Trojan.Copyself.102

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%ALLUSERSPROFILE%\start menu\programs\startup\backup.exe
%HOMEPATH%\start menu\programs\startup\backup.exe

Malicious functions

To complicate detection of its presence in the operating system,

forces the system hide from view:

hidden files
file extensions

modifies the following system settings:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'

Modifies file system

Creates the following files

<Current directory>\backup.exe
%ProgramFiles%\avgvv\backup.exe
%WINDIR%\ime\shared\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.framework\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\avkservice\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.graph\12.0.0.0__71e9bce111e9429c\system restore.exe
%WINDIR%\ime\imkr6_1\dicts\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.framework\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\b6bfb51dec7f8cc42c21c5928470c773\backup.exe
%ProgramFiles%\avkserv\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.graph\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.engine\3.5.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\ime\imkr6_1\applets\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\backup.exe
%ProgramFiles%\avinitnt\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.excel\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.engine\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\ime\imkr6_1\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\data.exe
%ProgramFiles%\avgwizfw\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.excel\backup.exe
%WINDIR%\ime\imjp8_1\applets\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.engine\backup.exe
%ProgramFiles%\avgw\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system restore.exe
%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.framework\3.5.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\487c1bc20f6e73e8e79503898d17d102\backup.exe
%ProgramFiles%\avpm\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.onenote\backup.exe
%WINDIR%\logs\backup.exe
%ProgramFiles%\avsynmgr\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.utilities\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\l2schemas\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\9469981a17c01dd154c540127e678b35\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\backup.exe
%ProgramFiles%\avscan\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\backup.exe
%WINDIR%\java\trustlib\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\11.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\data.exe
%WINDIR%\assembly\gac_msil\iehost\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\12dcb10b76012416357bdbb010fdaa97\backup.exe
%WINDIR%\java\classes\update.exe
%WINDIR%\assembly\gac_msil\microsoft.build.tasks\2.0.0.0__b03f5f7f11d50a3a\system restore.exe
%ProgramFiles%\avpcc\system restore.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\data.exe
%WINDIR%\java\backup.exe
%ProgramFiles%\avnotify\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.tasks\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.infopath\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\ime\shared\res\backup.exe
%ProgramFiles%\avkwctl\data.exe
%WINDIR%\ime\imjp8_1\backup.exe
%WINDIR%\ime\imejp98\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\backup.exe
%WINDIR%\assembly\gac\microsoft.jscript\7.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\avgfwsrv\backup.exe
%WINDIR%\assembly\gac_msil\cscompmgd\backup.exe
%WINDIR%\assembly\gac_32\system.transactions\backup.exe
%WINDIR%\assembly\gac\microsoft.jscript\backup.exe
%WINDIR%\assembly\gac_32\system.printing\3.0.0.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\avgemc\update.exe
%WINDIR%\help\tours\windowsmediaplayer\img\wmarks\backup.exe
%WINDIR%\assembly\gac_msil\aspnetmmcext\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directsound\1.0.2902.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\system.printing\backup.exe
%ProgramFiles%\avgdiag\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\img\btn\backup.exe
%WINDIR%\assembly\gac_msil\aspnetmmcext\update.exe
%WINDIR%\assembly\gac\microsoft.directx.directsound\backup.exe
%WINDIR%\assembly\gac_32\system.enterpriseservices\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\avgcc\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directplay\1.0.2902.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_msil\accessibility\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\img\backup.exe
%ProgramFiles%\avgamsvr\backup.exe
%WINDIR%\assembly\gac_32\system.enterpriseservices\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directplay\backup.exe
%WINDIR%\assembly\gac_msil\accessibility\backup.exe
%ProgramFiles%\avconsol\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\css\backup.exe
%WINDIR%\assembly\gac_32\system.data.oracleclient\2.0.0.0__b77a5c561934e089\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\scr\backup.exe
%WINDIR%\assembly\gac_msil\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\avgupsvc\backup.exe
%WINDIR%\ime\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\video\backup.exe
%WINDIR%\ime\imejp\applets\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.access\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\iiehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\avgupden\backup.exe
%WINDIR%\ime\imejp\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.access\backup.exe
%WINDIR%\assembly\gac_msil\iiehost\backup.exe
%ProgramFiles%\avgscan\backup.exe
%WINDIR%\ime\chtime\applets\backup.exe
%WINDIR%\assembly\gac\microsoft.office.infopath.permission\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\iehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directinput\1.0.2902.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\avgrssvc\backup.exe
%WINDIR%\ime\chtime\backup.exe
%WINDIR%\assembly\gac\microsoft.office.infopath.permission\backup.exe
%ProgramFiles%\avgnpsvc\backup.exe
%WINDIR%\ime\chsime\applets\backup.exe
%WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac_msil\ieexecremote\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac_32\system.web\2.0.0.0__b03f5f7f11d50a3a\data.exe
%WINDIR%\ime\chsime\backup.exe
%ProgramFiles%\avgnpdln\backup.exe
%WINDIR%\assembly\gac\microsoft.mshtml\backup.exe
%WINDIR%\assembly\gac_32\system.web\backup.exe
%WINDIR%\assembly\gac_msil\ieexecremote\backup.exe
%ProgramFiles%\avginet\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\backup.exe
%WINDIR%\assembly\gac_32\system.transactions\2.0.0.0__b77a5c561934e089\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.utilities\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\ef1a93d10c3a91b728745dbfcc79c2c7\system restore.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\0b40341027c01716cec1dd97592698e0\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_7318ec57\backup.exe
%WINDIR%\msapps\backup.exe
%ProgramFiles%\blindman\backup.exe
%WINDIR%\microsoft.net\assembly\gac_msil\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\3.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\f5e029e2215c95ab38a1eefef7b32ac9\backup.exe
%WINDIR%\assembly\gac\microsoft.stdformat\backup.exe
%WINDIR%\microsoft.net\directx for managed code\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\backup.exe
%WINDIR%\msagent\intl\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\backup.exe
%ProgramFiles%\blackice\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\7f91eecda3ff7ce478146b6458580c98\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.word\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\6c69930d05c557da70144bcc0add7065\backup.exe
%WINDIR%\msagent\chars\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\blackd\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\data.exe
%WINDIR%\assembly\gac\microsoft.office.interop.word\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\3555f5f74c56fa92c0ab7a635af91bfa\backup.exe
%WINDIR%\msagent\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\aa7926460a336408c8041330ad90929d\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\backup.exe
%WINDIR%\microsoft.net\directx for managed code\1.0.2902.0\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.design\backup.exe
%WINDIR%\network diagnostic\backup.exe
%WINDIR%\microsoft.net\assembly\gac_msil\aspnetmmcext\backup.exe
%WINDIR%\microsoft.net\directx for managed code\1.0.2904.0\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7cd5dcd5\backup.exe
%ProgramFiles%\cabalmain\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\v4.0_4.0.0.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.componentmod#\backup.exe
%WINDIR%\assembly\gac\microsoft.vbe.interop\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\fa206c73f39721cd2c55829b9853de44\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\update.exe
%WINDIR%\mui\backup.exe
%WINDIR%\assembly\gac\microsoft.vbe.interop\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\12.0.0.0__71e9bce111e9429c\backup.exe
%ProgramFiles%\btinint\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\964da027ebca3b263a05cadb8eaa20a3\backup.exe
%WINDIR%\microsoft.net\directx for managed code\1.0.2903.0\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.visualbasic\8.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\backup.exe
%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_f829b606\backup.exe
%WINDIR%\msapps\msinfo\backup.exe
%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.visualbasic\backup.exe
%ProgramFiles%\btini\backup.exe
%WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\backup.exe
%ProgramFiles%\bdwizreg\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\040571d65dc822e5df020d5e084f4b45\backup.exe
%ProgramFiles%\ashdisp\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\data.exe
%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\12.0.0.0__71e9bce111e9429c\data.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\b4dc4bd8534d90fbb7430926ad990cd9\data.exe
%WINDIR%\assembly\gac_msil\microsoft.jscript\8.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\system restore.exe
%ProgramFiles%\bdnews\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\05503f37aef5261d80ccca19f8078679\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9e71fd0d299c5668c96a54e4a63479fa\update.exe
%WINDIR%\assembly\gac_msil\microsoft.jscript\backup.exe
%ProgramFiles%\bdmcon\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.outlook\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\microsoft.net\assembly\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\update.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9519494798a88867406b5755e1dbded6\data.exe
%ProgramFiles%\bdagent\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.outlook\backup.exe
%WINDIR%\microsoft.net\data.exe
%ProgramFiles%\backweb-4476822\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\79c2fd29b1e46c943960278051b4e1b9\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.onenote\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\backup.exe
%ProgramFiles%\bdswitch\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\016f9a150fce0e0a4c93532d8fa4c749\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\5c59991df60164cae10fd81b88a8e5b1\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe
%ProgramFiles%\bdsurvey\update.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\update.exe
%WINDIR%\assembly\gac\microsoft.office.interop.publisher\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\system restore.exe
%WINDIR%\media\backup.exe
%ProgramFiles%\b2\backup.exe
%ProgramFiles%\bdoesrv\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.publisher\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\3963e9ce8d44f50e8367e92a8e3e42e6\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\87fb973e4ab6a21fd00e45656fa7c115\backup.exe
%ProgramFiles%\bdsubmit\backup.exe
%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\12.0.0.0__71e9bce111e9429c\backup.exe
%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\backup.exe
%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\backup.exe
%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\bdss\backup.exe
%ProgramFiles%\bdsubmitwiz\backup.exe
%ProgramFiles%\avconfig\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\cnt\backup.exe
%WINDIR%\assembly\gac_msil\backup.exe
%ProgramFiles%\a2start\data.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\pmp\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\legal\enu\data.exe
%ProgramFiles%\adobe\reader 10.0\reader\legal\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\javascripts\update.exe
%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\enu\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\browser\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\air\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\backup.exe
%ProgramFiles%\adobe\reader 10.0\esl\backup.exe
%ProgramFiles%\adobe\reader 10.0\backup.exe
%ProgramFiles%\adobe\acrobat.com\meta-inf\air\backup.exe
%ProgramFiles%\adobe\acrobat.com\meta-inf\backup.exe
%ProgramFiles%\adobe\acrobat.com\bin-debug\backup.exe
%ProgramFiles%\adobe\acrobat.com\assets\icons\backup.exe
%ProgramFiles%\adobe\acrobat.com\assets\backup.exe
%ProgramFiles%\adobe\acrobat.com\backup.exe
%ProgramFiles%\adobe\system restore.exe
%ProgramFiles%\admunch\backup.exe
%ProgramFiles%\ackwin32\backup.exe
%ProgramFiles%\about\backup.exe
%ProgramFiles%\aavshield\backup.exe
%ProgramFiles%\a2wizard\backup.exe
%ProgramFiles%\a2upd\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\backup.exe
%ProgramFiles%\a2service\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\backup.exe
%WINDIR%\assembly\gac\adodb\7.0.3300.0__b03f5f7f11d50a3a\system restore.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\backup.exe
%WINDIR%\assembly\gac\adodb\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\saslprep\backup.exe
%WINDIR%\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\backup.exe
%WINDIR%\assembly\gac\accessibility\backup.exe
%WINDIR%\assembly\gac\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\backup.exe
%WINDIR%\assembly\backup.exe
%WINDIR%\apppatch\backup.exe
%WINDIR%\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\backup.exe
%WINDIR%\addins\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\font\pfm\backup.exe
%WINDIR%\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\font\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\tracker\system restore.exe
%ProgramFiles%\adobe\reader 10.0\reader\spplugins\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\services\data.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\system restore.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\backup.exe
%WINDIR%\assembly\gac\cscompmgd\backup.exe
%ProgramFiles%\a2scan\backup.exe
%ProgramFiles%\a2hijackfree\backup.exe
%ALLUSERSPROFILE%\start menu\programs\google chrome\system restore.exe
%ALLUSERSPROFILE%\start menu\programs\administrative tools\backup.exe
%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\backup.exe
%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\backup.exe
%ALLUSERSPROFILE%\start menu\programs\accessories\communications\backup.exe
%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\backup.exe
%ALLUSERSPROFILE%\start menu\programs\accessories\backup.exe
%ALLUSERSPROFILE%\start menu\programs\backup.exe
%ALLUSERSPROFILE%\start menu\backup.exe
%ALLUSERSPROFILE%\favorites\backup.exe
%ALLUSERSPROFILE%\documents\my videos\backup.exe
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\backup.exe
%ALLUSERSPROFILE%\documents\my pictures\backup.exe
%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\backup.exe
%ALLUSERSPROFILE%\documents\my music\sample playlists\backup.exe
%ALLUSERSPROFILE%\documents\my music\sample music\backup.exe
%ALLUSERSPROFILE%\documents\my music\my playlists\backup.exe
%ALLUSERSPROFILE%\documents\my music\update.exe
%ALLUSERSPROFILE%\documents\system restore.exe
%ALLUSERSPROFILE%\desktop\backup.exe
%ALLUSERSPROFILE%\backup.exe
C:\documents and settings\system restore.exe
C:\backup.exe
<PATH_SAMPLE>.dat
<Current directory>\2wa03924
<Current directory>\temp.zip
%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\backup.exe
%ALLUSERSPROFILE%\start menu\programs\microsoft office\backup.exe
%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\backup.exe
%ALLUSERSPROFILE%\start menu\programs\games\system restore.exe
%ALLUSERSPROFILE%\start menu\programs\mirc\backup.exe
%ProgramFiles%\a2cmd\backup.exe
%ProgramFiles%\a2guard\backup.exe
%ProgramFiles%\360tray\backup.exe
%HOMEPATH%\voip\backup.exe
%HOMEPATH%\userdata\backup.exe
%ProgramFiles%\backup.exe
<Current directory>\user.zip
%HOMEPATH%\start menu\programs\winrar\update.exe
%HOMEPATH%\start menu\programs\telegram desktop\backup.exe
%HOMEPATH%\start menu\programs\icq\backup.exe
%HOMEPATH%\start menu\programs\administrative tools\backup.exe
%HOMEPATH%\start menu\programs\accessories\entertainment\backup.exe
%HOMEPATH%\start menu\programs\accessories\accessibility\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\backup.exe
%HOMEPATH%\start menu\programs\accessories\backup.exe
%HOMEPATH%\my documents\my pictures\backup.exe
%HOMEPATH%\my documents\my music\backup.exe
%HOMEPATH%\my documents\downloads\backup.exe
%HOMEPATH%\my documents\backup.exe
%HOMEPATH%\favorites\links\backup.exe
%HOMEPATH%\favorites\backup.exe
%HOMEPATH%\desktop\backup.exe
%HOMEPATH%\cookies\backup.exe
%HOMEPATH%\backup.exe
%ALLUSERSPROFILE%\start menu\programs\winrar\update.exe
%ALLUSERSPROFILE%\start menu\programs\steam\backup.exe
%ALLUSERSPROFILE%\start menu\programs\qip 2012\backup.exe
%HOMEPATH%\start menu\programs\backup.exe
%HOMEPATH%\start menu\backup.exe
%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\backup.exe
%ProgramFiles%\aswregsvr\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2906.0__31bf3856ad364e35\backup.exe
%WINDIR%\help\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2905.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\fonts\backup.exe
%ProgramFiles%\ashwebsv\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2904.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe
%WINDIR%\ehome\backup.exe
%ProgramFiles%\ashupd\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2903.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\12.0.0.0__71e9bce111e9429c\backup.exe
%ProgramFiles%\ashskpck\backup.exe
%WINDIR%\driver cache\i386\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2902.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\backup.exe
%ProgramFiles%\ashskpcc\backup.exe
%WINDIR%\driver cache\data.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\backup.exe
%ProgramFiles%\ashsimpl\backup.exe
%WINDIR%\assembly\gac_32\isymwrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\debug\usermode\backup.exe
%WINDIR%\assembly\gac_32\isymwrapper\system restore.exe
%ProgramFiles%\ashsimp2\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3d\1.0.2902.0__31bf3856ad364e35\backup.exe
%WINDIR%\debug\backup.exe
%ProgramFiles%\ashserv\system restore.exe
%ProgramFiles%\aswupdsv\data.exe
%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\8.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac_32\system.data.oracleclient\backup.exe
%ProgramFiles%\avadmin\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2911.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directinput\backup.exe
%ProgramFiles%\avcmd\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\audio\wav\backup.exe
%WINDIR%\assembly\gac_32\system.data\2.0.0.0__b77a5c561934e089\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directdraw\1.0.2902.0__31bf3856ad364e35\data.exe
%ProgramFiles%\avciman\backup.exe
%WINDIR%\assembly\gac_32\system.data\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\audio\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.directdraw\update.exe
%ProgramFiles%\avcenter\backup.exe
%WINDIR%\assembly\gac_32\presentationcore\3.0.0.0__31bf3856ad364e35\backup.exe
%WINDIR%\help\tours\windowsmediaplayer\backup.exe
%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\backup.exe
%WINDIR%\assembly\gac_32\custommarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac\custommarshalers\backup.exe
%WINDIR%\assembly\gac_32\presentationcore\backup.exe
%WINDIR%\help\tours\mmtour\backup.exe
%ProgramFiles%\autotrace\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2909.0__31bf3856ad364e35\backup.exe
%WINDIR%\assembly\gac_32\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe
%ProgramFiles%\autostartexplorer\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2908.0__31bf3856ad364e35\backup.exe
%WINDIR%\help\tours\htmltour\backup.exe
%WINDIR%\assembly\gac_32\mscorlib\backup.exe
%ProgramFiles%\autodown\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2907.0__31bf3856ad364e35\backup.exe
%WINDIR%\help\tours\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2910.0__31bf3856ad364e35\data.exe
%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\temp\backup.exe
%ProgramFiles%\ashquick\backup.exe
%WINDIR%\assembly\gac\iehost\backup.exe
%ProgramFiles%\amsn\backup.exe
%WINDIR%\assembly\gac\ieexecremote\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\amon\backup.exe
%WINDIR%\assembly\gac\ieexecremote\backup.exe
%ProgramFiles%\alsvc\backup.exe
%WINDIR%\assembly\gac\ialoader\1.7.6223.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\almon\data.exe
%WINDIR%\assembly\gac\ialoader\backup.exe
%ProgramFiles%\airdefense\backup.exe
%WINDIR%\assembly\gac\iacore\1.7.6223.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\aimpro\backup.exe
%WINDIR%\assembly\gac\iacore\backup.exe
%ProgramFiles%\aim6\update.exe
%WINDIR%\assembly\gac\extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\ahnsd\backup.exe
%ProgramFiles%\ageofconan\backup.exe
%WINDIR%\assembly\gac\extensibility\backup.exe
%ProgramFiles%\adobe\reader 10.0\setup files\{ac76ba86-7ad7-1033-7b44-aa1000000001}\backup.exe
%ProgramFiles%\agb5\backup.exe
%ProgramFiles%\adobe\reader 10.0\setup files\backup.exe
%WINDIR%\assembly\gac\dao\10.0.4504.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\data.exe
%WINDIR%\assembly\gac\dao\backup.exe
%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\backup.exe
%WINDIR%\assembly\gac\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%WINDIR%\assembly\gac\iehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\antivirus\backup.exe
%ProgramFiles%\anti-trojan\backup.exe
%ProgramFiles%\aoltbserver\backup.exe
%WINDIR%\assembly\gac_32\custommarshalers\backup.exe
%WINDIR%\assembly\gac\iiehost\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.diagnostics\1.0.2902.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\ashpopwz\backup.exe
%WINDIR%\connection wizard\backup.exe
%WINDIR%\assembly\gac_32\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.diagnostics\backup.exe
%ProgramFiles%\ashmaisv\data.exe
%WINDIR%\config\backup.exe
%ProgramFiles%\ashlogv\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\1.0.2902.0__31bf3856ad364e35\backup.exe
%ProgramFiles%\ashenhcd\update.exe
%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\backup.exe
%ProgramFiles%\ashdug\backup.exe
%WINDIR%\cursors\backup.exe
%WINDIR%\assembly\gac\microsoft.directx.direct3d\data.exe
%WINDIR%\assembly\gac\microsoft.directx\backup.exe
%ProgramFiles%\ashchest\backup.exe
%WINDIR%\assembly\gac\isymwrapper\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\ashavsrv\update.exe
%WINDIR%\assembly\gac\isymwrapper\backup.exe
%ProgramFiles%\ashavast\backup.exe
%WINDIR%\assembly\gac\ipdmctrl\11.0.0.0__71e9bce111e9429c\backup.exe
%ProgramFiles%\ash_updatemediator\backup.exe
%WINDIR%\assembly\gac\ipdmctrl\backup.exe
%ProgramFiles%\ash\backup.exe
%ProgramFiles%\armorsurf\backup.exe
%WINDIR%\assembly\gac\iiehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
%ProgramFiles%\armor2net\backup.exe
%WINDIR%\assembly\gac\microsoft.directx\1.0.2902.0__31bf3856ad364e35\backup.exe
%WINDIR%\microsoft.net\assembly\gac_32\system.data\backup.exe

Sets the 'hidden' attribute to the following files

<Current directory>\user.zip

Deletes the following files

<Current directory>\temp.zip
<PATH_SAMPLE>.dat

Substitutes the following files

<Current directory>\temp.zip

Miscellaneous

Searches for the following windows

ClassName: 'CabinetWClass' WindowName: ''
ClassName: 'ExploreWClass' WindowName: ''

Creates and executes the following

'C:\backup.exe' \
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_msil\aspnetmmcext\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\016f9a150fce0e0a4c93532d8fa4c749\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\
'%ProgramFiles%\autodown\backup.exe' %ProgramFiles%\AutoDown\
'%WINDIR%\assembly\gac_32\mscorlib\backup.exe' %WINDIR%\assembly\GAC_32\mscorlib\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\help\tours\htmltour\backup.exe' %WINDIR%\Help\Tours\htmlTour\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2908.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\5c59991df60164cae10fd81b88a8e5b1\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\ReachFramework\5c59991df60164cae10fd81b88a8e5b1\
'%ProgramFiles%\autostartexplorer\backup.exe' %ProgramFiles%\AutostartExplorer\
'%WINDIR%\assembly\gac_32\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2909.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\
'%ProgramFiles%\autotrace\backup.exe' %ProgramFiles%\AutoTrace\
'%ProgramFiles%\bdsurvey\update.exe' %ProgramFiles%\BDSurvey\
'%WINDIR%\help\tours\mmtour\backup.exe' %WINDIR%\Help\Tours\mmTour\
'%WINDIR%\assembly\gac_32\presentationcore\backup.exe' %WINDIR%\assembly\GAC_32\PresentationCore\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2907.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\update.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\
'%WINDIR%\help\tours\backup.exe' %WINDIR%\Help\Tours\
'%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2904.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\040571d65dc822e5df020d5e084f4b45\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\
'%WINDIR%\fonts\backup.exe' %WINDIR%\Fonts\
'%ProgramFiles%\ashwebsv\backup.exe' %ProgramFiles%\ashWebSv\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\
'%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\aswregsvr\backup.exe' %ProgramFiles%\aswRegSvr\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2905.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\
'%WINDIR%\help\backup.exe' %WINDIR%\Help\
'%ProgramFiles%\avcenter\backup.exe' %ProgramFiles%\avcenter\
'%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2906.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\
'%ProgramFiles%\bdswitch\backup.exe' %ProgramFiles%\bdswitch\
'%ProgramFiles%\aswupdsv\data.exe' %ProgramFiles%\aswUpdSv\
'%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.SmartTag\
'%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2910.0__31bf3856ad364e35\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac\microsoft.office.interop.publisher\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac_32\system.data.oracleclient\backup.exe' %WINDIR%\assembly\GAC_32\System.Data.OracleClient\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\3963e9ce8d44f50e8367e92a8e3e42e6\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\
'%WINDIR%\help\tours\windowsmediaplayer\cnt\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\
'%ProgramFiles%\avconfig\backup.exe' %ProgramFiles%\avconfig\
'%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\ISymWrapper\
'%WINDIR%\assembly\gac\microsoft.directx.directinput\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\87fb973e4ab6a21fd00e45656fa7c115\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationUI\87fb973e4ab6a21fd00e45656fa7c115\
'%WINDIR%\assembly\gac_32\system.data.oracleclient\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\
'%WINDIR%\help\tours\windowsmediaplayer\css\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Css\
'%ProgramFiles%\bdsubmit\backup.exe' %ProgramFiles%\bdsubmit\
'%ProgramFiles%\avconsol\backup.exe' %ProgramFiles%\Avconsol\
'%WINDIR%\assembly\gac_msil\accessibility\backup.exe' %WINDIR%\assembly\GAC_MSIL\Accessibility\
'%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.directx.directinput\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectInput\
'%ProgramFiles%\avadmin\backup.exe' %ProgramFiles%\avadmin\
'%WINDIR%\assembly\gac\microsoft.office.interop.publisher\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Publisher\
'%WINDIR%\help\tours\windowsmediaplayer\audio\wav\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\Wav\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2911.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System\
'%WINDIR%\assembly\gac_msil\backup.exe' %WINDIR%\assembly\GAC_MSIL\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\system restore.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\
'%WINDIR%\assembly\gac_32\presentationcore\3.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac\microsoft.office.interop.word\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.directx.directdraw\update.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectDraw\
'%WINDIR%\help\tours\windowsmediaplayer\audio\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\
'%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_32\system.data\backup.exe' %WINDIR%\assembly\GAC_32\System.Data\
'%ProgramFiles%\avciman\backup.exe' %ProgramFiles%\avciman\
'%ProgramFiles%\bdsubmitwiz\backup.exe' %ProgramFiles%\bdsubmitwiz\
'%WINDIR%\assembly\gac\microsoft.directx.directdraw\1.0.2902.0__31bf3856ad364e35\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac_32\system.data\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\avcmd\backup.exe' %ProgramFiles%\avcmd\
'%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\ehome\backup.exe' %WINDIR%\ehome\
'%ProgramFiles%\ashupd\backup.exe' %ProgramFiles%\ashUpd\
'%ProgramFiles%\ashdisp\backup.exe' %ProgramFiles%\ashDisp\
'%WINDIR%\assembly\gac\microsoft.directx\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib\
'%ProgramFiles%\ashdug\backup.exe' %ProgramFiles%\ashDug\
'%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\
'%ProgramFiles%\blackice\backup.exe' %ProgramFiles%\blackice\
'%ProgramFiles%\ashenhcd\update.exe' %ProgramFiles%\ashEnhcd\
'%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\7f91eecda3ff7ce478146b6458580c98\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\
'%ProgramFiles%\ashlogv\backup.exe' %ProgramFiles%\ashLogV\
'%WINDIR%\config\backup.exe' %WINDIR%\Config\
'%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\
'%ProgramFiles%\ashmaisv\data.exe' %ProgramFiles%\ashMaiSv\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\ReachFramework\
'%WINDIR%\help\tours\windowsmediaplayer\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data\
'%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\
'%WINDIR%\assembly\gac_32\backup.exe' %WINDIR%\assembly\GAC_32\
'%WINDIR%\msagent\intl\backup.exe' %WINDIR%\msagent\intl\
'%WINDIR%\assembly\gac\microsoft.stdformat\backup.exe' %WINDIR%\assembly\GAC\Microsoft.StdFormat\
'%ProgramFiles%\armorsurf\backup.exe' %ProgramFiles%\armorsurf\
'%WINDIR%\assembly\gac\iiehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\3.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\ash\backup.exe' %ProgramFiles%\ash\
'%WINDIR%\assembly\gac\ipdmctrl\backup.exe' %WINDIR%\assembly\GAC\ipdmctrl\
'%WINDIR%\microsoft.net\assembly\gac_msil\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\
'%ProgramFiles%\ash_updatemediator\backup.exe' %ProgramFiles%\ash_UpdateMediator\
'%WINDIR%\assembly\gac\ipdmctrl\11.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\
'%WINDIR%\microsoft.net\directx for managed code\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\
'%ProgramFiles%\ashavast\backup.exe' %ProgramFiles%\ashAvast\
'%WINDIR%\assembly\gac\isymwrapper\backup.exe' %WINDIR%\assembly\GAC\ISymWrapper\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\
'%ProgramFiles%\ashavsrv\update.exe' %ProgramFiles%\ashAvSrv\
'%WINDIR%\assembly\gac\isymwrapper\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\
'%ProgramFiles%\ashchest\backup.exe' %ProgramFiles%\ashchest\
'%WINDIR%\connection wizard\backup.exe' %WINDIR%\Connection Wizard\
'%WINDIR%\java\trustlib\backup.exe' %WINDIR%\java\trustlib\
'%ProgramFiles%\ashpopwz\backup.exe' %ProgramFiles%\ashPopWz\
'%WINDIR%\assembly\gac_32\isymwrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\driver cache\data.exe' %WINDIR%\Driver Cache\
'%ProgramFiles%\ashskpcc\backup.exe' %ProgramFiles%\ashSkPcc\
'%WINDIR%\msagent\backup.exe' %WINDIR%\msagent\
'%WINDIR%\assembly\gac\microsoft.directx\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX\
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\
'%WINDIR%\assembly\gac\microsoft.directx.directplay\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectPlay\
'%ProgramFiles%\ashskpck\backup.exe' %ProgramFiles%\ashSkPck\
'%WINDIR%\assembly\gac_msil\accessibility\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\bdwizreg\backup.exe' %ProgramFiles%\bdwizreg\
'%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\avgw\backup.exe' %ProgramFiles%\avgw\
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2903.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\aa7926460a336408c8041330ad90929d\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\
'%WINDIR%\assembly\gac\microsoft.office.interop.word\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Word\
'%ProgramFiles%\ashsimpl\backup.exe' %ProgramFiles%\ashSimpl\
'%WINDIR%\debug\usermode\backup.exe' %WINDIR%\Debug\UserMode\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\3555f5f74c56fa92c0ab7a635af91bfa\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\
'%WINDIR%\assembly\gac\microsoft.directx.diagnostics\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\msagent\chars\backup.exe' %WINDIR%\msagent\chars\
'%WINDIR%\assembly\gac_32\custommarshalers\backup.exe' %WINDIR%\assembly\GAC_32\CustomMarshalers\
'%ProgramFiles%\ashquick\backup.exe' %ProgramFiles%\ashQuick\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\
'%WINDIR%\assembly\gac\microsoft.directx.direct3d\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3D\
'%WINDIR%\cursors\backup.exe' %WINDIR%\Cursors\
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_32\custommarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\blackd\backup.exe' %ProgramFiles%\blackd\
'%WINDIR%\debug\backup.exe' %WINDIR%\Debug\
'%WINDIR%\assembly\gac\microsoft.directx.direct3d\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Core\
'%WINDIR%\assembly\gac_32\isymwrapper\system restore.exe' %WINDIR%\assembly\GAC_32\ISymWrapper\
'%ProgramFiles%\ashsimp2\backup.exe' %ProgramFiles%\ashsimp2\
'%ProgramFiles%\ashserv\system restore.exe' %ProgramFiles%\ashServ\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\79c2fd29b1e46c943960278051b4e1b9\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\79c2fd29b1e46c943960278051b4e1b9\
'%ProgramFiles%\avgamsvr\backup.exe' %ProgramFiles%\avgamsvr\
'%WINDIR%\assembly\gac_32\system.enterpriseservices\backup.exe' %WINDIR%\assembly\GAC_32\System.EnterpriseServices\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.office.interop.onenote\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.office.interop.excel\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\avinitnt\backup.exe' %ProgramFiles%\avinitnt\
'%WINDIR%\ime\imkr6_1\backup.exe' %WINDIR%\ime\imkr6_1\
'%WINDIR%\media\backup.exe' %WINDIR%\Media\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\
'%WINDIR%\ime\imkr6_1\applets\backup.exe' %WINDIR%\ime\imkr6_1\applets\
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\
'%ProgramFiles%\b2\backup.exe' %ProgramFiles%\B2\
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.office.interop.graph\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Graph\
'%ProgramFiles%\bdagent\backup.exe' %ProgramFiles%\bdagent\
'%WINDIR%\assembly\gac\microsoft.office.interop.excel\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Excel\
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\ime\imjp8_1\applets\backup.exe' %WINDIR%\ime\imjp8_1\applets\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\
'%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\
'%WINDIR%\ime\imejp98\backup.exe' %WINDIR%\ime\imejp98\
'%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access.Dao\
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\avgvv\backup.exe' %ProgramFiles%\avgvv\
'%WINDIR%\ime\imjp8_1\backup.exe' %WINDIR%\ime\imjp8_1\
'%WINDIR%\assembly\gac\microsoft.office.interop.outlook\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Outlook\
'%ProgramFiles%\avgwizfw\backup.exe' %ProgramFiles%\avgwizfw\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system restore.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\
'%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\
'%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\
'%WINDIR%\microsoft.net\data.exe' %WINDIR%\Microsoft.NET\
'%ProgramFiles%\avkservice\backup.exe' %ProgramFiles%\AVKService\
'%ProgramFiles%\backweb-4476822\backup.exe' %ProgramFiles%\BackWeb-4476822\
'%ProgramFiles%\avkserv\backup.exe' %ProgramFiles%\AvkServ\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\b6bfb51dec7f8cc42c21c5928470c773\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b6bfb51dec7f8cc42c21c5928470c773\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\9469981a17c01dd154c540127e678b35\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\9469981a17c01dd154c540127e678b35\
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCore\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\
'%WINDIR%\java\backup.exe' %WINDIR%\java\
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks\2.0.0.0__b03f5f7f11d50a3a\system restore.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\avscan\backup.exe' %ProgramFiles%\avscan\
'%WINDIR%\java\classes\update.exe' %WINDIR%\java\classes\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\12dcb10b76012416357bdbb010fdaa97\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCore\12dcb10b76012416357bdbb010fdaa97\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\data.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\
'%ProgramFiles%\avpm\backup.exe' %ProgramFiles%\avpm\
'%ProgramFiles%\avnotify\backup.exe' %ProgramFiles%\avnotify\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\l2schemas\backup.exe' %WINDIR%\L2Schemas\
'%WINDIR%\ime\shared\res\backup.exe' %WINDIR%\ime\shared\res\
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\
'%WINDIR%\ime\imkr6_1\dicts\backup.exe' %WINDIR%\ime\imkr6_1\dicts\
'%WINDIR%\logs\backup.exe' %WINDIR%\Logs\
'%WINDIR%\assembly\gac\microsoft.office.interop.graph\12.0.0.0__71e9bce111e9429c\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.office.interop.onenote\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OneNote\
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\avgupsvc\backup.exe' %ProgramFiles%\avgupsvc\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\data.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\ef1a93d10c3a91b728745dbfcc79c2c7\system restore.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ef1a93d10c3a91b728745dbfcc79c2c7\
'%WINDIR%\ime\shared\backup.exe' %WINDIR%\ime\shared\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\avkwctl\data.exe' %ProgramFiles%\AVKWCtl\
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\487c1bc20f6e73e8e79503898d17d102\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\487c1bc20f6e73e8e79503898d17d102\
'%ProgramFiles%\avsynmgr\backup.exe' %ProgramFiles%\avsynmgr\
'%ProgramFiles%\armor2net\backup.exe' %ProgramFiles%\Armor2net\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9519494798a88867406b5755e1dbded6\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9519494798a88867406b5755e1dbded6\
'%WINDIR%\assembly\gac\microsoft.office.interop.access\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\help\tours\windowsmediaplayer\img\wmarks\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\
'%WINDIR%\assembly\gac\microsoft.directx.diagnostics\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Diagnostics\
'%WINDIR%\assembly\gac_32\system.printing\3.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\
'%WINDIR%\assembly\gac_32\system.transactions\backup.exe' %WINDIR%\assembly\GAC_32\System.Transactions\
'%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\
'%WINDIR%\assembly\gac_msil\cscompmgd\backup.exe' %WINDIR%\assembly\GAC_MSIL\cscompmgd\
'%WINDIR%\help\tours\windowsmediaplayer\scr\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\
'%ProgramFiles%\bdoesrv\backup.exe' %ProgramFiles%\bdoesrv\
'%ProgramFiles%\avgfwsrv\backup.exe' %ProgramFiles%\avgfwsrv\
'%WINDIR%\assembly\gac_32\system.transactions\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\
'%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\12.0.0.0__71e9bce111e9429c\data.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.jscript\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_msil\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath\
'%WINDIR%\driver cache\i386\backup.exe' %WINDIR%\Driver Cache\i386\
'%WINDIR%\assembly\gac\microsoft.jscript\backup.exe' %WINDIR%\assembly\GAC\Microsoft.JScript\
'%WINDIR%\help\tours\windowsmediaplayer\video\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\
'%ProgramFiles%\avpcc\system restore.exe' %ProgramFiles%\avpcc\
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.office.interop.access\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access\
'%WINDIR%\help\tours\windowsmediaplayer\img\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\
'%WINDIR%\assembly\gac\microsoft.directx.directplay\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationUI\
'%ProgramFiles%\avgcc\backup.exe' %ProgramFiles%\avgcc\
'%WINDIR%\assembly\gac_32\system.enterpriseservices\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.directx.directsound\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectSound\
'%WINDIR%\assembly\gac_msil\aspnetmmcext\update.exe' %WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\
'%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.PowerPoint\
'%WINDIR%\help\tours\windowsmediaplayer\img\btn\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\
'%ProgramFiles%\avgdiag\backup.exe' %ProgramFiles%\avgdiag\
'%ProgramFiles%\bdss\backup.exe' %ProgramFiles%\bdss\
'%WINDIR%\assembly\gac_32\system.printing\backup.exe' %WINDIR%\assembly\GAC_32\System.Printing\
'%WINDIR%\assembly\gac\microsoft.directx.directsound\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\
'%ProgramFiles%\avgemc\update.exe' %ProgramFiles%\avgemc\
'%WINDIR%\ime\backup.exe' %WINDIR%\ime\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib\
'%ProgramFiles%\avginet\backup.exe' %ProgramFiles%\avginet\
'%ProgramFiles%\avgrssvc\backup.exe' %ProgramFiles%\avgrssvc\
'%WINDIR%\assembly\gac_msil\iehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_msil\microsoft.jscript\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\
'%WINDIR%\ime\chtime\applets\backup.exe' %WINDIR%\ime\CHTIME\Applets\
'%WINDIR%\assembly\gac\microsoft.office.infopath.permission\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\
'%WINDIR%\assembly\gac\microsoft.office.interop.outlook\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\avgscan\backup.exe' %ProgramFiles%\avgscan\
'%WINDIR%\assembly\gac_msil\iiehost\backup.exe' %WINDIR%\assembly\GAC_MSIL\IIEHost\
'%ProgramFiles%\adobe\reader 10.0\reader\legal\enu\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Legal\ENU\
'%ProgramFiles%\bdmcon\backup.exe' %ProgramFiles%\bdmcon\
'%WINDIR%\ime\imejp\backup.exe' %WINDIR%\ime\imejp\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.design\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Design\
'%WINDIR%\microsoft.net\assembly\backup.exe' %WINDIR%\Microsoft.NET\assembly\
'%WINDIR%\assembly\gac_msil\iiehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\update.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9e71fd0d299c5668c96a54e4a63479fa\update.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9e71fd0d299c5668c96a54e4a63479fa\
'%WINDIR%\ime\chtime\backup.exe' %WINDIR%\ime\CHTIME\
'%WINDIR%\assembly\gac\microsoft.office.infopath.permission\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.InfoPath.Permission\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\05503f37aef5261d80ccca19f8078679\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\
'%WINDIR%\assembly\gac_msil\ieexecremote\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEExecRemote\
'%WINDIR%\assembly\gac_msil\microsoft.jscript\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac_32\system.web\backup.exe' %WINDIR%\assembly\GAC_32\System.Web\
'%WINDIR%\assembly\gac\microsoft.mshtml\backup.exe' %WINDIR%\assembly\GAC\Microsoft.mshtml\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\b4dc4bd8534d90fbb7430926ad990cd9\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b4dc4bd8534d90fbb7430926ad990cd9\
'%ProgramFiles%\avgnpdln\backup.exe' %ProgramFiles%\avgnpdln\
'%WINDIR%\ime\chsime\backup.exe' %WINDIR%\ime\chsime\
'%WINDIR%\ime\imejp\applets\backup.exe' %WINDIR%\ime\imejp\applets\
'%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\
'%WINDIR%\assembly\gac_msil\ieexecremote\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\
'%ProgramFiles%\bdnews\backup.exe' %ProgramFiles%\bdnews\
'%WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\
'%WINDIR%\ime\chsime\applets\backup.exe' %WINDIR%\ime\chsime\applets\
'%WINDIR%\microsoft.net\assembly\gac_32\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\
'%ProgramFiles%\avgnpsvc\backup.exe' %ProgramFiles%\avgnpsvc\
'%WINDIR%\assembly\gac_msil\iehost\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEHost\
'%WINDIR%\assembly\gac_32\system.web\2.0.0.0__b03f5f7f11d50a3a\data.exe' %WINDIR%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\iiehost\backup.exe' %WINDIR%\assembly\GAC\IIEHost\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\6c69930d05c557da70144bcc0add7065\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Core\6c69930d05c557da70144bcc0add7065\
'%ProgramFiles%\adobe\reader 10.0\reader\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\
'%ProgramFiles%\avgupden\backup.exe' %ProgramFiles%\avgupden\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\
'%WINDIR%\assembly\temp\backup.exe' %WINDIR%\assembly\temp\
'%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft .NET Framework SDK v1.1\
'%WINDIR%\microsoft.net\assembly\gac_32\system.data\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data\
'%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\enu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\
'%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\IDTemplates\
'%ProgramFiles%\adobe\reader 10.0\reader\browser\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Browser\
'%ProgramFiles%\adobe\reader 10.0\reader\air\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\AIR\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\f5e029e2215c95ab38a1eefef7b32ac9\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\
'%ProgramFiles%\adobe\reader 10.0\esl\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Esl\
'%ProgramFiles%\adobe\acrobat.com\meta-inf\air\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\META-INF\AIR\
'%ProgramFiles%\adobe\acrobat.com\meta-inf\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\META-INF\
'%ProgramFiles%\adobe\acrobat.com\bin-debug\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\bin-debug\
'%ProgramFiles%\adobe\acrobat.com\assets\icons\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\assets\icons\
'%ProgramFiles%\adobe\acrobat.com\assets\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\assets\
'%ProgramFiles%\adobe\acrobat.com\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\
'%ProgramFiles%\adobe\system restore.exe' %ProgramFiles%\Adobe\
'%ProgramFiles%\admunch\backup.exe' %ProgramFiles%\AdMunch\
'%ProgramFiles%\ackwin32\backup.exe' %ProgramFiles%\AckWin32\
'%ProgramFiles%\about\backup.exe' %ProgramFiles%\About\
'%ProgramFiles%\aavshield\backup.exe' %ProgramFiles%\aavshield\
'%ProgramFiles%\a2wizard\backup.exe' %ProgramFiles%\a2wizard\
'%ProgramFiles%\adobe\reader 10.0\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\pmp\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\
'%WINDIR%\network diagnostic\backup.exe' %WINDIR%\Network Diagnostic\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\
'%WINDIR%\assembly\backup.exe' %WINDIR%\assembly\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\fa206c73f39721cd2c55829b9853de44\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\fa206c73f39721cd2c55829b9853de44\
'%ALLUSERSPROFILE%\desktop\backup.exe' %ALLUSERSPROFILE%\Desktop\
'%ProgramFiles%\adobe\reader 10.0\reader\javascripts\update.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Javascripts\
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\
'%ProgramFiles%\adobe\reader 10.0\reader\legal\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Legal\
'%WINDIR%\apppatch\backup.exe' %WINDIR%\AppPatch\
'%ProgramFiles%\cabalmain\backup.exe' %ProgramFiles%\cabalmain\
'%WINDIR%\addins\backup.exe' %WINDIR%\addins\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.componentmod#\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\
'%ProgramFiles%\adobe\reader 10.0\resource\font\pfm\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Font\PFM\
'%WINDIR%\backup.exe' %WINDIR%\
'%WINDIR%\assembly\gac\microsoft.vbe.interop\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\adobe\reader 10.0\resource\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7cd5dcd5\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7cd5dcd5\
'%ProgramFiles%\adobe\reader 10.0\reader\tracker\system restore.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Tracker\
'%ProgramFiles%\adobe\reader 10.0\reader\spplugins\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\SPPlugins\
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\
'%ProgramFiles%\adobe\reader 10.0\reader\services\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Services\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\system restore.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\
'%ALLUSERSPROFILE%\start menu\programs\google chrome\system restore.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Google Chrome\
'%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\v4.0_4.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\
'%WINDIR%\microsoft.net\directx for managed code\1.0.2904.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\
'%WINDIR%\microsoft.net\assembly\gac_msil\aspnetmmcext\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\
'%ProgramFiles%\a2upd\backup.exe' %ProgramFiles%\a2upd\
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\
'%ProgramFiles%\a2start\data.exe' %ProgramFiles%\a2start\
'%ProgramFiles%\a2scan\backup.exe' %ProgramFiles%\a2scan\
'%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\
'%ALLUSERSPROFILE%\start menu\programs\microsoft office\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft Office\
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins3d\
'%ALLUSERSPROFILE%\start menu\programs\games\system restore.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Games\
'%ProgramFiles%\adobe\reader 10.0\resource\font\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Font\
'%ProgramFiles%\aim6\update.exe' %ProgramFiles%\aim6\
'%HOMEPATH%\voip\backup.exe' %HOMEPATH%\voip\
'%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\
'%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\
'%ALLUSERSPROFILE%\start menu\programs\accessories\communications\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\
'%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\
'%ALLUSERSPROFILE%\start menu\programs\accessories\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\
'%ALLUSERSPROFILE%\start menu\programs\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\
'%ALLUSERSPROFILE%\start menu\programs\mirc\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\mIRC\
'%ALLUSERSPROFILE%\start menu\backup.exe' %ALLUSERSPROFILE%\Start Menu\
'%ALLUSERSPROFILE%\documents\my videos\backup.exe' %ALLUSERSPROFILE%\Documents\My Videos\
'%ALLUSERSPROFILE%\documents\my pictures\sample pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\
'%ALLUSERSPROFILE%\documents\my pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\
'%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\00107FF6\
'%ALLUSERSPROFILE%\documents\my music\sample playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\
'%ALLUSERSPROFILE%\documents\my music\sample music\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Music\
'%ALLUSERSPROFILE%\documents\my music\my playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\My Playlists\
'%ALLUSERSPROFILE%\documents\my music\update.exe' %ALLUSERSPROFILE%\Documents\My Music\
'%ALLUSERSPROFILE%\documents\system restore.exe' %ALLUSERSPROFILE%\Documents\
'%ALLUSERSPROFILE%\backup.exe' %ALLUSERSPROFILE%\
'C:\documents and settings\system restore.exe' C:\Documents and Settings\
'%ALLUSERSPROFILE%\favorites\backup.exe' %ALLUSERSPROFILE%\Favorites\
'%ALLUSERSPROFILE%\start menu\programs\qip 2012\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\QIP 2012\
'%ALLUSERSPROFILE%\start menu\programs\startup\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Startup\
'%ALLUSERSPROFILE%\start menu\programs\steam\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Steam\
'%ProgramFiles%\a2hijackfree\backup.exe' %ProgramFiles%\a2HiJackFree\
'%ProgramFiles%\a2guard\backup.exe' %ProgramFiles%\a2guard\
'%ProgramFiles%\a2cmd\backup.exe' %ProgramFiles%\a2cmd\
'%HOMEPATH%\userdata\backup.exe' %HOMEPATH%\UserData\
'%ProgramFiles%\backup.exe' %ProgramFiles%\
'%HOMEPATH%\start menu\programs\winrar\update.exe' %HOMEPATH%\Start Menu\Programs\WinRAR\
'%WINDIR%\assembly\gac\extensibility\backup.exe' %WINDIR%\assembly\GAC\Extensibility\
'%HOMEPATH%\favorites\links\backup.exe' %HOMEPATH%\Favorites\Links\
'%ALLUSERSPROFILE%\start menu\programs\administrative tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\
'%HOMEPATH%\start menu\programs\telegram desktop\backup.exe' %HOMEPATH%\Start Menu\Programs\Telegram Desktop\
'%HOMEPATH%\start menu\programs\startup\backup.exe' %HOMEPATH%\Start Menu\Programs\Startup\
'%HOMEPATH%\start menu\programs\icq\backup.exe' %HOMEPATH%\Start Menu\Programs\ICQ\
'%HOMEPATH%\start menu\programs\administrative tools\backup.exe' %HOMEPATH%\Start Menu\Programs\Administrative Tools\
'%HOMEPATH%\start menu\programs\accessories\entertainment\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\
'%HOMEPATH%\start menu\programs\accessories\accessibility\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\
'%HOMEPATH%\start menu\programs\accessories\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\
'%HOMEPATH%\start menu\programs\backup.exe' %HOMEPATH%\Start Menu\Programs\
'%HOMEPATH%\start menu\backup.exe' %HOMEPATH%\Start Menu\
'%HOMEPATH%\my documents\my pictures\backup.exe' %HOMEPATH%\My Documents\My Pictures\
'%HOMEPATH%\my documents\my music\backup.exe' %HOMEPATH%\My Documents\My Music\
'%ProgramFiles%\360tray\backup.exe' %ProgramFiles%\360tray\
'%HOMEPATH%\my documents\downloads\backup.exe' %HOMEPATH%\My Documents\Downloads\
'%HOMEPATH%\favorites\backup.exe' %HOMEPATH%\Favorites\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationCore\
'%HOMEPATH%\desktop\backup.exe' %HOMEPATH%\Desktop\
'%HOMEPATH%\cookies\backup.exe' %HOMEPATH%\Cookies\
'%HOMEPATH%\backup.exe' %HOMEPATH%\
'%ALLUSERSPROFILE%\start menu\programs\winrar\update.exe' %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\
'%ProgramFiles%\a2service\backup.exe' %ProgramFiles%\a2service\
'%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\11.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\
'%ProgramFiles%\agb5\backup.exe' %ProgramFiles%\Agb5\
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\
'%WINDIR%\assembly\gac\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\
'%HOMEPATH%\my documents\backup.exe' %HOMEPATH%\My Documents\
'%WINDIR%\assembly\gac\adodb\7.0.3300.0__b03f5f7f11d50a3a\system restore.exe' %WINDIR%\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\
'%WINDIR%\msapps\backup.exe' %WINDIR%\msapps\
'%WINDIR%\assembly\gac\dao\backup.exe' %WINDIR%\assembly\GAC\dao\
'%WINDIR%\assembly\gac\ialoader\1.7.6223.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_7318ec57\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7318ec57\
'%WINDIR%\assembly\gac\iacore\1.7.6223.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\
'%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System\
'%WINDIR%\assembly\gac\dao\10.0.4504.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\
'%WINDIR%\assembly\gac\cscompmgd\backup.exe' %WINDIR%\assembly\GAC\cscompmgd\
'%ProgramFiles%\airdefense\backup.exe' %ProgramFiles%\airdefense\
'%WINDIR%\assembly\gac\ieexecremote\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\
'%ProgramFiles%\ageofconan\backup.exe' %ProgramFiles%\ageofconan\
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\gac\ieexecremote\backup.exe' %WINDIR%\assembly\GAC\IEExecRemote\
'%ProgramFiles%\anti-trojan\backup.exe' %ProgramFiles%\Anti-Trojan\
'%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\0b40341027c01716cec1dd97592698e0\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data\0b40341027c01716cec1dd97592698e0\
'%ProgramFiles%\adobe\reader 10.0\setup files\{ac76ba86-7ad7-1033-7b44-aa1000000001}\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA1000000001}\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\
'%ProgramFiles%\amsn\backup.exe' %ProgramFiles%\amsn\
'%ProgramFiles%\btinint\backup.exe' %ProgramFiles%\BTIniNT\
'%WINDIR%\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\
'%WINDIR%\msapps\msinfo\backup.exe' %WINDIR%\msapps\msinfo\
'%WINDIR%\assembly\gac\iehost\backup.exe' %WINDIR%\assembly\GAC\IEHost\
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic\
'%WINDIR%\assembly\gac\adodb\backup.exe' %WINDIR%\assembly\GAC\ADODB\
'%WINDIR%\assembly\gac\microsoft.vbe.interop\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop\
'%ProgramFiles%\aoltbserver\backup.exe' %ProgramFiles%\AolTbServer\
'%WINDIR%\assembly\gac\custommarshalers\backup.exe' %WINDIR%\assembly\GAC\CustomMarshalers\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\
'%WINDIR%\assembly\gac\backup.exe' %WINDIR%\assembly\GAC\
'%WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_f829b606\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_f829b606\
'%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\update.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\
'%WINDIR%\assembly\gac\ialoader\backup.exe' %WINDIR%\assembly\GAC\IALoader\
'%WINDIR%\assembly\gac\accessibility\backup.exe' %WINDIR%\assembly\GAC\Accessibility\
'%WINDIR%\assembly\gac\iacore\backup.exe' %WINDIR%\assembly\GAC\IACore\
'%ProgramFiles%\antivirus\backup.exe' %ProgramFiles%\AntiVirus\
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\
'%ProgramFiles%\amon\backup.exe' %ProgramFiles%\amon\
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\964da027ebca3b263a05cadb8eaa20a3\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\
'%WINDIR%\assembly\gac\extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\
'%ProgramFiles%\adobe\reader 10.0\resource\saslprep\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\SaslPrep\
'%ProgramFiles%\adobe\reader 10.0\setup files\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Setup Files\
'%ProgramFiles%\almon\data.exe' %ProgramFiles%\ALMon\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\
'%ProgramFiles%\alsvc\backup.exe' %ProgramFiles%\ALsvc\
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\
'%ProgramFiles%\ahnsd\backup.exe' %ProgramFiles%\AhnSD\
'%WINDIR%\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\
'%WINDIR%\microsoft.net\directx for managed code\1.0.2903.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\
'%WINDIR%\mui\backup.exe' %WINDIR%\mui\
'%ProgramFiles%\aimpro\backup.exe' %ProgramFiles%\aimpro\
'%ProgramFiles%\btini\backup.exe' %ProgramFiles%\BTIni\
'%WINDIR%\assembly\gac\iehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\
'%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\PresentationCore\
'%WINDIR%\microsoft.net\directx for managed code\1.0.2902.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\
'%ProgramFiles%\blindman\backup.exe' %ProgramFiles%\blindman\
'%ProgramFiles%\backweb-4476822\backup.exe' %ProgramFiles%\BackWeb-4476822\' (with hidden window)
'%WINDIR%\microsoft.net\data.exe' %WINDIR%\Microsoft.NET\' (with hidden window)
'%ProgramFiles%\cavemsrv\backup.exe' %ProgramFiles%\CavEmSrv\' (with hidden window)
'%WINDIR%\microsoft.net\framework\v1.1.4322\1033\backup.exe' %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\' (with hidden window)
'%WINDIR%\pchealth\errorrep\qsignoff\backup.exe' %WINDIR%\pchealth\ERRORREP\QSIGNOFF\' (with hidden window)
'%ProgramFiles%\bdmcon\backup.exe' %ProgramFiles%\bdmcon\' (with hidden window)
'%ProgramFiles%\bdswitch\backup.exe' %ProgramFiles%\bdswitch\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.core\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Core\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.outlook\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.enterpriseservices\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2909.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.word\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2902.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\' (with hidden window)
'%ProgramFiles%\blackice\backup.exe' %ProgramFiles%\blackice\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualbasic\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2908.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\update.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.outlook\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Outlook\' (with hidden window)
'%ProgramFiles%\cavaud\backup.exe' %ProgramFiles%\CavAUD\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.drawing.desi#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.vsa\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\pchealth\errorrep\qheadles\backup.exe' %WINDIR%\pchealth\ERRORREP\QHEADLES\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build.conversion.v4.0\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\' (with hidden window)
'%ProgramFiles%\bdagent\backup.exe' %ProgramFiles%\bdagent\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\7f91eecda3ff7ce478146b6458580c98\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualbasic.vsa\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.VisualBasic.Vsa\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system.design\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System.Design\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9519494798a88867406b5755e1dbded6\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9519494798a88867406b5755e1dbded6\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c7721925\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_c7721925\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\' (with hidden window)
'%ProgramFiles%\cavmud\backup.exe' %ProgramFiles%\CavMUD\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.transactions.bridge\3.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2910.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.data\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Data\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\' (with hidden window)
'%ProgramFiles%\autostartexplorer\backup.exe' %ProgramFiles%\AutostartExplorer\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build.engine\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\' (with hidden window)
'%ProgramFiles%\cavmr\backup.exe' %ProgramFiles%\Cavmr\' (with hidden window)
'%WINDIR%\l2schemas\backup.exe' %WINDIR%\L2Schemas\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\9469981a17c01dd154c540127e678b35\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\9469981a17c01dd154c540127e678b35\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.printing\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Printing\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\backup.exe' %WINDIR%\Microsoft.NET\assembly\' (with hidden window)
'%ProgramFiles%\blindman\backup.exe' %ProgramFiles%\blindman\' (with hidden window)
'%WINDIR%\pchealth\helpctr\batch\backup.exe' %WINDIR%\pchealth\helpctr\BATCH\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\mscorlib\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\mscorlib\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.xml\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\avscan\backup.exe' %ProgramFiles%\avscan\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualc.stlclr\update.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualc\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationfontcac#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\f5e029e2215c95ab38a1eefef7b32ac9\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system.drawing\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System.Drawing\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.printing\db428f231a2ccaf490ae219efd2edc69\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Printing\db428f231a2ccaf490ae219efd2edc69\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.data\92cccedc7cda413ff6fc6492cb256b58\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\' (with hidden window)
'%WINDIR%\microsoft.net\framework\v1.1.4322\config\backup.exe' %WINDIR%\Microsoft.NET\Framework\v1.1.4322\CONFIG\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\79c2fd29b1e46c943960278051b4e1b9\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\79c2fd29b1e46c943960278051b4e1b9\' (with hidden window)
'%WINDIR%\msapps\backup.exe' %WINDIR%\msapps\' (with hidden window)
'%ProgramFiles%\avsynmgr\backup.exe' %ProgramFiles%\avsynmgr\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.drawing.desi#\5f5d64dd0e7991aaaad2d98ee52afe42\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\5f5d64dd0e7991aaaad2d98ee52afe42\' (with hidden window)
'%WINDIR%\java\trustlib\backup.exe' %WINDIR%\java\trustlib\' (with hidden window)
'%WINDIR%\pchealth\helpctr\binaries\backup.exe' %WINDIR%\pchealth\helpctr\binaries\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities.v3.5\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.onenote\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data\' (with hidden window)
'%WINDIR%\microsoft.net\framework\v1.1.4322\asp.netclientfiles\backup.exe' %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\' (with hidden window)
'%WINDIR%\media\backup.exe' %WINDIR%\Media\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_7318ec57\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7318ec57\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.core\713647b987b140a17e3c4ffe4c721f85\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\' (with hidden window)
'%ProgramFiles%\b2\backup.exe' %ProgramFiles%\B2\' (with hidden window)
'%WINDIR%\pchealth\helpctr\backup.exe' %WINDIR%\pchealth\helpctr\' (with hidden window)
'%WINDIR%\logs\backup.exe' %WINDIR%\Logs\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build.conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\msagent\intl\backup.exe' %WINDIR%\msagent\intl\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualc\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualC\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.enterpriseservices\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data\0b40341027c01716cec1dd97592698e0\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data\0b40341027c01716cec1dd97592698e0\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualc\backup.exe' %WINDIR%\assembly\GAC\Microsoft.VisualC\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2911.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\' (with hidden window)
'%ProgramFiles%\bdsubmitwiz\backup.exe' %ProgramFiles%\bdsubmitwiz\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.onenote\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OneNote\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2903.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system.design\1.0.5000.0__b03f5f7f11d50a3a_b933bfc1\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b933bfc1\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.printing\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Printing\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.utilities\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\btini\backup.exe' %ProgramFiles%\BTIni\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.jscript\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\' (with hidden window)
'%ProgramFiles%\btinint\backup.exe' %ProgramFiles%\BTIniNT\' (with hidden window)
'%ProgramFiles%\bdwizreg\backup.exe' %ProgramFiles%\bdwizreg\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\aspnetmmcext\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.publisher\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Publisher\' (with hidden window)
'%WINDIR%\network diagnostic\backup.exe' %WINDIR%\Network Diagnostic\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualbasic.vsa\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\3963e9ce8d44f50e8367e92a8e3e42e6\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.design\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Design\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2904.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\' (with hidden window)
'%WINDIR%\msagent\backup.exe' %WINDIR%\msagent\' (with hidden window)
'%WINDIR%\assembly\temp\backup.exe' %WINDIR%\assembly\temp\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\PresentationCore\' (with hidden window)
'%ProgramFiles%\bdsubmit\backup.exe' %ProgramFiles%\bdsubmit\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\87fb973e4ab6a21fd00e45656fa7c115\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationUI\87fb973e4ab6a21fd00e45656fa7c115\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\ISymWrapper\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\cafix\backup.exe' %ProgramFiles%\cafix\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.client.internal.host\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.vbe.interop.forms\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop.Forms\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.data\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.word\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Word\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\aa7926460a336408c8041330ad90929d\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\presentationcore\v4.0_4.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\update.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.SmartTag\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\016f9a150fce0e0a4c93532d8fa4c749\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\016f9a150fce0e0a4c93532d8fa4c749\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\isymwrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.data.linq\fa206c73f39721cd2c55829b9853de44\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\fa206c73f39721cd2c55829b9853de44\' (with hidden window)
'%WINDIR%\mui\backup.exe' %WINDIR%\mui\' (with hidden window)
'%ProgramFiles%\cabalmain\backup.exe' %ProgramFiles%\cabalmain\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\5c59991df60164cae10fd81b88a8e5b1\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\ReachFramework\5c59991df60164cae10fd81b88a8e5b1\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.componentmod#\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system.design\1.0.5000.0__b03f5f7f11d50a3a_734904e1\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_734904e1\' (with hidden window)
'%ProgramFiles%\aim6\update.exe' %ProgramFiles%\aim6\' (with hidden window)
'%ProgramFiles%\bdoesrv\backup.exe' %ProgramFiles%\bdoesrv\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.vbe.interop\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\040571d65dc822e5df020d5e084f4b45\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\040571d65dc822e5df020d5e084f4b45\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7cd5dcd5\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7cd5dcd5\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.publisher\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system\964da027ebca3b263a05cadb8eaa20a3\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.formcontrol\system restore.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\' (with hidden window)
'%WINDIR%\pchealth\backup.exe' %WINDIR%\pchealth\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\update.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.vbe.interop\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationcore\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationCore\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.data.oracleclient\v4.0_4.0.0.0__b77a5c561934e089\update.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_c6a00621\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_c6a00621\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationui\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationUI\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.smarttag\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\reachframework\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\ReachFramework\' (with hidden window)
'%WINDIR%\microsoft.net\framework\v1.1.4322\backup.exe' %WINDIR%\Microsoft.NET\Framework\v1.1.4322\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.jscript\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.visualbasic\backup.exe' %WINDIR%\assembly\GAC\Microsoft.VisualBasic\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\b4dc4bd8534d90fbb7430926ad990cd9\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b4dc4bd8534d90fbb7430926ad990cd9\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.data.oracleclient\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_69453aa0\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_69453aa0\' (with hidden window)
'%ProgramFiles%\bdnews\backup.exe' %ProgramFiles%\bdnews\' (with hidden window)
'%ProgramFiles%\cavasm\backup.exe' %ProgramFiles%\CaVasm\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.vsa\system restore.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2907.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility.data\8.0.0.0__b03f5f7f11d50a3a\update.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.configuration\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Configuration\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\microsoft.csharp\05503f37aef5261d80ccca19f8078679\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\05503f37aef5261d80ccca19f8078679\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\9e71fd0d299c5668c96a54e4a63479fa\update.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9e71fd0d299c5668c96a54e4a63479fa\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.configuration\ac18c2dcd06bd2a0589bac94ccae5716\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\' (with hidden window)
'%WINDIR%\msagent\chars\backup.exe' %WINDIR%\msagent\chars\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\microsoft.visualbasic.activities.compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.drawing\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.outlookviewctl\12.0.0.0__71e9bce111e9429c\data.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\pchealth\errorrep\backup.exe' %WINDIR%\pchealth\ERRORREP\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2905.0\backup.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\system.componentmod#\4a518b841f06ee4f07320159cf918a2c\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4a518b841f06ee4f07320159cf918a2c\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\presentationframewo#\3555f5f74c56fa92c0ab7a635af91bfa\backup.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.design\204db7071fb26343b0fd3f3d140c0bf8\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Design\204db7071fb26343b0fd3f3d140c0bf8\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.powerpoint\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.PowerPoint\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a_f829b606\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_f829b606\' (with hidden window)
'%ProgramFiles%\armor2net\backup.exe' %ProgramFiles%\Armor2net\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.drawing\6978f2e90f13bc720d57fa6895c911e2\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\6c69930d05c557da70144bcc0add7065\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Core\6c69930d05c557da70144bcc0add7065\' (with hidden window)
'%ProgramFiles%\bdss\backup.exe' %ProgramFiles%\bdss\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system.core\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\System.Core\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualbasic.compatibility.data\update.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\data.exe' %WINDIR%\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\system.data\v4.0_4.0.0.0__b77a5c561934e089\update.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\msapps\msinfo\backup.exe' %WINDIR%\msapps\msinfo\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\aspnetmmcext\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\tmp\backup.exe' %WINDIR%\assembly\tmp\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.vbe.interop.forms\11.0.0.0__71e9bce111e9429c\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\' (with hidden window)
'%ProgramFiles%\blackd\backup.exe' %ProgramFiles%\blackd\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_32\custommarshalers\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_32\CustomMarshalers\' (with hidden window)
'%ProgramFiles%\cavapp\backup.exe' %ProgramFiles%\CavApp\' (with hidden window)
'%WINDIR%\microsoft.net\framework\v1.0.3705\backup.exe' %WINDIR%\Microsoft.NET\Framework\v1.0.3705\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationframewo#\ef1a93d10c3a91b728745dbfcc79c2c7\system restore.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ef1a93d10c3a91b728745dbfcc79c2c7\' (with hidden window)
'%WINDIR%\offline web pages\backup.exe' %WINDIR%\Offline Web Pages\' (with hidden window)
'%WINDIR%\microsoft.net\directx for managed code\1.0.2906.0\update.exe' %WINDIR%\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\' (with hidden window)
'%WINDIR%\assembly\nativeimages1_v1.1.4322\system\backup.exe' %WINDIR%\assembly\NativeImages1_v1.1.4322\System\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\accessibility\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Accessibility\' (with hidden window)
'%WINDIR%\microsoft.net\framework\backup.exe' %WINDIR%\Microsoft.NET\Framework\' (with hidden window)
'%WINDIR%\assembly\gac_msil\aspnetmmcext\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\avpm\backup.exe' %ProgramFiles%\avpm\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\' (with hidden window)
'%WINDIR%\assembly\gac\adodb\backup.exe' %WINDIR%\assembly\GAC\ADODB\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\' (with hidden window)
'%WINDIR%\assembly\gac\adodb\7.0.3300.0__b03f5f7f11d50a3a\system restore.exe' %WINDIR%\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\dao\backup.exe' %WINDIR%\assembly\GAC\dao\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\win\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\' (with hidden window)
'%WINDIR%\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\custommarshalers\backup.exe' %WINDIR%\assembly\GAC\CustomMarshalers\' (with hidden window)
'%WINDIR%\assembly\gac\custommarshalers\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Mac\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\icu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\ICU\' (with hidden window)
'%WINDIR%\assembly\gac\cscompmgd\backup.exe' %WINDIR%\assembly\GAC\cscompmgd\' (with hidden window)
'%WINDIR%\assembly\gac\dao\10.0.4504.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\MPP\' (with hidden window)
'%ProgramFiles%\agb5\backup.exe' %ProgramFiles%\Agb5\' (with hidden window)
'%ProgramFiles%\ageofconan\backup.exe' %ProgramFiles%\ageofconan\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\TypeSupport\Unicode\Mappings\Adobe\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\saslprep\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\SaslPrep\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\11.00\' (with hidden window)
'%WINDIR%\assembly\gac\accessibility\backup.exe' %WINDIR%\assembly\GAC\Accessibility\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\font\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Font\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\setup files\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Setup Files\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins3d\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins3d\prc\system restore.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins3d\prc\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\services\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Services\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\spplugins\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\SPPlugins\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\tracker\system restore.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Tracker\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\multimedia\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Multimedia\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.stdformat\backup.exe' %WINDIR%\assembly\GAC\Microsoft.StdFormat\' (with hidden window)
'%WINDIR%\backup.exe' %WINDIR%\' (with hidden window)
'%WINDIR%\addins\backup.exe' %WINDIR%\addins\' (with hidden window)
'%WINDIR%\apppatch\backup.exe' %WINDIR%\AppPatch\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\languagenames2\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\LanguageNames2\' (with hidden window)
'%WINDIR%\assembly\backup.exe' %WINDIR%\assembly\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\providers\proximity\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\Providers\Proximity\' (with hidden window)
'%WINDIR%\assembly\gac\isymwrapper\backup.exe' %WINDIR%\assembly\GAC\ISymWrapper\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\linguistics\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Linguistics\' (with hidden window)
'%WINDIR%\assembly\gac\backup.exe' %WINDIR%\assembly\GAC\' (with hidden window)
'%WINDIR%\assembly\gac\extensibility\backup.exe' %WINDIR%\assembly\GAC\Extensibility\' (with hidden window)
'%WINDIR%\assembly\gac\extensibility\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\ipdmctrl\backup.exe' %WINDIR%\assembly\GAC\ipdmctrl\' (with hidden window)
'%ProgramFiles%\ash_updatemediator\backup.exe' %ProgramFiles%\ash_UpdateMediator\' (with hidden window)
'%WINDIR%\assembly\gac\ipdmctrl\11.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\setup files\{ac76ba86-7ad7-1033-7b44-aa1000000001}\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Setup Files\{AC76BA86-7AD7-1033-7B44-AA1000000001}\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\enu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\ENU\' (with hidden window)
'%ProgramFiles%\ashavast\backup.exe' %ProgramFiles%\ashAvast\' (with hidden window)
'%ProgramFiles%\ashavsrv\update.exe' %ProgramFiles%\ashAvSrv\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\resource\font\pfm\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Resource\Font\PFM\' (with hidden window)
'%ProgramFiles%\ashchest\backup.exe' %ProgramFiles%\ashchest\' (with hidden window)
'%ProgramFiles%\ash\backup.exe' %ProgramFiles%\ash\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\ashdug\backup.exe' %ProgramFiles%\ashDug\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\' (with hidden window)
'%WINDIR%\assembly\gac\isymwrapper\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\ashenhcd\update.exe' %ProgramFiles%\ashEnhcd\' (with hidden window)
'%ProgramFiles%\ashlogv\backup.exe' %ProgramFiles%\ashLogV\' (with hidden window)
'%WINDIR%\config\backup.exe' %WINDIR%\Config\' (with hidden window)
'%ProgramFiles%\ashmaisv\data.exe' %ProgramFiles%\ashMaiSv\' (with hidden window)
'%ProgramFiles%\ashdisp\backup.exe' %ProgramFiles%\ashDisp\' (with hidden window)
'%WINDIR%\assembly\gac\iiehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\armorsurf\backup.exe' %ProgramFiles%\armorsurf\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.office.infopath.vsta\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.visualc\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\avginet\backup.exe' %ProgramFiles%\avginet\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\video\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\' (with hidden window)
'%ProgramFiles%\airdefense\backup.exe' %ProgramFiles%\airdefense\' (with hidden window)
'%WINDIR%\assembly\gac\ialoader\backup.exe' %WINDIR%\assembly\GAC\IALoader\' (with hidden window)
'%ProgramFiles%\almon\data.exe' %ProgramFiles%\ALMon\' (with hidden window)
'%WINDIR%\assembly\gac\ialoader\1.7.6223.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac\iiehost\backup.exe' %WINDIR%\assembly\GAC\IIEHost\' (with hidden window)
'%WINDIR%\assembly\gac\iacore\1.7.6223.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\alsvc\backup.exe' %ProgramFiles%\ALsvc\' (with hidden window)
'%WINDIR%\assembly\gac\ieexecremote\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\amsn\backup.exe' %ProgramFiles%\amsn\' (with hidden window)
'%ProgramFiles%\anti-trojan\backup.exe' %ProgramFiles%\Anti-Trojan\' (with hidden window)
'%WINDIR%\assembly\gac\iehost\1.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\antivirus\backup.exe' %ProgramFiles%\AntiVirus\' (with hidden window)
'%WINDIR%\assembly\gac\ieexecremote\backup.exe' %WINDIR%\assembly\GAC\IEExecRemote\' (with hidden window)
'%ProgramFiles%\amon\backup.exe' %ProgramFiles%\amon\' (with hidden window)
'%HOMEPATH%\favorites\links\backup.exe' %HOMEPATH%\Favorites\Links\' (with hidden window)
'%ProgramFiles%\aoltbserver\backup.exe' %ProgramFiles%\AolTbServer\' (with hidden window)
'%HOMEPATH%\favorites\backup.exe' %HOMEPATH%\Favorites\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\pmp\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\PMP\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\google chrome\system restore.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Google Chrome\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft .NET Framework SDK v1.1\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\microsoft office\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft Office\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Microsoft Office\Microsoft Office Tools\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.diagnostics\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Diagnostics\' (with hidden window)
'%ProgramFiles%\ahnsd\backup.exe' %ProgramFiles%\AhnSD\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\mirc\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\mIRC\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\steam\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Steam\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\games\system restore.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Games\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\winrar\update.exe' %ALLUSERSPROFILE%\Start Menu\Programs\WinRAR\' (with hidden window)
'%HOMEPATH%\cookies\backup.exe' %HOMEPATH%\Cookies\' (with hidden window)
'%HOMEPATH%\desktop\backup.exe' %HOMEPATH%\Desktop\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\qip 2012\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\QIP 2012\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\startup\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Startup\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\stamps\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\Stamps\' (with hidden window)
'%HOMEPATH%\my documents\backup.exe' %HOMEPATH%\My Documents\' (with hidden window)
'%ALLUSERSPROFILE%\favorites\backup.exe' %ALLUSERSPROFILE%\Favorites\' (with hidden window)
'%HOMEPATH%\my documents\my pictures\backup.exe' %HOMEPATH%\My Documents\My Pictures\' (with hidden window)
'%HOMEPATH%\backup.exe' %HOMEPATH%\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\administrative tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\' (with hidden window)
'C:\backup.exe' \' (with hidden window)
'%HOMEPATH%\my documents\my music\backup.exe' %HOMEPATH%\My Documents\My Music\' (with hidden window)
'C:\documents and settings\system restore.exe' C:\Documents and Settings\' (with hidden window)
'%ALLUSERSPROFILE%\desktop\backup.exe' %ALLUSERSPROFILE%\Desktop\' (with hidden window)
'%ALLUSERSPROFILE%\documents\system restore.exe' %ALLUSERSPROFILE%\Documents\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my music\update.exe' %ALLUSERSPROFILE%\Documents\My Music\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my music\my playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\My Playlists\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my music\sample music\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Music\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my music\sample playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\' (with hidden window)
'%ALLUSERSPROFILE%\backup.exe' %ALLUSERSPROFILE%\' (with hidden window)
'%HOMEPATH%\my documents\downloads\backup.exe' %HOMEPATH%\My Documents\Downloads\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\00107FF6\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my pictures\sample pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\backup.exe' %ALLUSERSPROFILE%\Start Menu\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\accessories\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\' (with hidden window)
'%ALLUSERSPROFILE%\start menu\programs\accessories\communications\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my videos\backup.exe' %ALLUSERSPROFILE%\Documents\My Videos\' (with hidden window)
'%ALLUSERSPROFILE%\documents\my pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\' (with hidden window)
'%HOMEPATH%\start menu\backup.exe' %HOMEPATH%\Start Menu\' (with hidden window)
'%HOMEPATH%\start menu\programs\accessories\accessibility\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\assets\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\assets\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\assets\icons\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\assets\icons\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\bin-debug\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\bin-debug\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\annotations\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\Annotations\' (with hidden window)
'%HOMEPATH%\start menu\programs\backup.exe' %HOMEPATH%\Start Menu\Programs\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\meta-inf\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\META-INF\' (with hidden window)
'%WINDIR%\assembly\gac\iehost\backup.exe' %WINDIR%\assembly\GAC\IEHost\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\browser\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Browser\' (with hidden window)
'%ProgramFiles%\aavshield\backup.exe' %ProgramFiles%\aavshield\' (with hidden window)
'%ProgramFiles%\adobe\system restore.exe' %ProgramFiles%\Adobe\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\IDTemplates\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\idtemplates\enu\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\IDTemplates\ENU\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\legal\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Legal\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\legal\enu\data.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Legal\ENU\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\acroform\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\AcroForm\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\air\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\AIR\' (with hidden window)
'%ProgramFiles%\admunch\backup.exe' %ProgramFiles%\AdMunch\' (with hidden window)
'%ProgramFiles%\ackwin32\backup.exe' %ProgramFiles%\AckWin32\' (with hidden window)
'%ProgramFiles%\about\backup.exe' %ProgramFiles%\About\' (with hidden window)
'%HOMEPATH%\start menu\programs\accessories\entertainment\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\plug_ins\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\plug_ins\' (with hidden window)
'%HOMEPATH%\start menu\programs\icq\backup.exe' %HOMEPATH%\Start Menu\Programs\ICQ\' (with hidden window)
'%HOMEPATH%\start menu\programs\administrative tools\backup.exe' %HOMEPATH%\Start Menu\Programs\Administrative Tools\' (with hidden window)
'%HOMEPATH%\start menu\programs\startup\backup.exe' %HOMEPATH%\Start Menu\Programs\Startup\' (with hidden window)
'%HOMEPATH%\voip\backup.exe' %HOMEPATH%\voip\' (with hidden window)
'%ProgramFiles%\backup.exe' %ProgramFiles%\' (with hidden window)
'%ProgramFiles%\a2wizard\backup.exe' %ProgramFiles%\a2wizard\' (with hidden window)
'%HOMEPATH%\start menu\programs\winrar\update.exe' %HOMEPATH%\Start Menu\Programs\WinRAR\' (with hidden window)
'%HOMEPATH%\userdata\backup.exe' %HOMEPATH%\UserData\' (with hidden window)
'%ProgramFiles%\360tray\backup.exe' %ProgramFiles%\360tray\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\reader\javascripts\update.exe' %ProgramFiles%\Adobe\Reader 10.0\Reader\Javascripts\' (with hidden window)
'%ProgramFiles%\a2hijackfree\backup.exe' %ProgramFiles%\a2HiJackFree\' (with hidden window)
'%ProgramFiles%\a2start\data.exe' %ProgramFiles%\a2start\' (with hidden window)
'%ProgramFiles%\a2scan\backup.exe' %ProgramFiles%\a2scan\' (with hidden window)
'%ProgramFiles%\a2service\backup.exe' %ProgramFiles%\a2service\' (with hidden window)
'%HOMEPATH%\start menu\programs\telegram desktop\backup.exe' %HOMEPATH%\Start Menu\Programs\Telegram Desktop\' (with hidden window)
'%ProgramFiles%\a2upd\backup.exe' %ProgramFiles%\a2upd\' (with hidden window)
'%ProgramFiles%\a2cmd\backup.exe' %ProgramFiles%\a2cmd\' (with hidden window)
'%ProgramFiles%\a2guard\backup.exe' %ProgramFiles%\a2guard\' (with hidden window)
'%HOMEPATH%\start menu\programs\accessories\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.transactions\backup.exe' %WINDIR%\assembly\GAC_32\System.Transactions\' (with hidden window)
'%WINDIR%\assembly\gac_32\backup.exe' %WINDIR%\assembly\GAC_32\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.infopath.permission\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.InfoPath.Permission\' (with hidden window)
'%WINDIR%\ime\chtime\backup.exe' %WINDIR%\ime\CHTIME\' (with hidden window)
'%ProgramFiles%\avgrssvc\backup.exe' %ProgramFiles%\avgrssvc\' (with hidden window)
'%WINDIR%\assembly\gac_msil\iehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\ime\chtime\applets\backup.exe' %WINDIR%\ime\CHTIME\Applets\' (with hidden window)
'%ProgramFiles%\avgupsvc\backup.exe' %ProgramFiles%\avgupsvc\' (with hidden window)
'%ProgramFiles%\ashpopwz\backup.exe' %ProgramFiles%\ashPopWz\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.infopath.permission\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\gac_msil\iehost\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEHost\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.access\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access\' (with hidden window)
'%ProgramFiles%\avgupden\backup.exe' %ProgramFiles%\avgupden\' (with hidden window)
'%WINDIR%\assembly\gac_msil\iiehost\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.access\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%ProgramFiles%\avgscan\backup.exe' %ProgramFiles%\avgscan\' (with hidden window)
'%WINDIR%\assembly\gac_msil\iiehost\backup.exe' %WINDIR%\assembly\GAC_MSIL\IIEHost\' (with hidden window)
'%WINDIR%\ime\imejp\applets\backup.exe' %WINDIR%\ime\imejp\applets\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\11.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access.Dao\' (with hidden window)
'%WINDIR%\ime\imejp\backup.exe' %WINDIR%\ime\imejp\' (with hidden window)
'%ProgramFiles%\avgnpsvc\backup.exe' %ProgramFiles%\avgnpsvc\' (with hidden window)
'%WINDIR%\ime\chsime\applets\backup.exe' %WINDIR%\ime\chsime\applets\' (with hidden window)
'%ProgramFiles%\bdsurvey\update.exe' %ProgramFiles%\BDSurvey\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.printing\3.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\ime\imejp98\backup.exe' %WINDIR%\ime\imejp98\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.jscript\backup.exe' %WINDIR%\assembly\GAC\Microsoft.JScript\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\scr\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\' (with hidden window)
'%ProgramFiles%\avgfwsrv\backup.exe' %ProgramFiles%\avgfwsrv\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.transactions\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\assembly\gac_msil\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\adobe\reader 10.0\esl\backup.exe' %ProgramFiles%\Adobe\Reader 10.0\Esl\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.jscript\7.0.5000.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_msil\cscompmgd\backup.exe' %WINDIR%\assembly\GAC_MSIL\cscompmgd\' (with hidden window)
'%ProgramFiles%\adobe\acrobat.com\meta-inf\air\backup.exe' %ProgramFiles%\Adobe\Acrobat.com\META-INF\AIR\' (with hidden window)
'%WINDIR%\assembly\gac\iacore\backup.exe' %WINDIR%\assembly\GAC\IACore\' (with hidden window)
'%WINDIR%\ime\backup.exe' %WINDIR%\ime\' (with hidden window)
'%WINDIR%\assembly\gac_msil\ieexecremote\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEExecRemote\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.mshtml\backup.exe' %WINDIR%\assembly\GAC\Microsoft.mshtml\' (with hidden window)
'%ProgramFiles%\avgnpdln\backup.exe' %ProgramFiles%\avgnpdln\' (with hidden window)
'%WINDIR%\ime\chsime\backup.exe' %WINDIR%\ime\chsime\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.web\2.0.0.0__b03f5f7f11d50a3a\data.exe' %WINDIR%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_msil\ieexecremote\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\487c1bc20f6e73e8e79503898d17d102\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\487c1bc20f6e73e8e79503898d17d102\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.web\backup.exe' %WINDIR%\assembly\GAC_32\System.Web\' (with hidden window)
'%ProgramFiles%\avgvv\backup.exe' %ProgramFiles%\avgvv\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcffrast#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\' (with hidden window)
'%WINDIR%\ime\shared\backup.exe' %WINDIR%\ime\shared\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\img\wmarks\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\' (with hidden window)
'%WINDIR%\ime\imjp8_1\backup.exe' %WINDIR%\ime\imjp8_1\' (with hidden window)
'%ProgramFiles%\avgw\backup.exe' %ProgramFiles%\avgw\' (with hidden window)
'%ProgramFiles%\avkwctl\data.exe' %ProgramFiles%\AVKWCtl\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.access.dao\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%ProgramFiles%\avnotify\backup.exe' %ProgramFiles%\avnotify\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCore\' (with hidden window)
'%WINDIR%\java\backup.exe' %WINDIR%\java\' (with hidden window)
'%ProgramFiles%\avpcc\system restore.exe' %ProgramFiles%\avpcc\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath.semitrust\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.infopath\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\ime\shared\res\backup.exe' %WINDIR%\ime\shared\res\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks\2.0.0.0__b03f5f7f11d50a3a\system restore.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks.v3.5\data.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.tasks\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Tasks\' (with hidden window)
'%ProgramFiles%\avkservice\backup.exe' %ProgramFiles%\AVKService\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.graph\12.0.0.0__71e9bce111e9429c\system restore.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\ime\imkr6_1\dicts\backup.exe' %WINDIR%\ime\imkr6_1\dicts\' (with hidden window)
'%WINDIR%\java\classes\update.exe' %WINDIR%\java\classes\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationcore\12dcb10b76012416357bdbb010fdaa97\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationCore\12dcb10b76012416357bdbb010fdaa97\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\' (with hidden window)
'%ProgramFiles%\ashupd\backup.exe' %ProgramFiles%\ashUpd\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.excel\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Excel\' (with hidden window)
'%ProgramFiles%\avgwizfw\backup.exe' %ProgramFiles%\avgwizfw\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\data.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\' (with hidden window)
'%WINDIR%\ime\imkr6_1\backup.exe' %WINDIR%\ime\imkr6_1\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.excel\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%WINDIR%\ime\imjp8_1\applets\backup.exe' %WINDIR%\ime\imjp8_1\applets\' (with hidden window)
'%ProgramFiles%\avinitnt\backup.exe' %ProgramFiles%\avinitnt\' (with hidden window)
'%WINDIR%\ime\imkr6_1\applets\backup.exe' %WINDIR%\ime\imkr6_1\applets\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.engine\3.5.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.office.interop.graph\backup.exe' %WINDIR%\assembly\GAC\Microsoft.Office.Interop.Graph\' (with hidden window)
'%ProgramFiles%\avkserv\backup.exe' %ProgramFiles%\AvkServ\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\b6bfb51dec7f8cc42c21c5928470c773\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b6bfb51dec7f8cc42c21c5928470c773\' (with hidden window)
'%WINDIR%\assembly\gac_msil\microsoft.build.framework\backup.exe' %WINDIR%\assembly\GAC_MSIL\Microsoft.Build.Framework\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\presentationbuildta#\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\mscorlib\backup.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\' (with hidden window)
'%WINDIR%\assembly\nativeimages_v2.0.50727_32\system restore.exe' %WINDIR%\assembly\NativeImages_v2.0.50727_32\' (with hidden window)
'%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.build.engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\ehome\backup.exe' %WINDIR%\ehome\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2904.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\fonts\backup.exe' %WINDIR%\Fonts\' (with hidden window)
'%ProgramFiles%\ashwebsv\backup.exe' %ProgramFiles%\ashWebSv\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directsound\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\connection wizard\backup.exe' %WINDIR%\Connection Wizard\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.transactions.bridge.dtc\3.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%ProgramFiles%\aswregsvr\backup.exe' %ProgramFiles%\aswRegSvr\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2906.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\aswupdsv\data.exe' %ProgramFiles%\aswUpdSv\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.visualstudio.tools.applications.interopadapter\8.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2905.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2903.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\help\tours\backup.exe' %WINDIR%\Help\Tours\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2907.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\autodown\backup.exe' %ProgramFiles%\AutoDown\' (with hidden window)
'%WINDIR%\help\backup.exe' %WINDIR%\Help\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\12.0.0.0__71e9bce111e9429c\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\' (with hidden window)
'%ProgramFiles%\ashskpck\backup.exe' %ProgramFiles%\ashSkPck\' (with hidden window)
'%WINDIR%\driver cache\i386\backup.exe' %WINDIR%\Driver Cache\i386\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.diagnostics\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac_32\custommarshalers\backup.exe' %WINDIR%\assembly\GAC_32\CustomMarshalers\' (with hidden window)
'%ProgramFiles%\ashsimp2\backup.exe' %ProgramFiles%\ashsimp2\' (with hidden window)
'%WINDIR%\debug\usermode\backup.exe' %WINDIR%\Debug\UserMode\' (with hidden window)
'%WINDIR%\cursors\backup.exe' %WINDIR%\Cursors\' (with hidden window)
'%ProgramFiles%\ashserv\system restore.exe' %ProgramFiles%\ashServ\' (with hidden window)
'%WINDIR%\assembly\gac_32\custommarshalers\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\debug\backup.exe' %WINDIR%\Debug\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3d\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac_32\isymwrapper\system restore.exe' %WINDIR%\assembly\GAC_32\ISymWrapper\' (with hidden window)
'%ProgramFiles%\ashquick\backup.exe' %ProgramFiles%\ashQuick\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3d\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3D\' (with hidden window)
'%ProgramFiles%\ashsimpl\backup.exe' %ProgramFiles%\ashSimpl\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2908.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\' (with hidden window)
'%WINDIR%\driver cache\data.exe' %WINDIR%\Driver Cache\' (with hidden window)
'%ProgramFiles%\ashskpcc\backup.exe' %ProgramFiles%\ashSkPcc\' (with hidden window)
'%WINDIR%\assembly\gac_32\microsoft.office.infopath.client.internal.host.interop\backup.exe' %WINDIR%\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\help\tours\htmltour\backup.exe' %WINDIR%\Help\Tours\htmlTour\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directplay\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectPlay\' (with hidden window)
'%WINDIR%\assembly\gac_32\isymwrapper\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac_32\mscorlib\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directinput\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.data.oracleclient\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\css\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Css\' (with hidden window)
'%ProgramFiles%\avconsol\backup.exe' %ProgramFiles%\Avconsol\' (with hidden window)
'%WINDIR%\assembly\gac_msil\accessibility\backup.exe' %WINDIR%\assembly\GAC_MSIL\Accessibility\' (with hidden window)
'%ProgramFiles%\avgemc\update.exe' %ProgramFiles%\avgemc\' (with hidden window)
'%WINDIR%\assembly\gac_32\mscorlib\backup.exe' %WINDIR%\assembly\GAC_32\mscorlib\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.enterpriseservices\backup.exe' %WINDIR%\assembly\GAC_32\System.EnterpriseServices\' (with hidden window)
'%WINDIR%\assembly\gac_msil\backup.exe' %WINDIR%\assembly\GAC_MSIL\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directplay\1.0.2902.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\avgcc\backup.exe' %ProgramFiles%\avgcc\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.enterpriseservices\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directsound\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectSound\' (with hidden window)
'%WINDIR%\assembly\gac_msil\aspnetmmcext\update.exe' %WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\' (with hidden window)
'%WINDIR%\assembly\gac_32\presentationcore\backup.exe' %WINDIR%\assembly\GAC_32\PresentationCore\' (with hidden window)
'%WINDIR%\assembly\gac_msil\accessibility\2.0.0.0__b03f5f7f11d50a3a\backup.exe' %WINDIR%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\img\btn\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\img\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\' (with hidden window)
'%ProgramFiles%\avconfig\backup.exe' %ProgramFiles%\avconfig\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\cnt\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2909.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\autotrace\backup.exe' %ProgramFiles%\AutoTrace\' (with hidden window)
'%ProgramFiles%\avgdiag\backup.exe' %ProgramFiles%\avgdiag\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.printing\backup.exe' %WINDIR%\assembly\GAC_32\System.Printing\' (with hidden window)
'%WINDIR%\help\tours\mmtour\backup.exe' %WINDIR%\Help\Tours\mmTour\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2910.0__31bf3856ad364e35\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\avgamsvr\backup.exe' %ProgramFiles%\avgamsvr\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2911.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\' (with hidden window)
'%ProgramFiles%\avcenter\backup.exe' %ProgramFiles%\avcenter\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\' (with hidden window)
'%WINDIR%\assembly\gac_32\presentationcore\3.0.0.0__31bf3856ad364e35\backup.exe' %WINDIR%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directdraw\update.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectDraw\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\audio\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\' (with hidden window)
'%ProgramFiles%\avadmin\backup.exe' %ProgramFiles%\avadmin\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.data\backup.exe' %WINDIR%\assembly\GAC_32\System.Data\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directdraw\1.0.2902.0__31bf3856ad364e35\data.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.data\2.0.0.0__b77a5c561934e089\backup.exe' %WINDIR%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\' (with hidden window)
'%WINDIR%\help\tours\windowsmediaplayer\audio\wav\backup.exe' %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\Wav\' (with hidden window)
'%ProgramFiles%\avcmd\backup.exe' %ProgramFiles%\avcmd\' (with hidden window)
'%WINDIR%\assembly\gac\microsoft.directx.directinput\backup.exe' %WINDIR%\assembly\GAC\Microsoft.DirectX.DirectInput\' (with hidden window)
'%ProgramFiles%\aimpro\backup.exe' %ProgramFiles%\aimpro\' (with hidden window)
'%ProgramFiles%\avciman\backup.exe' %ProgramFiles%\avciman\' (with hidden window)
'%WINDIR%\assembly\gac_32\system.data.oracleclient\backup.exe' %WINDIR%\assembly\GAC_32\System.Data.OracleClient\' (with hidden window)
'%ProgramFiles%\cavoar\backup.exe' %ProgramFiles%\Cavoar\' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial