Trojan.Encoder.24940

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'google' = '<Full path to file>'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\desktop.ini.trobibtc218
%HOMEPATH%\Start Menu\Programs\Startup\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\trobibtc218.txt

Modifies file system:

Creates the following files:

<SYSTEM32>\key01.sys.new
<SYSTEM32>\dllcache\dplaysvr.exe.new
<SYSTEM32>\dllcache\dpnsvr.exe.new
<SYSTEM32>\dllcache\dpvsetup.exe.new
<SYSTEM32>\keyboard.sys.new
<SYSTEM32>\ipxroute.exe.new
<SYSTEM32>\ipsec6.exe.new
<SYSTEM32>\dllcache\dmremote.exe.new
<SYSTEM32>\dllcache\doskey.exe.new
<SYSTEM32>\dllcache\dosx.exe.new
<SYSTEM32>\ipv6.exe.new
<SYSTEM32>\dllcache\drwtsn32.exe.new
<SYSTEM32>\oembios.dat.trobibtc218
<SYSTEM32>\openfiles.exe.trobibtc218
<SYSTEM32>\locator.exe.new
<SYSTEM32>\osk.exe.trobibtc218
<SYSTEM32>\lnkstub.exe.new
<SYSTEM32>\dllcache\drvqry.exe.new
<SYSTEM32>\krnl386.exe.new
<SYSTEM32>\label.exe.new
<SYSTEM32>\dllcache\drwatson.exe.new
<SYSTEM32>\lights.exe.new
<SYSTEM32>\ipconfig.exe.new
<SYSTEM32>\himem.sys.new
<SYSTEM32>\help.exe.new
<SYSTEM32>\dllcache\debug.exe.new
<SYSTEM32>\dllcache\defrag.exe.new
<SYSTEM32>\hostname.exe.new
<SYSTEM32>\dllcache\ddeshare.exe.new
<SYSTEM32>\gpresult.exe.new
<SYSTEM32>\dllcache\country.sys.new
<SYSTEM32>\gpupdate.exe.new
<SYSTEM32>\grpconv.exe.new
<SYSTEM32>\dllcache\dcomcnfg.exe.new
<SYSTEM32>\iexpress.exe.new
<SYSTEM32>\dllcache\dllhost.exe.new
<SYSTEM32>\dllcache\dllhst3g.exe.new
<SYSTEM32>\imapi.exe.new
<SYSTEM32>\dllcache\dmadmin.exe.new
<SYSTEM32>\dllcache\diskperf.exe.new
<SYSTEM32>\dllcache\dfrgntfs.exe.new
<SYSTEM32>\dllcache\dfrgfat.exe.new
<SYSTEM32>\dllcache\diantz.exe.new
<SYSTEM32>\ie4uinit.exe.new
<SYSTEM32>\dllcache\diskpart.exe.new
<SYSTEM32>\osuninst.exe.trobibtc218
<SYSTEM32>\progman.exe.trobibtc218
<SYSTEM32>\prodspec.ini.trobibtc218
<SYSTEM32>\proquota.exe.trobibtc218
<SYSTEM32>\proxycfg.exe.trobibtc218
<SYSTEM32>\mlang.dat.new
<SYSTEM32>\print.exe.trobibtc218
<SYSTEM32>\powercfg.exe.trobibtc218
<SYSTEM32>\makecab.exe.new
<SYSTEM32>\PresentationHost.exe.trobibtc218
<SYSTEM32>\dllcache\dwwin.exe.new
<SYSTEM32>\mem.exe.new
<SYSTEM32>\rasctrs.ini.trobibtc218
<SYSTEM32>\mnmsrvc.exe.new
<SYSTEM32>\rasdial.exe.trobibtc218
<SYSTEM32>\rasphone.exe.trobibtc218
<SYSTEM32>\mobsync.exe.new
<SYSTEM32>\rasautou.exe.trobibtc218
<SYSTEM32>\qappsrv.exe.trobibtc218
<SYSTEM32>\pschdprf.ini.trobibtc218
<SYSTEM32>\qprocess.exe.trobibtc218
<SYSTEM32>\qwinsta.exe.trobibtc218
<SYSTEM32>\mmc.exe.new
<SYSTEM32>\ping6.exe.trobibtc218
<SYSTEM32>\perfci.ini.trobibtc218
<SYSTEM32>\logagent.exe.new
<SYSTEM32>\perfd009.dat.trobibtc218
<SYSTEM32>\perffilt.ini.trobibtc218
<SYSTEM32>\logman.exe.new
<SYSTEM32>\perfc009.dat.trobibtc218
<SYSTEM32>\packager.exe.trobibtc218
<SYSTEM32>\dllcache\dumprep.exe.new
<SYSTEM32>\pathping.exe.trobibtc218
<SYSTEM32>\lodctr.exe.new
<SYSTEM32>\pentnt.exe.trobibtc218
<SYSTEM32>\lpr.exe.new
<SYSTEM32>\perfmon.exe.trobibtc218
<SYSTEM32>\perfwci.ini.trobibtc218
<SYSTEM32>\magnify.exe.new
<SYSTEM32>\ping.exe.trobibtc218
<SYSTEM32>\lpq.exe.new
<SYSTEM32>\logoff.exe.new
<SYSTEM32>\perfh009.dat.trobibtc218
<SYSTEM32>\dllcache\dvdupgrd.exe.new
<SYSTEM32>\logonui.exe.new
<SYSTEM32>\perfi009.dat.trobibtc218
<SYSTEM32>\dllcache\calc.exe.new
<SYSTEM32>\dllcache\cacls.exe.new
<SYSTEM32>\ntdos.sys.trobibtc218
<SYSTEM32>\ntdos411.sys.trobibtc218
<SYSTEM32>\ntdos404.sys.trobibtc218
<SYSTEM32>\dllcache\bootvrfy.exe.new
<SYSTEM32>\nslookup.exe.trobibtc218
<SYSTEM32>\notepad.exe.trobibtc218
<SYSTEM32>\dllcache\bootcfg.exe.new
<SYSTEM32>\dllcache\bootok.exe.new
<SYSTEM32>\ntbackup.exe.trobibtc218
<SYSTEM32>\ntio411.sys.trobibtc218
<SYSTEM32>\ntio404.sys.trobibtc218
<SYSTEM32>\dllcache\chkdsk.exe.new
<SYSTEM32>\ntio804.sys.trobibtc218
<SYSTEM32>\ntio412.sys.trobibtc218
<SYSTEM32>\ntio.sys.trobibtc218
<SYSTEM32>\ntdos412.sys.trobibtc218
<SYSTEM32>\esentutl.exe.new
<SYSTEM32>\ntdos804.sys.trobibtc218
<SYSTEM32>\ntimage.gif.trobibtc218
<SYSTEM32>\dllcache\charmap.exe.new
<SYSTEM32>\noise.dat.trobibtc218
<SYSTEM32>\edlin.exe.new
<SYSTEM32>\dxdiag.exe.new
<SYSTEM32>\narrator.exe.trobibtc218
<SYSTEM32>\nbtstat.exe.trobibtc218
<SYSTEM32>\dllcache\autoconv.exe.new
<SYSTEM32>\mstsc.exe.trobibtc218
<SYSTEM32>\mspaint.exe.trobibtc218
<SYSTEM32>\msiexec.exe.trobibtc218
<SYSTEM32>\dllcache\autochk.exe.new
<SYSTEM32>\mstinit.exe.trobibtc218
<SYSTEM32>\msswchx.exe.trobibtc218
<SYSTEM32>\netsh.exe.trobibtc218
<SYSTEM32>\dllcache\autolfn.exe.new
<SYSTEM32>\netstat.exe.trobibtc218
<SYSTEM32>\nlsfunc.exe.trobibtc218
<SYSTEM32>\dllcache\blastcln.exe.new
<SYSTEM32>\netsetup.exe.trobibtc218
<SYSTEM32>\net.exe.trobibtc218
<SYSTEM32>\nddeapir.exe.trobibtc218
<SYSTEM32>\net1.exe.trobibtc218
<SYSTEM32>\netdde.exe.trobibtc218
<SYSTEM32>\dllcache\autofmt.exe.new
<SYSTEM32>\ntkrnlpa.exe.trobibtc218
<SYSTEM32>\dllcache\cmmon32.exe.new
<SYSTEM32>\nwscript.exe.trobibtc218
<SYSTEM32>\odbcad32.exe.trobibtc218
<SYSTEM32>\oembios.bin.trobibtc218
<SYSTEM32>\odbcconf.exe.trobibtc218
<SYSTEM32>\nw16.exe.trobibtc218
<SYSTEM32>\dllcache\cmdl32.exe.new
<SYSTEM32>\ntsd.exe.trobibtc218
<SYSTEM32>\ntvdm.exe.trobibtc218
<SYSTEM32>\forcedos.exe.new
<SYSTEM32>\fontview.exe.new
<SYSTEM32>\gdi.exe.new
<SYSTEM32>\ftp.exe.new
<SYSTEM32>\dllcache\control.exe.new
<SYSTEM32>\dllcache\convert.exe.new
<SYSTEM32>\getmac.exe.new
<SYSTEM32>\dllcache\conime.exe.new
<SYSTEM32>\dllcache\cmstp.exe.new
<SYSTEM32>\freecell.exe.new
<SYSTEM32>\dllcache\comp.exe.new
<SYSTEM32>\fsutil.exe.new
<SYSTEM32>\dllcache\compact.exe.new
<SYSTEM32>\fltmc.exe.new
<SYSTEM32>\exe2bin.exe.new
<SYSTEM32>\dllcache\cipher.exe.new
<SYSTEM32>\expand.exe.new
<SYSTEM32>\ntoskrnl.exe.trobibtc218
<SYSTEM32>\dllcache\cisvc.exe.new
<SYSTEM32>\eventvwr.exe.new
<SYSTEM32>\dllcache\chkntfs.exe.new
<SYSTEM32>\eudcedit.exe.new
<SYSTEM32>\eventcreate.exe.new
<SYSTEM32>\eventtriggers.exe.new
<SYSTEM32>\dllcache\cidaemon.exe.new
<SYSTEM32>\dllcache\clipbrd.exe.new
<SYSTEM32>\findstr.exe.new
<SYSTEM32>\finger.exe.new
<SYSTEM32>\dllcache\clipsrv.exe.new
<SYSTEM32>\fixmapi.exe.new
<SYSTEM32>\find.exe.new
<SYSTEM32>\dllcache\ckcnv.exe.new
<SYSTEM32>\extrac32.exe.new
<SYSTEM32>\fastopen.exe.new
<SYSTEM32>\dllcache\cleanmgr.exe.new
<SYSTEM32>\fc.exe.new
<SYSTEM32>\dllcache\evtrig.exe.new
<SYSTEM32>\tasklist.exe.trobibtc218
<SYSTEM32>\taskman.exe.trobibtc218
<SYSTEM32>\tcmsetup.exe.trobibtc218
<SYSTEM32>\taskmgr.exe.trobibtc218
<SYSTEM32>\taskkill.exe.trobibtc218
<SYSTEM32>\sysocmgr.exe.trobibtc218
<SYSTEM32>\syskey.exe.trobibtc218
<SYSTEM32>\systeminfo.exe.trobibtc218
<SYSTEM32>\systray.exe.trobibtc218
<SYSTEM32>\dllcache\evcreate.exe.new
<SYSTEM32>\tlntsess.exe.trobibtc218
<SYSTEM32>\dllcache\exe2bin.exe.new
<SYSTEM32>\tlntsvr.exe.trobibtc218
<SYSTEM32>\dllcache\expand.exe.new
<SYSTEM32>\tourstart.exe.trobibtc218
<SYSTEM32>\tlntadmn.exe.trobibtc218
<SYSTEM32>\dllcache\eventvwr.exe.new
<SYSTEM32>\tcpmon.ini.trobibtc218
<SYSTEM32>\tcpsvcs.exe.trobibtc218
<SYSTEM32>\tftp.exe.trobibtc218
<SYSTEM32>\telnet.exe.trobibtc218
<SYSTEM32>\sysedit.exe.trobibtc218
<SYSTEM32>\ntio.sys.new
<SYSTEM32>\ntdos804.sys.new
<SYSTEM32>\spiisupd.exe.trobibtc218
<SYSTEM32>\spnpinst.exe.trobibtc218
<SYSTEM32>\ntio404.sys.new
<SYSTEM32>\ntdos412.sys.new
<SYSTEM32>\sol.exe.trobibtc218
<SYSTEM32>\ntdos411.sys.new
<SYSTEM32>\sort.exe.trobibtc218
<SYSTEM32>\spider.exe.trobibtc218
<SYSTEM32>\dllcache\esentutl.exe.new
<SYSTEM32>\subst.exe.trobibtc218
<SYSTEM32>\ntio804.sys.new
<SYSTEM32>\svchost.exe.trobibtc218
<SYSTEM32>\dllcache\eudcedit.exe.new
<SYSTEM32>\syncapp.exe.trobibtc218
<SYSTEM32>\stimon.exe.trobibtc218
<SYSTEM32>\ntio411.sys.new
<SYSTEM32>\spoolsv.exe.trobibtc218
<SYSTEM32>\sprestrt.exe.trobibtc218
<SYSTEM32>\spupdsvc.exe.trobibtc218
<SYSTEM32>\ntio412.sys.new
<SYSTEM32>\tracerpt.exe.trobibtc218
<SYSTEM32>\w32tm.exe.trobibtc218
<SYSTEM32>\dllcache\fixmapi.exe.new
<SYSTEM32>\watchdog.sys.trobibtc218
<SYSTEM32>\wiaacmgr.exe.trobibtc218
<SYSTEM32>\wextract.exe.trobibtc218
<SYSTEM32>\vwipxspx.exe.trobibtc218
<SYSTEM32>\verifier.exe.trobibtc218
<SYSTEM32>\dllcache\findstr.exe.new
<SYSTEM32>\vssadmin.exe.trobibtc218
<SYSTEM32>\dllcache\finger.exe.new
<SYSTEM32>\vssvc.exe.trobibtc218
<SYSTEM32>\nwscript.exe.new
<SYSTEM32>\nw16.exe.new
<SYSTEM32>\odbcad32.exe.new
<SYSTEM32>\dllcache\freecell.exe.new
<SYSTEM32>\odbcconf.exe.new
<SYSTEM32>\ntvdm.exe.new
<SYSTEM32>\ntsd.exe.new
<SYSTEM32>\dllcache\fltmc.exe.new
<SYSTEM32>\win32k.sys.trobibtc218
<SYSTEM32>\dllcache\forcedos.exe.new
<SYSTEM32>\dllcache\fontview.exe.new
<SYSTEM32>\utilman.exe.trobibtc218
<SYSTEM32>\dllcache\fastopen.exe.new
<SYSTEM32>\tskill.exe.trobibtc218
<SYSTEM32>\tslabels.ini.trobibtc218
<SYSTEM32>\TsWpfWrp.exe.trobibtc218
<SYSTEM32>\tsshutdn.exe.trobibtc218
<SYSTEM32>\tsdiscon.exe.trobibtc218
<SYSTEM32>\tracert6.exe.trobibtc218
<SYSTEM32>\tracert.exe.trobibtc218
<SYSTEM32>\dllcache\extrac32.exe.new
<SYSTEM32>\tscupgrd.exe.trobibtc218
<SYSTEM32>\tscon.exe.trobibtc218
<SYSTEM32>\usrmlnka.exe.trobibtc218
<SYSTEM32>\userinit.exe.trobibtc218
<SYSTEM32>\dllcache\find.exe.new
<SYSTEM32>\usrshuta.exe.trobibtc218
<SYSTEM32>\usrprbda.exe.trobibtc218
<SYSTEM32>\user.exe.trobibtc218
<SYSTEM32>\unlodctr.exe.trobibtc218
<SYSTEM32>\typeperf.exe.trobibtc218
<SYSTEM32>\upnpcont.exe.trobibtc218
<SYSTEM32>\ups.exe.trobibtc218
<SYSTEM32>\dllcache\fc.exe.new
<SYSTEM32>\rsm.exe.trobibtc218
<SYSTEM32>\rsh.exe.trobibtc218
<SYSTEM32>\mshta.exe.new
<SYSTEM32>\rsmui.exe.trobibtc218
<SYSTEM32>\rsmsink.exe.trobibtc218
<SYSTEM32>\mshearts.exe.new
<SYSTEM32>\rexec.exe.trobibtc218
<SYSTEM32>\reset.exe.trobibtc218
<SYSTEM32>\msg.exe.new
<SYSTEM32>\routemon.exe.trobibtc218
<SYSTEM32>\route.exe.trobibtc218
<SYSTEM32>\rsvp.ini.trobibtc218
<SYSTEM32>\mstinit.exe.new
<SYSTEM32>\rtcshare.exe.trobibtc218
<SYSTEM32>\runas.exe.trobibtc218
<SYSTEM32>\dllcache\dxdiag.exe.new
<SYSTEM32>\rsvp.exe.trobibtc218
<SYSTEM32>\rsnotify.exe.trobibtc218
<SYSTEM32>\msiexec.exe.new
<SYSTEM32>\mspaint.exe.new
<SYSTEM32>\msswchx.exe.new
<SYSTEM32>\rsopprov.exe.trobibtc218
<SYSTEM32>\msdtc.exe.new
<SYSTEM32>\rdshost.exe.trobibtc218
<SYSTEM32>\mpnotify.exe.new
<SYSTEM32>\mqbkup.exe.new
<SYSTEM32>\redir.exe.trobibtc218
<SYSTEM32>\recover.exe.trobibtc218
<SYSTEM32>\rdsaddin.exe.trobibtc218
<SYSTEM32>\mountvol.exe.new
<SYSTEM32>\rcimlby.exe.trobibtc218
<SYSTEM32>\rcp.exe.trobibtc218
<SYSTEM32>\mplay32.exe.new
<SYSTEM32>\rdpclip.exe.trobibtc218
<SYSTEM32>\regwiz.exe.trobibtc218
<SYSTEM32>\regsvr32.exe.trobibtc218
<SYSTEM32>\mscdexnt.exe.new
<SYSTEM32>\replace.exe.trobibtc218
<SYSTEM32>\relog.exe.trobibtc218
<SYSTEM32>\mrinfo.exe.new
<SYSTEM32>\reg.exe.trobibtc218
<SYSTEM32>\mqsvc.exe.new
<SYSTEM32>\regedt32.exe.trobibtc218
<SYSTEM32>\regini.exe.trobibtc218
<SYSTEM32>\mqtgsvc.exe.new
<SYSTEM32>\rundll32.exe.trobibtc218
<SYSTEM32>\shrpubw.exe.trobibtc218
<SYSTEM32>\netstat.exe.new
<SYSTEM32>\nlsfunc.exe.new
<SYSTEM32>\sigverif.exe.trobibtc218
<SYSTEM32>\shutdown.exe.trobibtc218
<SYSTEM32>\shmgrate.exe.trobibtc218
<SYSTEM32>\netsetup.exe.new
<SYSTEM32>\sfc.exe.trobibtc218
<SYSTEM32>\shadow.exe.trobibtc218
<SYSTEM32>\netsh.exe.new
<SYSTEM32>\share.exe.trobibtc218
<SYSTEM32>\sndrec32.exe.trobibtc218
<SYSTEM32>\smss.exe.trobibtc218
<SYSTEM32>\ntdos.sys.new
<SYSTEM32>\ntdos404.sys.new
<SYSTEM32>\sndvol32.exe.trobibtc218
<SYSTEM32>\ntbackup.exe.new
<SYSTEM32>\skeys.exe.trobibtc218
<SYSTEM32>\notepad.exe.new
<SYSTEM32>\nslookup.exe.new
<SYSTEM32>\smlogsvc.exe.trobibtc218
<SYSTEM32>\smbinst.exe.trobibtc218
<SYSTEM32>\setver.exe.trobibtc218
<SYSTEM32>\sdbinst.exe.trobibtc218
<SYSTEM32>\dllcache\edlin.exe.new
<SYSTEM32>\secedit.exe.trobibtc218
<SYSTEM32>\secupd.dat.trobibtc218
<SYSTEM32>\mstsc.exe.new
<SYSTEM32>\schtasks.exe.trobibtc218
<SYSTEM32>\rwinsta.exe.trobibtc218
<SYSTEM32>\runonce.exe.trobibtc218
<SYSTEM32>\savedump.exe.trobibtc218
<SYSTEM32>\scardsvr.exe.trobibtc218
<SYSTEM32>\sc.exe.trobibtc218
<SYSTEM32>\net.exe.new
<SYSTEM32>\setup.bmp.trobibtc218
<SYSTEM32>\net1.exe.new
<SYSTEM32>\netdde.exe.new
<SYSTEM32>\setup.exe.trobibtc218
<SYSTEM32>\nddeapir.exe.new
<SYSTEM32>\narrator.exe.new
<SYSTEM32>\services.exe.trobibtc218
<SYSTEM32>\sessmgr.exe.trobibtc218
<SYSTEM32>\sethc.exe.trobibtc218
<SYSTEM32>\nbtstat.exe.new
%HOMEPATH%\Start Menu\Programs\desktop.ini.trobibtc218
%HOMEPATH%\Start Menu\trobibtc218.txt
%HOMEPATH%\Start Menu\Programs\trobibtc218.txt
%HOMEPATH%\Start Menu\Programs\Accessories\trobibtc218.txt
%HOMEPATH%\Start Menu\Programs\Accessories\desktop.ini.trobibtc218
%HOMEPATH%\Start Menu\desktop.ini.trobibtc218
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pluginreg.dat.trobibtc218
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ini.trobibtc218
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\trobibtc218.txt
<SYSTEM32>\alg.exe.trobibtc218
<SYSTEM32>\ahui.exe.trobibtc218
<SYSTEM32>\ansi.sys.trobibtc218
<SYSTEM32>\arp.exe.trobibtc218
<SYSTEM32>\append.exe.trobibtc218
<SYSTEM32>\actmovie.exe.trobibtc218
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\trobibtc218.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\desktop.ini.trobibtc218
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\desktop.ini.trobibtc218
<SYSTEM32>\accwiz.exe.trobibtc218
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\compatibility.ini.trobibtc218
%APPDATA%\Microsoft\Media Player\trobibtc218.txt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\trobibtc218.txt
%APPDATA%\Microsoft\MMC\trobibtc218.txt
%APPDATA%\Microsoft\SystemCertificates\My\trobibtc218.txt
%APPDATA%\Microsoft\SystemCertificates\trobibtc218.txt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\desktop.ini.trobibtc218
%APPDATA%\Microsoft\Address Book\trobibtc218.txt
%APPDATA%\Microsoft\trobibtc218.txt
%APPDATA%\Microsoft\Credentials\trobibtc218.txt
%APPDATA%\Microsoft\Internet Explorer\trobibtc218.txt
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\profiles.ini.trobibtc218
%APPDATA%\Mozilla\Extensions\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\trobibtc218.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html.trobibtc218
%APPDATA%\Mozilla\Firefox\Profiles\trobibtc218.txt
%APPDATA%\Mozilla\trobibtc218.txt
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\trobibtc218.txt
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\trobibtc218.txt
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\trobibtc218.txt
%APPDATA%\Microsoft\Windows\Themes\trobibtc218.txt
%APPDATA%\Microsoft\Windows\trobibtc218.txt
<SYSTEM32>\asr_fmt.exe.trobibtc218
<SYSTEM32>\cmstp.exe.trobibtc218
<SYSTEM32>\cmmon32.exe.trobibtc218
<SYSTEM32>\comp.exe.trobibtc218
<SYSTEM32>\conime.exe.trobibtc218
<SYSTEM32>\compact.exe.trobibtc218
<SYSTEM32>\cmdl32.exe.trobibtc218
<SYSTEM32>\cliconfg.exe.trobibtc218
<SYSTEM32>\cleanmgr.exe.trobibtc218
<SYSTEM32>\clipbrd.exe.trobibtc218
<SYSTEM32>\cmd.exe.trobibtc218
<SYSTEM32>\clipsrv.exe.trobibtc218
<SYSTEM32>\dcomcnfg.exe.trobibtc218
<SYSTEM32>\Dcache.bin.trobibtc218
<SYSTEM32>\ddeshare.exe.trobibtc218
<SYSTEM32>\defrag.exe.trobibtc218
<SYSTEM32>\debug.exe.trobibtc218
<SYSTEM32>\ctfmon.exe.trobibtc218
<SYSTEM32>\convert.exe.trobibtc218
<SYSTEM32>\control.exe.trobibtc218
<SYSTEM32>\country.sys.trobibtc218
<SYSTEM32>\csrss.exe.trobibtc218
<SYSTEM32>\cscript.exe.trobibtc218
<SYSTEM32>\ckcnv.exe.trobibtc218
<SYSTEM32>\autoconv.exe.trobibtc218
<SYSTEM32>\autochk.exe.trobibtc218
<SYSTEM32>\autofmt.exe.trobibtc218
<SYSTEM32>\blastcln.exe.trobibtc218
<SYSTEM32>\autolfn.exe.trobibtc218
<SYSTEM32>\auditusr.exe.trobibtc218
<SYSTEM32>\asr_pfu.exe.trobibtc218
<SYSTEM32>\asr_ldm.exe.trobibtc218
<SYSTEM32>\at.exe.trobibtc218
<SYSTEM32>\attrib.exe.trobibtc218
<SYSTEM32>\atmadm.exe.trobibtc218
<SYSTEM32>\chkntfs.exe.trobibtc218
<SYSTEM32>\chkdsk.exe.trobibtc218
<SYSTEM32>\cidaemon.exe.trobibtc218
<SYSTEM32>\cisvc.exe.trobibtc218
<SYSTEM32>\cipher.exe.trobibtc218
<SYSTEM32>\charmap.exe.trobibtc218
<SYSTEM32>\bootok.exe.trobibtc218
<SYSTEM32>\bootcfg.exe.trobibtc218
<SYSTEM32>\bootvrfy.exe.trobibtc218
<SYSTEM32>\calc.exe.trobibtc218
<SYSTEM32>\cacls.exe.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\trobibtc218.txt
%HOMEPATH%\My Documents\trobibtc218.txt
%HOMEPATH%\My Documents\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\trobibtc218.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Videos\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Videos\Desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\trobibtc218.txt
%HOMEPATH%\Recent\trobibtc218.txt
%HOMEPATH%\My Documents\My Pictures\trobibtc218.txt
%HOMEPATH%\My Documents\My Pictures\Desktop.ini.trobibtc218
%HOMEPATH%\Desktop\trobibtc218.txt
%HOMEPATH%\Recent\Desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Desktop\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Music\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma.trobibtc218
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\New Stories (Highway Blues).wma.trobibtc218
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Music\Desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\desktop.ini.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg.trobibtc218
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\trobibtc218.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg.trobibtc218
%HOMEPATH%\My Documents\Downloads\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\trobibtc218.txt
%APPDATA%\desktop.ini.trobibtc218
%HOMEPATH%\Local Settings\<INETFILES>\trobibtc218.txt
%APPDATA%\trobibtc218.txt
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\trobibtc218.txt
%APPDATA%\Identities\trobibtc218.txt
%HOMEPATH%\Local Settings\<INETFILES>\desktop.ini.trobibtc218
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\trobibtc218.txt
<LS_APPDATA>\VMware\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\trobibtc218.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\trobibtc218.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\trobibtc218.txt
<LS_APPDATA>\Microsoft\trobibtc218.txt
<LS_APPDATA>\Microsoft\Credentials\trobibtc218.txt
<LS_APPDATA>\Microsoft\CD Burning\trobibtc218.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\trobibtc218.txt
%HOMEPATH%\My Documents\My Music\trobibtc218.txt
%HOMEPATH%\My Documents\My Music\Desktop.ini.trobibtc218
%HOMEPATH%\My Documents\My Received Files\trobibtc218.txt
<LS_APPDATA>\Identities\trobibtc218.txt
<LS_APPDATA>\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\trobibtc218.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\trobibtc218.txt
<LS_APPDATA>\Mozilla\trobibtc218.txt
<LS_APPDATA>\Microsoft\Media Player\trobibtc218.txt
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\trobibtc218.txt
<LS_APPDATA>\Microsoft\Windows\trobibtc218.txt
<LS_APPDATA>\Microsoft\Windows Media\9.0\trobibtc218.txt
<LS_APPDATA>\Microsoft\Windows Media\trobibtc218.txt
<SYSTEM32>\KBDAL.DLL.trobibtc218
<SYSTEM32>\ipxroute.exe.trobibtc218
<SYSTEM32>\dplaysvr.exe.new
<SYSTEM32>\dpnsvr.exe.new
<SYSTEM32>\key01.sys.trobibtc218
<SYSTEM32>\dosx.exe.new
<SYSTEM32>\dmremote.exe.new
<SYSTEM32>\ipconfig.exe.trobibtc218
<SYSTEM32>\ipsec6.exe.trobibtc218
<SYSTEM32>\ipv6.exe.trobibtc218
<SYSTEM32>\doskey.exe.new
<SYSTEM32>\lnkstub.exe.trobibtc218
<SYSTEM32>\drwatson.exe.new
<SYSTEM32>\locator.exe.trobibtc218
<SYSTEM32>\dumprep.exe.new
<SYSTEM32>\drwtsn32.exe.new
<SYSTEM32>\lights.exe.trobibtc218
<SYSTEM32>\krnl386.exe.trobibtc218
<SYSTEM32>\keyboard.sys.trobibtc218
<SYSTEM32>\dpvsetup.exe.new
<SYSTEM32>\driverquery.exe.new
<SYSTEM32>\label.exe.trobibtc218
<SYSTEM32>\dmadmin.exe.new
<SYSTEM32>\himem.sys.trobibtc218
<SYSTEM32>\help.exe.trobibtc218
<SYSTEM32>\debug.exe.new
<SYSTEM32>\icardagt.exe.trobibtc218
<SYSTEM32>\hostname.exe.trobibtc218
<SYSTEM32>\ddeshare.exe.new
<SYSTEM32>\country.sys.new
<SYSTEM32>\gpresult.exe.trobibtc218
<SYSTEM32>\gpupdate.exe.trobibtc218
<SYSTEM32>\grpconv.exe.trobibtc218
<SYSTEM32>\dcomcnfg.exe.new
<SYSTEM32>\iexpress.exe.trobibtc218
<SYSTEM32>\diskperf.exe.new
<SYSTEM32>\dllhost.exe.new
<SYSTEM32>\dllhst3g.exe.new
<SYSTEM32>\imapi.exe.trobibtc218
<SYSTEM32>\ie4uinit.exe.trobibtc218
<SYSTEM32>\dfrgfat.exe.new
<SYSTEM32>\defrag.exe.new
<SYSTEM32>\dfrgntfs.exe.new
<SYSTEM32>\diskpart.exe.new
<SYSTEM32>\diantz.exe.new
<SYSTEM32>\lodctr.exe.trobibtc218
<SYSTEM32>\mpnotify.exe.trobibtc218
<SYSTEM32>\dllcache\at.exe.new
<SYSTEM32>\mqbkup.exe.trobibtc218
<SYSTEM32>\dllcache\atmadm.exe.new
<SYSTEM32>\mqperf.ini.trobibtc218
<SYSTEM32>\mplay32.exe.trobibtc218
<SYSTEM32>\dllcache\asr_pfu.exe.new
<SYSTEM32>\dllcache\asr_ldm.exe.new
<SYSTEM32>\mnmsrvc.exe.trobibtc218
<SYSTEM32>\mountvol.exe.trobibtc218
<SYSTEM32>\mobsync.exe.trobibtc218
<SYSTEM32>\msg.exe.trobibtc218
<SYSTEM32>\msdtcprf.ini.trobibtc218
<SYSTEM32>\mshearts.exe.trobibtc218
<SYSTEM32>\mshta.exe.trobibtc218
<SYSTEM32>\dllcache\auditusr.exe.new
<SYSTEM32>\msdtc.exe.trobibtc218
<SYSTEM32>\mqtgsvc.exe.trobibtc218
<SYSTEM32>\mqsvc.exe.trobibtc218
<SYSTEM32>\mrinfo.exe.trobibtc218
<SYSTEM32>\mscdexnt.exe.trobibtc218
<SYSTEM32>\dllcache\attrib.exe.new
<SYSTEM32>\dllcache\asr_fmt.exe.new
<SYSTEM32>\lpq.exe.trobibtc218
<SYSTEM32>\dllcache\actmovie.exe.new
<SYSTEM32>\lpr.exe.trobibtc218
<SYSTEM32>\dllcache\ahui.exe.new
<SYSTEM32>\lsass.exe.trobibtc218
<SYSTEM32>\dvdupgrd.exe.new
<SYSTEM32>\logman.exe.trobibtc218
<SYSTEM32>\logagent.exe.trobibtc218
<SYSTEM32>\dllcache\accwiz.exe.new
<SYSTEM32>\logonui.exe.trobibtc218
<SYSTEM32>\logoff.exe.trobibtc218
<SYSTEM32>\mlang.dat.trobibtc218
<SYSTEM32>\dllcache\ansi.sys.new
<SYSTEM32>\dllcache\append.exe.new
<SYSTEM32>\mmc.exe.trobibtc218
<SYSTEM32>\dllcache\arp.exe.new
<SYSTEM32>\migpwd.exe.trobibtc218
<SYSTEM32>\makecab.exe.trobibtc218
<SYSTEM32>\magnify.exe.trobibtc218
<SYSTEM32>\mem.exe.trobibtc218
<SYSTEM32>\mib.bin.trobibtc218
<SYSTEM32>\dwwin.exe.new
<SYSTEM32>\asr_fmt.exe.new
<SYSTEM32>\arp.exe.new
<SYSTEM32>\asr_ldm.exe.new
<SYSTEM32>\at.exe.new
<SYSTEM32>\asr_pfu.exe.new
<SYSTEM32>\append.exe.new
<SYSTEM32>\actmovie.exe.new
<SYSTEM32>\dwwin.exe.trobibtc218
<SYSTEM32>\ahui.exe.new
<SYSTEM32>\ansi.sys.new
<SYSTEM32>\dxdiag.exe.trobibtc218
<SYSTEM32>\esentprf.ini.trobibtc218
<SYSTEM32>\autoconv.exe.new
<SYSTEM32>\autofmt.exe.new
<SYSTEM32>\blastcln.exe.new
<SYSTEM32>\autolfn.exe.new
<SYSTEM32>\emptyregdb.dat.trobibtc218
<SYSTEM32>\attrib.exe.new
<SYSTEM32>\atmadm.exe.new
<SYSTEM32>\auditusr.exe.new
<SYSTEM32>\edlin.exe.trobibtc218
<SYSTEM32>\autochk.exe.new
<SYSTEM32>\dvdupgrd.exe.trobibtc218
<SYSTEM32>\dllhst3g.exe.trobibtc218
<SYSTEM32>\dllhost.exe.trobibtc218
<SYSTEM32>\dmadmin.exe.trobibtc218
<SYSTEM32>\doskey.exe.trobibtc218
<SYSTEM32>\dmremote.exe.trobibtc218
<SYSTEM32>\diskperf.exe.trobibtc218
<SYSTEM32>\dfrgfat.exe.trobibtc218
<SYSTEM32>\desktop.ini.trobibtc218
<SYSTEM32>\dfrgntfs.exe.trobibtc218
<SYSTEM32>\diskpart.exe.trobibtc218
<SYSTEM32>\diantz.exe.trobibtc218
<SYSTEM32>\dssec.dat.trobibtc218
<SYSTEM32>\drwtsn32.exe.trobibtc218
<SYSTEM32>\dumprep.exe.trobibtc218
<SYSTEM32>\accwiz.exe.new
<SYSTEM32>\dvdplay.exe.trobibtc218
<SYSTEM32>\drwatson.exe.trobibtc218
<SYSTEM32>\dplaysvr.exe.trobibtc218
<SYSTEM32>\dosx.exe.trobibtc218
<SYSTEM32>\dpnsvr.exe.trobibtc218
<SYSTEM32>\driverquery.exe.trobibtc218
<SYSTEM32>\dpvsetup.exe.trobibtc218
<SYSTEM32>\bootcfg.exe.new
<SYSTEM32>\cmdl32.exe.new
<SYSTEM32>\fontview.exe.trobibtc218
<SYSTEM32>\forcedos.exe.trobibtc218
<SYSTEM32>\cmmon32.exe.new
<SYSTEM32>\freecell.exe.trobibtc218
<SYSTEM32>\fltMc.exe.trobibtc218
<SYSTEM32>\clipbrd.exe.new
<SYSTEM32>\findstr.exe.trobibtc218
<SYSTEM32>\finger.exe.trobibtc218
<SYSTEM32>\clipsrv.exe.new
<SYSTEM32>\fixmapi.exe.trobibtc218
<SYSTEM32>\gdi.exe.trobibtc218
<SYSTEM32>\conime.exe.new
<SYSTEM32>\control.exe.new
<SYSTEM32>\convert.exe.new
<SYSTEM32>\getmac.exe.trobibtc218
<SYSTEM32>\ftp.exe.trobibtc218
<SYSTEM32>\cmstp.exe.new
<SYSTEM32>\fsquirt.exe.trobibtc218
<SYSTEM32>\comp.exe.new
<SYSTEM32>\compact.exe.new
<SYSTEM32>\fsutil.exe.trobibtc218
<SYSTEM32>\find.exe.trobibtc218
<SYSTEM32>\chkdsk.exe.new
<SYSTEM32>\charmap.exe.new
<SYSTEM32>\eventcreate.exe.trobibtc218
<SYSTEM32>\eventtriggers.exe.trobibtc218
<SYSTEM32>\chkntfs.exe.new
<SYSTEM32>\eudcedit.exe.trobibtc218
<SYSTEM32>\bootvrfy.exe.new
<SYSTEM32>\bootok.exe.new
<SYSTEM32>\cacls.exe.new
<SYSTEM32>\esentutl.exe.trobibtc218
<SYSTEM32>\calc.exe.new
<SYSTEM32>\ckcnv.exe.new
<SYSTEM32>\extrac32.exe.trobibtc218
<SYSTEM32>\fastopen.exe.trobibtc218
<SYSTEM32>\cleanmgr.exe.new
<SYSTEM32>\fc.exe.trobibtc218
<SYSTEM32>\cisvc.exe.new
<SYSTEM32>\eventvwr.exe.trobibtc218
<SYSTEM32>\cidaemon.exe.new
<SYSTEM32>\cipher.exe.new
<SYSTEM32>\expand.exe.trobibtc218
<SYSTEM32>\exe2bin.exe.trobibtc218

Deletes the following files:

<SYSTEM32>\rdpclip.exe
<SYSTEM32>\rdsaddin.exe
<SYSTEM32>\rcp.exe
<SYSTEM32>\rasphone.exe
<SYSTEM32>\rcimlby.exe
<SYSTEM32>\reg.exe
<SYSTEM32>\regedt32.exe
<SYSTEM32>\redir.exe
<SYSTEM32>\rdshost.exe
<SYSTEM32>\recover.exe
<SYSTEM32>\rasdial.exe
<SYSTEM32>\proxycfg.exe
<SYSTEM32>\pschdprf.ini
<SYSTEM32>\proquota.exe
<SYSTEM32>\prodspec.ini
<SYSTEM32>\progman.exe
<SYSTEM32>\rasautou.exe
<SYSTEM32>\rasctrs.ini
<SYSTEM32>\qwinsta.exe
<SYSTEM32>\qappsrv.exe
<SYSTEM32>\qprocess.exe
<SYSTEM32>\rsopprov.exe
<SYSTEM32>\rsvp.exe
<SYSTEM32>\rsnotify.exe
<SYSTEM32>\rsmsink.exe
<SYSTEM32>\rsmui.exe
<SYSTEM32>\rundll32.exe
<SYSTEM32>\runonce.exe
<SYSTEM32>\runas.exe
<SYSTEM32>\rsvp.ini
<SYSTEM32>\rtcshare.exe
<SYSTEM32>\rsm.exe
<SYSTEM32>\relog.exe
<SYSTEM32>\replace.exe
<SYSTEM32>\regwiz.exe
<SYSTEM32>\regini.exe
<SYSTEM32>\regsvr32.exe
<SYSTEM32>\routemon.exe
<SYSTEM32>\rsh.exe
<SYSTEM32>\route.exe
<SYSTEM32>\reset.exe
<SYSTEM32>\rexec.exe
<SYSTEM32>\print.exe
<SYSTEM32>\ntkrnlpa.exe
<SYSTEM32>\ntoskrnl.exe
<SYSTEM32>\ntio804.sys
<SYSTEM32>\ntio411.sys
<SYSTEM32>\ntio412.sys
<SYSTEM32>\nwscript.exe
<SYSTEM32>\odbcad32.exe
<SYSTEM32>\nw16.exe
<SYSTEM32>\ntsd.exe
<SYSTEM32>\ntvdm.exe
<SYSTEM32>\ntio404.sys
<SYSTEM32>\ntdos.sys
<SYSTEM32>\ntdos404.sys
<SYSTEM32>\ntbackup.exe
<SYSTEM32>\notepad.exe
<SYSTEM32>\nslookup.exe
<SYSTEM32>\ntimage.gif
<SYSTEM32>\ntio.sys
<SYSTEM32>\ntdos804.sys
<SYSTEM32>\ntdos411.sys
<SYSTEM32>\ntdos412.sys
<SYSTEM32>\perfi009.dat
<SYSTEM32>\perfmon.exe
<SYSTEM32>\perfh009.dat
<SYSTEM32>\perfd009.dat
<SYSTEM32>\perffilt.ini
<SYSTEM32>\powercfg.exe
<SYSTEM32>\PresentationHost.exe
<SYSTEM32>\ping6.exe
<SYSTEM32>\perfwci.ini
<SYSTEM32>\ping.exe
<SYSTEM32>\perfci.ini
<SYSTEM32>\openfiles.exe
<SYSTEM32>\osk.exe
<SYSTEM32>\oembios.dat
<SYSTEM32>\odbcconf.exe
<SYSTEM32>\oembios.bin
<SYSTEM32>\pentnt.exe
<SYSTEM32>\perfc009.dat
<SYSTEM32>\pathping.exe
<SYSTEM32>\osuninst.exe
<SYSTEM32>\packager.exe
<SYSTEM32>\tracerpt.exe
<SYSTEM32>\tracert.exe
<SYSTEM32>\tourstart.exe
<SYSTEM32>\tlntsess.exe
<SYSTEM32>\tlntsvr.exe
<SYSTEM32>\tsdiscon.exe
<SYSTEM32>\tskill.exe
<SYSTEM32>\tscupgrd.exe
<SYSTEM32>\tracert6.exe
<SYSTEM32>\tscon.exe
<SYSTEM32>\tlntadmn.exe
<SYSTEM32>\taskman.exe
<SYSTEM32>\taskmgr.exe
<SYSTEM32>\tasklist.exe
<SYSTEM32>\systray.exe
<SYSTEM32>\taskkill.exe
<SYSTEM32>\telnet.exe
<SYSTEM32>\tftp.exe
<SYSTEM32>\tcpsvcs.exe
<SYSTEM32>\tcmsetup.exe
<SYSTEM32>\tcpmon.ini
<SYSTEM32>\vssadmin.exe
<SYSTEM32>\vssvc.exe
<SYSTEM32>\verifier.exe
<SYSTEM32>\usrshuta.exe
<SYSTEM32>\utilman.exe
<SYSTEM32>\wextract.exe
<SYSTEM32>\wiaacmgr.exe
<SYSTEM32>\watchdog.sys
<SYSTEM32>\vwipxspx.exe
<SYSTEM32>\w32tm.exe
<SYSTEM32>\usrprbda.exe
<SYSTEM32>\typeperf.exe
<SYSTEM32>\unlodctr.exe
<SYSTEM32>\TsWpfWrp.exe
<SYSTEM32>\tslabels.ini
<SYSTEM32>\tsshutdn.exe
<SYSTEM32>\userinit.exe
<SYSTEM32>\usrmlnka.exe
<SYSTEM32>\user.exe
<SYSTEM32>\upnpcont.exe
<SYSTEM32>\ups.exe
<SYSTEM32>\systeminfo.exe
<SYSTEM32>\sfc.exe
<SYSTEM32>\shadow.exe
<SYSTEM32>\setver.exe
<SYSTEM32>\setup.bmp
<SYSTEM32>\setup.exe
<SYSTEM32>\shutdown.exe
<SYSTEM32>\sigverif.exe
<SYSTEM32>\shrpubw.exe
<SYSTEM32>\share.exe
<SYSTEM32>\shmgrate.exe
<SYSTEM32>\sethc.exe
<SYSTEM32>\scardsvr.exe
<SYSTEM32>\schtasks.exe
<SYSTEM32>\sc.exe
<SYSTEM32>\rwinsta.exe
<SYSTEM32>\savedump.exe
<SYSTEM32>\services.exe
<SYSTEM32>\sessmgr.exe
<SYSTEM32>\secupd.dat
<SYSTEM32>\sdbinst.exe
<SYSTEM32>\secedit.exe
<SYSTEM32>\stimon.exe
<SYSTEM32>\subst.exe
<SYSTEM32>\spupdsvc.exe
<SYSTEM32>\spoolsv.exe
<SYSTEM32>\sprestrt.exe
<SYSTEM32>\syskey.exe
<SYSTEM32>\sysocmgr.exe
<SYSTEM32>\sysedit.exe
<SYSTEM32>\svchost.exe
<SYSTEM32>\syncapp.exe
<SYSTEM32>\spnpinst.exe
<SYSTEM32>\smss.exe
<SYSTEM32>\sndrec32.exe
<SYSTEM32>\smlogsvc.exe
<SYSTEM32>\skeys.exe
<SYSTEM32>\smbinst.exe
<SYSTEM32>\spider.exe
<SYSTEM32>\spiisupd.exe
<SYSTEM32>\sort.exe
<SYSTEM32>\sndvol32.exe
<SYSTEM32>\sol.exe
<SYSTEM32>\noise.dat
<SYSTEM32>\diskperf.exe
<SYSTEM32>\dllhost.exe
<SYSTEM32>\diskpart.exe
<SYSTEM32>\dfrgntfs.exe
<SYSTEM32>\diantz.exe
<SYSTEM32>\doskey.exe
<SYSTEM32>\dosx.exe
<SYSTEM32>\dmremote.exe
<SYSTEM32>\dllhst3g.exe
<SYSTEM32>\dmadmin.exe
<SYSTEM32>\dfrgfat.exe
<SYSTEM32>\ctfmon.exe
<SYSTEM32>\Dcache.bin
<SYSTEM32>\csrss.exe
<SYSTEM32>\convert.exe
<SYSTEM32>\country.sys
<SYSTEM32>\defrag.exe
<SYSTEM32>\desktop.ini
<SYSTEM32>\debug.exe
<SYSTEM32>\dcomcnfg.exe
<SYSTEM32>\ddeshare.exe
<SYSTEM32>\esentprf.ini
<SYSTEM32>\esentutl.exe
<SYSTEM32>\emptyregdb.dat
<SYSTEM32>\dxdiag.exe
<SYSTEM32>\edlin.exe
<SYSTEM32>\eventvwr.exe
<SYSTEM32>\exe2bin.exe
<SYSTEM32>\eventtriggers.exe
<SYSTEM32>\eudcedit.exe
<SYSTEM32>\eventcreate.exe
<SYSTEM32>\dwwin.exe
<SYSTEM32>\driverquery.exe
<SYSTEM32>\drwatson.exe
<SYSTEM32>\dpvsetup.exe
<SYSTEM32>\dplaysvr.exe
<SYSTEM32>\dpnsvr.exe
<SYSTEM32>\dvdplay.exe
<SYSTEM32>\dvdupgrd.exe
<SYSTEM32>\dumprep.exe
<SYSTEM32>\drwtsn32.exe
<SYSTEM32>\dssec.dat
<SYSTEM32>\control.exe
<SYSTEM32>\autochk.exe
<SYSTEM32>\autoconv.exe
<SYSTEM32>\auditusr.exe
<SYSTEM32>\atmadm.exe
<SYSTEM32>\attrib.exe
<SYSTEM32>\bootcfg.exe
<SYSTEM32>\bootok.exe
<SYSTEM32>\blastcln.exe
<SYSTEM32>\autofmt.exe
<SYSTEM32>\autolfn.exe
<SYSTEM32>\at.exe
<SYSTEM32>\alg.exe
<SYSTEM32>\ansi.sys
<SYSTEM32>\ahui.exe
<SYSTEM32>\accwiz.exe
<SYSTEM32>\actmovie.exe
<SYSTEM32>\asr_ldm.exe
<SYSTEM32>\asr_pfu.exe
<SYSTEM32>\asr_fmt.exe
<SYSTEM32>\append.exe
<SYSTEM32>\arp.exe
<SYSTEM32>\cmd.exe
<SYSTEM32>\cmdl32.exe
<SYSTEM32>\clipsrv.exe
<SYSTEM32>\cliconfg.exe
<SYSTEM32>\clipbrd.exe
<SYSTEM32>\compact.exe
<SYSTEM32>\conime.exe
<SYSTEM32>\comp.exe
<SYSTEM32>\cmmon32.exe
<SYSTEM32>\cmstp.exe
<SYSTEM32>\cleanmgr.exe
<SYSTEM32>\charmap.exe
<SYSTEM32>\chkdsk.exe
<SYSTEM32>\calc.exe
<SYSTEM32>\bootvrfy.exe
<SYSTEM32>\cacls.exe
<SYSTEM32>\cisvc.exe
<SYSTEM32>\ckcnv.exe
<SYSTEM32>\cipher.exe
<SYSTEM32>\chkntfs.exe
<SYSTEM32>\cidaemon.exe
<SYSTEM32>\mplay32.exe
<SYSTEM32>\mpnotify.exe
<SYSTEM32>\mountvol.exe
<SYSTEM32>\mnmsrvc.exe
<SYSTEM32>\mobsync.exe
<SYSTEM32>\mqtgsvc.exe
<SYSTEM32>\mrinfo.exe
<SYSTEM32>\mqsvc.exe
<SYSTEM32>\mqbkup.exe
<SYSTEM32>\mqperf.ini
<SYSTEM32>\mmc.exe
<SYSTEM32>\lsass.exe
<SYSTEM32>\magnify.exe
<SYSTEM32>\lpr.exe
<SYSTEM32>\logonui.exe
<SYSTEM32>\lpq.exe
<SYSTEM32>\migpwd.exe
<SYSTEM32>\mlang.dat
<SYSTEM32>\mib.bin
<SYSTEM32>\makecab.exe
<SYSTEM32>\mem.exe
<SYSTEM32>\net.exe
<SYSTEM32>\net1.exe
<SYSTEM32>\nddeapir.exe
<SYSTEM32>\narrator.exe
<SYSTEM32>\nbtstat.exe
<SYSTEM32>\netstat.exe
<SYSTEM32>\nlsfunc.exe
<SYSTEM32>\netsh.exe
<SYSTEM32>\netdde.exe
<SYSTEM32>\netsetup.exe
<SYSTEM32>\mstsc.exe
<SYSTEM32>\msg.exe
<SYSTEM32>\mshearts.exe
<SYSTEM32>\msdtcprf.ini
<SYSTEM32>\mscdexnt.exe
<SYSTEM32>\msdtc.exe
<SYSTEM32>\msswchx.exe
<SYSTEM32>\mstinit.exe
<SYSTEM32>\mspaint.exe
<SYSTEM32>\mshta.exe
<SYSTEM32>\msiexec.exe
<SYSTEM32>\logoff.exe
<SYSTEM32>\ftp.exe
<SYSTEM32>\gdi.exe
<SYSTEM32>\fsutil.exe
<SYSTEM32>\freecell.exe
<SYSTEM32>\fsquirt.exe
<SYSTEM32>\grpconv.exe
<SYSTEM32>\help.exe
<SYSTEM32>\gpupdate.exe
<SYSTEM32>\getmac.exe
<SYSTEM32>\gpresult.exe
<SYSTEM32>\forcedos.exe
<SYSTEM32>\fc.exe
<SYSTEM32>\find.exe
<SYSTEM32>\fastopen.exe
<SYSTEM32>\expand.exe
<SYSTEM32>\extrac32.exe
<SYSTEM32>\fltMc.exe
<SYSTEM32>\fontview.exe
<SYSTEM32>\fixmapi.exe
<SYSTEM32>\findstr.exe
<SYSTEM32>\finger.exe
<SYSTEM32>\label.exe
<SYSTEM32>\lights.exe
<SYSTEM32>\krnl386.exe
<SYSTEM32>\key01.sys
<SYSTEM32>\keyboard.sys
<SYSTEM32>\logagent.exe
<SYSTEM32>\logman.exe
<SYSTEM32>\lodctr.exe
<SYSTEM32>\lnkstub.exe
<SYSTEM32>\locator.exe
<SYSTEM32>\KBDAL.DLL
<SYSTEM32>\ie4uinit.exe
<SYSTEM32>\iexpress.exe
<SYSTEM32>\icardagt.exe
<SYSTEM32>\himem.sys
<SYSTEM32>\hostname.exe
<SYSTEM32>\ipv6.exe
<SYSTEM32>\ipxroute.exe
<SYSTEM32>\ipsec6.exe
<SYSTEM32>\imapi.exe
<SYSTEM32>\ipconfig.exe

Substitutes the following files:

<SYSTEM32>\dllcache\dplaysvr.exe.new
<SYSTEM32>\dllcache\dpnsvr.exe.new
<SYSTEM32>\dllcache\dosx.exe.new
<SYSTEM32>\dllcache\dmremote.exe.new
<SYSTEM32>\dllcache\doskey.exe.new
<SYSTEM32>\dllcache\drwtsn32.exe.new
<SYSTEM32>\dllcache\dumprep.exe.new
<SYSTEM32>\dllcache\drwatson.exe.new
<SYSTEM32>\dllcache\dpvsetup.exe.new
<SYSTEM32>\dllcache\drvqry.exe.new
<SYSTEM32>\dllcache\dmadmin.exe.new
<SYSTEM32>\dllcache\dfrgfat.exe.new
<SYSTEM32>\dllcache\dfrgntfs.exe.new
<SYSTEM32>\dllcache\defrag.exe.new
<SYSTEM32>\dllcache\ddeshare.exe.new
<SYSTEM32>\dllcache\debug.exe.new
<SYSTEM32>\dllcache\dllhost.exe.new
<SYSTEM32>\dllcache\dllhst3g.exe.new
<SYSTEM32>\dllcache\diskperf.exe.new
<SYSTEM32>\dllcache\diantz.exe.new
<SYSTEM32>\dllcache\diskpart.exe.new
<SYSTEM32>\dllcache\dvdupgrd.exe.new
<SYSTEM32>\dllcache\findstr.exe.new
<SYSTEM32>\dllcache\finger.exe.new
<SYSTEM32>\dllcache\find.exe.new
<SYSTEM32>\dllcache\fastopen.exe.new
<SYSTEM32>\dllcache\fc.exe.new
<SYSTEM32>\dllcache\forcedos.exe.new
<SYSTEM32>\dllcache\freecell.exe.new
<SYSTEM32>\dllcache\fontview.exe.new
<SYSTEM32>\dllcache\fixmapi.exe.new
<SYSTEM32>\dllcache\fltmc.exe.new
<SYSTEM32>\dllcache\extrac32.exe.new
<SYSTEM32>\dllcache\esentutl.exe.new
<SYSTEM32>\dllcache\eudcedit.exe.new
<SYSTEM32>\dllcache\edlin.exe.new
<SYSTEM32>\dllcache\dwwin.exe.new
<SYSTEM32>\dllcache\dxdiag.exe.new
<SYSTEM32>\dllcache\exe2bin.exe.new
<SYSTEM32>\dllcache\expand.exe.new
<SYSTEM32>\dllcache\eventvwr.exe.new
<SYSTEM32>\dllcache\evcreate.exe.new
<SYSTEM32>\dllcache\evtrig.exe.new
<SYSTEM32>\dllcache\autoconv.exe.new
<SYSTEM32>\dllcache\autofmt.exe.new
<SYSTEM32>\dllcache\autochk.exe.new
<SYSTEM32>\dllcache\attrib.exe.new
<SYSTEM32>\dllcache\auditusr.exe.new
<SYSTEM32>\dllcache\bootok.exe.new
<SYSTEM32>\dllcache\bootvrfy.exe.new
<SYSTEM32>\dllcache\bootcfg.exe.new
<SYSTEM32>\dllcache\autolfn.exe.new
<SYSTEM32>\dllcache\blastcln.exe.new
<SYSTEM32>\dllcache\atmadm.exe.new
<SYSTEM32>\dllcache\ansi.sys.new
<SYSTEM32>\dllcache\append.exe.new
<SYSTEM32>\dllcache\ahui.exe.new
<SYSTEM32>\dllcache\accwiz.exe.new
<SYSTEM32>\dllcache\actmovie.exe.new
<SYSTEM32>\dllcache\asr_pfu.exe.new
<SYSTEM32>\dllcache\at.exe.new
<SYSTEM32>\dllcache\asr_ldm.exe.new
<SYSTEM32>\dllcache\arp.exe.new
<SYSTEM32>\dllcache\asr_fmt.exe.new
<SYSTEM32>\dllcache\cacls.exe.new
<SYSTEM32>\dllcache\comp.exe.new
<SYSTEM32>\dllcache\compact.exe.new
<SYSTEM32>\dllcache\cmstp.exe.new
<SYSTEM32>\dllcache\cmdl32.exe.new
<SYSTEM32>\dllcache\cmmon32.exe.new
<SYSTEM32>\dllcache\country.sys.new
<SYSTEM32>\dllcache\dcomcnfg.exe.new
<SYSTEM32>\dllcache\convert.exe.new
<SYSTEM32>\dllcache\conime.exe.new
<SYSTEM32>\dllcache\control.exe.new
<SYSTEM32>\dllcache\clipsrv.exe.new
<SYSTEM32>\dllcache\chkntfs.exe.new
<SYSTEM32>\dllcache\cidaemon.exe.new
<SYSTEM32>\dllcache\chkdsk.exe.new
<SYSTEM32>\dllcache\calc.exe.new
<SYSTEM32>\dllcache\charmap.exe.new
<SYSTEM32>\dllcache\cleanmgr.exe.new
<SYSTEM32>\dllcache\clipbrd.exe.new
<SYSTEM32>\dllcache\ckcnv.exe.new
<SYSTEM32>\dllcache\cipher.exe.new
<SYSTEM32>\dllcache\cisvc.exe.new

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial