Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Please analyze ComboFix log


  • This topic is locked This topic is locked
2 replies to this topic

#1 petekohn

petekohn

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:12 AM

Posted 25 September 2011 - 08:20 AM

Wow -- ComboFix found a lot of stuff that it removed. I just want to be sure that nothing was removed that shouldn't have been.

This is not a high priority.

Thanks for your help.

Here's the log:

ComboFix 11-09-24.01 - pkohn 09/24/2011 11:39:17.1.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8149.6115 [GMT -4:00]
Running from: c:\users\pkohn\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G36QUHH5\ComboFix.exe
AV: Endpoint Security Manager *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59}
SP: Endpoint Security Manager *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Resident AV is active
.
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\apps
c:\apps\975fr\1031.mst
c:\apps\975fr\1033.mst
c:\apps\975fr\1036.mst
c:\apps\975fr\ABCPY.INI
c:\apps\975fr\AcroStan.msi
c:\apps\975fr\Data1.cab
c:\apps\975fr\Desc.xml
c:\apps\975fr\setup.exe
c:\apps\975fr\Setup.ini
c:\apps\975fr\WindowsInstaller-KB893803-v2-x86.exe
c:\apps\h3gfn\Desc.xml
c:\apps\h3gfn\Installer\ACTIVATION_300\1028.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1030.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1031.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1033.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1036.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1040.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1041.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1042.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1043.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1044.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1045.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1046.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1049.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\1053.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\2052.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\3082.mst
c:\apps\h3gfn\Installer\ACTIVATION_300\Activate.MSI
c:\apps\h3gfn\Installer\ACTIVATION_300\BIN\rsl.dll
c:\apps\h3gfn\Installer\ACTIVATION_300\HISTORY.BLD
c:\apps\h3gfn\Installer\ACTIVATION_300\NActReq4.rxc
c:\apps\h3gfn\Installer\ACTIVATION_300\rcsl.dll
c:\apps\h3gfn\Installer\autorun.inf
c:\apps\h3gfn\Installer\BASICBURN_0180\1028.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1030.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1031.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1033.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1036.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1040.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1041.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1042.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1043.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1044.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1045.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1046.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1049.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\1053.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\2052.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\3082.mst
c:\apps\h3gfn\Installer\BASICBURN_0180\BasicBurn.msi
c:\apps\h3gfn\Installer\BASICBURN_0180\basicburnRXD.rxc
c:\apps\h3gfn\Installer\BASICBURN_0180\BIN\AS_Storage_w32.dll
c:\apps\h3gfn\Installer\BASICBURN_0180\BIN\DellSupport.dll
c:\apps\h3gfn\Installer\BASICBURN_0180\BIN\rsl.dll
c:\apps\h3gfn\Installer\BASICBURN_0180\BIN\SSupport.dll
c:\apps\h3gfn\Installer\BASICBURN_0180\HISTORY.BLD
c:\apps\h3gfn\Installer\BASICBURN_0180\RCSL.dll
c:\apps\h3gfn\Installer\BCP_CORE_131\1028.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1030.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1031.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1033.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1036.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1040.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1041.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1042.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1043.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1044.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1045.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1046.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1049.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\1053.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\2052.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\3082.mst
c:\apps\h3gfn\Installer\BCP_CORE_131\BCPCore.MSI
c:\apps\h3gfn\Installer\BCP_CORE_131\BCPCore.rxc
c:\apps\h3gfn\Installer\BCP_CORE_131\BIN\rsl.dll
c:\apps\h3gfn\Installer\BCP_CORE_131\HISTORY.BLD
c:\apps\h3gfn\Installer\BCP_CORE_131\RCSL.dll
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1028.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1030.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1031.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1033.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1036.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1040.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1041.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1042.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1043.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1044.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1045.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1046.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1049.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\1053.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\2052.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\3082.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\BCPEA.MSI
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_13\HISTORY.BLD
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1028.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1030.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1031.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1033.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1036.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1040.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1041.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1042.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1043.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1044.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1045.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1046.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1049.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\1053.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\2052.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\3082.mst
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\BCPEA.MSI
c:\apps\h3gfn\Installer\BCP_EASYARCHIVE_A64_13\HISTORY.BLD
c:\apps\h3gfn\Installer\BIN\license.CHS
c:\apps\h3gfn\Installer\BIN\license.CHT
c:\apps\h3gfn\Installer\BIN\license.DAN
c:\apps\h3gfn\Installer\BIN\license.DEU
c:\apps\h3gfn\Installer\BIN\license.ENU
c:\apps\h3gfn\Installer\BIN\license.ESN
c:\apps\h3gfn\Installer\BIN\license.FRA
c:\apps\h3gfn\Installer\BIN\license.ITA
c:\apps\h3gfn\Installer\BIN\license.JPN
c:\apps\h3gfn\Installer\BIN\license.KOR
c:\apps\h3gfn\Installer\BIN\license.NLD
c:\apps\h3gfn\Installer\BIN\license.NOR
c:\apps\h3gfn\Installer\BIN\license.PLK
c:\apps\h3gfn\Installer\BIN\license.PTB
c:\apps\h3gfn\Installer\BIN\license.RUS
c:\apps\h3gfn\Installer\BIN\license.SVE
c:\apps\h3gfn\Installer\BIN\ProductVersion.dll
c:\apps\h3gfn\Installer\BIN\rsl.dll
c:\apps\h3gfn\Installer\BIN\SuiteIcon.ico
c:\apps\h3gfn\Installer\BIN\UEIP.CHS
c:\apps\h3gfn\Installer\BIN\UEIP.CHT
c:\apps\h3gfn\Installer\BIN\UEIP.DAN
c:\apps\h3gfn\Installer\BIN\UEIP.DEU
c:\apps\h3gfn\Installer\BIN\UEIP.ENU
c:\apps\h3gfn\Installer\BIN\UEIP.ESN
c:\apps\h3gfn\Installer\BIN\UEIP.FRA
c:\apps\h3gfn\Installer\BIN\UEIP.ITA
c:\apps\h3gfn\Installer\BIN\UEIP.JPN
c:\apps\h3gfn\Installer\BIN\UEIP.KOR
c:\apps\h3gfn\Installer\BIN\UEIP.NLD
c:\apps\h3gfn\Installer\BIN\UEIP.NOR
c:\apps\h3gfn\Installer\BIN\UEIP.PLK
c:\apps\h3gfn\Installer\BIN\UEIP.PTB
c:\apps\h3gfn\Installer\BIN\UEIP.RUS
c:\apps\h3gfn\Installer\BIN\UEIP.SVE
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1028.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1030.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1031.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1033.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1036.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1040.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1041.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1042.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1043.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1044.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1046.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\1053.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\2052.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\3082.mst
c:\apps\h3gfn\Installer\CPDECODERPACK_432\BIN\SSupport.dll
c:\apps\h3gfn\Installer\CPDECODERPACK_432\CP432DL0.rxc
c:\apps\h3gfn\Installer\CPDECODERPACK_432\CPDP.msi
c:\apps\h3gfn\Installer\CPDECODERPACK_432\HISTORY.BLD
c:\apps\h3gfn\Installer\CPDECODERPACK_432\Rcsl.dll
c:\apps\h3gfn\Installer\CPDECODERPACK_432\Rsl.dll
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2005_d3dx9_25_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2005_d3dx9_25_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_d3dx9_30_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_d3dx9_30_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_MDX1_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_MDX1_x86_Archive.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_xinput_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Apr2006_xinput_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_d3dx10_33_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_d3dx10_33_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_d3dx9_33_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_d3dx9_33_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_xinput_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\APR2007_xinput_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Aug2005_d3dx9_27_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Aug2005_d3dx9_27_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2006_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2006_xinput_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2006_xinput_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_d3dx10_35_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_d3dx10_35_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_d3dx9_35_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_d3dx9_35_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\AUG2007_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\BDANT.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\BDAXP.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Dec2005_d3dx9_28_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Dec2005_d3dx9_28_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_d3dx10_00_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_d3dx10_00_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_d3dx9_32_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_d3dx9_32_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DEC2006_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dsetup.dll
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dsetup32.dll
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dxdllreg_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dxhelper.dll
c:\apps\h3gfn\Installer\DIRECTX_NOV07\DxLauncher.msi
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dxnt.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dxsetup.exe
c:\apps\h3gfn\Installer\DIRECTX_NOV07\dxupdate.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2005_d3dx9_24_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2005_d3dx9_24_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2006_d3dx9_29_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2006_d3dx9_29_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Feb2006_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\FEB2007_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\FEB2007_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\HISTORY.BLD
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Jun2005_d3dx9_26_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Jun2005_d3dx9_26_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2006_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_d3dx10_34_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_d3dx10_34_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_d3dx9_34_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_d3dx9_34_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\JUN2007_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_d3dx10_36_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_d3dx10_36_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_d3dx9_36_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_d3dx9_36_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_X3DAudio_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_X3DAudio_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\NOV2007_XACT_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Oct2005_xinput_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\Oct2005_xinput_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\OCT2006_d3dx9_31_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\OCT2006_d3dx9_31_x86.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\OCT2006_XACT_x64.cab
c:\apps\h3gfn\Installer\DIRECTX_NOV07\OCT2006_XACT_x86.cab
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1028.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1030.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1031.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1033.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1036.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1040.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1041.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1042.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1043.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1044.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1045.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1046.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1049.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\1053.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\2052.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\3082.mst
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\HISTORY.BLD
c:\apps\h3gfn\Installer\EXPRESSLABELER_322\LABELER.MSI
c:\apps\h3gfn\Installer\HISTORY.BLD
c:\apps\h3gfn\Installer\INSNTMSI.EXE
c:\apps\h3gfn\Installer\mstrid.txt
c:\apps\h3gfn\Installer\MYDVD2010\0x0404.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0406.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0407.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0409.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x040c.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0410.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0411.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0412.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0413.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0414.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0415.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0416.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0419.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x041d.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0804.ini
c:\apps\h3gfn\Installer\MYDVD2010\0x0c0a.ini
c:\apps\h3gfn\Installer\MYDVD2010\1028.mst
c:\apps\h3gfn\Installer\MYDVD2010\1030.mst
c:\apps\h3gfn\Installer\MYDVD2010\1031.mst
c:\apps\h3gfn\Installer\MYDVD2010\1033.mst
c:\apps\h3gfn\Installer\MYDVD2010\1036.mst
c:\apps\h3gfn\Installer\MYDVD2010\1040.mst
c:\apps\h3gfn\Installer\MYDVD2010\1041.mst
c:\apps\h3gfn\Installer\MYDVD2010\1042.mst
c:\apps\h3gfn\Installer\MYDVD2010\1043.mst
c:\apps\h3gfn\Installer\MYDVD2010\1044.mst
c:\apps\h3gfn\Installer\MYDVD2010\1045.mst
c:\apps\h3gfn\Installer\MYDVD2010\1046.mst
c:\apps\h3gfn\Installer\MYDVD2010\1049.mst
c:\apps\h3gfn\Installer\MYDVD2010\1053.mst
c:\apps\h3gfn\Installer\MYDVD2010\2052.mst
c:\apps\h3gfn\Installer\MYDVD2010\3082.mst
c:\apps\h3gfn\Installer\MYDVD2010\Autorun.ico
c:\apps\h3gfn\Installer\MYDVD2010\Autorun.inf
c:\apps\h3gfn\Installer\MYDVD2010\BIN\rsl.dll
c:\apps\h3gfn\Installer\MYDVD2010\BIN\SSupport.dll
c:\apps\h3gfn\Installer\MYDVD2010\Data1.cab
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\CHS\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\CHT\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\DAN\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\DEU\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\ENU\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\ESN\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\FRA\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\ITA\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\JPN\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\KOR\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\NLD\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\NOR\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\PLK\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\PTB\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\RUS\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC10\EULA\SVE\License.rtf
c:\apps\h3gfn\Installer\MYDVD2010\EMC12DL0.rxc
c:\apps\h3gfn\Installer\MYDVD2010\HISTORY.BLD
c:\apps\h3gfn\Installer\MYDVD2010\rcsl.dll
c:\apps\h3gfn\Installer\MYDVD2010\Roxio Creator Starter.msi
c:\apps\h3gfn\Installer\PSE\0x0404.ini
c:\apps\h3gfn\Installer\PSE\0x0406.ini
c:\apps\h3gfn\Installer\PSE\0x0407.ini
c:\apps\h3gfn\Installer\PSE\0x0409.ini
c:\apps\h3gfn\Installer\PSE\0x040c.ini
c:\apps\h3gfn\Installer\PSE\0x0410.ini
c:\apps\h3gfn\Installer\PSE\0x0411.ini
c:\apps\h3gfn\Installer\PSE\0x0412.ini
c:\apps\h3gfn\Installer\PSE\0x0413.ini
c:\apps\h3gfn\Installer\PSE\0x0414.ini
c:\apps\h3gfn\Installer\PSE\0x0415.ini
c:\apps\h3gfn\Installer\PSE\0x0416.ini
c:\apps\h3gfn\Installer\PSE\0x0419.ini
c:\apps\h3gfn\Installer\PSE\0x041d.ini
c:\apps\h3gfn\Installer\PSE\0x0804.ini
c:\apps\h3gfn\Installer\PSE\0x0c0a.ini
c:\apps\h3gfn\Installer\PSE\1028.mst
c:\apps\h3gfn\Installer\PSE\1030.mst
c:\apps\h3gfn\Installer\PSE\1031.mst
c:\apps\h3gfn\Installer\PSE\1033.mst
c:\apps\h3gfn\Installer\PSE\1036.mst
c:\apps\h3gfn\Installer\PSE\1040.mst
c:\apps\h3gfn\Installer\PSE\1041.mst
c:\apps\h3gfn\Installer\PSE\1042.mst
c:\apps\h3gfn\Installer\PSE\1043.mst
c:\apps\h3gfn\Installer\PSE\1044.mst
c:\apps\h3gfn\Installer\PSE\1045.mst
c:\apps\h3gfn\Installer\PSE\1046.mst
c:\apps\h3gfn\Installer\PSE\1049.mst
c:\apps\h3gfn\Installer\PSE\1053.mst
c:\apps\h3gfn\Installer\PSE\2052.mst
c:\apps\h3gfn\Installer\PSE\3082.mst
c:\apps\h3gfn\Installer\PSE\Certificate.rxc
c:\apps\h3gfn\Installer\PSE\HISTORY.BLD
c:\apps\h3gfn\Installer\PSE\PhotoS~1.cab
c:\apps\h3gfn\Installer\PSE\PhotoShowExpress.msi
c:\apps\h3gfn\Installer\PSE\RCSL.dll
c:\apps\h3gfn\Installer\RBVIRTUALFOLDER64_0180\HISTORY.BLD
c:\apps\h3gfn\Installer\RBVIRTUALFOLDER64_0180\RBVirtualFolder64Inst.msi
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1028.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1030.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1031.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1033.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1036.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1040.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1041.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1042.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1043.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1044.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1045.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1046.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1049.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\1053.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\2052.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\3082.mst
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\BIN\AS_Storage_w32.dll
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\BIN\DellSupport.dll
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\BIN\rsl.dll
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\HISTORY.BLD
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\RCPROD.msi
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\RCSL.dll
c:\apps\h3gfn\Installer\ROXIOCENTRAL_50OEM\RxCentral5DL0.rxc
c:\apps\h3gfn\Installer\Setup.dcf
c:\apps\h3gfn\Installer\setup.exe
c:\apps\media.ini
c:\apps\N2DPW\0x0404.ini
c:\apps\N2DPW\0x0406.ini
c:\apps\N2DPW\0x0407.ini
c:\apps\N2DPW\0x0409.ini
c:\apps\N2DPW\0x040a.ini
c:\apps\N2DPW\0x040c.ini
c:\apps\N2DPW\0x0410.ini
c:\apps\N2DPW\0x0411.ini
c:\apps\N2DPW\0x0412.ini
c:\apps\N2DPW\0x0413.ini
c:\apps\N2DPW\0x0414.ini
c:\apps\N2DPW\0x0415.ini
c:\apps\N2DPW\0x0416.ini
c:\apps\N2DPW\0x0419.ini
c:\apps\N2DPW\0x041d.ini
c:\apps\N2DPW\0x0804.ini
c:\apps\N2DPW\0x0816.ini
c:\apps\N2DPW\0x1004.ini
c:\apps\N2DPW\1028.mst
c:\apps\N2DPW\1030.mst
c:\apps\N2DPW\1031.mst
c:\apps\N2DPW\1033.mst
c:\apps\N2DPW\1034.mst
c:\apps\N2DPW\1036.mst
c:\apps\N2DPW\1040.mst
c:\apps\N2DPW\1041.mst
c:\apps\N2DPW\1042.mst
c:\apps\N2DPW\1043.mst
c:\apps\N2DPW\1044.mst
c:\apps\N2DPW\1045.mst
c:\apps\N2DPW\1046.mst
c:\apps\N2DPW\1049.mst
c:\apps\N2DPW\1053.mst
c:\apps\N2DPW\2052.mst
c:\apps\N2DPW\2070.mst
c:\apps\N2DPW\4100.mst
c:\apps\N2DPW\Autorun.inf
c:\apps\N2DPW\BDROM.reg
c:\apps\N2DPW\brs.exe
c:\apps\N2DPW\CLScan.dll
c:\apps\N2DPW\CLScan.ini
c:\apps\N2DPW\CLSM.exe
c:\apps\N2DPW\config\~BDROM.reg
c:\apps\N2DPW\config\~CustomBD.reg
c:\apps\N2DPW\config\~CustomDVD.reg
c:\apps\N2DPW\config\~PowerDVDCinema.reg
c:\apps\N2DPW\config\BDROM.reg
c:\apps\N2DPW\config\CustomBD.reg
c:\apps\N2DPW\config\CustomDVD.reg
c:\apps\N2DPW\config\PowerDVDCinema.reg
c:\apps\N2DPW\Custom.ini
c:\apps\N2DPW\Cyberlink.MD5
c:\apps\N2DPW\Data1.cab
c:\apps\N2DPW\Define.ini
c:\apps\N2DPW\Desc.xml
c:\apps\N2DPW\info.ini
c:\apps\N2DPW\instmsiw.exe
c:\apps\N2DPW\ISSetup.dll
c:\apps\N2DPW\Language.ini
c:\apps\N2DPW\PDVD.reg
c:\apps\N2DPW\PowerDVD.msi
c:\apps\N2DPW\PowerDVD9.ico
c:\apps\N2DPW\Product.ini
c:\apps\N2DPW\setup.exe
c:\apps\N2DPW\Setup.ini
c:\apps\N2DPW\setup.isn
c:\apps\N2DPW\setup.iss
c:\apps\N2DPW\setup.log
c:\apps\N2DPW\ShareFiles\Share\cldsc.dll
c:\apps\N2DPW\ShortCut.ini
c:\apps\N2DPW\SKUtil.dll
c:\apps\N2DPW\uninstall.iss
c:\apps\N2DPW\ureg.ini
c:\apps\N2DPW\vcredist_x86.exe
c:\apps\osmedia\autorun.inf
c:\apps\osmedia\boot\bcd
c:\apps\osmedia\boot\boot.sdi
c:\apps\osmedia\boot\bootfix.bin
c:\apps\osmedia\boot\bootsect.exe
c:\apps\osmedia\boot\en-us\bootsect.exe.mui
c:\apps\osmedia\boot\etfsboot.com
c:\apps\osmedia\boot\fonts\chs_boot.ttf
c:\apps\osmedia\boot\fonts\cht_boot.ttf
c:\apps\osmedia\boot\fonts\jpn_boot.ttf
c:\apps\osmedia\boot\fonts\kor_boot.ttf
c:\apps\osmedia\boot\fonts\wgl4_boot.ttf
c:\apps\osmedia\boot\memtest.efi
c:\apps\osmedia\boot\memtest.exe
c:\apps\osmedia\bootmgr
c:\apps\osmedia\bootmgr.efi
c:\apps\osmedia\efi\microsoft\boot\bcd
c:\apps\osmedia\efi\microsoft\boot\cdboot.efi
c:\apps\osmedia\efi\microsoft\boot\cdboot_noprompt.efi
c:\apps\osmedia\efi\microsoft\boot\efisys.bin
c:\apps\osmedia\efi\microsoft\boot\efisys_noprompt.bin
c:\apps\osmedia\efi\microsoft\boot\fonts\chs_boot.ttf
c:\apps\osmedia\efi\microsoft\boot\fonts\cht_boot.ttf
c:\apps\osmedia\efi\microsoft\boot\fonts\jpn_boot.ttf
c:\apps\osmedia\efi\microsoft\boot\fonts\kor_boot.ttf
c:\apps\osmedia\efi\microsoft\boot\fonts\wgl4_boot.ttf
c:\apps\osmedia\setup.exe
c:\apps\osmedia\sources\$OEM$\$$\Setup\scripts\oem.reg
c:\apps\osmedia\sources\$OEM$\$$\Setup\scripts\oobe.cmd
c:\apps\osmedia\sources\$OEM$\$$\Setup\scripts\slp.cmd
c:\apps\osmedia\sources\$OEM$\$$\System32\OEM\oem.xrm-ms
c:\apps\osmedia\sources\actionqueue.dll
c:\apps\osmedia\sources\admtv3check.dll
c:\apps\osmedia\sources\alert.gif
c:\apps\osmedia\sources\apds.dll
c:\apps\osmedia\sources\apircl.dll
c:\apps\osmedia\sources\appcompat.xsl
c:\apps\osmedia\sources\appcompat_bidi.xsl
c:\apps\osmedia\sources\appcompat_detailed.xsl
c:\apps\osmedia\sources\appcompat_detailed_bidi.xsl
c:\apps\osmedia\sources\appcompat_detailed_bidi_txt.xsl
c:\apps\osmedia\sources\appcompat_detailed_txt.xsl
c:\apps\osmedia\sources\apss.dll
c:\apps\osmedia\sources\arunimg.dll
c:\apps\osmedia\sources\arunres.dll
c:\apps\osmedia\sources\autorun.dll
c:\apps\osmedia\sources\background_cli.bmp
c:\apps\osmedia\sources\boot.wim
c:\apps\osmedia\sources\cbscore.dll
c:\apps\osmedia\sources\cbsmsg.dll
c:\apps\osmedia\sources\cdplib.mof
c:\apps\osmedia\sources\cdplibuninstall.mof
c:\apps\osmedia\sources\cmiadapter.dll
c:\apps\osmedia\sources\cmisetup.dll
c:\apps\osmedia\sources\cmitrust.dll
c:\apps\osmedia\sources\cmiv2.dll
c:\apps\osmedia\sources\cntrtextinstaller.dll
c:\apps\osmedia\sources\compatprovider.dll
c:\apps\osmedia\sources\compliance.ini
c:\apps\osmedia\sources\compres.dll
c:\apps\osmedia\sources\cryptosetup.dll
c:\apps\osmedia\sources\cversion.ini
c:\apps\osmedia\sources\diager.dll
c:\apps\osmedia\sources\diagnostic.dll
c:\apps\osmedia\sources\dism.exe
c:\apps\osmedia\sources\dismcore.dll
c:\apps\osmedia\sources\dismcoreps.dll
c:\apps\osmedia\sources\dismhost.exe
c:\apps\osmedia\sources\dismprov.dll
c:\apps\osmedia\sources\dlmanifests\accessibilitycpl-dl.man
c:\apps\osmedia\sources\dlmanifests\activedirectory-webservices-dl.man
c:\apps\osmedia\sources\dlmanifests\activedirectory-wmireplicationprovider-dl.man
c:\apps\osmedia\sources\dlmanifests\adfs-federationservice-dl.man
c:\apps\osmedia\sources\dlmanifests\adfs-federationserviceproxy-dl.man
c:\apps\osmedia\sources\dlmanifests\adfs-webagentclaims-dl.man
c:\apps\osmedia\sources\dlmanifests\adfs-webagenttoken-dl.man
c:\apps\osmedia\sources\dlmanifests\adminui-dl.man
c:\apps\osmedia\sources\dlmanifests\adsi-ldap-extensions-dl.man
c:\apps\osmedia\sources\dlmanifests\adsi-ldap-provider-dl.man
c:\apps\osmedia\sources\dlmanifests\adsi-router-dl.man
c:\apps\osmedia\sources\dlmanifests\adsi-winnt-provider-dl.man
c:\apps\osmedia\sources\dlmanifests\application_experience-infrastructure-dl.man
c:\apps\osmedia\sources\dlmanifests\authui-dl.man
c:\apps\osmedia\sources\dlmanifests\bitsextensions-server-console-dl.man
c:\apps\osmedia\sources\dlmanifests\bitsextensions-server-dl.man
c:\apps\osmedia\sources\dlmanifests\bitsextensions-server\bitsmig.dll
c:\apps\osmedia\sources\dlmanifests\bluetooth-config-dl.man
c:\apps\osmedia\sources\dlmanifests\browserservice-dl.man
c:\apps\osmedia\sources\dlmanifests\capi2_certs-dl.man
c:\apps\osmedia\sources\dlmanifests\commandprompt-dl.man
c:\apps\osmedia\sources\dlmanifests\coreos-dl.man
c:\apps\osmedia\sources\dlmanifests\credential-manager-dl.man
c:\apps\osmedia\sources\dlmanifests\crypto_keys-dl.man
c:\apps\osmedia\sources\dlmanifests\cryptoconfig-dl.man
c:\apps\osmedia\sources\dlmanifests\dfsclient-dl.man
c:\apps\osmedia\sources\dlmanifests\dfsmgmt-dl.man
c:\apps\osmedia\sources\dlmanifests\dfsn-serverservice-dl.man
c:\apps\osmedia\sources\dlmanifests\dhcpclient-dl.man
c:\apps\osmedia\sources\dlmanifests\dhcpservermigplugin-dl.man
c:\apps\osmedia\sources\dlmanifests\directoryservices-adam-dl.man
c:\apps\osmedia\sources\dlmanifests\directoryservices-domain-dl.man
c:\apps\osmedia\sources\dlmanifests\directoryservices-ism-smtp-dl.man
c:\apps\osmedia\sources\dlmanifests\dns-client-dl.man
c:\apps\osmedia\sources\dlmanifests\dns-server-service-dl.man
c:\apps\osmedia\sources\dlmanifests\dpapi_keys-dl.man
c:\apps\osmedia\sources\dlmanifests\drm-dl.man
c:\apps\osmedia\sources\dlmanifests\errorreportingcore-dl.man
c:\apps\osmedia\sources\dlmanifests\errorreportingfaults-dl.man
c:\apps\osmedia\sources\dlmanifests\etw-core-dl.man
c:\apps\osmedia\sources\dlmanifests\eudcedit-dl.man
c:\apps\osmedia\sources\dlmanifests\eventcollector-dl.man
c:\apps\osmedia\sources\dlmanifests\eventlog-dl.man
c:\apps\osmedia\sources\dlmanifests\evntagnt-dl.man
c:\apps\osmedia\sources\dlmanifests\explorer-dl.man
c:\apps\osmedia\sources\dlmanifests\extensibleauthenticationprotocolhostservice-dl.man
c:\apps\osmedia\sources\dlmanifests\feclient-dl.man
c:\apps\osmedia\sources\dlmanifests\fonts-type1-dl.man
c:\apps\osmedia\sources\dlmanifests\frs-core-dl.man
c:\apps\osmedia\sources\dlmanifests\gpbase-dl.man
c:\apps\osmedia\sources\dlmanifests\gpmc-dl.man
c:\apps\osmedia\sources\dlmanifests\gpmgmt-dl.man
c:\apps\osmedia\sources\dlmanifests\grouppolicy-admin-gpedit-dl.man
c:\apps\osmedia\sources\dlmanifests\grouppolicy-admin-gpedit-snapin-dl.man
c:\apps\osmedia\sources\dlmanifests\grouppolicy-cse-softwareinstallation-dl.man
c:\apps\osmedia\sources\dlmanifests\grouppolicy-serveradmintools-gpmc-dl.man
c:\apps\osmedia\sources\dlmanifests\http-dl.man
c:\apps\osmedia\sources\dlmanifests\iasmigplugin-dl.man
c:\apps\osmedia\sources\dlmanifests\ieframe-dl.man
c:\apps\osmedia\sources\dlmanifests\ime-simplified-chinese-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\ime-traditional-chinese-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\international-core-dl.man
c:\apps\osmedia\sources\dlmanifests\international-timezones-dl.man
c:\apps\osmedia\sources\dlmanifests\internet-naming-service-runtime-dl.man
c:\apps\osmedia\sources\dlmanifests\ipsec-svc-dl.man
c:\apps\osmedia\sources\dlmanifests\isns_service-dl.man
c:\apps\osmedia\sources\dlmanifests\kerberos-key-distribution-center-dl.man
c:\apps\osmedia\sources\dlmanifests\ldap-client-dl.man
c:\apps\osmedia\sources\dlmanifests\mediaserver-aspadmin-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\mediaserver-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\mediaserver-multicast-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-activedirectory-webservices-dl\adwsmigrate.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-adfs-dl\adfsmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-bits-client-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-bluetooth-config\bthmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-certificateservices-ca-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-certificateservices-camanagement-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-certificateservices-mscep-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-com-complus-setup-dl\commig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-com-dtc-setup-dl\msdtcstp.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-dfsr-core-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-dhcpservermigplugin-dl\dhcpsrvmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-directoryservices-adam-dl\adammigrate.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-dot3svc-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-fax-client-applications-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-fax-client-proenterprise-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-fax-common-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-fax-server-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-fax-service-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-htmlhelp-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iasserver-migplugin\iasmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iasserver-migplugin\iasmigreader.exe
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-icm-profiles-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ie-clientnetworkprotocolimplementation-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ie-clientnetworkprotocolimplementation\wininetplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ie-esc-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ie-feeds-platform-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ie-internetexplorer-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-asp-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-aspnet-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-basicauthentication-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-cgi-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-clientcertificatemappingauthentication-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-corewebengine-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-customlogging-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-defaultdocument-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-digestauthentication-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-directorybrowsing-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-dl\iismig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-ftpserver-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httpcompressiondynamic-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httpcompressionstatic-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httperrors-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httplogging-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httpredirect-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-httptracing-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-iiscertificatemappingauthentication-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-ipsecurity-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-isapiextensions-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-isapifilter-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-legacyscripts-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-legacysnapin-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-logginglibraries-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-managementconsole-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-managementscriptingtools-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-managementservice-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-metabase-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-netfxextensibility-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-odbclogging-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-requestfiltering-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-requestmonitor-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-serversideincludes-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-staticcontent-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-urlauthorization-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-windowsauthentication-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-iis-wmicompatibility-deployment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-international-core-dl\nlscoremig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-internet-naming-service-runtime\winsplgn.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-mail-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-mediaplayer-drm-dl\drmmgrtn.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-mediaplayer-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-msmq-messagingcoreservice\mqmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-ndis\ndismigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-netfx35-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-netfx35cdfcomp-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-netfxcorecomp-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-networkbridge-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-networkbridge\bridgemigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-networkloadbalancing-core\nlbmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-offlinefiles-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-offlinefiles-dl\cscmigdl.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-performancecounterinfrastructure-dl\cntrtextmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-performancecounterinfrastructureconsumer-dl\plamig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-rasconnectionmanager\cmmigr.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-rasserver-migplugin\rasmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-sharedaccess-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-shmig-dl\shmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-smbhashgeneration-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-storagemigration-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-storagemigration\en-us\stormigplugin.dll.mui
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-storagemigration\stormigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-sxs-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-sxs\sxsmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-tapisetup-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-tapisetup\tapimigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-terminalservices-clientactivexcore-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-terminalservices-licenseserver\tlsmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\imjpmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\imkrmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\imscmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\imtcmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\msctfmig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-textservicesframework-migration-dl\tabletextservicemig.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-unimodem-config\modemmigplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-wab-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-was-configurationapi-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-was-netfxenvironment-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-was-processmodel-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-wcfcorecomp-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-winsock-core-infrastructure-upgrade\wsupgrade.dll
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-wlansvc-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft-windows-wmi-core\wmimigrationplugin.dll
c:\apps\osmedia\sources\dlmanifests\microsoft.windows.com.base-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft.windows.com.complus.setup.dl.man
c:\apps\osmedia\sources\dlmanifests\microsoft.windows.com.dtc.setup-dl.man
c:\apps\osmedia\sources\dlmanifests\microsoftwindowssystemrestore-main-dl.man
c:\apps\osmedia\sources\dlmanifests\migrationdisplaygroups-dl.man
c:\apps\osmedia\sources\dlmanifests\mpr-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-dcom-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-domain-ic-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-http-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-messagingcoreservice-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-multicast-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-routing-dl.man
c:\apps\osmedia\sources\dlmanifests\msmq-triggers-dl.man
c:\apps\osmedia\sources\dlmanifests\muisettings-dl.man
c:\apps\osmedia\sources\dlmanifests\mup-dl.man
c:\apps\osmedia\sources\dlmanifests\ndis-dl.man
c:\apps\osmedia\sources\dlmanifests\netfx3-dl.man
c:\apps\osmedia\sources\dlmanifests\netlogon-dl.man
c:\apps\osmedia\sources\dlmanifests\networkaccessprotection-agent-dl.man
c:\apps\osmedia\sources\dlmanifests\networking-mpssvc-svc-dl.man
c:\apps\osmedia\sources\dlmanifests\networking-mpssvc-svc\icfupgd.dll
c:\apps\osmedia\sources\dlmanifests\networkloadbalancingfullserver-dl.man
c:\apps\osmedia\sources\dlmanifests\nfs-admincore-dl.man
c:\apps\osmedia\sources\dlmanifests\nfs-clientcore-dl.man
c:\apps\osmedia\sources\dlmanifests\nfs-servercore-dl.man
c:\apps\osmedia\sources\dlmanifests\ntfs-dl.man
c:\apps\osmedia\sources\dlmanifests\ntoskrnl-dl.man
c:\apps\osmedia\sources\dlmanifests\odbc32dll-dl.man
c:\apps\osmedia\sources\dlmanifests\openportmapper-dl.man
c:\apps\osmedia\sources\dlmanifests\openrpc-dl.man
c:\apps\osmedia\sources\dlmanifests\partmgr-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeeradmin-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeerbase-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeergraphing-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeergrouping-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeeridmanager-dl.man
c:\apps\osmedia\sources\dlmanifests\peertopeerpnrp-dl.man
c:\apps\osmedia\sources\dlmanifests\performancecounterinfrastructure-dl.man
c:\apps\osmedia\sources\dlmanifests\performancecounterinfrastructureconsumer-dl.man
c:\apps\osmedia\sources\dlmanifests\printing-spooler-core-dl.man
c:\apps\osmedia\sources\dlmanifests\printing-spooler-networkclient-dl.man
c:\apps\osmedia\sources\dlmanifests\propsys-dl.man
c:\apps\osmedia\sources\dlmanifests\pstore_data-dl.man
c:\apps\osmedia\sources\dlmanifests\psync-dl.man
c:\apps\osmedia\sources\dlmanifests\rasapi-dl.man
c:\apps\osmedia\sources\dlmanifests\rascmak-dl.man
c:\apps\osmedia\sources\dlmanifests\rasconnectionmanager-dl.man
c:\apps\osmedia\sources\dlmanifests\rasmanservice-dl.man
c:\apps\osmedia\sources\dlmanifests\rasservermigplugin-dl.man
c:\apps\osmedia\sources\dlmanifests\rasserveroc-dl.man
c:\apps\osmedia\sources\dlmanifests\remoteassistance-dl.man
c:\apps\osmedia\sources\dlmanifests\rights-management-client-v1-api-dl.man
c:\apps\osmedia\sources\dlmanifests\rights-management-services-server-dl.man
c:\apps\osmedia\sources\dlmanifests\rpc-http-dl.man
c:\apps\osmedia\sources\dlmanifests\rpc-http_proxy-dl.man
c:\apps\osmedia\sources\dlmanifests\rpc-local-dl.man
c:\apps\osmedia\sources\dlmanifests\rpc-remote-dl.man
c:\apps\osmedia\sources\dlmanifests\sanmmc-dl.man
c:\apps\osmedia\sources\dlmanifests\schannel-dl.man
c:\apps\osmedia\sources\dlmanifests\schedsvc-dl.man
c:\apps\osmedia\sources\dlmanifests\security-digest-dl.man
c:\apps\osmedia\sources\dlmanifests\security-kerberos-dl.man
c:\apps\osmedia\sources\dlmanifests\security-ntlm-dl.man
c:\apps\osmedia\sources\dlmanifests\security-ntlm-lmc.man
c:\apps\osmedia\sources\dlmanifests\shell32-dl.man
c:\apps\osmedia\sources\dlmanifests\shmig-dl.man
c:\apps\osmedia\sources\dlmanifests\shutdown-event-tracker-dl.man
c:\apps\osmedia\sources\dlmanifests\simpletcp-dl.man
c:\apps\osmedia\sources\dlmanifests\smartcardsubsystem-dl.man
c:\apps\osmedia\sources\dlmanifests\smbserver-dl.man
c:\apps\osmedia\sources\dlmanifests\smss-dl.man
c:\apps\osmedia\sources\dlmanifests\smtpsvc-admin-dl.man
c:\apps\osmedia\sources\dlmanifests\smtpsvc-service-dl.man
c:\apps\osmedia\sources\dlmanifests\snis-dl.man
c:\apps\osmedia\sources\dlmanifests\snmp-dl.man
c:\apps\osmedia\sources\dlmanifests\speechcommon-dl.man
c:\apps\osmedia\sources\dlmanifests\srm-dl.man
c:\apps\osmedia\sources\dlmanifests\sua-dl.man
c:\apps\osmedia\sources\dlmanifests\tabletpc-tabbtn-dl.man
c:\apps\osmedia\sources\dlmanifests\tabletpcinputpanel-dl.man
c:\apps\osmedia\sources\dlmanifests\tabletpcjournal-dl.man
c:\apps\osmedia\sources\dlmanifests\tabletpcplatforminput-core-dl.man
c:\apps\osmedia\sources\dlmanifests\tcpip-dl.man
c:\apps\osmedia\sources\dlmanifests\telnet-client-dl.man
c:\apps\osmedia\sources\dlmanifests\telnet-server-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-appserver-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-appserver-licensing-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-drivers-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-licenseserver-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-localsessionmanager-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-rdp-winstationextensions-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-remoteconnectionmanager-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-sessiondirectory-client-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-sessiondirectory-server-dl.man
c:\apps\osmedia\sources\dlmanifests\terminalservices-terminalservicesclient-dl.man
c:\apps\osmedia\sources\dlmanifests\textservicesframework-migration-dl.man
c:\apps\osmedia\sources\dlmanifests\themeui-dl.man
c:\apps\osmedia\sources\dlmanifests\time-service-dl.man
c:\apps\osmedia\sources\dlmanifests\unimodem-config-dl.man
c:\apps\osmedia\sources\dlmanifests\upnpcontrolpoint-dl.man
c:\apps\osmedia\sources\dlmanifests\upnpdevicehost-dl.man
c:\apps\osmedia\sources\dlmanifests\upnpssdp-dl.man
c:\apps\osmedia\sources\dlmanifests\video-tvvideocontrol-dl.man
c:\apps\osmedia\sources\dlmanifests\virtualdiskservice-dl.man
c:\apps\osmedia\sources\dlmanifests\vss-dl.man
c:\apps\osmedia\sources\dlmanifests\vsssystemprovider-dl.man
c:\apps\osmedia\sources\dlmanifests\wcf-http-activation-dl.man
c:\apps\osmedia\sources\dlmanifests\wcf-http-activation-postapply-dl.man
c:\apps\osmedia\sources\dlmanifests\wcf-nonhttp-activation-dl.man
c:\apps\osmedia\sources\dlmanifests\wds-dl.man
c:\apps\osmedia\sources\dlmanifests\web-services-for-management-core-dl.man
c:\apps\osmedia\sources\dlmanifests\webdavredir-dl.man
c:\apps\osmedia\sources\dlmanifests\webdavredir-mrxdav-dl.man
c:\apps\osmedia\sources\dlmanifests\webenroll-dl.man
c:\apps\osmedia\sources\dlmanifests\win32k-settings-dl.man
c:\apps\osmedia\sources\dlmanifests\windowssearchengine-dl.man
c:\apps\osmedia\sources\dlmanifests\winhttp60-dl.man
c:\apps\osmedia\sources\dlmanifests\winlogon-dl.man
c:\apps\osmedia\sources\dlmanifests\wirelessnetworking-dl.man
c:\apps\osmedia\sources\dlmanifests\wmi-core-dl.man
c:\apps\osmedia\sources\dlmanifests\wmi-snmp-provider-dl.man
c:\apps\osmedia\sources\dlmanifests\workstationservice-dl.man
c:\apps\osmedia\sources\dlmanifests\wsinfra-upgrade-dl.man
c:\apps\osmedia\sources\dlmanifests\wsrm-service-dl.man
c:\apps\osmedia\sources\dpx.dll
c:\apps\osmedia\sources\drupdate.dll
c:\apps\osmedia\sources\drvmain.sdb
c:\apps\osmedia\sources\drvmgrtn.dll
c:\apps\osmedia\sources\drvstore.dll
c:\apps\osmedia\sources\du.dll
c:\apps\osmedia\sources\ei.cfg
c:\apps\osmedia\sources\embeddedutil.dll
c:\apps\osmedia\sources\en-us\actionqueue.dll.mui
c:\apps\osmedia\sources\en-us\apds.dll.mui
c:\apps\osmedia\sources\en-us\apircl.dll.mui
c:\apps\osmedia\sources\en-us\apss.dll.mui
c:\apps\osmedia\sources\en-us\arunres.dll.mui
c:\apps\osmedia\sources\en-us\cbsmsg.dll.mui
c:\apps\osmedia\sources\en-us\cmisetup.dll.mui
c:\apps\osmedia\sources\en-us\compatprovider.dll.mui
c:\apps\osmedia\sources\en-us\compres.dll.mui
c:\apps\osmedia\sources\en-us\dism.exe.mui
c:\apps\osmedia\sources\en-us\dismcore.dll.mui
c:\apps\osmedia\sources\en-us\dismhost.exe.mui
c:\apps\osmedia\sources\en-us\dismprov.dll.mui
c:\apps\osmedia\sources\en-us\du_help_what_info_sent_to_ms.rtf
c:\apps\osmedia\sources\en-us\du_help_why_get_updates.rtf
c:\apps\osmedia\sources\en-us\embeddedutil.dll.mui
c:\apps\osmedia\sources\en-us\erofflps.txt
c:\apps\osmedia\sources\en-us\folderprovider.dll.mui
c:\apps\osmedia\sources\en-us\help_what_is_activation.rtf
c:\apps\osmedia\sources\en-us\input.dll.mui
c:\apps\osmedia\sources\en-us\logprovider.dll.mui
c:\apps\osmedia\sources\en-us\mofd.dll.mui
c:\apps\osmedia\sources\en-us\msxml6r.dll.mui
c:\apps\osmedia\sources\en-us\nlsbres.dll.mui
c:\apps\osmedia\sources\en-us\oobe_help_opt_in_details.rtf
c:\apps\osmedia\sources\en-us\pnpibs.dll.mui
c:\apps\osmedia\sources\en-us\privacy.rtf
c:\apps\osmedia\sources\en-us\readme.rtf
c:\apps\osmedia\sources\en-us\rollback.exe.mui
c:\apps\osmedia\sources\en-us\setup.exe.mui
c:\apps\osmedia\sources\en-us\setup_help_upgrade_or_custom.rtf
c:\apps\osmedia\sources\en-us\smiengine.dll.mui
c:\apps\osmedia\sources\en-us\sperr32.exe.mui
c:\apps\osmedia\sources\en-us\spwizres.dll.mui
c:\apps\osmedia\sources\en-us\upgdriver.dll.mui
c:\apps\osmedia\sources\en-us\upgloader.dll.mui
c:\apps\osmedia\sources\en-us\upgreport.dll.mui
c:\apps\osmedia\sources\en-us\upgres.dll.mui
c:\apps\osmedia\sources\en-us\uxlibres.dll.mui
c:\apps\osmedia\sources\en-us\vofflps.rtf
c:\apps\osmedia\sources\en-us\w32uires.dll.mui
c:\apps\osmedia\sources\en-us\wbemcore.dll.mui
c:\apps\osmedia\sources\en-us\wdsclient.dll.mui
c:\apps\osmedia\sources\en-us\wdsimage.dll.mui
c:\apps\osmedia\sources\en-us\winsetup.dll.mui
c:\apps\osmedia\sources\en-us\wmiutils.dll.mui
c:\apps\osmedia\sources\envmig.xml
c:\apps\osmedia\sources\esscli.dll
c:\apps\osmedia\sources\etwproviders\actionqueueetw.dll
c:\apps\osmedia\sources\etwproviders\auditetw.dll
c:\apps\osmedia\sources\etwproviders\cmisetupetw.dll
c:\apps\osmedia\sources\etwproviders\en-us\actionqueueetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\auditetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\cmisetupetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\oobeldretw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\setupcletw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\setupetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\setupugcetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\sysprepetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\windeployetw.dll.mui
c:\apps\osmedia\sources\etwproviders\en-us\winsetupetw.dll.mui
c:\apps\osmedia\sources\etwproviders\etwproviderinstall.vbs
c:\apps\osmedia\sources\etwproviders\oobeldretw.dll
c:\apps\osmedia\sources\etwproviders\setupcletw.dll
c:\apps\osmedia\sources\etwproviders\setupetw.dll
c:\apps\osmedia\sources\etwproviders\setupugcetw.dll
c:\apps\osmedia\sources\etwproviders\sysprepetw.dll
c:\apps\osmedia\sources\etwproviders\windeployetw.dll
c:\apps\osmedia\sources\etwproviders\winsetupetw.dll
c:\apps\osmedia\sources\fastprox.dll
c:\apps\osmedia\sources\folderprovider.dll
c:\apps\osmedia\sources\fveupg.dll
c:\apps\osmedia\sources\globalinstallorder.xml
c:\apps\osmedia\sources\helpcins.dll
c:\apps\osmedia\sources\hwcompat.dll
c:\apps\osmedia\sources\hwcompat.txt
c:\apps\osmedia\sources\hwexclude.txt
c:\apps\osmedia\sources\hypervcomplcheck.dll
c:\apps\osmedia\sources\idwbinfo.txt
c:\apps\osmedia\sources\iiscomp.dll
c:\apps\osmedia\sources\inf\setup.cfg
c:\apps\osmedia\sources\input.dll
c:\apps\osmedia\sources\install.wim
c:\apps\osmedia\sources\install_Windows 7 HOMEBASIC.clg
c:\apps\osmedia\sources\install_Windows 7 HOMEPREMIUM.clg
c:\apps\osmedia\sources\install_Windows 7 PROFESSIONAL.clg
c:\apps\osmedia\sources\install_Windows 7 ULTIMATE.clg
c:\apps\osmedia\sources\lang.ini
c:\apps\osmedia\sources\license\_default\_default\enterprise\license.rtf
c:\apps\osmedia\sources\license\_default\_default\enterprisee\license.rtf
c:\apps\osmedia\sources\license\_default\_default\enterprisen\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homebasic\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homebasice\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homebasicn\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homepremium\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homepremiume\license.rtf
c:\apps\osmedia\sources\license\_default\_default\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\_default\_default\lipeula.rtf
c:\apps\osmedia\sources\license\_default\_default\lpeula.rtf
c:\apps\osmedia\sources\license\_default\_default\professional\license.rtf
c:\apps\osmedia\sources\license\_default\_default\professionale\license.rtf
c:\apps\osmedia\sources\license\_default\_default\professionaln\license.rtf
c:\apps\osmedia\sources\license\_default\_default\starter\license.rtf
c:\apps\osmedia\sources\license\_default\_default\startere\license.rtf
c:\apps\osmedia\sources\license\_default\_default\startern\license.rtf
c:\apps\osmedia\sources\license\_default\_default\ultimate\license.rtf
c:\apps\osmedia\sources\license\_default\_default\ultimatee\license.rtf
c:\apps\osmedia\sources\license\_default\_default\ultimaten\license.rtf
c:\apps\osmedia\sources\license\_default\eval\enterprise\license.rtf
c:\apps\osmedia\sources\license\_default\eval\enterprisee\license.rtf
c:\apps\osmedia\sources\license\_default\eval\enterprisen\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homebasic\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homebasice\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homebasicn\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homepremium\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homepremiume\license.rtf
c:\apps\osmedia\sources\license\_default\eval\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\_default\eval\professional\license.rtf
c:\apps\osmedia\sources\license\_default\eval\professionale\license.rtf
c:\apps\osmedia\sources\license\_default\eval\professionaln\license.rtf
c:\apps\osmedia\sources\license\_default\eval\starter\license.rtf
c:\apps\osmedia\sources\license\_default\eval\startere\license.rtf
c:\apps\osmedia\sources\license\_default\eval\startern\license.rtf
c:\apps\osmedia\sources\license\_default\eval\ultimate\license.rtf
c:\apps\osmedia\sources\license\_default\eval\ultimatee\license.rtf
c:\apps\osmedia\sources\license\_default\eval\ultimaten\license.rtf
c:\apps\osmedia\sources\license\_default\oem\enterprise\license.rtf
c:\apps\osmedia\sources\license\_default\oem\enterprisee\license.rtf
c:\apps\osmedia\sources\license\_default\oem\enterprisen\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homebasic\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homebasice\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homebasicn\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homepremium\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homepremiume\license.rtf
c:\apps\osmedia\sources\license\_default\oem\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\_default\oem\professional\license.rtf
c:\apps\osmedia\sources\license\_default\oem\professionale\license.rtf
c:\apps\osmedia\sources\license\_default\oem\professionaln\license.rtf
c:\apps\osmedia\sources\license\_default\oem\starter\license.rtf
c:\apps\osmedia\sources\license\_default\oem\startere\license.rtf
c:\apps\osmedia\sources\license\_default\oem\startern\license.rtf
c:\apps\osmedia\sources\license\_default\oem\ultimate\license.rtf
c:\apps\osmedia\sources\license\_default\oem\ultimatee\license.rtf
c:\apps\osmedia\sources\license\_default\oem\ultimaten\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\enterprise\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\enterprisee\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\enterprisen\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homebasic\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homebasice\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homebasicn\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homepremium\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homepremiume\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\lipeula.rtf
c:\apps\osmedia\sources\license\en-us\_default\lpeula.rtf
c:\apps\osmedia\sources\license\en-us\_default\professional\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\professionale\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\professionaln\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\starter\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\startere\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\startern\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\ultimate\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\ultimatee\license.rtf
c:\apps\osmedia\sources\license\en-us\_default\ultimaten\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\enterprise\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\enterprisee\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\enterprisen\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homebasic\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homebasice\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homebasicn\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homepremium\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homepremiume\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\professional\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\professionale\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\professionaln\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\starter\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\startere\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\startern\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\ultimate\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\ultimatee\license.rtf
c:\apps\osmedia\sources\license\en-us\eval\ultimaten\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\enterprise\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\enterprisee\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\enterprisen\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homebasic\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homebasice\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homebasicn\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homepremium\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homepremiume\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\homepremiumn\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\professional\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\professionale\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\professionaln\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\starter\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\startere\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\startern\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\ultimate\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\ultimatee\license.rtf
c:\apps\osmedia\sources\license\en-us\oem\ultimaten\license.rtf
c:\apps\osmedia\sources\locale.nls
c:\apps\osmedia\sources\locdrv.dll
c:\apps\osmedia\sources\logprovider.dll
c:\apps\osmedia\sources\migisol.dll
c:\apps\osmedia\sources\migtestplugin.dll
c:\apps\osmedia\sources\mofd.dll
c:\apps\osmedia\sources\mofinstall.dll
c:\apps\osmedia\sources\msdelta.dll
c:\apps\osmedia\sources\msftedit.dll
c:\apps\osmedia\sources\mspatcha.dll
c:\apps\osmedia\sources\msxml6.dll
c:\apps\osmedia\sources\msxml6r.dll
c:\apps\osmedia\sources\ndiscompl.dll
c:\apps\osmedia\sources\nlsbres.dll
c:\apps\osmedia\sources\ntdsupg.dll
c:\apps\osmedia\sources\ntfrsupg.dll
c:\apps\osmedia\sources\oemhelpins.dll
c:\apps\osmedia\sources\offline.xml
c:\apps\osmedia\sources\oscomps.xml
c:\apps\osmedia\sources\osfilter.inf
c:\apps\osmedia\sources\pidgenx.dll
c:\apps\osmedia\sources\pkeyconfig.xrm-ms
c:\apps\osmedia\sources\pnpibs.dll
c:\apps\osmedia\sources\product.ini
c:\apps\osmedia\sources\readme.rtf
c:\apps\osmedia\sources\repdrvfs.dll
c:\apps\osmedia\sources\replacementmanifests\activedirectory-webservices-replacement.man
c:\apps\osmedia\sources\replacementmanifests\application-experience-program-compatibility-assistant-replacement.man
c:\apps\osmedia\sources\replacementmanifests\audiommecore-other-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\authui-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\bthmig-replacement.man
c:\apps\osmedia\sources\replacementmanifests\capi2_certs-repl.man
c:\apps\osmedia\sources\replacementmanifests\dhcpclientdll-repl.man
c:\apps\osmedia\sources\replacementmanifests\dhcpservermigplugin-rep.man
c:\apps\osmedia\sources\replacementmanifests\ehome-reg-inf_repl.man
c:\apps\osmedia\sources\replacementmanifests\eudcedit-replacement.man
c:\apps\osmedia\sources\replacementmanifests\extensibleauthenticationprotocolhostservice-rep.man
c:\apps\osmedia\sources\replacementmanifests\failovercluster-core-wow64-rm.man
c:\apps\osmedia\sources\replacementmanifests\fonts-type1-replacement.man
c:\apps\osmedia\sources\replacementmanifests\fundisc-replacement.man
c:\apps\osmedia\sources\replacementmanifests\gameuxmig-replacement.man
c:\apps\osmedia\sources\replacementmanifests\iis-ftpextensibility-rm.man
c:\apps\osmedia\sources\replacementmanifests\iis-ftpsvc-rm.man
c:\apps\osmedia\sources\replacementmanifests\iis-powershellprovider-rm.man
c:\apps\osmedia\sources\replacementmanifests\iis-sharedlibraries-rm.man
c:\apps\osmedia\sources\replacementmanifests\iis-webdav-rm.man
c:\apps\osmedia\sources\replacementmanifests\international-core-replacement.man
c:\apps\osmedia\sources\replacementmanifests\ipv4ipv6coexistencemigration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-activedirectory-webservices\adwsmigrate.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-hyper-v-client-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-hyper-v-drivers-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-hyper-v-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-hyper-v\vmswitchmigrationplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-international-core\nlscoremig.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-audio-mmecore-other\audmigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-bth-user\bthmigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-fax-service-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-gameuxmig\gameuxmig.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-ie-adminkitbranding-repl.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-iis-rm\iismig.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-ndis\ndismigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-netfx35cdfcomp-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-netfxcorecomp-repl.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-offlinefiles-core\cscmig.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-offlinefiles-core\en-us\cscmig.dll.mui
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-offlinefiles-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-power-policy\powermigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-powershell-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-securestartup-filterdriver-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-shmig\shmig.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-terminalservices-appserver-licensing\tsmigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-terminalservices-licenseserver\tlsrepplugin.dll
c:\apps\osmedia\sources\replacementmanifests\microsoft-windows-wcfcorecomp-replacement.man
c:\apps\osmedia\sources\replacementmanifests\microsoft.windows.servermanager-non_msil-replacement.man
c:\apps\osmedia\sources\replacementmanifests\mmsys-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\ndis-repl.man
c:\apps\osmedia\sources\replacementmanifests\nfs-admincore-repl.man
c:\apps\osmedia\sources\replacementmanifests\nfs-clientcore-repl.man
c:\apps\osmedia\sources\replacementmanifests\nfs-servercore-repl.man
c:\apps\osmedia\sources\replacementmanifests\powermanagement-powerpolicy-definitions-replacement.man
c:\apps\osmedia\sources\replacementmanifests\powermanagement-powerpolicy-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\printing-localprinting-replacement.man
c:\apps\osmedia\sources\replacementmanifests\printing-servercore-wow64-rm.man
c:\apps\osmedia\sources\replacementmanifests\propsys-replacement.man
c:\apps\osmedia\sources\replacementmanifests\provsvc-replacement.man
c:\apps\osmedia\sources\replacementmanifests\rasapi-repl.man
c:\apps\osmedia\sources\replacementmanifests\rasmanservice-repl.man
c:\apps\osmedia\sources\replacementmanifests\rasppp-repl.man
c:\apps\osmedia\sources\replacementmanifests\rights-management-client-v1-api-replacement.man
c:\apps\osmedia\sources\replacementmanifests\servercore-ea-ime-wow64-rm.man
c:\apps\osmedia\sources\replacementmanifests\servercore-wow64-rm.man
c:\apps\osmedia\sources\replacementmanifests\shmig-replacement.man
c:\apps\osmedia\sources\replacementmanifests\sounds-migration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\srm-datascrndriver-repl.man
c:\apps\osmedia\sources\replacementmanifests\srm-quotadriver-repl.man
c:\apps\osmedia\sources\replacementmanifests\srm-service-repl.man
c:\apps\osmedia\sources\replacementmanifests\srm-service-reports-repl.man
c:\apps\osmedia\sources\replacementmanifests\srm-ui-repl.man
c:\apps\osmedia\sources\replacementmanifests\stickynotes-replacement.man
c:\apps\osmedia\sources\replacementmanifests\suacore-wow64-rm.man
c:\apps\osmedia\sources\replacementmanifests\sysdm-replacement.man
c:\apps\osmedia\sources\replacementmanifests\sysmain-replacement.man
c:\apps\osmedia\sources\replacementmanifests\tabletpc-uihub-replacement.man
c:\apps\osmedia\sources\replacementmanifests\tabletpcplatforminput-core-replacement.man
c:\apps\osmedia\sources\replacementmanifests\tabletpcstickynotes-replacement.man
c:\apps\osmedia\sources\replacementmanifests\tcpip-replacement.man
c:\apps\osmedia\sources\replacementmanifests\terminalservices-appserver-licensing-replacement.man
c:\apps\osmedia\sources\replacementmanifests\terminalservices-licenseserver-replacement.man
c:\apps\osmedia\sources\replacementmanifests\terminalservices-manager-snapin-replacement.man
c:\apps\osmedia\sources\replacementmanifests\terminalservices-rapwebpart-replacement.man
c:\apps\osmedia\sources\replacementmanifests\terminalservices-sbmgr-snapin-non_msil-replacement.man
c:\apps\osmedia\sources\replacementmanifests\usb\usbmigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\usbmigplugin-replacement.man
c:\apps\osmedia\sources\replacementmanifests\virtualdiskservice-repl.man
c:\apps\osmedia\sources\replacementmanifests\vssservice-repl.man
c:\apps\osmedia\sources\replacementmanifests\vsssystemprovider-replacement.man
c:\apps\osmedia\sources\replacementmanifests\wcf-http-activation-replacement.man
c:\apps\osmedia\sources\replacementmanifests\wcf-nonhttp-activation-replacement.man
c:\apps\osmedia\sources\replacementmanifests\windows-markettheme-mctadmin-component-replacement.man
c:\apps\osmedia\sources\replacementmanifests\windowssearchengine-replacement.man
c:\apps\osmedia\sources\replacementmanifests\windowssearchengine\wsearchmigplugin.dll
c:\apps\osmedia\sources\replacementmanifests\wmdmigration-replacement.man
c:\apps\osmedia\sources\replacementmanifests\wmi-core-replacement.man
c:\apps\osmedia\sources\replacementmanifests\wsrm-service-replacement.man
c:\apps\osmedia\sources\rmsupg.dll
c:\apps\osmedia\sources\rollback.exe
c:\apps\osmedia\sources\schema.dat
c:\apps\osmedia\sources\sdbapiu.dll
c:\apps\osmedia\sources\segoeui.ttf
c:\apps\osmedia\sources\servicing\0.0.0.1\xmllite.dll
c:\apps\osmedia\sources\servicingstackmisc\apds.dll
c:\apps\osmedia\sources\servicingstackmisc\apircl.dll
c:\apps\osmedia\sources\servicingstackmisc\apss.dll
c:\apps\osmedia\sources\setup.exe
c:\apps\osmedia\sources\sfcn.dat
c:\apps\osmedia\sources\sflcid.dat
c:\apps\osmedia\sources\sflistlh.dat
c:\apps\osmedia\sources\sflistw7.dat
c:\apps\osmedia\sources\sflistxp.dat
c:\apps\osmedia\sources\sfpat.inf
c:\apps\osmedia\sources\sfpatlh.inf
c:\apps\osmedia\sources\sfpatpg.inf
c:\apps\osmedia\sources\sfpatw7.inf
c:\apps\osmedia\sources\sfpatxp.inf
c:\apps\osmedia\sources\smiengine.dll
c:\apps\osmedia\sources\smipi.dll
c:\apps\osmedia\sources\sperr32.exe
c:\apps\osmedia\sources\spflvrnt.dll
c:\apps\osmedia\sources\spprgrss.dll
c:\apps\osmedia\sources\spwizeng.dll
c:\apps\osmedia\sources\spwizimg.dll
c:\apps\osmedia\sources\spwizres.dll
c:\apps\osmedia\sources\sqmapi.dll
c:\apps\osmedia\sources\ssshim.dll
c:\apps\osmedia\sources\sysmain.sdb
c:\apps\osmedia\sources\sysmain32.sdb
c:\apps\osmedia\sources\uddicomp.dll
c:\apps\osmedia\sources\unattend.dll
c:\apps\osmedia\sources\unbcl.dll
c:\apps\osmedia\sources\upgcmi2migxml.dll
c:\apps\osmedia\sources\upgcompat.inf
c:\apps\osmedia\sources\upgcore.dll
c:\apps\osmedia\sources\upgcsiagent.dll
c:\apps\osmedia\sources\upgdriver.dll
c:\apps\osmedia\sources\upghost.exe
c:\apps\osmedia\sources\upgloader.dll
c:\apps\osmedia\sources\upgmxeagent.dll
c:\apps\osmedia\sources\upgrade_bulk.xml
c:\apps\osmedia\sources\upgradeagent.dll
c:\apps\osmedia\sources\upgradeagent.xml
c:\apps\osmedia\sources\upgreport.dll
c:\apps\osmedia\sources\upgres.dll
c:\apps\osmedia\sources\upgwow_bulk.xml
c:\apps\osmedia\sources\uxlib.dll
c:\apps\osmedia\sources\uxlibres.dll
c:\apps\osmedia\sources\vofflps.rtf
c:\apps\osmedia\sources\w32uiimg.dll
c:\apps\osmedia\sources\w32uires.dll
c:\apps\osmedia\sources\warning.gif
c:\apps\osmedia\sources\wbemcomn.dll
c:\apps\osmedia\sources\wbemcore.dll
c:\apps\osmedia\sources\wbemprox.dll
c:\apps\osmedia\sources\wcmtypes.xsd
c:\apps\osmedia\sources\wcp.dll
c:\apps\osmedia\sources\wdsclient.dll
c:\apps\osmedia\sources\wdsclientapi.dll
c:\apps\osmedia\sources\wdscore.dll
c:\apps\osmedia\sources\wdscsl.dll
c:\apps\osmedia\sources\wdsimage.dll
c:\apps\osmedia\sources\wdstptc.dll
c:\apps\osmedia\sources\wdsupgcompl.dll
c:\apps\osmedia\sources\wdsutil.dll
c:\apps\osmedia\sources\win32ui.dll
c:\apps\osmedia\sources\winsetup.dll
c:\apps\osmedia\sources\wmi_tracing.mof
c:\apps\osmedia\sources\wmicmiplugin.dll
c:\apps\osmedia\sources\wmiutils.dll
c:\apps\osmedia\sources\xmllite.dll
c:\apps\osmedia\support\logging\actionqueueetw.dll
c:\apps\osmedia\support\logging\auditetw.dll
c:\apps\osmedia\support\logging\cmisetupetw.dll
c:\apps\osmedia\support\logging\en-us\actionqueueetw.dll.mui
c:\apps\osmedia\support\logging\en-us\auditetw.dll.mui
c:\apps\osmedia\support\logging\en-us\cmisetupetw.dll.mui
c:\apps\osmedia\support\logging\en-us\oobeldretw.dll.mui
c:\apps\osmedia\support\logging\en-us\setupcletw.dll.mui
c:\apps\osmedia\support\logging\en-us\setupetw.dll.mui
c:\apps\osmedia\support\logging\en-us\setupugcetw.dll.mui
c:\apps\osmedia\support\logging\en-us\sysprepetw.dll.mui
c:\apps\osmedia\support\logging\en-us\windeployetw.dll.mui
c:\apps\osmedia\support\logging\en-us\winsetupetw.dll.mui
c:\apps\osmedia\support\logging\etwproviderinstall.vbs
c:\apps\osmedia\support\logging\microsoft-windows-actionqueue-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-audit-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-cmisetup-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-oobeldr-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-setup-events.man
c:\apps\osmedia\support\logging\microsoft-windows-setup-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-setupcl-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-setupugc-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-sysprep-instrumentation.man
c:\apps\osmedia\support\logging\microsoft-windows-windeploy-instrumentation.man
c:\apps\osmedia\support\logging\oobeldretw.dll
c:\apps\osmedia\support\logging\setupcletw.dll
c:\apps\osmedia\support\logging\setupetw.dll
c:\apps\osmedia\support\logging\setupugcetw.dll
c:\apps\osmedia\support\logging\sysprepetw.dll
c:\apps\osmedia\support\logging\windeployetw.dll
c:\apps\osmedia\support\logging\winsetupetw.dll
c:\apps\osmedia\support\migwiz\cable\cableinst.exe
c:\apps\osmedia\support\migwiz\cmi2migxml.dll
c:\apps\osmedia\support\migwiz\csiagent.dll
c:\apps\osmedia\support\migwiz\en-us\input.dll.mui
c:\apps\osmedia\support\migwiz\en-us\migautoplay.exe.mui
c:\apps\osmedia\support\migwiz\en-us\migres.dll.mui
c:\apps\osmedia\support\migwiz\en-us\migsetup.exe.mui
c:\apps\osmedia\support\migwiz\en-us\migwiz.exe.mui
c:\apps\osmedia\support\migwiz\en-us\postmig.exe.mui
c:\apps\osmedia\support\migwiz\en-us\svrmig.dll.mui
c:\apps\osmedia\support\migwiz\en-us\wet.dll.mui
c:\apps\osmedia\support\migwiz\imjpmig.dll
c:\apps\osmedia\support\migwiz\imkrmig.dll
c:\apps\osmedia\support\migwiz\imscmig.dll
c:\apps\osmedia\support\migwiz\imtcmig.dll
c:\apps\osmedia\support\migwiz\input.dll
c:\apps\osmedia\support\migwiz\installsvrmig.cmd
c:\apps\osmedia\support\migwiz\migapp.xml
c:\apps\osmedia\support\migwiz\migautoplay.exe
c:\apps\osmedia\support\migwiz\migcore.dll
c:\apps\osmedia\support\migwiz\migfiles.dat
c:\apps\osmedia\support\migwiz\mighost.exe
c:\apps\osmedia\support\migwiz\migisol.dll
c:\apps\osmedia\support\migwiz\migres.dll
c:\apps\osmedia\support\migwiz\migsetup.exe
c:\apps\osmedia\support\migwiz\migstore.dll
c:\apps\osmedia\support\migwiz\migsys.dll
c:\apps\osmedia\support\migwiz\migwiz.exe
c:\apps\osmedia\support\migwiz\msctfmig.dll
c:\apps\osmedia\support\migwiz\mxeagent.dll
c:\apps\osmedia\support\migwiz\postmig.exe
c:\apps\osmedia\support\migwiz\postmigres\data\hardwarevendors.xml
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\appinstalled.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\clickdownexpanded.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\clickdownnormal.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\column.bmp
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\documents.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\failure.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\programs.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\system.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\users.gif
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\windowsmail.bmp
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\windowsmoviemaker.bmp
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\windowsoutlookexpress.bmp
c:\apps\osmedia\support\migwiz\postmigres\web\base_images\windowsphotogallery.bmp
c:\apps\osmedia\support\migwiz\postmigres\web\reportapi.js
c:\apps\osmedia\support\migwiz\segoeui.ttf
c:\apps\osmedia\support\migwiz\sfcn.dat
c:\apps\osmedia\support\migwiz\sflcid.dat
c:\apps\osmedia\support\migwiz\sflistlh.dat
c:\apps\osmedia\support\migwiz\sflistw7.dat
c:\apps\osmedia\support\migwiz\sflistxp.dat
c:\apps\osmedia\support\migwiz\sfpat.inf
c:\apps\osmedia\support\migwiz\sfpatlh.inf
c:\apps\osmedia\support\migwiz\sfpatpg.inf
c:\apps\osmedia\support\migwiz\sfpatw7.inf
c:\apps\osmedia\support\migwiz\sfpatxp.inf
c:\apps\osmedia\support\migwiz\svrmig.dll
c:\apps\osmedia\support\migwiz\svrmigtest.dll
c:\apps\osmedia\support\migwiz\tabletextservicemig.dll
c:\apps\osmedia\support\migwiz\unbcl.dll
c:\apps\osmedia\support\migwiz\wdscore.dll
c:\apps\osmedia\support\migwiz\wet.dll
c:\apps\osmedia\support\tools\gbunicnv.exe
c:\apps\osmedia\upgrade\netfx\netfx.msi
c:\apps\osmedia\upgrade\netfx\netfx.msp
c:\apps\osmedia\upgrade\netfx\netfx1.cab
c:\apps\osmedia\upgrade\netfx\netfxupdate.exe
C:\install.exe
c:\users\Default\AppData\Roaming\Checker.tmp
c:\users\pkohn\AppData\Roaming\Checker.tmp
c:\windows\SysWow64\comct332.ocx
c:\windows\SysWow64\instsrv.exe
c:\windows\SysWow64\lsprst7.dll
c:\windows\SysWow64\ssprs.dll
.
Infected copy of c:\windows\SysWow64\Drivers\atapi.sys was found and disinfected
Restored copy from - c:\windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
.
.
((((((((((((((((((((((((( Files Created from 2011-08-24 to 2011-09-24 )))))))))))))))))))))))))))))))
.
.
2011-09-24 16:37 . 2011-09-24 16:37 -------- d-----w- c:\users\user\AppData\Local\temp
2011-09-24 16:37 . 2011-09-24 16:37 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2011-09-24 16:37 . 2011-09-24 16:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-24 16:37 . 2011-09-24 16:37 -------- d-----w- c:\users\administrator\AppData\Local\temp
2011-09-24 16:29 . 2009-07-14 01:52 24128 ----a-w- c:\windows\SysWow64\drivers\atapi.sys
2011-09-24 02:44 . 2011-09-24 16:53 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{27790B3A-3047-4A56-AD4B-490D6864AE5F}\offreg.dll
2011-09-23 14:15 . 2011-09-13 00:26 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{27790B3A-3047-4A56-AD4B-490D6864AE5F}\mpengine.dll
2011-09-23 12:00 . 2011-09-23 12:00 -------- d-----w- c:\users\pkohn\AppData\Roaming\Juniper Networks
2011-09-20 16:36 . 2011-09-20 16:36 1409 ----a-w- c:\windows\SysWow64\tmpFC31C.FOT
2011-09-14 00:31 . 2011-09-14 00:31 1409 ----a-w- c:\windows\SysWow64\tmp845C9.FOT
2011-09-09 04:31 . 2011-09-09 04:31 -------- d-----w- c:\windows\FLV Player
2011-09-09 04:31 . 2011-09-09 04:31 -------- d-----w- c:\program files (x86)\FLV Player
2011-09-06 13:01 . 2011-09-06 13:02 -------- d-----w- c:\users\pkohn\AppData\Local\Google
2011-09-06 13:01 . 2011-09-06 13:02 -------- d-----w- c:\program files (x86)\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-24 14:58 . 2011-07-12 01:25 2828 --sha-w- c:\programdata\KGyGaAvL.sys
2011-08-20 22:14 . 2011-08-20 22:14 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-07-22 05:42 . 2011-08-12 07:25 2303488 ----a-w- c:\windows\system32\jscript9.dll
2011-07-22 05:36 . 2011-08-12 07:25 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-07-22 05:32 . 2011-08-12 07:25 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-07-22 02:54 . 2011-08-12 07:25 1797632 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-07-22 02:48 . 2011-08-12 07:25 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-07-22 02:44 . 2011-08-12 07:25 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-07-16 05:41 . 2011-08-11 03:05 362496 ----a-w- c:\windows\system32\wow64win.dll
2011-07-16 05:41 . 2011-08-11 03:05 243200 ----a-w- c:\windows\system32\wow64.dll
2011-07-16 05:41 . 2011-08-11 03:05 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2011-07-16 05:39 . 2011-08-11 03:05 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2011-07-16 05:37 . 2011-08-11 03:05 421888 ----a-w- c:\windows\system32\KernelBase.dll
2011-07-16 05:21 . 2011-08-11 03:05 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 05:21 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 04:29 . 2011-08-11 03:05 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2011-07-16 04:26 . 2011-08-11 03:05 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-07-16 04:25 . 2011-08-11 03:05 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2011-07-16 04:24 . 2011-08-11 03:05 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2011-07-16 04:24 . 2011-08-11 03:05 272384 ----a-w- c:\windows\SysWow64\KernelBase.dll
2011-07-16 04:15 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:15 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 03:05 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2011-07-16 02:21 . 2011-08-11 03:05 2048 ----a-w- c:\windows\SysWow64\user.exe
2011-07-16 02:17 . 2011-08-11 03:05 6144 ---ha-w- c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 03:05 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 03:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:17 . 2011-08-11 03:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-12 01:25 . 2011-07-12 01:25 8 --sh--r- c:\programdata\9655ECA4DB.sys
2011-07-11 12:07 . 2010-06-24 16:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-07-09 05:26 . 2011-08-24 01:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-07-09 04:29 . 2011-08-24 01:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-07-09 02:46 . 2011-08-11 03:05 288768 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-07-04 01:18 . 2011-07-04 01:18 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-07-04 01:18 . 2011-07-04 01:18 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-07-04 01:18 . 2011-07-04 01:18 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-07-04 01:18 . 2011-07-04 01:18 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-07-04 01:18 . 2011-07-04 01:18 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2011-07-04 01:18 . 2011-07-04 01:18 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2011-07-04 01:18 . 2011-07-04 01:18 46080 ----a-w- c:\windows\system32\atmlib.dll
2011-07-04 01:18 . 2011-07-04 01:18 367616 ----a-w- c:\windows\system32\atmfd.dll
2011-07-04 01:18 . 2011-07-04 01:18 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2011-07-04 01:18 . 2011-07-04 01:18 294912 ----a-w- c:\windows\SysWow64\atmfd.dll
2011-07-04 01:18 . 2011-07-04 01:18 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2011-07-04 01:18 . 2011-07-04 01:18 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-07-04 01:18 . 2011-07-04 01:18 1544192 ----a-w- c:\windows\system32\DWrite.dll
2011-07-04 01:18 . 2011-07-04 01:18 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-07-04 01:18 . 2011-07-04 01:18 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-07-04 01:18 . 2011-07-04 01:18 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-07-04 01:18 . 2011-07-04 01:18 1139200 ----a-w- c:\windows\system32\FntCache.dll
2011-07-04 01:18 . 2011-07-04 01:18 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-07-04 01:18 . 2011-07-04 01:18 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Acrobat Synchronizer"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe" [2011-09-05 1240992]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"TSTimer"="c:\program files (x86)\Timeslips Remote\TSTimer.exe" [2006-11-09 2429992]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IMSS"="c:\program files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-04-29 50472]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2011-09-05 36760]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2011-09-05 2904984]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"Panda Controller Client"="c:\program files (x86)\Panda Software\AVTC\PSCtrlC.exe" [2010-02-22 152832]
"QuickFinder Scheduler"="c:\program files (x86)\Corel\WordPerfect Office X4\Programs\QFSCHD140.EXE" [2009-06-22 83232]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Dell System Manager.lnk - c:\program files\Dell\Dell System Manager\DCPSysMgr.exe [2011-1-20 1552240]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-06 136176]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R3 DAmirr;DAmirr;c:\windows\system32\DRIVERS\DAmirr.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-06 136176]
R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys [x]
R3 O2MDFRDR;O2MDFRDR;c:\windows\system32\DRIVERS\O2MDFw7x64.sys [x]
R3 O2MDRRDR;O2MDRRDR;c:\windows\system32\drivers\O2MDRw7x64.sys [x]
R3 O2SDJRDR;O2SDJRDR;c:\windows\system32\DRIVERS\o2sdjw7x64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AmFSM;AmFSM;c:\windows\system32\DRIVERS\amm6460.sys [x]
S2 Credential Vault Host Control Service;Credential Vault Host Control Service;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [2010-10-28 1035680]
S2 Credential Vault Host Storage;Credential Vault Host Storage;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [2010-10-28 36768]
S2 dcpsysmgrsvc;Dell System Manager Service;c:\program files\Dell\Dell System Manager\DCPSysMgrSvc.exe [2011-01-20 517488]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]
S2 jhi_service;Intel® Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [2011-02-24 212944]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-06-05 1997416]
S2 O2SDIOAssist;O2SDIOAssist;c:\windows\SysWOW64\srvany.exe [2003-04-19 8192]
S2 PskSvc;Panda Kernel Service;c:\program files (x86)\Panda Software\AVTC\PskSvc.exe [2008-04-30 27440]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-06-05 378472]
S2 TSScheduleBackup;TimeslipsBackup;c:\windows\SysWOW64\TSSchBkpService.exe [2006-11-09 705024]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-01-17 2656280]
S2 Windows Agent Maintenance Service;Windows Agent Maintenance Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe [2011-06-27 28672]
S2 Windows Agent Service;Windows Agent Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\agent.exe [2011-06-27 200704]
S2 ZcfgSvc7;Intel® PROSet/Wireless ZeroConfig Service;c:\program files\Intel\WiFi\bin\ZCfgSvc7.exe [2010-12-23 992256]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]
S3 cvusbdrv;Dell ControlVault;c:\windows\system32\Drivers\cvusbdrv.sys [x]
S3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c62x64.sys [x]
S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-06 13:01]
.
2011-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-06 13:01]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}"
[HKEY_CLASSES_ROOT\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}]
2011-03-04 21:12 139128 ----a-w- c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{CF08DA3E-C97D-4891-A66B-E39B28DD270F}"
[HKEY_CLASSES_ROOT\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}]
2011-03-04 21:12 139128 ----a-w- c:\program files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-05 608112]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-01-25 525312]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-30 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-30 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-30 418328]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"IntelPROSet"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-23 1934608]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-06-05 312936]
"combofix"="c:\combofix\CF29638.3XE" [2010-11-21 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Open with WordPerfect - c:\program files (x86)\Corel\WordPerfect Office X4\Programs\WPLauncher.hta
IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
LSP: c:\program files (x86)\Panda Software\AVTC\pavlsp.dll
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Panda Software\AVTC\PavSrvX86.exe
c:\program files (x86)\Panda Software\AVTC\AVENGINE.EXE
c:\windows\system32\DRIVERS\o2flash.exe
c:\windows\sysWOW64\SDIOAssist.exe
c:\program files (x86)\Panda Software\AVTC\PsCtrlS.exe
c:\program files (x86)\Panda Software\AVTC\PsImSvc.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\Panda Software\AVTC\WebProxy.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2011-09-24 12:59:17 - machine was rebooted
ComboFix-quarantined-files.txt 2011-09-24 16:59
.
Pre-Run: 204,027,543,552 bytes free
Post-Run: 203,177,566,208 bytes free
.
- - End Of File - - 9400E8FBA1DB054B1E0F67010ECC635D

Edited by petekohn, 25 September 2011 - 08:22 AM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,921 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:12:12 PM

Posted 30 September 2011 - 08:20 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

Unless some of your application as not running correctly I see nothing wrong with the folders/files that were deleted.

ComboFix replace the infected atapi.sys.

What are the remaining issues with this computer?
===

Third party programs if not up to date can be the cause infiltration of an infection.

Please run this security check for my review.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===

#3 nasdaq

nasdaq

  • Malware Response Team
  • 39,921 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:12:12 PM

Posted 05 October 2011 - 09:39 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users