current directory>\nlsdata000d.jpg
<Current directory>\msidle.jpg
<Current directory>\sensorscpl.jpg
<Current directory>\slwga.jpg
<Current directory>\winsrpc.jpg
<Current directory>\winsockhc.jpg
<Current directory>\winshfhc.jpg
<Current directory>\winscard.jpg
<Current directory>\winsatapi.jpg
<Current directory>\winrssrv.jpg
<Current directory>\winrsmgr.jpg
<Current directory>\winrscmd.jpg
<Current directory>\winrnr.jpg
<Current directory>\winnsi.jpg
<Current directory>\winmm.jpg
<Current directory>\winipsec.jpg
<Current directory>\winsta.jpg
<Current directory>\winsrv.jpg
<Current directory>\winfax.jpg
<Current directory>\winethc.jpg
<Current directory>\windowscodecsext.jpg
<Current directory>\windowscodecs.jpg
<Current directory>\windowsaccessbridge-64.jpg
<Current directory>\wincredprovider.jpg
<Current directory>\winbrand.jpg
<Current directory>\winbio.jpg
<Current directory>\win32spl.jpg
<Current directory>\wimgapi.jpg
<Current directory>\wiavideo.jpg
<Current directory>\wiatrace.jpg
<Current directory>\wininet.jpg
<Current directory>\wiascanprofiles.jpg
<Current directory>\winsync.jpg
<Current directory>\wmalfxgfxdsp.jpg
<Current directory>\wmadmoe.jpg
<Current directory>\wmadmod.jpg
<Current directory>\wls0wndh.jpg
<Current directory>\wlgpclnt.jpg
<Current directory>\wldap32.jpg
<Current directory>\wlanutil.jpg
<Current directory>\wlanui.jpg
<Current directory>\wlansvc.jpg
<Current directory>\wlansec.jpg
<Current directory>\wlanpref.jpg
<Current directory>\wlanmsm.jpg
<Current directory>\wlanmm.jpg
<Current directory>\wlaninst.jpg
<Current directory>\wlanhlp.jpg
<Current directory>\wlanhc.jpg
<Current directory>\wlangpui.jpg
<Current directory>\wlandlg.jpg
<Current directory>\wlanconn.jpg
<Current directory>\wlancfg.jpg
<Current directory>\wlanapi.jpg
<Current directory>\wkssvc.jpg
<Current directory>\wksprtps.jpg
<Current directory>\wkscli.jpg
<Current directory>\winusb.jpg
<Current directory>\wintrust.jpg
<Current directory>\winsyncproviders.jpg
<Current directory>\wiashext.jpg
<Current directory>\winhttp.jpg
<Current directory>\wiaservc.jpg
<Current directory>\wiarpc.jpg
<Current directory>\wmcodecdspps.jpg
<Current directory>\wmasf.jpg
<Current directory>\wcneappeerproxy.jpg
<Current directory>\wcneapauthproxy.jpg
<Current directory>\wcncsvc.jpg
<Current directory>\wcnapi.jpg
<Current directory>\wbiosrvc.jpg
<Current directory>\wbemcomn.jpg
<Current directory>\wavemsp.jpg
<Current directory>\wavdest.jpg
<Current directory>\wabsyncprovider.jpg
<Current directory>\w32topl.jpg
<Current directory>\w32time.jpg
<Current directory>\vss_ps.jpg
<Current directory>\vsstrace.jpg
<Current directory>\vssapi.jpg
<Current directory>\vpnikeapi.jpg
<Current directory>\vpnike.jpg
<Current directory>\vmstorfltres.jpg
<Current directory>\vmictimeprovider.jpg
<Current directory>\vmicres.jpg
<Current directory>\vmdcoinstall.jpg
<Current directory>\vmbusres.jpg
<Current directory>\vmbuspipe.jpg
<Current directory>\vmbuscoinstaller.jpg
<Current directory>\virtdisk.jpg
<Current directory>\vidreszr.jpg
<Current directory>\vga.jpg
<Current directory>\wcnnetsh.jpg
<Current directory>\winsyncmetastore.jpg
<Current directory>\wcspluginservice.jpg
<Current directory>\wdc.jpg
<Current directory>\wdi.jpg
<Current directory>\wiadss.jpg
<Current directory>\wiadefui.jpg
<Current directory>\wiaaut.jpg
<Current directory>\whhelper.jpg
<Current directory>\whealogr.jpg
<Current directory>\wfsr.jpg
<Current directory>\wfhc.jpg
<Current directory>\wfapigp.jpg
<Current directory>\wevtsvc.jpg
<Current directory>\wevtfwd.jpg
<Current directory>\wevtapi.jpg
<Current directory>\werui.jpg
<Current directory>\wersvc.jpg
<Current directory>\werdiagcontroller.jpg
<Current directory>\wercplsupport.jpg
<Current directory>\werconcpl.jpg
<Current directory>\wer.jpg
<Current directory>\wecsvc.jpg
<Current directory>\wecapi.jpg
<Current directory>\webservices.jpg
<Current directory>\webio.jpg
<Current directory>\webclnt.jpg
<Current directory>\webcheck.jpg
<Current directory>\wdscore.jpg
<Current directory>\wdigest.jpg
<Current directory>\wdiasqmmodule.jpg
<Current directory>\wiaextensionhost64.jpg
<Current directory>\kbdbu.jpg
<Current directory>\wmdmlog.jpg
<Current directory>\wups.jpg
<Current directory>\wudriver.jpg
<Current directory>\wudfx.jpg
<Current directory>\wudfsvc.jpg
<Current directory>\wudfplatform.jpg
<Current directory>\wudfcoinstaller.jpg
<Current directory>\wucltux.jpg
<Current directory>\wuaueng.jpg
<Current directory>\wuapi.jpg
<Current directory>\wtsapi32.jpg
<Current directory>\wsock32.jpg
<Current directory>\wsnmp32.jpg
<Current directory>\wsmwmipl.jpg
<Current directory>\wsmsvc.jpg
<Current directory>\wsmres.jpg
<Current directory>\wsmplpxy.jpg
<Current directory>\wsmauto.jpg
<Current directory>\wsmanmigrationplugin.jpg
<Current directory>\wshtcpip.jpg
<Current directory>\wshrm.jpg
<Current directory>\wshqos.jpg
<Current directory>\wshnetbs.jpg
<Current directory>\wshirda.jpg
<Current directory>\wship6.jpg
<Current directory>\wshext.jpg
<Current directory>\wshelper.jpg
<Current directory>\wshcon.jpg
<Current directory>\wups2.jpg
<Current directory>\wshbth.jpg
<Current directory>\vfwwdm32.jpg
<Current directory>\wsepno.jpg
<Current directory>\xwtpw32.jpg
<Current directory>\xwtpdui.jpg
<Current directory>\xwreg.jpg
<Current directory>\xwizards.jpg
<Current directory>\xpssvcs.jpg
<Current directory>\xpsshhdr.jpg
<Current directory>\xpsservices.jpg
<Current directory>\xpsrasterservice.jpg
<Current directory>\xpsprint.jpg
<Current directory>\xpsgdiconverter.jpg
<Current directory>\xpsfilt.jpg
<Current directory>\xolehlp.jpg
<Current directory>\xmlprovi.jpg
<Current directory>\xmllite.jpg
<Current directory>\xmlfilter.jpg
<Current directory>\xinput9_1_0.jpg
<Current directory>\wzcdlg.jpg
<Current directory>\wwapi.jpg
<Current directory>\wwansvc.jpg
<Current directory>\wwanprotdim.jpg
<Current directory>\wwanpref.jpg
<Current directory>\wwanmm.jpg
<Current directory>\wwaninst.jpg
<Current directory>\wwanhc.jpg
<Current directory>\wwanconn.jpg
<Current directory>\wwancfg.jpg
<Current directory>\wwanapi.jpg
<Current directory>\wvc.jpg
<Current directory>\wuwebv.jpg
<Current directory>\wcnwiz.jpg
<Current directory>\wsdscanproxy.jpg
<Current directory>\wmvxencd.jpg
<Current directory>\wmvdecod.jpg
<Current directory>\wmvcore.jpg
<Current directory>\wmspdmoe.jpg
<Current directory>\wmspdmod.jpg
<Current directory>\wmsgapi.jpg
<Current directory>\wmpsrcwp.jpg
<Current directory>\wmpshell.jpg
<Current directory>\wmpps.jpg
<Current directory>\wmpmde.jpg
<Current directory>\wmploc.jpg
<Current directory>\wmphoto.jpg
<Current directory>\wmpencen.jpg
<Current directory>\wmpeffects.jpg
<Current directory>\wmpdxm.jpg
<Current directory>\wmpdui.jpg
<Current directory>\wmpcm.jpg
<Current directory>\wmp.jpg
<Current directory>\wmnetmgr.jpg
<Current directory>\wmiprop.jpg
<Current directory>\wmidx.jpg
<Current directory>\wmicmiplugin.jpg
<Current directory>\wmi.jpg
<Current directory>\wmerror.jpg
<Current directory>\wmdrmsdk.jpg
<Current directory>\wmdrmnet.jpg
<Current directory>\wmdrmdev.jpg
<Current directory>\wmvencod.jpg
<Current directory>\wsecedit.jpg
<Current directory>\wmdmps.jpg
<Current directory>\wmvdspa.jpg
<Current directory>\wsdprintproxy.jpg
<Current directory>\wsdmon.jpg
<Current directory>\wsdchngr.jpg
<Current directory>\wsdapi.jpg
<Current directory>\wscsvc.jpg
<Current directory>\wscproxystub.jpg
<Current directory>\wscmisetup.jpg
<Current directory>\wscisvif.jpg
<Current directory>\wscinterop.jpg
<Current directory>\wscapi.jpg
<Current directory>\ws2_32.jpg
<Current directory>\ws2help.jpg
<Current directory>\wpd_ci.jpg
<Current directory>\wpdwcn.jpg
<Current directory>\wpdsp.jpg
<Current directory>\wpdshserviceobj.jpg
<Current directory>\wpdshext.jpg
<Current directory>\wpdbusenum.jpg
<Current directory>\wpcumi.jpg
<Current directory>\wpcsvc.jpg
<Current directory>\wpcmig.jpg
<Current directory>\wpccpl.jpg
<Current directory>\wpcao.jpg
<Current directory>\wpc.jpg
<Current directory>\wow64win.jpg
<Current directory>\wow64cpu.jpg
<Current directory>\wow64.jpg
<Current directory>\wmvsencd.jpg
<Current directory>\wmvsdecd.jpg
<Current directory>\serialui.jpg
<Current directory>\sensrsvc.jpg
<Current directory>\vds_ps.jpg
<Current directory>\storprop.jpg
<Current directory>\sti.jpg
<Current directory>\stclient.jpg
<Current directory>\sstpsvc.jpg
<Current directory>\ssshim.jpg
<Current directory>\sspisrv.jpg
<Current directory>\sspicli.jpg
<Current directory>\ssdpsrv.jpg
<Current directory>\ssdpapi.jpg
<Current directory>\sscore.jpg
<Current directory>\srwmi.jpg
<Current directory>\srvsvc.jpg
<Current directory>\tapi32.jpg
<Current directory>\stobject.jpg
<Current directory>\srpuxnativesnapin.jpg
<Current directory>\srhelper.jpg
<Current directory>\srcore.jpg
<Current directory>\srclient.jpg
<Current directory>\srchadmin.jpg
<Current directory>\sqmapi.jpg
<Current directory>\sqlsrv32.jpg
<Current directory>\sqlcese30.jpg
<Current directory>\sqlceqp30.jpg
<Current directory>\sqlceoledb30.jpg
<Current directory>\spwmp.jpg
<Current directory>\spwizui.jpg
<Current directory>\srvcli.jpg
<Current directory>\storsvc.jpg
<Current directory>\tabbtnex.jpg
<Current directory>\spwizimg.jpg
<Current directory>\tabsvc.jpg
<Current directory>\tabbtn.jpg
<Current directory>\t2embed.jpg
<Current directory>\systemcpl.jpg
<Current directory>\syssetup.jpg
<Current directory>\sysprepmce.jpg
<Current directory>\sysntfy.jpg
<Current directory>\sysmain.jpg
<Current directory>\sysfxui.jpg
<Current directory>\sysclass.jpg
<Current directory>\syncui.jpg
<Current directory>\syncreg.jpg
<Current directory>\syncinfrastructureps.jpg
<Current directory>\syncinfrastructure.jpg
<Current directory>\synchostps.jpg
<Current directory>\synceng.jpg
<Current directory>\synccenter.jpg
<Current directory>\sxsstore.jpg
<Current directory>\sxssrv.jpg
<Current directory>\sxshared.jpg
<Current directory>\sxs.jpg
<Current directory>\sxproxy.jpg
<Current directory>\swprv.jpg
<Current directory>\sud.jpg
<Current directory>\structuredquery.jpg
<Current directory>\streamci.jpg
<Current directory>\spwizres.jpg
<Current directory>\srrstr.jpg
<Current directory>\storagecontexthandler.jpg
<Current directory>\spwizeng.jpg
<Current directory>\spwinsat.jpg
<Current directory>\smartcardcredentialprovider.jpg
<Current directory>\shellstyle.jpg
<Current directory>\sisbkup.jpg
<Current directory>\signdrv.jpg
<Current directory>\shwebsvc.jpg
<Current directory>\shunimpl.jpg
<Current directory>\shsvcs.jpg
<Current directory>\shsetup.jpg
<Current directory>\shpafact.jpg
<Current directory>\shlwapi.jpg
<Current directory>\shimgvw.jpg
<Current directory>\shimeng.jpg
<Current directory>\shgina.jpg
<Current directory>\shfolder.jpg
<Current directory>\shell32.jpg
<Current directory>\tapi3.jpg
<Current directory>\shdocvw.jpg
<Current directory>\sharemediacpl.jpg
<Current directory>\shacct.jpg
<Current directory>\sfc_os.jpg
<Current directory>\sfc.jpg
<Current directory>\setupetw.jpg
<Current directory>\setupcln.jpg
<Current directory>\setupapi.jpg
<Current directory>\setbcdlocale.jpg
<Current directory>\sessenv.jpg
<Current directory>\serwvdrv.jpg
<Current directory>\smiengine.jpg
<Current directory>\tapilua.jpg
<Current directory>\sppwmi.jpg
<Current directory>\sndvolsso.jpg
<Current directory>\slcext.jpg
<Current directory>\slc.jpg
<Current directory>\sppwinob.jpg
<Current directory>\sppuinotify.jpg
<Current directory>\sppobjs.jpg
<Current directory>\sppnp.jpg
<Current directory>\sppinst.jpg
<Current directory>\sppcommdlg.jpg
<Current directory>\sppcomapi.jpg
<Current directory>\sppcext.jpg
<Current directory>\sppcc.jpg
<Current directory>\sppc.jpg
<Current directory>\spp.jpg
<Current directory>\spopk.jpg
<Current directory>\spoolss.jpg
<Current directory>\spnet.jpg
<Current directory>\spinf.jpg
<Current directory>\spfileq.jpg
<Current directory>\sperror.jpg
<Current directory>\spcmsg.jpg
<Current directory>\spbcd.jpg
<Current directory>\sortwindows6compat.jpg
<Current directory>\sortserver2003compat.jpg
<Current directory>\softpub.jpg
<Current directory>\softkbd.jpg
<Current directory>\sntsearch.jpg
<Current directory>\snmpapi.jpg
<Current directory>\smbhelperclass.jpg
<Current directory>\tapimigplugin.jpg
<Current directory>\uxinit.jpg
<Current directory>\trapi.jpg
<Current directory>\uiribbonres.jpg
<Current directory>\uudf.jpg
<Current directory>\utildll.jpg
<Current directory>\usp10.jpg
<Current directory>\userenv.jpg
<Current directory>\usercpl.jpg
<Current directory>\useraccountcontrolsettings.jpg
<Current directory>\user32.jpg
<Current directory>\usbui.jpg
<Current directory>\usbperf.jpg
<Current directory>\usbmon.jpg
<Current directory>\usbceip.jpg
<Current directory>\urlmon.jpg
<Current directory>\url.jpg
<Current directory>\ureg.jpg
<Current directory>\upnphost.jpg
<Current directory>\upnp.jpg
<Current directory>\untfs.jpg
<Current directory>\uniplat.jpg
<Current directory>\unimdmat.jpg
<Current directory>\unattend.jpg
<Current directory>\umrdp.jpg
<Current directory>\umpo.jpg
<Current directory>\umpnpmgr.jpg
<Current directory>\umdmxfrm.jpg
<Current directory>\umb.jpg
<Current directory>\ulib.jpg
<Current directory>\uiribbon.jpg
<Current directory>\uxlib.jpg
<Current directory>\uxlibres.jpg
<Current directory>\uxsms.jpg
<Current directory>\uxtheme.jpg
<Current directory>\vdsutil.jpg
<Current directory>\vdsdyn.jpg
<Current directory>\vdsbas.jpg
<Current directory>\vcruntime140_1.jpg
<Current directory>\vcruntime140d.jpg
<Current directory>\vcruntime140.jpg
<Current directory>\vcomp140.jpg
<Current directory>\vcomp120.jpg
<Current directory>\vcomp110.jpg
<Current directory>\vcomp100.jpg
<Current directory>\vccorlib140d.jpg
<Current directory>\vccorlib140.jpg
<Current directory>\vccorlib120d.jpg
<Current directory>\vccorlib120.jpg
<Current directory>\vccorlib110d.jpg
<Current directory>\vccorlib110.jpg
<Current directory>\vcamp140.jpg
<Current directory>\vcamp120.jpg
<Current directory>\vcamp110.jpg
<Current directory>\vbscript.jpg
<Current directory>\vbame.jpg
<Current directory>\vaultsvc.jpg
<Current directory>\vaultcredprovider.jpg
<Current directory>\vaultcli.jpg
<Current directory>\vault.jpg
<Current directory>\van.jpg
<Current directory>\vdsvd.jpg
<Current directory>\version.jpg
<Current directory>\verifier.jpg
<Current directory>\sti_ci.jpg
<Current directory>\uihub.jpg
<Current directory>\tquery.jpg
<Current directory>\tpmcompc.jpg
<Current directory>\tlscsp.jpg
<Current directory>\timedatemuicallback.jpg
<Current directory>\thumbcache.jpg
<Current directory>\themeui.jpg
<Current directory>\themeservice.jpg
<Current directory>\themecpl.jpg
<Current directory>\thawbrkr.jpg
<Current directory>\termsrv.jpg
<Current directory>\termmgr.jpg
<Current directory>\tdh.jpg
<Current directory>\tcpmonui.jpg
<Current directory>\tcpmon.jpg
<Current directory>\tcpmib.jpg
<Current directory>\tcpipcfg.jpg
<Current directory>\tbssvc.jpg
<Current directory>\tbs.jpg
<Current directory>\taskschdps.jpg
<Current directory>\taskschd.jpg
<Current directory>\taskcomp.jpg
<Current directory>\taskbarcpl.jpg
<Current directory>\tapiui.jpg
<Current directory>\tapisysprep.jpg
<Current directory>\tapisrv.jpg
<Current directory>\tapiperf.jpg
<Current directory>\traffic.jpg
<Current directory>\uicom.jpg
<Current directory>\trkwks.jpg
<Current directory>\tsbyuv.jpg
<Current directory>\tscfgwmi.jpg
<Current directory>\uianimation.jpg
<Current directory>\ufat.jpg
<Current directory>\uexfat.jpg
<Current directory>\udwm.jpg
<Current directory>\udhisapi.jpg
<Current directory>\ucrtbased.jpg
<Current directory>\ucrtbase.jpg
<Current directory>\ucmhc.jpg
<Current directory>\ubpm.jpg
<Current directory>\tzres.jpg
<Current directory>\txfw32.jpg
<Current directory>\txflog.jpg
<Current directory>\twext.jpg
<Current directory>\tvratings.jpg
<Current directory>\tsworkspace.jpg
<Current directory>\tsusbredirectiongrouppolicyextension.jpg
<Current directory>\tsusbgdcoinstaller.jpg
<Current directory>\tssrvlic.jpg
<Current directory>\tspubwmi.jpg
<Current directory>\tspnprdrcoinstaller.jpg
<Current directory>\tspkg.jpg
<Current directory>\tsmf.jpg
<Current directory>\tsgqec.jpg
<Current directory>\tserrredir.jpg
<Current directory>\tsddd.jpg
<Current directory>\tschannel.jpg
<Current directory>\uiautomationcore.jpg
<Current directory>\msidcrl30.jpg
<Current directory>\msicofire.jpg
<Current directory>\msi.jpg
<Current directory>\dinput.jpg
<Current directory>\dimsroam.jpg
<Current directory>\dimsjob.jpg
<Current directory>\difxapi.jpg
<Current directory>\diagperf.jpg
<Current directory>\diagcpl.jpg
<Current directory>\dhcpsapi.jpg
<Current directory>\dhcpqec.jpg
<Current directory>\dhcpcsvc6.jpg
<Current directory>\dhcpcsvc.jpg
<Current directory>\dhcpcore6.jpg
<Current directory>\diskcopy.jpg
<Current directory>\dispex.jpg
<Current directory>\dhcpcore.jpg
<Current directory>\dfshim.jpg
<Current directory>\dfscli.jpg
<Current directory>\dfdts.jpg
<Current directory>\devrtl.jpg
<Current directory>\devobj.jpg
<Current directory>\devmgr.jpg
<Current directory>\deviceuxres.jpg
<Current directory>\devicepairingproxy.jpg
<Current directory>\devicepairinghandler.jpg
<Current directory>\devicepairingfolder.jpg
<Current directory>\devicepairing.jpg
<Current directory>\dhcpcmonitor.jpg
<Current directory>\dfsshlex.jpg
<Current directory>\dot3svc.jpg
<Current directory>\display.jpg
<Current directory>\dot3gpui.jpg
<Current directory>\dot3gpclnt.jpg
<Current directory>\dot3dlg.jpg
<Current directory>\dot3cfg.jpg
<Current directory>\dot3api.jpg
<Current directory>\documentperformanceevents.jpg
<Current directory>\docprop.jpg
<Current directory>\dnsrslvr.jpg
<Current directory>\dnshc.jpg
<Current directory>\dnsext.jpg
<Current directory>\dnscmmc.jpg
<Current directory>\dnsapi.jpg
<Current directory>\dmvscres.jpg
<Current directory>\dmvdsitf.jpg
<Current directory>\dmutil.jpg
<Current directory>\dmusic.jpg
<Current directory>\dmsynth.jpg
<Current directory>\dmrc.jpg
<Current directory>\dmocx.jpg
<Current directory>\dmloader.jpg
<Current directory>\dmintf.jpg
<Current directory>\dmdskres2.jpg
<Current directory>\dmdskres.jpg
<Current directory>\dmdskmgr.jpg
<Current directory>\dmdlgs.jpg
<Current directory>\dll64.jpg
<Current directory>\devicemetadataparsers.jpg
<Current directory>\devicedisplaystatusmanager.jpg
<Current directory>\dispci.jpg
<Current directory>\devicecenter.jpg
<Current directory>\devenum.jpg
<Current directory>\c_g18030.jpg
<Current directory>\cryptdll.jpg
<Current directory>\cscui.jpg
<Current directory>\cscsvc.jpg
<Current directory>\cscobj.jpg
<Current directory>\cscmig.jpg
<Current directory>\cscdll.jpg
<Current directory>\cscapi.jpg
<Current directory>\cryptxml.jpg
<Current directory>\cryptui.jpg
<Current directory>\cryptsvc.jpg
<Current directory>\cryptsp.jpg
<Current directory>\cryptnet.jpg
<Current directory>\cryptext.jpg
<Current directory>\cryptdlg.jpg
<Current directory>\dot3msm.jpg
<Current directory>\cryptbase.jpg
<Current directory>\crypt32.jpg
<Current directory>\crppresentation.jpg
<Current directory>\credui.jpg
<Current directory>\credssp.jpg
<Current directory>\cpfilters.jpg
<Current directory>\correngine.jpg
<Current directory>\corpol.jpg
<Current directory>\console.jpg
<Current directory>\connect.jpg
<Current directory>\concrt140d.jpg
<Current directory>\c_is2022.jpg
<Current directory>\c_iscii.jpg
<Current directory>\dot3hc.jpg
<Current directory>\d3d10.jpg
<Current directory>\d2d1.jpg
<Current directory>\csrsrv.jpg
<Current directory>\deskmon.jpg
<Current directory>\deskadp.jpg
<Current directory>\defragsvc.jpg
<Current directory>\defragproxy.jpg
<Current directory>\defaultlocationcpl.jpg
<Current directory>\ddrawex.jpg
<Current directory>\ddraw.jpg
<Current directory>\ddores.jpg
<Current directory>\ddoiproxy.jpg
<Current directory>\ddaclsys.jpg
<Current directory>\dciman32.jpg
<Current directory>\dbnmpntw.jpg
<Current directory>\dbnetlib.jpg
<Current directory>\dbghelp.jpg
<Current directory>\dbgeng.jpg
<Current directory>\davhlpr.jpg
<Current directory>\davclnt.jpg
<Current directory>\dataclen.jpg
<Current directory>\d3d9.jpg
<Current directory>\d3d8thk.jpg
<Current directory>\d3d11.jpg
<Current directory>\d3d10_1core.jpg
<Current directory>\d3d10_1.jpg
<Current directory>\d3d10warp.jpg
<Current directory>\d3d10level9.jpg
<Current directory>\d3d10core.jpg
<Current directory>\deskperf.jpg
<Current directory>\dot3ui.jpg
<Current directory>\dpapiprovider.jpg
<Current directory>\fdwcn.jpg
<Current directory>\fdssdp.jpg
<Current directory>\fdrespub.jpg
<Current directory>\fdproxy.jpg
<Current directory>\fdprint.jpg
<Current directory>\fdpnp.jpg
<Current directory>\fdphost.jpg
<Current directory>\fdeploy.jpg
<Current directory>\fde.jpg
<Current directory>\fdbthproxy.jpg
<Current directory>\fdbth.jpg
<Current directory>\faultrep.jpg
<Current directory>\f3ahvoas.jpg
<Current directory>\explorerframe.jpg
<Current directory>\evr.jpg
<Current directory>\eventcls.jpg
<Current directory>\esentprf.jpg
<Current directory>\esent.jpg
<Current directory>\es.jpg
<Current directory>\eqossnap.jpg
<Current directory>\energy.jpg
<Current directory>\encdump.jpg
<Current directory>\encdec.jpg
<Current directory>\encapi.jpg
<Current directory>\elstrans.jpg
<Current directory>\elslad.jpg
<Current directory>\elscore.jpg
<Current directory>\fdwnet.jpg
<Current directory>\els.jpg
<Current directory>\concrt140.jpg
<Current directory>\ehstorshell.jpg
<Current directory>\fwremotesvr.jpg
<Current directory>\fwpuclnt.jpg
<Current directory>\fwcfg.jpg
<Current directory>\fvewiz.jpg
<Current directory>\fveui.jpg
<Current directory>\fverecover.jpg
<Current directory>\fvecpl.jpg
<Current directory>\fvecerts.jpg
<Current directory>\fveapibase.jpg
<Current directory>\fveapi.jpg
<Current directory>\fundisc.jpg
<Current directory>\fthsvc.jpg
<Current directory>\framedynos.jpg
<Current directory>\framedyn.jpg
<Current directory>\framebuf.jpg
<Current directory>\fphc.jpg
<Current directory>\fontsub.jpg
<Current directory>\fontext.jpg
<Current directory>\fntcache.jpg
<Current directory>\fms.jpg
<Current directory>\fmifs.jpg
<Current directory>\fm20enu.jpg
<Current directory>\fm20.jpg
<Current directory>\fltlib.jpg
<Current directory>\firewallcontrolpanel.jpg
<Current directory>\firewallapi.jpg
<Current directory>\findnetprinters.jpg
<Current directory>\feclient.jpg
<Current directory>\fdwsd.jpg
<Current directory>\fxsapi.jpg
<Current directory>\ehstorapi.jpg
<Current directory>\dui70.jpg
<Current directory>\dssec.jpg
<Current directory>\dsrole.jpg
<Current directory>\dsquery.jpg
<Current directory>\dsprop.jpg
<Current directory>\dsound.jpg
<Current directory>\dskquoui.jpg
<Current directory>\dskquota.jpg
<Current directory>\dshowrdpfilter.jpg
<Current directory>\dsdmo.jpg
<Current directory>\dsauth.jpg
<Current directory>\ds32gt.jpg
<Current directory>\drvstore.jpg
<Current directory>\drttransport.jpg
<Current directory>\drtprov.jpg
<Current directory>\drt.jpg
<Current directory>\drprov.jpg
<Current directory>\drmv2clt.jpg
<Current directory>\drmmgrtn.jpg
<Current directory>\dpx.jpg
<Current directory>\dps.jpg
<Current directory>\dpnlobby.jpg
<Current directory>\dpnhupnp.jpg
<Current directory>\dpnhpast.jpg
<Current directory>\dpnet.jpg
<Current directory>\dpnathlp.jpg
<Current directory>\dpnaddr.jpg
<Current directory>\dsuiext.jpg
<Current directory>\ehstorpwdmgr.jpg
<Current directory>\comuid.jpg
<Current directory>\dssenh.jpg
<Current directory>\efsutil.jpg
<Current directory>\efssvc.jpg
<Current directory>\efslsaext.jpg
<Current directory>\efscore.jpg
<Current directory>\efsadu.jpg
<Current directory>\eapsvc.jpg
<Current directory>\eapqec.jpg
<Current directory>\eappprxy.jpg
<Current directory>\eapphost.jpg
<Current directory>\eappgnui.jpg
<Current directory>\eappcfg.jpg
<Current directory>\eapp3hst.jpg
<Current directory>\dxva2.jpg
<Current directory>\dxtrans.jpg
<Current directory>\dxtmsft.jpg
<Current directory>\dxptasksync.jpg
<Current directory>\dxptaskringtone.jpg
<Current directory>\dxpps.jpg
<Current directory>\dxp.jpg
<Current directory>\dxmasf.jpg
<Current directory>\dxgi.jpg
<Current directory>\dxdiagn.jpg
<Current directory>\dwrite.jpg
<Current directory>\dwmredir.jpg
<Current directory>\dwmcore.jpg
<Current directory>\dwmapi.jpg
<Current directory>\duser.jpg
<Current directory>\dtsh.jpg
<Current directory>\dswave.jpg
<Current directory>\filemgmt.jpg
<Current directory>\comsnap.jpg
<Current directory>\circoinst.jpg
<Current directory>\api-ms-win-crt-string-l1-1-0.jpg
<Current directory>\api-ms-win-crt-stdio-l1-1-0.jpg
<Current directory>\api-ms-win-crt-runtime-l1-1-0.jpg
<Current directory>\api-ms-win-crt-process-l1-1-0.jpg
<Current directory>\api-ms-win-crt-private-l1-1-0.jpg
<Current directory>\api-ms-win-crt-multibyte-l1-1-0.jpg
<Current directory>\api-ms-win-crt-math-l1-1-0.jpg
<Current directory>\api-ms-win-crt-locale-l1-1-0.jpg
<Current directory>\api-ms-win-crt-heap-l1-1-0.jpg
<Current directory>\api-ms-win-crt-filesystem-l1-1-0.jpg
<Current directory>\api-ms-win-crt-environment-l1-1-0.jpg
<Current directory>\api-ms-win-crt-utility-l1-1-0.jpg
<Current directory>\api-ms-win-security-base-l1-1-0.jpg
<Current directory>\api-ms-win-crt-convert-l1-1-0.jpg
<Current directory>\api-ms-win-core-xstate-l1-1-0.jpg
<Current directory>\api-ms-win-core-util-l1-1-0.jpg
<Current directory>\api-ms-win-core-ums-l1-1-0.jpg
<Current directory>\api-ms-win-core-timezone-l1-1-0.jpg
<Current directory>\api-ms-win-core-threadpool-l1-1-0.jpg
<Current directory>\api-ms-win-core-sysinfo-l1-1-0.jpg
<Current directory>\api-ms-win-core-synch-l1-2-0.jpg
<Current directory>\api-ms-win-core-synch-l1-1-0.jpg
<Current directory>\api-ms-win-core-string-l1-1-0.jpg
<Current directory>\api-ms-win-core-rtlsupport-l1-1-0.jpg
<Current directory>\api-ms-win-core-profile-l1-1-0.jpg
<Current directory>\api-ms-win-crt-conio-l1-1-0.jpg
<Current directory>\api-ms-win-core-xstate-l2-1-0.jpg
<Current directory>\audiosrv.jpg
<Current directory>\api-ms-win-security-lsalookup-l1-1-0.jpg
<Current directory>\audioeng.jpg
<Current directory>\atmlib.jpg
<Current directory>\atmfd.jpg
<Current directory>\atl110.jpg
<Current directory>\atl100.jpg
<Current directory>\atl.jpg
<Current directory>\asycfilt.jpg
<Current directory>\aspnet_counters.jpg
<Current directory>\asferror.jpg
<Current directory>\apss.jpg
<Current directory>\appmgr.jpg
<Current directory>\appmgmts.jpg
<Current directory>\appinfo.jpg
<Current directory>\appidsvc.jpg
<Current directory>\appidpolicyengineapi.jpg
<Current directory>\appidapi.jpg
<Current directory>\apphlpdm.jpg
<Current directory>\apphelp.jpg
<Current directory>\apisetschema.jpg
<Current directory>\apircl.jpg
<Current directory>\apilogen.jpg
<Current directory>\api-ms-win-service-winsvc-l1-1-0.jpg
<Current directory>\api-ms-win-service-management-l2-1-0.jpg
<Current directory>\api-ms-win-service-management-l1-1-0.jpg
<Current directory>\api-ms-win-service-core-l1-1-0.jpg
<Current directory>\api-ms-win-security-sddl-l1-1-0.jpg
<Current directory>\api-ms-win-core-processthreads-l1-1-1.jpg
<Current directory>\api-ms-win-core-processthreads-l1-1-0.jpg
<Current directory>\api-ms-win-eventing-provider-l1-1-0.jpg
<Current directory>\api-ms-win-core-processenvironment-l1-1-0.jpg
<Current directory>\api-ms-win-core-namedpipe-l1-1-0.jpg
<Current directory>\adtschema.jpg
<Current directory>\acppage.jpg
<Current directory>\adsmsext.jpg
<Current directory>\adsldpc.jpg
<Current directory>\adsldp.jpg
<Current directory>\adprovider.jpg
<Current directory>\admtmpl.jpg
<Current directory>\admparse.jpg
<Current directory>\actxprxy.jpg
<Current directory>\activeds.jpg
<Current directory>\actionqueue.jpg
<Current directory>\actioncentercpl.jpg
<Current directory>\actioncenter.jpg
<Current directory>\acproxy.jpg
<Current directory>\aclui.jpg
<Current directory>\audioses.jpg
<Current directory>\acledit.jpg
<Current directory>\acctres.jpg
<Current directory>\accessibilitycpl.jpg
<Current directory>\aaclient.jpg
<Current directory>\utorrent.jpg
<Current directory>\tcm851ax32.jpg
<Current directory>\calc.jpg
%TEMP%\w_19096.bat
<SYSTEM32>\svchost_19096.exe
nul
%TEMP%\rootkit_log.txt
<Current directory>\advapi32.jpg
<Current directory>\advpack.jpg
<Current directory>\audiokse.jpg
<Current directory>\aeevts.jpg
<Current directory>\aecache.jpg
<Current directory>\adsnt.jpg
<Current directory>\api-ms-win-core-memory-l1-1-0.jpg
<Current directory>\api-ms-win-core-localregistry-l1-1-0.jpg
<Current directory>\api-ms-win-core-localization-l1-2-0.jpg
<Current directory>\api-ms-win-core-localization-l1-1-0.jpg
<Current directory>\api-ms-win-core-libraryloader-l1-1-0.jpg
<Current directory>\api-ms-win-core-io-l1-1-0.jpg
<Current directory>\api-ms-win-core-interlocked-l1-1-0.jpg
<Current directory>\api-ms-win-core-heap-l1-1-0.jpg
<Current directory>\api-ms-win-core-handle-l1-1-0.jpg
<Current directory>\api-ms-win-core-file-l2-1-0.jpg
<Current directory>\api-ms-win-core-file-l1-2-0.jpg
<Current directory>\api-ms-win-core-file-l1-1-0.jpg
<Current directory>\api-ms-win-core-fibers-l1-1-0.jpg
<Current directory>\api-ms-win-core-errorhandling-l1-1-0.jpg
<Current directory>\api-ms-win-core-delayload-l1-1-0.jpg
<Current directory>\api-ms-win-core-debug-l1-1-0.jpg
<Current directory>\api-ms-win-core-datetime-l1-1-0.jpg
<Current directory>\api-ms-win-core-console-l1-1-0.jpg
<Current directory>\apds.jpg
<Current directory>\amxread.jpg
<Current directory>\amstream.jpg
<Current directory>\alttab.jpg
<Current directory>\aepic.jpg
<Current directory>\aepdu.jpg
<Current directory>\aelupsvc.jpg
<Current directory>\aeinv.jpg
<Current directory>\api-ms-win-core-misc-l1-1-0.jpg
<Current directory>\auditcse.jpg
<Current directory>\auditnativesnapin.jpg
<Current directory>\chtbrkr.jpg
<Current directory>\chsbrkr.jpg
<Current directory>\chkwudrv.jpg
<Current directory>\cfgmgr32.jpg
<Current directory>\cfgbkend.jpg
<Current directory>\cewmdm.jpg
<Current directory>\certprop.jpg
<Current directory>\certpoleng.jpg
<Current directory>\certmgr.jpg
<Current directory>\certenrollui.jpg
<Current directory>\certenroll.jpg
<Current directory>\certenc.jpg
<Current directory>\certcredprovider.jpg
<Current directory>\certcli.jpg
<Current directory>\cdosys.jpg
<Current directory>\cdd.jpg
<Current directory>\cca.jpg
<Current directory>\catsrvut.jpg
<Current directory>\catsrvps.jpg
<Current directory>\catsrv.jpg
<Current directory>\capisp.jpg
<Current directory>\capiprovider.jpg
<Current directory>\cabview.jpg
<Current directory>\cabinet.jpg
<Current directory>\bwunpairelevated.jpg
<Current directory>\bwcontexthandler.jpg
<Current directory>\btpanui.jpg
<Current directory>\chxreadingstringime.jpg
<Current directory>\bthserv.jpg
<Current directory>\comsvcs.jpg
<Current directory>\bthpancontexthandler.jpg
<Current directory>\comres.jpg
<Current directory>\comrepl.jpg
<Current directory>\compstui.jpg
<Current directory>\comdlg32.jpg
<Current directory>\comctl32.jpg
<Current directory>\comcat.jpg
<Current directory>\colorui.jpg
<Current directory>\colorcnv.jpg
<Current directory>\colbact.jpg
<Current directory>\cofiredm.jpg
<Current directory>\cnvfat.jpg
<Current directory>\cngprovider.jpg
<Current directory>\cngaudit.jpg
<Current directory>\cmutil.jpg
<Current directory>\cmstplua.jpg
<Current directory>\cmpbk32.jpg
<Current directory>\cmlua.jpg
<Current directory>\cmipnpinstall.jpg
<Current directory>\cmifw.jpg
<Current directory>\cmicryptinstall.jpg
<Current directory>\cmdial32.jpg
<Current directory>\cmcfg32.jpg
<Current directory>\clusapi.jpg
<Current directory>\cliconfg.jpg
<Current directory>\clfsw32.jpg
<Current directory>\clbcatq.jpg
<Current directory>\clb.jpg
<Current directory>\cic.jpg
<Current directory>\ci.jpg
<Current directory>\fxscom.jpg
<Current directory>\bthmtpcontexthandler.jpg
<Current directory>\bderepair.jpg
<Current directory>\bcdprov.jpg
<Current directory>\batt.jpg
<Current directory>\batmeter.jpg
<Current directory>\basesrv.jpg
<Current directory>\basecsp.jpg
<Current directory>\azsqlext.jpg
<Current directory>\azroleui.jpg
<Current directory>\azroles.jpg
<Current directory>\axinstsv.jpg
<Current directory>\avrt.jpg
<Current directory>\avifil32.jpg
<Current directory>\avicap32.jpg
<Current directory>\auxiliarydisplayservices.jpg
<Current directory>\auxiliarydisplaydriverlib.jpg
<Current directory>\auxiliarydisplaycpl.jpg
<Current directory>\auxiliarydisplayclassinstaller.jpg
<Current directory>\auxiliarydisplayapi.jpg
<Current directory>\autoplay.jpg
<Current directory>\authz.jpg
<Current directory>\authui.jpg
<Current directory>\authfwwizfwk.jpg
<Current directory>\authfwsnapin.jpg
<Current directory>\authfwgp.jpg
<Current directory>\authfwcfg.jpg
<Current directory>\auditpolmsg.jpg
<Current directory>\auditpolicygpinterop.jpg
<Current directory>\bcrypt.jpg
<Current directory>\bthpanapi.jpg
<Current directory>\api-ms-win-crt-time-l1-1-0.jpg
<Current directory>\bcdsrv.jpg
<Current directory>\bthci.jpg
<Current directory>\browseui.jpg
<Current directory>\browser.jpg
<Current directory>\browcli.jpg
<Current directory>\bridgeres.jpg
<Current directory>\brdgcfg.jpg
<Current directory>\brcoinst.jpg
<Current directory>\bootvid.jpg
<Current directory>\bootstr.jpg
<Current directory>\bootres.jpg
<Current directory>\blb_ps.jpg
<Current directory>\blbres.jpg
<Current directory>\blbevents.jpg
<Current directory>\blackbox.jpg
<Current directory>\bitsprx6.jpg
<Current directory>\bitsprx5.jpg
<Current directory>\bitsprx4.jpg
<Current directory>\bitsprx3.jpg
<Current directory>\bitsprx2.jpg
<Current directory>\bitsperf.jpg
<Current directory>\bitsigd.jpg
<Current directory>\biocredprov.jpg
<Current directory>\biocpl.jpg
<Current directory>\bidispl.jpg
<Current directory>\bfe.jpg
<Current directory>\bdeui.jpg
<Current directory>\bdesvc.jpg
<Current directory>\bdehdcfglib.jpg
<Current directory>\bcryptprimitives.jpg
<Current directory>\dinput8.jpg
<Current directory>\fxscomex.jpg
<Current directory>\mapi32.jpg
<Current directory>\mciavi32.jpg
<Current directory>\magnification.jpg
<Current directory>\lz32.jpg
<Current directory>\luainstall.jpg
<Current directory>\lsmproxy.jpg
<Current directory>\lscshostpolicy.jpg
<Current directory>\lsasrv.jpg
<Current directory>\lpksetupproxyserv.jpg
<Current directory>\lpk.jpg
<Current directory>\logoncli.jpg
<Current directory>\loghours.jpg
<Current directory>\locationapi.jpg
<Current directory>\mfc110.jpg
<Current directory>\mapistub.jpg
<Current directory>\localsec.jpg
<Current directory>\loadperf.jpg
<Current directory>\lmhsvc.jpg
<Current directory>\lltdsvc.jpg
<Current directory>\lltdres.jpg
<Current directory>\lltdapi.jpg
<Current directory>\listsvc.jpg
<Current directory>\linkinfo.jpg
<Current directory>\licmgr10.jpg
<Current directory>\laprxy.jpg
<Current directory>\langcleanupsysprepaction.jpg
<Current directory>\l2sechc.jpg
<Current directory>\localui.jpg
<Current directory>\mcicda.jpg
<Current directory>\mfc100kor.jpg
<Current directory>\l2gpstore.jpg
<Current directory>\mfc100rus.jpg
<Current directory>\mfc100jpn.jpg
<Current directory>\mfc100ita.jpg
<Current directory>\mfc100fra.jpg
<Current directory>\mfc100esn.jpg
<Current directory>\mfc100enu.jpg
<Current directory>\mfc100deu.jpg
<Current directory>\mfc100cht.jpg
<Current directory>\mfc100chs.jpg
<Current directory>\mfc100.jpg
<Current directory>\mfaacenc.jpg
<Current directory>\mf3216.jpg
<Current directory>\mf.jpg
<Current directory>\memdiag.jpg
<Current directory>\mediametadatahandler.jpg
<Current directory>\mdminst.jpg
<Current directory>\mcxdriv.jpg
<Current directory>\mcx2svc.jpg
<Current directory>\mcupdate_genuineintel.jpg
<Current directory>\mcupdate_authenticamd.jpg
<Current directory>\mctres.jpg
<Current directory>\mcsrchph.jpg
<Current directory>\mcmde.jpg
<Current directory>\mciwave.jpg
<Current directory>\mciseq.jpg
<Current directory>\mciqtz32.jpg
<Current directory>\l2nacp.jpg
<Current directory>\localspl.jpg
<Current directory>\mcewmdrmndbootstrap.jpg
<Current directory>\ktmw32.jpg
<Current directory>\ksuser.jpg
<Current directory>\kbdughr.jpg
<Current directory>\kbdsorst.jpg
<Current directory>\kbdtiprc.jpg
<Current directory>\kbdth3.jpg
<Current directory>\kbdth2.jpg
<Current directory>\kbdth1.jpg
<Current directory>\kbdth0.jpg
<Current directory>\kbdtat.jpg
<Current directory>\kbdtajik.jpg
<Current directory>\kbdsyr2.jpg
<Current directory>\kbdsyr1.jpg
<Current directory>\kbdsw09.jpg
<Current directory>\kbdsw.jpg
<Current directory>\kbdsp.jpg
<Current directory>\kbdsors1.jpg
<Current directory>\mfc100u.jpg
<Current directory>\kbdsorex.jpg
<Current directory>\kbdsn1.jpg
<Current directory>\kbdsmsno.jpg
<Current directory>\kbdsmsfi.jpg
<Current directory>\kbdsl1.jpg
<Current directory>\kbdsl.jpg
<Current directory>\kbdsg.jpg
<Current directory>\kbdsf.jpg
<Current directory>\kbdru1.jpg
<Current directory>\kbdru.jpg
<Current directory>\kbdrost.jpg
<Current directory>\kbduk.jpg
<Current directory>\mfc110chs.jpg
<Current directory>\korwbrkr.jpg
<Current directory>\kbdukx.jpg
<Current directory>\kbdtuq.jpg
<Current directory>\kbdtuf.jpg
<Current directory>\kmsvc.jpg
<Current directory>\keymgr.jpg
<Current directory>\keyiso.jpg
<Current directory>\kernelceip.jpg
<Current directory>\kernelbase.jpg
<Current directory>\kernel32.jpg
<Current directory>\kerberos.jpg
<Current directory>\kdusb.jpg
<Current directory>\kdcom.jpg
<Current directory>\kd1394.jpg
<Current directory>\kbdycl.jpg
<Current directory>\kbdycc.jpg
<Current directory>\kbdyba.jpg
<Current directory>\kbdyak.jpg
<Current directory>\kbdwol.jpg
<Current directory>\kbdvntc.jpg
<Current directory>\kbduzb.jpg
<Current directory>\kbdusx.jpg
<Current directory>\kbdusr.jpg
<Current directory>\kbdusl.jpg
<Current directory>\kbdusa.jpg
<Current directory>\kbdus.jpg
<Current directory>\kbdurdu.jpg
<Current directory>\kbdur1.jpg
<Current directory>\kbdur.jpg
<Current directory>\kbdughr1.jpg
<Current directory>\mfc110cht.jpg
<Current directory>\msafd.jpg
<Current directory>\mfc140fra.jpg
<Current directory>\miguiresource.jpg
<Current directory>\msacm32.jpg
<Current directory>\msac3enc.jpg
<Current directory>\msaatext.jpg
<Current directory>\mpssvc.jpg
<Current directory>\mprmsg.jpg
<Current directory>\mprdim.jpg
<Current directory>\mprddm.jpg
<Current directory>\mprapi.jpg
<Current directory>\mpr.jpg
<Current directory>\mpg4decd.jpg
<Current directory>\mp4sdecd.jpg
<Current directory>\mp43decd.jpg
<Current directory>\mp3dmod.jpg
<Current directory>\moricons.jpg
<Current directory>\montr_ci.jpg
<Current directory>\modemui.jpg
<Current directory>\mmres.jpg
<Current directory>\mmdevapi.jpg
<Current directory>\mmcss.jpg
<Current directory>\mmcshext.jpg
<Current directory>\mmcndmgr.jpg
<Current directory>\mmcico.jpg
<Current directory>\mmci.jpg
<Current directory>\mmcbase.jpg
<Current directory>\mlang.jpg
<Current directory>\mimefilt.jpg
<Current directory>\migisol.jpg
<Current directory>\msasn1.jpg
<Current directory>\msaudite.jpg
<Current directory>\mscandui.jpg
<Current directory>\mscat32.jpg
<Current directory>\mshtmled.jpg
<Current directory>\mshtml.jpg
<Current directory>\msftedit.jpg
<Current directory>\msfeedsbs.jpg
<Current directory>\msfeeds.jpg
<Current directory>\msdtcvsp1res.jpg
<Current directory>\msdtcuiu.jpg
<Current directory>\msdtctm.jpg
<Current directory>\msdtcprx.jpg
<Current directory>\msdtclog.jpg
<Current directory>\msdtckrm.jpg
<Current directory>\msdrm.jpg
<Current directory>\msdri.jpg
<Current directory>\msdmo.jpg
<Current directory>\msdelta.jpg
<Current directory>\msdart.jpg
<Current directory>\msdadiag.jpg
<Current directory>\msctfui.jpg
<Current directory>\msctfp.jpg
<Current directory>\msctfmonitor.jpg
<Current directory>\msctf.jpg
<Current directory>\mscories.jpg
<Current directory>\mscorier.jpg
<Current directory>\mscoree.jpg
<Current directory>\mscms.jpg
<Current directory>\msclmd.jpg
<Current directory>\mshtmler.jpg
<Current directory>\kbdturme.jpg
<Current directory>\kbdropr.jpg
<Current directory>\kbdpo.jpg
<Current directory>\midimap.jpg
<Current directory>\mfc140enu.jpg
<Current directory>\mfc140deu.jpg
<Current directory>\mfc140cht.jpg
<Current directory>\mfc140chs.jpg
<Current directory>\mfc140.jpg
<Current directory>\mfc120u.jpg
<Current directory>\mfc120rus.jpg
<Current directory>\mfc120kor.jpg
<Current directory>\mfc120jpn.jpg
<Current directory>\mfc120ita.jpg
<Current directory>\mfc120fra.jpg
<Current directory>\mfc120esn.jpg
<Current directory>\mfc120enu.jpg
<Current directory>\mfc120deu.jpg
<Current directory>\mfc120cht.jpg
<Current directory>\mfc120chs.jpg
<Current directory>\mfc120.jpg
<Current directory>\mfc110u.jpg
<Current directory>\mfc110rus.jpg
<Current directory>\mfc110kor.jpg
<Current directory>\mfc110jpn.jpg
<Current directory>\mfc110ita.jpg
<Current directory>\mfc110fra.jpg
<Current directory>\mfc110esn.jpg
<Current directory>\mfc110enu.jpg
<Current directory>\mfc110deu.jpg
<Current directory>\mfc140esn.jpg
<Current directory>\microsoft-windows-kernel-processor-power-events.jpg
<Current directory>\mfc140ita.jpg
<Current directory>\mfc140jpn.jpg
<Current directory>\mfc140kor.jpg
<Current directory>\microsoft-windows-hal-events.jpg
<Current directory>\mgmtapi.jpg
<Current directory>\mfwmaaec.jpg
<Current directory>\mfvdsp.jpg
<Current directory>\mfreadwrite.jpg
<Current directory>\mfps.jpg
<Current directory>\mfplay.jpg
<Current directory>\mfplat.jpg
<Current directory>\mfmjpegdec.jpg
<Current directory>\mfh264enc.jpg
<Current directory>\mferror.jpg
<Current directory>\mfdvdec.jpg
<Current directory>\mfds.jpg
<Current directory>\mfcsubs.jpg
<Current directory>\mfcm140u.jpg
<Current directory>\mfcm140.jpg
<Current directory>\mfcm120u.jpg
<Current directory>\mfcm120.jpg
<Current directory>\mfcm110u.jpg
<Current directory>\mfcm110.jpg
<Current directory>\mfcm100u.jpg
<Current directory>\mfcm100.jpg
<Current directory>\mfc42u.jpg
<Current directory>\mfc42.jpg
<Current directory>\mfc140u.jpg
<Current directory>\mfc140rus.jpg
<Current directory>\microsoft-windows-kernel-power-events.jpg
<Current directory>\kbdro.jpg
<Current directory>\kbdpl1.jpg
<Current directory>\fxscompose.jpg
<Current directory>\icmui.jpg
<Current directory>\imapi.jpg
<Current directory>\imagesp1.jpg
<Current directory>\imageres.jpg
<Current directory>\imagehlp.jpg
<Current directory>\ikeext.jpg
<Current directory>\igddiag.jpg
<Current directory>\ifsutilx.jpg
<Current directory>\ifsutil.jpg
<Current directory>\ifmon.jpg
<Current directory>\ieui.jpg
<Current directory>\iesysprep.jpg
<Current directory>\iesetup.jpg
<Current directory>\iertutil.jpg
<Current directory>\iernonce.jpg
<Current directory>\iepeers.jpg
<Current directory>\ieframe.jpg
<Current directory>\iedkcs32.jpg
<Current directory>\ieapfltr.jpg
<Current directory>\ieakui.jpg
<Current directory>\ieaksie.jpg
<Current directory>\ieakeng.jpg
<Current directory>\idstore.jpg
<Current directory>\idndl.jpg
<Current directory>\idlisten.jpg
<Current directory>\icsigd.jpg
<Current directory>\iconcodecservice.jpg
<Current directory>\hgcpl.jpg
<Current directory>\imapi2fs.jpg
<Current directory>\imgutil.jpg
<Current directory>\imjp10k.jpg
<Current directory>\imm32.jpg
<Current directory>\iscsiexe.jpg
<Current directory>\iscsied.jpg
<Current directory>\iscsidsc.jpg
<Current directory>\iscsicpl.jpg
<Current directory>\irmon.jpg
<Current directory>\irclass.jpg
<Current directory>\ipsmsnap.jpg
<Current directory>\ipsecsvc.jpg
<Current directory>\ipsecsnp.jpg
<Current directory>\iprtrmgr.jpg
<Current directory>\iprtprio.jpg
<Current directory>\ipnathlp.jpg
<Current directory>\iphlpsvc.jpg
<Current directory>\iphlpapi.jpg
<Current directory>\ipbusenumproxy.jpg
<Current directory>\ipbusenum.jpg
<Current directory>\iologmsg.jpg
<Current directory>\inseng.jpg
<Current directory>\input.jpg
<Current directory>\inked.jpg
<Current directory>\infocardapi.jpg
<Current directory>\inetres.jpg
<Current directory>\inetppui.jpg
<Current directory>\inetpp.jpg
<Current directory>\inetmib1.jpg
<Current directory>\inetcomm.jpg
<Current directory>\iscsilog.jpg
<Current directory>\zipfldr.jpg
<Current directory>\iscsium.jpg
<Current directory>\icfupgd.jpg
<Current directory>\gdi32.jpg
<Current directory>\hal.jpg
<Current directory>\groupinghc.jpg
<Current directory>\gptext.jpg
<Current directory>\gpsvc.jpg
<Current directory>\gpscript.jpg
<Current directory>\gpprnext.jpg
<Current directory>\gpprefcl.jpg
<Current directory>\gpedit.jpg
<Current directory>\gpapi.jpg
<Current directory>\glu32.jpg
<Current directory>\glmf32.jpg
<Current directory>\getuname.jpg
<Current directory>\gcdef.jpg
<Current directory>\hcproviders.jpg
<Current directory>\gameuxlegacygdfs.jpg
<Current directory>\gameux.jpg
<Current directory>\gacinstall.jpg
<Current directory>\fxsutility.jpg
<Current directory>\fxstiff.jpg
<Current directory>\fxst30.jpg
<Current directory>\fxsst.jpg
<Current directory>\fxsroute.jpg
<Current directory>\fxsresm.jpg
<Current directory>\fxsmon.jpg
<Current directory>\fxsevent.jpg
<Current directory>\fxscomposeres.jpg
<Current directory>\icm32.jpg
<Current directory>\icmp.jpg
<Current directory>\helppaneproxy.jpg
<Current directory>\hhsetup.jpg
<Current directory>\hbaapi.jpg
<Current directory>\iccoinstall.jpg
<Current directory>\icardres.jpg
<Current directory>\icardie.jpg
<Current directory>\icaapi.jpg
<Current directory>\iassvcs.jpg
<Current directory>\iassdo.jpg
<Current directory>\iassam.jpg
<Current directory>\iasrecst.jpg
<Current directory>\iasrad.jpg
<Current directory>\iaspolcy.jpg
<Current directory>\iasnap.jpg
<Current directory>\iasmigplugin.jpg
<Current directory>\iashlpr.jpg
<Current directory>\iasdatastore.jpg
<Current directory>\iasads.jpg
<Current directory>\iasacct.jpg
<Current directory>\ias.jpg
<Current directory>\htui.jpg
<Current directory>\httpapi.jpg
<Current directory>\hotstartuseragent.jpg
<Current directory>\hotplug.jpg
<Current directory>\hnetmon.jpg
<Current directory>\hnetcfg.jpg
<Current directory>\hlink.jpg
<Current directory>\hidserv.jpg
<Current directory>\hid.jpg
<Current directory>\hgprint.jpg
<Current directory>\wwanadvui.jpg
<Current directory>\iscsiwmi.jpg
<Current directory>\itvdata.jpg
<Current directory>\kbdjpn.jpg
<Current directory>\kbdiulat.jpg
<Current directory>\kbdit142.jpg
<Current directory>\kbdit.jpg
<Current directory>\kbdir.jpg
<Current directory>\kbdinuk2.jpg
<Current directory>\kbdintel.jpg
<Current directory>\kbdintam.jpg
<Current directory>\kbdinpun.jpg
<Current directory>\kbdinori.jpg
<Current directory>\kbdinmar.jpg
<Current directory>\kbdinmal.jpg
<Current directory>\kbdinkan.jpg
<Current directory>\kbdinhin.jpg
<Current directory>\kbdinguj.jpg
<Current directory>\kbdindev.jpg
<Current directory>\kbdinben.jpg
<Current directory>\kbdinbe2.jpg
<Current directory>\kbdinbe1.jpg
<Current directory>\kbdinasa.jpg
<Current directory>\kbdic.jpg
<Current directory>\kbdibo.jpg
<Current directory>\kbdibm02.jpg
<Current directory>\kbdhu1.jpg
<Current directory>\kbdhu.jpg
<Current directory>\kbdhept.jpg
<Current directory>\kbdhela3.jpg
<Current directory>\itircl.jpg
<Current directory>\kbdhela2.jpg
<Current directory>\kbdheb.jpg
<Current directory>\kbdkyr.jpg
<Current directory>\kbdkaz.jpg
<Current directory>\kbdpl.jpg
<Current directory>\kbdpash.jpg
<Current directory>\kbdnso.jpg
<Current directory>\kbdno1.jpg
<Current directory>\kbdno.jpg
<Current directory>\kbdnepr.jpg
<Current directory>\kbdnecnt.jpg
<Current directory>\kbdnecat.jpg
<Current directory>\kbdnec95.jpg
<Current directory>\kbdnec.jpg
<Current directory>\kbdne.jpg
<Current directory>\kbdmonmo.jpg
<Current directory>\kbdmon.jpg
<Current directory>\kbdmlt48.jpg
<Current directory>\kbdmlt47.jpg
<Current directory>\kbdmaori.jpg
<Current directory>\kbdmacst.jpg
<Current directory>\kbdmac.jpg
<Current directory>\kbdlv1.jpg
<Current directory>\kbdlv.jpg
<Current directory>\kbdlt2.jpg
<Current directory>\kbdlt1.jpg
<Current directory>\kbdlt.jpg
<Current directory>\kbdlk41a.jpg
<Current directory>\kbdlao.jpg
<Current directory>\kbdla.jpg
<Current directory>\kbdkor.jpg
<Current directory>\itss.jpg
<Current directory>\kbdkhmr.jpg
<Current directory>\imapi2.jpg
<Current directory>\kbdblr.jpg
<Current directory>\kbdbhc.jpg
<Current directory>\kbdbgph1.jpg
<Current directory>\kbdbgph.jpg
<Current directory>\kbdbene.jpg
<Current directory>\kbdbe.jpg
<Current directory>\kbdbash.jpg
<Current directory>\kbdazel.jpg
<Current directory>\kbdaze.jpg
<Current directory>\kbdax2.jpg
<Current directory>\kbdarmw.jpg
<Current directory>\kbdarme.jpg
<Current directory>\kbdal.jpg
<Current directory>\kbda3.jpg
<Current directory>\kbda2.jpg
<Current directory>\kbda1.jpg
<Current directory>\kbd106n.jpg
<Current directory>\kbd106.jpg
<Current directory>\kbd103.jpg
<Current directory>\kbd101c.jpg
<Current directory>\kbd101b.jpg
<Current directory>\kbd101a.jpg
<Current directory>\kbd101.jpg
<Current directory>\jsproxy.jpg
<Current directory>\jscript.jpg
<Current directory>\jnwmon.jpg
<Current directory>\iyuv_32.jpg
<Current directory>\kbdhe.jpg
<Current directory>\kbdhe319.jpg
<Current directory>\kbdhe220.jpg
<Current directory>\kbdca.jpg
<Current directory>\kbdbr.jpg
<Current directory>\kbdhau.jpg
<Current directory>\kbdgrlnd.jpg
<Current directory>\kbdgr1.jpg
<Current directory>\kbdgr.jpg
<Current directory>\kbdgkl.jpg
<Current directory>\kbdgeoqw.jpg
<Current directory>\kbdgeoer.jpg
<Current directory>\kbdgeo.jpg
<Current directory>\kbdgae.jpg
<Current directory>\kbdfr.jpg
<Current directory>\kbdfo.jpg
<Current directory>\kbdfi1.jpg
<Current directory>\kbdfi.jpg
<Current directory>\kbdfc.jpg
<Current directory>\kbdfa.jpg
<Current directory>\kbdest.jpg
<Current directory>\kbdes.jpg
<Current directory>\kbddv.jpg
<Current directory>\kbddiv2.jpg
<Current directory>\kbddiv1.jpg
<Current directory>\kbdda.jpg
<Current directory>\kbdcz2.jpg
<Current directory>\kbdcz1.jpg
<Current directory>\kbdcz.jpg
<Current directory>\kbdcr.jpg
<Current directory>\kbdcan.jpg
<Current directory>\kbdbulg.jpg
%TEMP%\t_19096.bat

Sets the 'hidden' attribute to the following files

<SYSTEM32>\svchost_19096.exe
%TEMP%\w_19096.bat

Deletes the following files

%TEMP%\t_19096.bat

Moves the following system files

from <SYSTEM32>\aspnet_counters.dll to <SYSTEM32>\aspnet_counters.jpg
from <SYSTEM32>\msvcr100_clr0400.dll to <SYSTEM32>\msvcr100_clr0400.jpg
from <SYSTEM32>\msvcr100d.dll to <SYSTEM32>\msvcr100d.jpg
from <SYSTEM32>\msvcr100.dll to <SYSTEM32>\msvcr100.jpg
from <SYSTEM32>\msvcp90d.dll to <SYSTEM32>\msvcp90d.jpg
from <SYSTEM32>\msvcp140_codecvt_ids.dll to <SYSTEM32>\msvcp140_codecvt_ids.jpg
from <SYSTEM32>\msvcp140_atomic_wait.dll to <SYSTEM32>\msvcp140_atomic_wait.jpg
from <SYSTEM32>\msvcp140_2.dll to <SYSTEM32>\msvcp140_2.jpg
from <SYSTEM32>\msvcp140_1.dll to <SYSTEM32>\msvcp140_1.jpg
from <SYSTEM32>\msvcp140d.dll to <SYSTEM32>\msvcp140d.jpg
from <SYSTEM32>\msvcp140.dll to <SYSTEM32>\msvcp140.jpg
from <SYSTEM32>\msvcp120d.dll to <SYSTEM32>\msvcp120d.jpg
from <SYSTEM32>\msvcp120.dll to <SYSTEM32>\msvcp120.jpg
from <SYSTEM32>\msvcr110.dll to <SYSTEM32>\msvcr110.jpg
from <SYSTEM32>\msvcp110d.dll to <SYSTEM32>\msvcp110d.jpg
from <SYSTEM32>\msvcp100d.dll to <SYSTEM32>\msvcp100d.jpg
from <SYSTEM32>\msvcp100.dll to <SYSTEM32>\msvcp100.jpg
from <SYSTEM32>\msvcm90d.dll to <SYSTEM32>\msvcm90d.jpg
from <SYSTEM32>\msclmd.dll to <SYSTEM32>\msclmd.jpg
from <SYSTEM32>\mfcm140u.dll to <SYSTEM32>\mfcm140u.jpg
from <SYSTEM32>\mfcm140.dll to <SYSTEM32>\mfcm140.jpg
from <SYSTEM32>\mfcm120u.dll to <SYSTEM32>\mfcm120u.jpg
from <SYSTEM32>\mfcm120.dll to <SYSTEM32>\mfcm120.jpg
from <SYSTEM32>\mfcm110u.dll to <SYSTEM32>\mfcm110u.jpg
from <SYSTEM32>\mfcm110.dll to <SYSTEM32>\mfcm110.jpg
from <SYSTEM32>\mfcm100u.dll to <SYSTEM32>\mfcm100u.jpg
from <SYSTEM32>\mfcm100.dll to <SYSTEM32>\mfcm100.jpg
from <SYSTEM32>\msvcp110.dll to <SYSTEM32>\msvcp110.jpg
from <SYSTEM32>\vccorlib140d.dll to <SYSTEM32>\vccorlib140d.jpg
from <SYSTEM32>\vmstorfltres.dll to <SYSTEM32>\vmstorfltres.jpg
from <SYSTEM32>\msvcr120d.dll to <SYSTEM32>\msvcr120d.jpg
from <SYSTEM32>\vmictimeprovider.dll to <SYSTEM32>\vmictimeprovider.jpg
from <SYSTEM32>\vmicres.dll to <SYSTEM32>\vmicres.jpg
from <SYSTEM32>\vmdcoinstall.dll to <SYSTEM32>\vmdcoinstall.jpg
from <SYSTEM32>\vmbusres.dll to <SYSTEM32>\vmbusres.jpg
from <SYSTEM32>\vmbuspipe.dll to <SYSTEM32>\vmbuspipe.jpg
from <SYSTEM32>\vmbuscoinstaller.dll to <SYSTEM32>\vmbuscoinstaller.jpg
from <SYSTEM32>\vcruntime140_1.dll to <SYSTEM32>\vcruntime140_1.jpg
from <SYSTEM32>\vcruntime140d.dll to <SYSTEM32>\vcruntime140d.jpg
from <SYSTEM32>\vcruntime140.dll to <SYSTEM32>\vcruntime140.jpg
from <SYSTEM32>\vcomp140.dll to <SYSTEM32>\vcomp140.jpg
from <SYSTEM32>\vcomp120.dll to <SYSTEM32>\vcomp120.jpg
from <SYSTEM32>\vcomp110.dll to <SYSTEM32>\vcomp110.jpg
from <SYSTEM32>\mfc140u.dll to <SYSTEM32>\mfc140u.jpg
from <SYSTEM32>\vcomp100.dll to <SYSTEM32>\vcomp100.jpg
from <SYSTEM32>\vccorlib140.dll to <SYSTEM32>\vccorlib140.jpg
from <SYSTEM32>\vccorlib120d.dll to <SYSTEM32>\vccorlib120d.jpg
from <SYSTEM32>\vccorlib120.dll to <SYSTEM32>\vccorlib120.jpg
from <SYSTEM32>\vccorlib110d.dll to <SYSTEM32>\vccorlib110d.jpg
from <SYSTEM32>\vccorlib110.dll to <SYSTEM32>\vccorlib110.jpg
from <SYSTEM32>\vcamp140.dll to <SYSTEM32>\vcamp140.jpg
from <SYSTEM32>\vcamp120.dll to <SYSTEM32>\vcamp120.jpg
from <SYSTEM32>\vcamp110.dll to <SYSTEM32>\vcamp110.jpg
from <SYSTEM32>\vbame.dll to <SYSTEM32>\vbame.jpg
from <SYSTEM32>\ucrtbased.dll to <SYSTEM32>\ucrtbased.jpg
from <SYSTEM32>\streamci.dll to <SYSTEM32>\streamci.jpg
from <SYSTEM32>\msvcr90d.dll to <SYSTEM32>\msvcr90d.jpg
from <SYSTEM32>\msvcr110d.dll to <SYSTEM32>\msvcr110d.jpg
from <SYSTEM32>\msvcr120.dll to <SYSTEM32>\msvcr120.jpg
from <SYSTEM32>\mfc140rus.dll to <SYSTEM32>\mfc140rus.jpg
from <SYSTEM32>\mfc110enu.dll to <SYSTEM32>\mfc110enu.jpg
from <SYSTEM32>\mfc110chs.dll to <SYSTEM32>\mfc110chs.jpg
from <SYSTEM32>\mfc110.dll to <SYSTEM32>\mfc110.jpg
from <SYSTEM32>\mfc100u.dll to <SYSTEM32>\mfc100u.jpg
from <SYSTEM32>\mfc100rus.dll to <SYSTEM32>\mfc100rus.jpg
from <SYSTEM32>\mfc100kor.dll to <SYSTEM32>\mfc100kor.jpg
from <SYSTEM32>\mfc100jpn.dll to <SYSTEM32>\mfc100jpn.jpg
from <SYSTEM32>\mfc100ita.dll to <SYSTEM32>\mfc100ita.jpg
from <SYSTEM32>\mfc100fra.dll to <SYSTEM32>\mfc100fra.jpg
from <SYSTEM32>\mfc100esn.dll to <SYSTEM32>\mfc100esn.jpg
from <SYSTEM32>\mfc100enu.dll to <SYSTEM32>\mfc100enu.jpg
from <SYSTEM32>\mfc100deu.dll to <SYSTEM32>\mfc100deu.jpg
from <SYSTEM32>\mfc100cht.dll to <SYSTEM32>\mfc100cht.jpg
from <SYSTEM32>\mfc110cht.dll to <SYSTEM32>\mfc110cht.jpg
from <SYSTEM32>\mfc100chs.dll to <SYSTEM32>\mfc100chs.jpg
from <SYSTEM32>\iscsilog.dll to <SYSTEM32>\iscsilog.jpg
from <SYSTEM32>\iccoinstall.dll to <SYSTEM32>\iccoinstall.jpg
from <SYSTEM32>\fm20enu.dll to <SYSTEM32>\fm20enu.jpg
from <SYSTEM32>\fm20.dll to <SYSTEM32>\fm20.jpg
from <SYSTEM32>\dmvscres.dll to <SYSTEM32>\dmvscres.jpg
from <SYSTEM32>\dll64.dll to <SYSTEM32>\dll64.jpg
from <SYSTEM32>\concrt140d.dll to <SYSTEM32>\concrt140d.jpg
from <SYSTEM32>\concrt140.dll to <SYSTEM32>\concrt140.jpg
from <SYSTEM32>\circoinst.dll to <SYSTEM32>\circoinst.jpg
from <SYSTEM32>\brcoinst.dll to <SYSTEM32>\brcoinst.jpg
from <SYSTEM32>\atl110.dll to <SYSTEM32>\atl110.jpg
from <SYSTEM32>\atl100.dll to <SYSTEM32>\atl100.jpg
from <SYSTEM32>\mfc100.dll to <SYSTEM32>\mfc100.jpg
from <SYSTEM32>\mfc120fra.dll to <SYSTEM32>\mfc120fra.jpg
from <SYSTEM32>\mfc140jpn.dll to <SYSTEM32>\mfc140jpn.jpg
from <SYSTEM32>\mfc110esn.dll to <SYSTEM32>\mfc110esn.jpg
from <SYSTEM32>\mfc140ita.dll to <SYSTEM32>\mfc140ita.jpg
from <SYSTEM32>\mfc140fra.dll to <SYSTEM32>\mfc140fra.jpg
from <SYSTEM32>\mfc140esn.dll to <SYSTEM32>\mfc140esn.jpg
from <SYSTEM32>\mfc140enu.dll to <SYSTEM32>\mfc140enu.jpg
from <SYSTEM32>\mfc140deu.dll to <SYSTEM32>\mfc140deu.jpg
from <SYSTEM32>\mfc140cht.dll to <SYSTEM32>\mfc140cht.jpg
from <SYSTEM32>\mfc140chs.dll to <SYSTEM32>\mfc140chs.jpg
from <SYSTEM32>\mfc140.dll to <SYSTEM32>\mfc140.jpg
from <SYSTEM32>\mfc120u.dll to <SYSTEM32>\mfc120u.jpg
from <SYSTEM32>\mfc120rus.dll to <SYSTEM32>\mfc120rus.jpg
from <SYSTEM32>\mfc120kor.dll to <SYSTEM32>\mfc120kor.jpg
from <SYSTEM32>\mfc120jpn.dll to <SYSTEM32>\mfc120jpn.jpg
from <SYSTEM32>\mfc140kor.dll to <SYSTEM32>\mfc140kor.jpg
from <SYSTEM32>\mfc120ita.dll to <SYSTEM32>\mfc120ita.jpg
from <SYSTEM32>\mfc120esn.dll to <SYSTEM32>\mfc120esn.jpg
from <SYSTEM32>\mfc120enu.dll to <SYSTEM32>\mfc120enu.jpg
from <SYSTEM32>\mfc120deu.dll to <SYSTEM32>\mfc120deu.jpg
from <SYSTEM32>\mfc120cht.dll to <SYSTEM32>\mfc120cht.jpg
from <SYSTEM32>\mfc120chs.dll to <SYSTEM32>\mfc120chs.jpg
from <SYSTEM32>\mfc120.dll to <SYSTEM32>\mfc120.jpg
from <SYSTEM32>\mfc110u.dll to <SYSTEM32>\mfc110u.jpg
from <SYSTEM32>\mfc110rus.dll to <SYSTEM32>\mfc110rus.jpg
from <SYSTEM32>\mfc110kor.dll to <SYSTEM32>\mfc110kor.jpg
from <SYSTEM32>\mfc110jpn.dll to <SYSTEM32>\mfc110jpn.jpg
from <SYSTEM32>\mfc110ita.dll to <SYSTEM32>\mfc110ita.jpg
from <SYSTEM32>\mfc110fra.dll to <SYSTEM32>\mfc110fra.jpg
from <SYSTEM32>\mfc110deu.dll to <SYSTEM32>\mfc110deu.jpg
from <SYSTEM32>\windowsaccessbridge-64.dll to <SYSTEM32>\windowsaccessbridge-64.jpg

Miscellaneous

Executes the following

'<SYSTEM32>\cmd.exe' /c "%TEMP%\5A4F.tmp\5A50.tmp\5A51.bat <Full path to file>"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Mwb".exe" >nul"
'<SYSTEM32>\find.exe' ""Mwb".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""MaxS".exe" >nul"
'<SYSTEM32>\find.exe' ""MaxS".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Sang".exe" >nul"
'<SYSTEM32>\find.exe' ""Sang".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""SecA".exe" >nul"
'<SYSTEM32>\find.exe' ""SecA".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Sent".exe" >nul"
'<SYSTEM32>\find.exe' ""Sent".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Skyh".exe" >nul"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Elas".exe" >nul"
'<SYSTEM32>\find.exe' ""Elas".exe"
'<SYSTEM32>\find.exe' ""Skyh".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Teht".exe" >nul"
'<SYSTEM32>\find.exe' ""Teht".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Trap".exe" >nul"
'<SYSTEM32>\find.exe' ""Trap".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Trel".exe" >nul"
'<SYSTEM32>\find.exe' ""Trel".exe"
'<SYSTEM32>\attrib.exe' +h +s +r "<SYSTEM32>\svchost_19096.exe"
'<SYSTEM32>\attrib.exe' +h +s +r "%TEMP%\w_19096.bat"
'<SYSTEM32>\cmd.exe' /c dir "<SYSTEM32>\*.dll" /b /a-d 2>nul
'<SYSTEM32>\attrib.exe' -h -s "%TEMP%\w_19096.bat"
'<SYSTEM32>\cmd.exe' /c "call "%TEMP%\t_19096.bat""
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Soph".exe" >nul"
'<SYSTEM32>\find.exe' ""Soph".exe"
'<SYSTEM32>\find.exe' ""Deep".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Deep".exe" >nul"
'<SYSTEM32>\find.exe' ""Cynt".exe"
'<SYSTEM32>\net1.exe' session
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""MsMp".exe" >nul"
'<SYSTEM32>\tasklist.exe'
'<SYSTEM32>\find.exe' ""MsMp".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Avst".exe" >nul"
'<SYSTEM32>\find.exe' ""Avst".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""avp".exe" >nul"
'<SYSTEM32>\find.exe' ""avp".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Nort".exe" >nul"
'<SYSTEM32>\find.exe' ""Nort".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""McSh".exe" >nul"
'<SYSTEM32>\ping.exe' -n 6 127.0.0.1
'<SYSTEM32>\net.exe' session
'<SYSTEM32>\find.exe' ""McSh".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""avgw".exe" >nul"
'<SYSTEM32>\find.exe' ""avgw".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""fsma".exe" >nul"
'<SYSTEM32>\find.exe' ""fsma".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Bkav".exe" >nul"
'<SYSTEM32>\find.exe' ""Bkav".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""csfal".exe" >nul"
'<SYSTEM32>\find.exe' ""csfal".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Cyln".exe" >nul"
'<SYSTEM32>\find.exe' ""Cyln".exe"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""Cynt".exe" >nul"
'<SYSTEM32>\cmd.exe' /c "tasklist | find ""egui".exe" >nul"
'<SYSTEM32>\find.exe' ""egui".exe"
'<SYSTEM32>\ping.exe' -n 300 127.0.0.1
'<SYSTEM32>\cmd.exe' /c "%TEMP%\5A4F.tmp\5A50.tmp\5A51.bat <Full path to file>"' (with hidden window)

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней