Win32.HLLW.Autoruner1.29727

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Linkku' = '<SYSTEM32>\LinkspreΔder.exe'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\secret.lnk

Creates the following files on removable media:

<Drive name for removable media>:\autorun.inf
<Drive name for removable media>:\Pawnzer.exe
<Drive name for removable media>:\delete.bat

Malicious functions:

Creates and executes the following:

<SYSTEM32>\LinkspreΔder.exe

Executes the following:

<SYSTEM32>\cmd.exe /c e:\delete.bat

Modifies file system :

Creates the following files:

C:\Far2\Addons\Colors\Default Highlighting\Download 100 Percent Elextro.exe
C:\Far2\Addons\Colors\Default Highlighting\Download 100 Percent Elextro.lnk
C:\Far2\Addons\Macros\Download Music Campur.lnk
C:\Far2\Addons\SetUp\Download VM Ware WorkStation.lnk
C:\Far2\Addons\Macros\Download Music Campur.exe
C:\Far2\Addons\Colors\Custom Highlighting\LIMBO New PC Games 2011.exe
C:\Far2\Addons\Download Trance Music Collections.exe
C:\Far2\Addons\Download Trance Music Collections.lnk
C:\Far2\Addons\Colors\Download Passmark Performance Test 7 Full.lnk
C:\Far2\Addons\Colors\Custom Highlighting\LIMBO New PC Games 2011.lnk
C:\Far2\Addons\Colors\Download Passmark Performance Test 7 Full.exe
C:\Far2\Documentation\indonesian Music.lnk
C:\Far2\Addons\XLat\Russian\Oxford Advanced Learner Dictionary.exe
C:\Far2\Documentation\indonesian Music.exe
C:\Far2\Documentation\eng\Oxford Advanced Learner Dictionary.exe
C:\Far2\Documentation\eng\Oxford Advanced Learner Dictionary.lnk
C:\Far2\Addons\XLat\Russian\Oxford Advanced Learner Dictionary.lnk
C:\Far2\Addons\Shell\ABSOLUTE TRANCE 2009 - 2011.lnk
C:\Far2\Addons\SetUp\Download VM Ware WorkStation.exe
C:\Far2\Addons\Shell\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Far2\Addons\XLat\Download 100 Percent Elextro.exe
C:\Far2\Addons\XLat\Download 100 Percent Elextro.lnk
%HOMEPATH%\SendTo\ABSOLUTE TRANCE 2009 - 2011.exe
%HOMEPATH%\SendTo\ABSOLUTE TRANCE 2009 - 2011.lnk
%HOMEPATH%\Start Menu\ACAK PEG ( INDO BRT LOK ).lnk
%HOMEPATH%\Start Menu\Programs\Download Mediafire Folder Applicatione.lnk
%HOMEPATH%\Start Menu\ACAK PEG ( INDO BRT LOK ).exe
%HOMEPATH%\Recent\Burnout Paradise Ultimate BOX.exe
%HOMEPATH%\NetHood\Trine [Adventure][2010].exe
%HOMEPATH%\NetHood\Trine [Adventure][2010].lnk
%HOMEPATH%\PrintHood\ROOT FOLDER --- JACKPOT.lnk
%HOMEPATH%\Recent\Burnout Paradise Ultimate BOX.lnk
%HOMEPATH%\PrintHood\ROOT FOLDER --- JACKPOT.exe
%HOMEPATH%\Templates\Absolute Love Song 2.lnk
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\A State Of Trance.exe
%HOMEPATH%\Templates\Absolute Love Song 2.exe
C:\Far2\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Far2\ABSOLUTE TRANCE 2009 - 2011.lnk
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\A State Of Trance.lnk
%HOMEPATH%\Start Menu\Programs\Accessories\A State Of Trance.lnk
%HOMEPATH%\Start Menu\Programs\Download Mediafire Folder Applicatione.exe
%HOMEPATH%\Start Menu\Programs\Accessories\A State Of Trance.exe
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\A State Of Trance.exe
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\A State Of Trance.lnk
C:\Far2\Plugins\Colorer\hrd\LIMBO New PC Games 2011.exe
C:\Far2\Plugins\Colorer\hrd\LIMBO New PC Games 2011.lnk
C:\Far2\Plugins\Colorer\hrd\console\Download Game Seru !!!! .lnk
C:\Far2\Plugins\Colorer\hrd\console\contrib\Trine [Adventure][2010].lnk
C:\Far2\Plugins\Colorer\hrd\console\Download Game Seru !!!! .exe
C:\Far2\Plugins\Colorer\hrc\auto\types\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Far2\Plugins\Colorer\hrc\Gamehouse Collections From Allsmartgames.exe
C:\Far2\Plugins\Colorer\hrc\Gamehouse Collections From Allsmartgames.lnk
C:\Far2\Plugins\Colorer\hrc\auto\Download Sony Vegas HD Studio.lnk
C:\Far2\Plugins\Colorer\hrc\auto\types\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Far2\Plugins\Colorer\hrc\auto\Download Sony Vegas HD Studio.exe
C:\Far2\Plugins\EMenu\Download Corel Video Studio 4.lnk
C:\Far2\Plugins\EditCase\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\EMenu\Download Corel Video Studio 4.exe
C:\Far2\Plugins\ExtSearch\Mount And Blade Game.exe
C:\Far2\Plugins\ExtSearch\Mount And Blade Game.lnk
C:\Far2\Plugins\EditCase\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\Compare\CS 1.6 FUll Maps - And Bots.lnk
C:\Far2\Plugins\Colorer\hrd\console\contrib\Trine [Adventure][2010].exe
C:\Far2\Plugins\Compare\CS 1.6 FUll Maps - And Bots.exe
C:\Far2\Plugins\DrawLine\Download VM Ware WorkStation.exe
C:\Far2\Plugins\DrawLine\Download VM Ware WorkStation.lnk
C:\Far2\Plugins\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\7-Zip\Trine [Adventure][2010].lnk
C:\Far2\Plugins\Align\Download Folder MISC.lnk
C:\Far2\Plugins\7-Zip\Trine [Adventure][2010].exe
C:\Far2\FExcept\Download Mediafire Folder Applicatione.exe
C:\Far2\Documentation\rus\Download Game Seru !!!! .exe
C:\Far2\Documentation\rus\Download Game Seru !!!! .lnk
C:\Far2\Encyclopedia\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
C:\Far2\FExcept\Download Mediafire Folder Applicatione.lnk
C:\Far2\Encyclopedia\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
C:\Far2\Plugins\Colorer\ABSOLUTE TRANCE 2009 - 2011.lnk
C:\Far2\Plugins\Brackets\7 SINS --- 2011.exe
C:\Far2\Plugins\Colorer\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Far2\Plugins\Colorer\bin\Oxford Advanced Learner Dictionary.exe
C:\Far2\Plugins\Colorer\bin\Oxford Advanced Learner Dictionary.lnk
C:\Far2\Plugins\Brackets\7 SINS --- 2011.lnk
C:\Far2\Plugins\arclite\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\Align\Download Folder MISC.exe
C:\Far2\Plugins\arclite\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\AutoWrap\LIMBO New PC Games 2011.exe
C:\Far2\Plugins\AutoWrap\LIMBO New PC Games 2011.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\LIMBO New PC Games 2011.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\LIMBO New PC Games 2011.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\Download Folder MISC.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\Download 100 Percent Elextro.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\Download Dance Music.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\Download Dance Music.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\ROOT FOLDER --- JACKPOT.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\Download 100 Percent Elextro.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\ROOT FOLDER --- JACKPOT.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\ABSOLUTE TRANCE 2009 - 2011.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\Download Corel Video Studio 4.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\Download Corel Video Studio 4.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\ABSOLUTE TRANCE 2009 - 2011.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\Download Dance Music.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\Download Folder MISC.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\Download Dance Music.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\Download Music Campur.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\Download Music Campur.lnk
<LS_APPDATA>\Microsoft\Windows\Download Passmark Performance Test 7 Full.exe
<LS_APPDATA>\Microsoft\Windows\Download Passmark Performance Test 7 Full.lnk
<LS_APPDATA>\Microsoft\Windows Media\Torchlight Version 1.15 Newest.lnk
<LS_APPDATA>\Microsoft\Windows Media\9.0\ROOT FOLDER --- JACKPOT.lnk
<LS_APPDATA>\Microsoft\Windows Media\Torchlight Version 1.15 Newest.exe
<LS_APPDATA>\Microsoft\Media Player\Oxford Advanced Learner Dictionary.exe
<LS_APPDATA>\Microsoft\Credentials\ROOT FOLDER --- JACKPOT.exe
<LS_APPDATA>\Microsoft\Credentials\ROOT FOLDER --- JACKPOT.lnk
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
<LS_APPDATA>\Microsoft\Media Player\Oxford Advanced Learner Dictionary.lnk
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Torchlight Version 1.15 Newest.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\ROOT FOLDER --- JACKPOT.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Torchlight Version 1.15 Newest.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\Download Other Music.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\Download Other Music.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\ROOT FOLDER --- JACKPOT.lnk
<LS_APPDATA>\Mozilla\Download Game Seru !!!! .lnk
<LS_APPDATA>\Microsoft\Windows Media\9.0\ROOT FOLDER --- JACKPOT.exe
<LS_APPDATA>\Mozilla\Download Game Seru !!!! .exe
<LS_APPDATA>\Mozilla\Firefox\Trine [Adventure][2010].exe
<LS_APPDATA>\Mozilla\Firefox\Trine [Adventure][2010].lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Bastion [2011].exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Bastion [2011].lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download Adobe CS 5 Master Collections.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\indonesian Music.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Download 100 Percent Elextro.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Download 100 Percent Elextro.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\Download Corel Video Studio 4.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\indonesian Music.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\Download Corel Video Studio 4.exe
%HOMEPATH%\My Documents\My Pictures\Download Adobe CS 5 Master Collections.lnk
%HOMEPATH%\My Documents\My Music\Download 100 Percent Elextro.exe
%HOMEPATH%\My Documents\My Pictures\Download Adobe CS 5 Master Collections.exe
%HOMEPATH%\My Documents\My Received Files\CS 1.6 FUll Maps - And Bots.exe
%HOMEPATH%\My Documents\My Received Files\CS 1.6 FUll Maps - And Bots.lnk
%HOMEPATH%\My Documents\My Music\Download 100 Percent Elextro.lnk
%HOMEPATH%\My Documents\Download Other Music.lnk
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download Adobe CS 5 Master Collections.exe
%HOMEPATH%\My Documents\Download Other Music.exe
%HOMEPATH%\My Documents\Downloads\Download Fonts Collections Mediafire Link.exe
%HOMEPATH%\My Documents\Downloads\Download Fonts Collections Mediafire Link.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\Download Other Music.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\Download Other Music.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\Download Music Campur.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\ACAK PEG ( INDO BRT LOK ).lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\Download Music Campur.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\Download Sony Vegas HD Studio.exe
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\Download Sony Vegas HD Studio.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\indonesian Music.lnk
%HOMEPATH%\Local Settings\History\History.IE5\A State Of Trance.exe
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\indonesian Music.exe
%TEMP%\Build A Lots 1 - 6.exe
%TEMP%\Build A Lots 1 - 6.lnk
%HOMEPATH%\Local Settings\History\History.IE5\A State Of Trance.lnk
<LS_APPDATA>\VMware\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\ACAK PEG ( INDO BRT LOK ).exe
<LS_APPDATA>\VMware\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
%HOMEPATH%\Local Settings\History\Torchlight Version 1.15 Newest.exe
%HOMEPATH%\Local Settings\History\Torchlight Version 1.15 Newest.lnk
%CommonProgramFiles%\Microsoft Shared\Stationery\Need For Speed Series.lnk
%CommonProgramFiles%\Microsoft Shared\Speech\1033\Download VM Ware WorkStation.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\Need For Speed Series.exe
%CommonProgramFiles%\Microsoft Shared\TextConv\Download Fonts Collections Mediafire Link.exe
%CommonProgramFiles%\Microsoft Shared\TextConv\Download Fonts Collections Mediafire Link.lnk
%CommonProgramFiles%\Microsoft Shared\Speech\1033\Download VM Ware WorkStation.lnk
%CommonProgramFiles%\Microsoft Shared\MSInfo\Build A Lots 1 - 6.lnk
%CommonProgramFiles%\Microsoft Shared\DW\3082\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
%CommonProgramFiles%\Microsoft Shared\MSInfo\Build A Lots 1 - 6.exe
%CommonProgramFiles%\Microsoft Shared\Speech\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
%CommonProgramFiles%\Microsoft Shared\Speech\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
%CommonProgramFiles%\Microsoft Shared\Web Folders\Download 100 Percent Elextro.exe
%CommonProgramFiles%\Microsoft Shared\Web Folders\Download 100 Percent Elextro.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\Download Adobe CS 5 Master Collections.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\CS 1.6 FUll Maps - And Bots.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\Download Adobe CS 5 Master Collections.exe
%CommonProgramFiles%\Microsoft Shared\VGX\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
%CommonProgramFiles%\Microsoft Shared\Triedit\Need For Speed Series.exe
%CommonProgramFiles%\Microsoft Shared\Triedit\Need For Speed Series.lnk
%CommonProgramFiles%\Microsoft Shared\VC\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
%CommonProgramFiles%\Microsoft Shared\VGX\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
%CommonProgramFiles%\Microsoft Shared\VC\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
%CommonProgramFiles%\Microsoft Shared\DW\1031\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1028\Need For Speed Series.exe
%CommonProgramFiles%\Microsoft Shared\DW\1031\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
%CommonProgramFiles%\Microsoft Shared\DW\1033\Oxford Advanced Learner Dictionary.exe
%CommonProgramFiles%\Microsoft Shared\DW\1033\Oxford Advanced Learner Dictionary.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1028\Need For Speed Series.lnk
%CommonProgramFiles%\Microsoft Shared\DW\Download Adobe CS 5 Master Collections.lnk
%CommonProgramFiles%\Microsoft Shared\DAO\Oxford Advanced Learner Dictionary.exe
%CommonProgramFiles%\Microsoft Shared\DW\Download Adobe CS 5 Master Collections.exe
%CommonProgramFiles%\Microsoft Shared\DW\1025\Download Other Music.exe
%CommonProgramFiles%\Microsoft Shared\DW\1025\Download Other Music.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1042\Download Trance Music Collections.exe
%CommonProgramFiles%\Microsoft Shared\DW\1042\Download Trance Music Collections.lnk
%CommonProgramFiles%\Microsoft Shared\DW\2052\ACAK PEG ( INDO BRT LOK ).lnk
%CommonProgramFiles%\Microsoft Shared\DW\3082\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
%CommonProgramFiles%\Microsoft Shared\DW\2052\ACAK PEG ( INDO BRT LOK ).exe
%CommonProgramFiles%\Microsoft Shared\DW\1041\Absolute Love Song 2.exe
%CommonProgramFiles%\Microsoft Shared\DW\1036\CS 1.6 FUll Maps - And Bots.exe
%CommonProgramFiles%\Microsoft Shared\DW\1036\CS 1.6 FUll Maps - And Bots.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1040\Download Music Campur.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1041\Absolute Love Song 2.lnk
%CommonProgramFiles%\Microsoft Shared\DW\1040\Download Music Campur.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut\indonesian Music.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm\Torchlight Version 1.15 Newest.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut\indonesian Music.exe
%CommonProgramFiles%\MSSoap\Download Wallpaper Collections.exe
%CommonProgramFiles%\MSSoap\Download Wallpaper Collections.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm\Torchlight Version 1.15 Newest.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp\Need For Speed Series.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut\Download Passmark Performance Test 7 Full.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp\Need For Speed Series.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\Need For Speed Series.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\Need For Speed Series.lnk
%CommonProgramFiles%\ODBC\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%CommonProgramFiles%\ODBC\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%CommonProgramFiles%\ODBC\Data Sources\ROOT FOLDER --- JACKPOT.lnk
%CommonProgramFiles%\Services\Download Dance Music.lnk
%CommonProgramFiles%\ODBC\Data Sources\ROOT FOLDER --- JACKPOT.exe
%CommonProgramFiles%\MSSoap\Binaries\Resources\1033\Torchlight Version 1.15 Newest.exe
%CommonProgramFiles%\MSSoap\Binaries\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%CommonProgramFiles%\MSSoap\Binaries\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%CommonProgramFiles%\MSSoap\Binaries\Resources\Gamehouse Collections From Allsmartgames.lnk
%CommonProgramFiles%\MSSoap\Binaries\Resources\1033\Torchlight Version 1.15 Newest.lnk
%CommonProgramFiles%\MSSoap\Binaries\Resources\Gamehouse Collections From Allsmartgames.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts\Windows 7 Sp1 - 32 BIT - Integrated - 11.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts\Windows 7 Sp1 - 32 BIT - Integrated - 11.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\indonesian Music.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\CS 1.6 FUll Maps - And Bots.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\indonesian Music.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts\Build A Lots 1 - 6.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts\Build A Lots 1 - 6.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\Absolute Love Song 2.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\Absolute Love Song 2.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm\Trine [Adventure][2010].lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut\Download Passmark Performance Test 7 Full.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm\Trine [Adventure][2010].exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\Mount And Blade Game.exe
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\Mount And Blade Game.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\Download Lynda Video Tutorial Mediafire.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\Download Lynda Video Tutorial Mediafire.exe
C:\Far2\Plugins\WinSCP\components\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
C:\Far2\Plugins\WinSCP\components\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
C:\Far2\Plugins\WinSCP\console\Oxford Advanced Learner Dictionary.lnk
C:\Far2\Plugins\WinSCP\core\LIMBO New PC Games 2011.lnk
C:\Far2\Plugins\WinSCP\console\Oxford Advanced Learner Dictionary.exe
C:\Far2\Plugins\WinSCP\CS 1.6 FUll Maps - And Bots.exe
C:\Far2\Plugins\ProcList\Download Music Campur.exe
C:\Far2\Plugins\ProcList\Download Music Campur.lnk
C:\Far2\Plugins\TmpPanel\Download Lynda Video Tutorial Mediafire.lnk
C:\Far2\Plugins\WinSCP\CS 1.6 FUll Maps - And Bots.lnk
C:\Far2\Plugins\TmpPanel\Download Lynda Video Tutorial Mediafire.exe
C:\Far2\Plugins\WinSCP\filezilla\Need For Speed Series.lnk
C:\Far2\Plugins\WinSCP\fari\Download VM Ware WorkStation.exe
C:\Far2\Plugins\WinSCP\filezilla\Need For Speed Series.exe
C:\Far2\Plugins\WinSCP\filezilla\misc\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\WinSCP\filezilla\misc\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\WinSCP\fari\Download VM Ware WorkStation.lnk
C:\Far2\Plugins\WinSCP\dragext\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\WinSCP\core\LIMBO New PC Games 2011.exe
C:\Far2\Plugins\WinSCP\dragext\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\WinSCP\far\Download Folder MISC.exe
C:\Far2\Plugins\WinSCP\far\Download Folder MISC.lnk
C:\Far2\Plugins\ExtSearch\sources\RegExp\Absolute Love Song 2.exe
C:\Far2\Plugins\ExtSearch\sources\RegExp\Absolute Love Song 2.lnk
C:\Far2\Plugins\FarCmds\Download 100 Percent Elextro.lnk
C:\Far2\Plugins\FileCase\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
C:\Far2\Plugins\FarCmds\Download 100 Percent Elextro.exe
C:\Far2\Plugins\ExtSearch\sources\7 SINS --- 2011.exe
C:\Far2\Plugins\ExtSearch\doc\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\ExtSearch\doc\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\ExtSearch\keys\Download Corel Video Studio 4.lnk
C:\Far2\Plugins\ExtSearch\sources\7 SINS --- 2011.lnk
C:\Far2\Plugins\ExtSearch\keys\Download Corel Video Studio 4.exe
C:\Far2\Plugins\MacroView\Build A Lots 1 - 6.lnk
C:\Far2\Plugins\HlfViewer\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
C:\Far2\Plugins\MacroView\Build A Lots 1 - 6.exe
C:\Far2\Plugins\Network\Download 100 Percent Elextro.exe
C:\Far2\Plugins\Network\Download 100 Percent Elextro.lnk
C:\Far2\Plugins\HlfViewer\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
C:\Far2\Plugins\FTP\Download Other Music.lnk
C:\Far2\Plugins\FileCase\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
C:\Far2\Plugins\FTP\Download Other Music.exe
C:\Far2\Plugins\FTP\lib\Download Trance Music Collections.exe
C:\Far2\Plugins\FTP\lib\Download Trance Music Collections.lnk
C:\Far2\Plugins\WinSCP\windows\7 SINS --- 2011.exe
C:\Far2\Plugins\WinSCP\windows\7 SINS --- 2011.lnk
C:\Far2\PluginSDK\Download Dance Music.lnk
C:\Far2\PluginSDK\Headers.c\ABSOLUTE TRANCE 2009 - 2011.lnk
C:\Far2\PluginSDK\Download Dance Music.exe
C:\Far2\Plugins\WinSCP\resource\Mount And Blade Game.exe
C:\Far2\Plugins\WinSCP\putty\windows\Need For Speed Series.exe
C:\Far2\Plugins\WinSCP\putty\windows\Need For Speed Series.lnk
C:\Far2\Plugins\WinSCP\release\ACAK PEG ( INDO BRT LOK ).lnk
C:\Far2\Plugins\WinSCP\resource\Mount And Blade Game.lnk
C:\Far2\Plugins\WinSCP\release\ACAK PEG ( INDO BRT LOK ).exe
%CommonProgramFiles%\Bastion [2011].exe
%CommonProgramFiles%\Bastion [2011].lnk
%CommonProgramFiles%\Microsoft Shared\indonesian Music.lnk
%CommonProgramFiles%\Microsoft Shared\DAO\Oxford Advanced Learner Dictionary.lnk
%CommonProgramFiles%\Microsoft Shared\indonesian Music.exe
%PROGRAM_FILES%\Download Music Campur.exe
C:\Far2\PluginSDK\Headers.pas\GTA 3 - NEW YORK CITY MOD - PERFECT.lnk
C:\Far2\PluginSDK\Headers.c\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Far2\PluginSDK\Headers.pas\GTA 3 - NEW YORK CITY MOD - PERFECT.exe
%PROGRAM_FILES%\Download Music Campur.lnk
<Auxiliary element>
C:\Far2\Plugins\WinSCP\packages\dragndrop\Download Sony Vegas HD Studio.exe
C:\Far2\Plugins\WinSCP\packages\dragndrop\Download Sony Vegas HD Studio.lnk
C:\Far2\Plugins\WinSCP\packages\filemng\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
C:\Far2\Plugins\WinSCP\packages\my\BATTLE REALMS - WOTW - NEWEST 2011.lnk
C:\Far2\Plugins\WinSCP\packages\filemng\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
C:\Far2\Plugins\WinSCP\packages\A State Of Trance.exe
C:\Far2\Plugins\WinSCP\forms\7 SINS --- 2011.exe
C:\Far2\Plugins\WinSCP\forms\7 SINS --- 2011.lnk
C:\Far2\Plugins\WinSCP\lib\Download Other Music.lnk
C:\Far2\Plugins\WinSCP\packages\A State Of Trance.lnk
C:\Far2\Plugins\WinSCP\lib\Download Other Music.exe
C:\Far2\Plugins\WinSCP\putty\ROOT FOLDER --- JACKPOT.lnk
C:\Far2\Plugins\WinSCP\packages\theme\Mount And Blade Game.exe
C:\Far2\Plugins\WinSCP\putty\ROOT FOLDER --- JACKPOT.exe
C:\Far2\Plugins\WinSCP\putty\charset\Download Folder MISC.exe
C:\Far2\Plugins\WinSCP\putty\charset\Download Folder MISC.lnk
C:\Far2\Plugins\WinSCP\packages\theme\Mount And Blade Game.lnk
C:\Far2\Plugins\WinSCP\packages\tb2k\Absolute Love Song 2.lnk
C:\Far2\Plugins\WinSCP\packages\my\BATTLE REALMS - WOTW - NEWEST 2011.exe
C:\Far2\Plugins\WinSCP\packages\tb2k\Absolute Love Song 2.exe
C:\Far2\Plugins\WinSCP\packages\tbx\Download Mediafire Folder Applicatione.exe
C:\Far2\Plugins\WinSCP\packages\tbx\Download Mediafire Folder Applicatione.lnk
<LS_APPDATA>\Microsoft\CD Burning\Torchlight Version 1.15 Newest.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\A State Of Trance.lnk
C:\Documents and Settings\Default User\Local Settings\Application Data\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\A State Of Trance.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Download Other Music.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Download Other Music.lnk
C:\Documents and Settings\Default User\Local Settings\Application Data\ABSOLUTE TRANCE 2009 - 2011.lnk
C:\Documents and Settings\Default User\Favorites\Download Mediafire Folder Applicatione.lnk
C:\Documents and Settings\Default User\Desktop\Download Game Seru !!!! .exe
C:\Documents and Settings\Default User\Favorites\Download Mediafire Folder Applicatione.exe
C:\Documents and Settings\Default User\Local Settings\Download VM Ware WorkStation.exe
C:\Documents and Settings\Default User\Local Settings\Download VM Ware WorkStation.lnk
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\Download VM Ware WorkStation.exe
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\Download VM Ware WorkStation.lnk
C:\Documents and Settings\Default User\Local Settings\Temp\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Download Sony Vegas HD Studio.lnk
C:\Documents and Settings\Default User\Local Settings\Temp\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Documents and Settings\Default User\Local Settings\History\Torchlight Version 1.15 Newest.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\7 SINS --- 2011.lnk
C:\Documents and Settings\Default User\Local Settings\History\Torchlight Version 1.15 Newest.lnk
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\7 SINS --- 2011.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\BATTLE REALMS - WOTW - NEWEST 2011.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\BATTLE REALMS - WOTW - NEWEST 2011.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\Build A Lots 1 - 6.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\Build A Lots 1 - 6.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
C:\Documents and Settings\Default User\Application Data\Download Fonts Collections Mediafire Link.lnk
C:\Documents and Settings\Default User\Absolute Love Song 2.exe
C:\Documents and Settings\Default User\Application Data\Download Fonts Collections Mediafire Link.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\Download Passmark Performance Test 7 Full.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\Download Passmark Performance Test 7 Full.lnk
C:\Documents and Settings\Default User\Cookies\Download Sony Vegas HD Studio.lnk
C:\Documents and Settings\Default User\Desktop\Download Game Seru !!!! .lnk
C:\Documents and Settings\Default User\Cookies\Download Sony Vegas HD Studio.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\Download Mediafire Folder Applicatione.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Build A Lots 1 - 6.exe
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Build A Lots 1 - 6.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\LIMBO New PC Games 2011.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\Download Mediafire Folder Applicatione.lnk
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\LIMBO New PC Games 2011.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\Need For Speed Series.lnk
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\Need For Speed Series.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Documents and Settings\Default User\Start Menu\Programs\Download Mediafire Folder Applicatione.lnk
C:\Documents and Settings\Default User\Start Menu\indonesian Music.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Download Mediafire Folder Applicatione.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Oxford Advanced Learner Dictionary.exe
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Oxford Advanced Learner Dictionary.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\Download Passmark Performance Test 7 Full.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\Download VM Ware WorkStation.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\Download Passmark Performance Test 7 Full.exe
C:\Documents and Settings\LocalService\Application Data\Download Sony Vegas HD Studio.exe
C:\Documents and Settings\Default User\Templates\Torchlight Version 1.15 Newest.exe
C:\Documents and Settings\Default User\Templates\Torchlight Version 1.15 Newest.lnk
C:\Documents and Settings\LocalService\CS 1.6 FUll Maps - And Bots.lnk
C:\Documents and Settings\LocalService\Application Data\Download Sony Vegas HD Studio.lnk
C:\Documents and Settings\LocalService\CS 1.6 FUll Maps - And Bots.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Lynda Video Tutorial Mediafire.lnk
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Torchlight Version 1.15 Newest.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Lynda Video Tutorial Mediafire.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download Corel Video Studio 4.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download Corel Video Studio 4.lnk
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Torchlight Version 1.15 Newest.lnk
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\Download Sony Vegas HD Studio.lnk
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Download Sony Vegas HD Studio.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\Download Sony Vegas HD Studio.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\Download Lynda Video Tutorial Mediafire.exe
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\Download Lynda Video Tutorial Mediafire.lnk
C:\Documents and Settings\Default User\Recent\Download Other Music.exe
C:\Documents and Settings\Default User\Recent\Download Other Music.lnk
C:\Documents and Settings\Default User\SendTo\Download Folder MISC.lnk
C:\Documents and Settings\Default User\Start Menu\indonesian Music.lnk
C:\Documents and Settings\Default User\SendTo\Download Folder MISC.exe
C:\Documents and Settings\Default User\PrintHood\indonesian Music.exe
C:\Documents and Settings\Default User\My Documents\Oxford Advanced Learner Dictionary.exe
C:\Documents and Settings\Default User\My Documents\Oxford Advanced Learner Dictionary.lnk
C:\Documents and Settings\Default User\NetHood\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
C:\Documents and Settings\Default User\PrintHood\indonesian Music.lnk
C:\Documents and Settings\Default User\NetHood\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\Download VM Ware WorkStation.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\Bastion [2011].exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\Download VM Ware WorkStation.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Download Corel Video Studio 4.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Download Corel Video Studio 4.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\Bastion [2011].lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\ABSOLUTE TRANCE 2009 - 2011.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\Build A Lots 1 - 6.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\ABSOLUTE TRANCE 2009 - 2011.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\Download VM Ware WorkStation.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\Download VM Ware WorkStation.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\LIMBO New PC Games 2011.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\LIMBO New PC Games 2011.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\Download Game Seru !!!! .lnk
%ALLUSERSPROFILE%\Desktop\Windows 7 Sp1 - 32 BIT - Integrated - 11.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\Download Game Seru !!!! .exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\ACAK PEG ( INDO BRT LOK ).exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Download Fonts Collections Mediafire Link.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Download Fonts Collections Mediafire Link.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\Build A Lots 1 - 6.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\ACAK PEG ( INDO BRT LOK ).lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\Build A Lots 1 - 6.exe
%ALLUSERSPROFILE%\Application Data\ROOT FOLDER --- JACKPOT.lnk
%ALLUSERSPROFILE%\Download VM Ware WorkStation.exe
%ALLUSERSPROFILE%\Application Data\ROOT FOLDER --- JACKPOT.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Download Corel Video Studio 4.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Download Corel Video Studio 4.lnk
%ALLUSERSPROFILE%\Download VM Ware WorkStation.lnk
<Current directory>\Download Sony Vegas HD Studio.lnk
<SYSTEM32>\LinkspreΔder.exe
<Current directory>\Download Sony Vegas HD Studio.exe
C:\Documents and Settings\ACAK PEG ( INDO BRT LOK ).exe
C:\Documents and Settings\ACAK PEG ( INDO BRT LOK ).lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\Download Passmark Performance Test 7 Full.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\Download Passmark Performance Test 7 Full.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\A State Of Trance.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\Build A Lots 1 - 6.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\A State Of Trance.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\ROOT FOLDER --- JACKPOT.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\Build A Lots 1 - 6.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\Build A Lots 1 - 6.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\Download VM Ware WorkStation.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\ROOT FOLDER --- JACKPOT.lnk
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\Download VM Ware WorkStation.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Bastion [2011].exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\indonesian Music.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\indonesian Music.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Bastion [2011].lnk
%ALLUSERSPROFILE%\Start Menu\Download Mediafire Folder Applicatione.lnk
%ALLUSERSPROFILE%\Favorites\Download Other Music.exe
%ALLUSERSPROFILE%\Start Menu\Download Mediafire Folder Applicatione.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Download Folder MISC.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Download Folder MISC.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
%ALLUSERSPROFILE%\Templates\Download Music Campur.lnk
C:\Documents and Settings\Default User\Absolute Love Song 2.lnk
%ALLUSERSPROFILE%\Templates\Download Music Campur.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Trine [Adventure][2010].exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\Download Fonts Collections Mediafire Link.exe
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\Download Fonts Collections Mediafire Link.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Download Sony Vegas HD Studio.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Trine [Adventure][2010].lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Download Sony Vegas HD Studio.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\Trine [Adventure][2010].lnk
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\Windows 7 Sp1 - 32 BIT - Integrated - 11.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\Trine [Adventure][2010].exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\Download 100 Percent Elextro.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\Download 100 Percent Elextro.lnk
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\Windows 7 Sp1 - 32 BIT - Integrated - 11.lnk
%ALLUSERSPROFILE%\Documents\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
%ALLUSERSPROFILE%\Desktop\Windows 7 Sp1 - 32 BIT - Integrated - 11.exe
%ALLUSERSPROFILE%\Documents\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
%ALLUSERSPROFILE%\Documents\My Music\BATTLE REALMS - WOTW - NEWEST 2011.exe
%ALLUSERSPROFILE%\Documents\My Music\BATTLE REALMS - WOTW - NEWEST 2011.lnk
%ALLUSERSPROFILE%\Documents\My Videos\Trine [Adventure][2010].exe
%ALLUSERSPROFILE%\Documents\My Videos\Trine [Adventure][2010].lnk
%ALLUSERSPROFILE%\DRM\Download Lynda Video Tutorial Mediafire.lnk
%ALLUSERSPROFILE%\Favorites\Download Other Music.lnk
%ALLUSERSPROFILE%\DRM\Download Lynda Video Tutorial Mediafire.exe
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Download Lynda Video Tutorial Mediafire.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\ABSOLUTE TRANCE 2009 - 2011.exe
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\ABSOLUTE TRANCE 2009 - 2011.lnk
%ALLUSERSPROFILE%\Documents\My Pictures\ROOT FOLDER --- JACKPOT.lnk
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Download Lynda Video Tutorial Mediafire.lnk
%ALLUSERSPROFILE%\Documents\My Pictures\ROOT FOLDER --- JACKPOT.exe
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\Download VM Ware WorkStation.lnk
%APPDATA%\Microsoft\Credentials\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\Download VM Ware WorkStation.exe
%APPDATA%\Microsoft\Internet Explorer\Need For Speed Series.exe
%APPDATA%\Microsoft\Internet Explorer\Need For Speed Series.lnk
%APPDATA%\Microsoft\Credentials\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
%APPDATA%\Microsoft\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Download Wallpaper Collections.exe
%APPDATA%\Microsoft\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
%APPDATA%\Microsoft\Address Book\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
%APPDATA%\Microsoft\Address Book\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
%APPDATA%\Microsoft\SystemCertificates\Download Music Campur.exe
%APPDATA%\Microsoft\SystemCertificates\Download Music Campur.lnk
%APPDATA%\Microsoft\SystemCertificates\My\Build A Lots 1 - 6.lnk
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\GTA 3 - NEW YORK CITY MOD - PERFECT.lnk
%APPDATA%\Microsoft\SystemCertificates\My\Build A Lots 1 - 6.exe
%APPDATA%\Microsoft\MMC\Burnout Paradise Ultimate BOX.exe
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Download Game Seru !!!! .exe
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Download Game Seru !!!! .lnk
%APPDATA%\Microsoft\Media Player\Download VM Ware WorkStation.lnk
%APPDATA%\Microsoft\MMC\Burnout Paradise Ultimate BOX.lnk
%APPDATA%\Microsoft\Media Player\Download VM Ware WorkStation.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\Download Fonts Collections Mediafire Link.lnk
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\Download Fonts Collections Mediafire Link.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Documents and Settings\NetworkService\Local Settings\Temp\Download VM Ware WorkStation.lnk
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\Absolute Love Song 2.exe
C:\Documents and Settings\NetworkService\Local Settings\Temp\Download VM Ware WorkStation.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Download Game Seru !!!! .exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Download Game Seru !!!! .lnk
%APPDATA%\Gamehouse Collections From Allsmartgames.exe
%APPDATA%\Gamehouse Collections From Allsmartgames.lnk
%APPDATA%\Identities\Gamehouse Collections From Allsmartgames.lnk
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Download Wallpaper Collections.lnk
%APPDATA%\Identities\Gamehouse Collections From Allsmartgames.exe
%HOMEPATH%\Trine [Adventure][2010].exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Windows 32 64 Bit Gratis Full Version Full Speed.exe
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Download Windows 32 64 Bit Gratis Full Version Full Speed.lnk
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download 100 Percent Elextro.lnk
%HOMEPATH%\Trine [Adventure][2010].lnk
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Download 100 Percent Elextro.exe
%HOMEPATH%\Local Settings\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%HOMEPATH%\Favorites\Links\Download Folder MISC.exe
%HOMEPATH%\Local Settings\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
<LS_APPDATA>\Download Folder MISC.exe
<LS_APPDATA>\Download Folder MISC.lnk
%HOMEPATH%\Favorites\Links\Download Folder MISC.lnk
%HOMEPATH%\Cookies\BATTLE REALMS - WOTW - NEWEST 2011.lnk
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\LIMBO New PC Games 2011.exe
%HOMEPATH%\Cookies\BATTLE REALMS - WOTW - NEWEST 2011.exe
%HOMEPATH%\Favorites\ACAK PEG ( INDO BRT LOK ).exe
%HOMEPATH%\Favorites\ACAK PEG ( INDO BRT LOK ).lnk
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\A State Of Trance.exe
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\A State Of Trance.lnk
<LS_APPDATA>\Microsoft\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
<LS_APPDATA>\Microsoft\CD Burning\Torchlight Version 1.15 Newest.lnk
<LS_APPDATA>\Microsoft\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Download Adobe CS 5 Master Collections.exe
<LS_APPDATA>\Identities\Download Adobe CS 5 Master Collections.exe
<LS_APPDATA>\Identities\Download Adobe CS 5 Master Collections.lnk
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Trine [Adventure][2010].lnk
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Download Adobe CS 5 Master Collections.lnk
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Trine [Adventure][2010].exe
%APPDATA%\Microsoft\Windows\Themes\Need For Speed Series.lnk
%APPDATA%\Microsoft\Windows\Need For Speed Series.exe
%APPDATA%\Microsoft\Windows\Themes\Need For Speed Series.exe
%APPDATA%\Mozilla\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
%APPDATA%\Mozilla\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
%APPDATA%\Microsoft\Windows\Need For Speed Series.lnk
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\Absolute Love Song 2.lnk
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\GTA 3 - NEW YORK CITY MOD - PERFECT.exe
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\Absolute Love Song 2.exe
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Trine [Adventure][2010].exe
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Trine [Adventure][2010].lnk
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\Absolute Love Song 2.lnk
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\LIMBO New PC Games 2011.lnk
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\Absolute Love Song 2.exe
%APPDATA%\Mozilla\Firefox\Profiles\Windows 7 Sp1 - 32 BIT - Integrated - 11.exe
%APPDATA%\Mozilla\Extensions\Download Passmark Performance Test 7 Full.exe
%APPDATA%\Mozilla\Extensions\Download Passmark Performance Test 7 Full.lnk
%APPDATA%\Mozilla\Firefox\Download Corel Video Studio 4.lnk
%APPDATA%\Mozilla\Firefox\Profiles\Windows 7 Sp1 - 32 BIT - Integrated - 11.lnk
%APPDATA%\Mozilla\Firefox\Download Corel Video Studio 4.exe
C:\Documents and Settings\LocalService\Local Settings\History\indonesian Music.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Download Corel Video Studio 4.exe
C:\Documents and Settings\LocalService\Local Settings\History\indonesian Music.exe
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\Download Folder MISC.exe
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\Download Folder MISC.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Download Corel Video Studio 4.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\Oxford Advanced Learner Dictionary.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\Oxford Advanced Learner Dictionary.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\ABSOLUTE TRANCE 2009 - 2011.exe
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\ABSOLUTE TRANCE 2009 - 2011.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\BGGTYMH1\Download Trance Music Collections.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\BGGTYMH1\Download Trance Music Collections.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\Torchlight Version 1.15 Newest.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\LBMMC3H3\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\Torchlight Version 1.15 Newest.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Download Folder MISC.exe
C:\Documents and Settings\LocalService\Local Settings\Temp\Download Corel Video Studio 4.exe
C:\Documents and Settings\LocalService\Local Settings\Temp\Download Corel Video Studio 4.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\indonesian Music.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Download Folder MISC.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\indonesian Music.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Download Game Seru !!!! .lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\7 SINS --- 2011.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Download Game Seru !!!! .exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\Download Adobe CS 5 Master Collections.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\Download Adobe CS 5 Master Collections.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\7 SINS --- 2011.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\Download VM Ware WorkStation.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\BATTLE REALMS - WOTW - NEWEST 2011.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\BATTLE REALMS - WOTW - NEWEST 2011.lnk
C:\Documents and Settings\LocalService\Local Settings\Download Folder MISC.exe
C:\Documents and Settings\LocalService\Local Settings\Download Folder MISC.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\LocalService\Local Settings\Application Data\WINDOWS 7 ULTIMATE 64BIT - SP1 - AUG 2011.exe
C:\Documents and Settings\LocalService\Cookies\Oxford Advanced Learner Dictionary.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\Trine [Adventure][2010].lnk
C:\Documents and Settings\LocalService\Cookies\Oxford Advanced Learner Dictionary.lnk
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\Trine [Adventure][2010].exe
C:\Documents and Settings\NetworkService\Local Settings\Download Other Music.lnk
C:\Documents and Settings\NetworkService\Cookies\Download Adobe CS 5 Master Collections.exe
C:\Documents and Settings\NetworkService\Local Settings\Download Other Music.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Burnout Paradise Ultimate BOX.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Burnout Paradise Ultimate BOX.lnk
C:\Documents and Settings\NetworkService\Cookies\Download Adobe CS 5 Master Collections.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\Need For Speed Series.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\Bastion [2011].exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\Bastion [2011].lnk
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\Download Adobe CS 5 Master Collections.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\Download Adobe CS 5 Master Collections.lnk
C:\Documents and Settings\NetworkService\Local Settings\History\Download Music Campur.lnk
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\Absolute Love Song 2.lnk
C:\Documents and Settings\NetworkService\Local Settings\History\Download Music Campur.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\Download Other Music.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Download Trance Music Collections.exe
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Download Trance Music Collections.lnk
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\Download Mediafire Folder Applicatione.lnk
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\Download Other Music.lnk
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\Download Mediafire Folder Applicatione.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\indonesian Music.lnk
C:\Documents and Settings\NetworkService\Application Data\Download Wallpaper Collections.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\indonesian Music.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\Mount And Blade Game.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\Mount And Blade Game.lnk
C:\Documents and Settings\NetworkService\Application Data\Download Wallpaper Collections.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\MOE00UY1\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.lnk
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\LBMMC3H3\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\MOE00UY1\Download Windows XP 64 Bit SP2 Integrated Agustus 2011.exe
C:\Documents and Settings\NetworkService\Build A Lots 1 - 6.exe
C:\Documents and Settings\NetworkService\Build A Lots 1 - 6.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\ROOT FOLDER --- JACKPOT.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\ROOT FOLDER --- JACKPOT.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Download Music Gratis - Indonesia - Barat - Trance - Dance.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\Need For Speed Series.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Download Music Gratis - Indonesia - Barat - Trance - Dance.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\Download VM Ware WorkStation.exe
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\Download VM Ware WorkStation.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\Absolute Love Song 2.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\Win XP SP3 - 32bit - AUG 2011 - INTEGRAT.lnk
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\Absolute Love Song 2.exe

Sets the 'hidden' attribute to the following files:

<Drive name for removable media>:\autorun.inf
<Drive name for removable media>:\Pawnzer.exe

Deletes the following files:

<Drive name for removable media>:\delete.bat

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''

Technologies

Terminology

Training and education

Myths

Technical Information