dl . exe problem(RESOLVED)

  1. 08-05-2007  #11
    biggrim
    biggrim is offline Newbie

    Re: dl . exe problem

    Ok, update for you guys.

    I've run the above removal tool both in standard mode and safe mode and it has found nothing whatsoever.

    I've got the windows disc in my hand and I'm seriously considering a re-format.

    Is there anything elst I can try to get rid of this problem?

    Thank you so much for your help so far, I appreciate it.

    Graeme
  2. 08-05-2007  #12
    Neal
    Neal is offline Dedicated Member
    Let me see a new combofix log please and we will try deleteing files manually.

    Also see if you can run this scan below...

    Download Dr.Web CureIt to the desktop:
    ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

    * Doubleclick the drweb-cureit.exe file and Allow to run the express scan
    * This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
    * Once the short scan has finished, mark the drives that you want to scan.
    * Select all drives. A red dot shows which drives have been chosen.
    * Click the green arrow at the right, and the scan will start.
    * Click 'Yes to all' if it asks if you want to cure/move the file.
    * When the scan has finished, look if you can click next icon next to the files found:

    * If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:


    This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
    * After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
    * Save the report to your desktop. The report will be called DrWeb.csv
    * Close Dr.Web Cureit.
    * Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
    * After reboot, post the contents of the log from Dr.Web you saved previously in your next reply. You can use Notepad to open the DrWeb.cvs report.
    Last edited by Neal; 08-05-2007 at 03:33 PM.
  3. 08-05-2007  #13
    biggrim
    biggrim is offline Newbie
    DR WEB log file: -

    combofix.exe;c:\documents and settings\graeme\desktop;Win32.Gael.3666;Will be cured after reboot.;
    acrobat_sl.exe;c:\program files\adobe\acrobat 7.0\acrobat;Win32.Gael.3666;Will be cured after reboot.;
    acrotray.exe;c:\program files\adobe\acrobat 7.0\distillr;Win32.Gael.3666;Will be cured after reboot.;
    adobelmsvc.exe;c:\program files\common files\adobe systems shared\service;Win32.Gael.3666;Cured.;
    acstart16.exe;c:\program files\common files\autodesk shared;Win32.Gael.3666;Cured.;
    adskscsrv.exe;c:\program files\common files\autodesk shared\service;Win32.Gael.3666;Cured.;
    ose.exe;c:\program files\common files\microsoft shared\source engine;Win32.Gael.3666;Cured.;
    mdm.exe;c:\program files\common files\microsoft shared\vs7debug;Win32.Gael.3666;Will be cured after reboot.;
    avgas.exe;c:\program files\grisoft\avg anti-spyware 7.5;Win32.Gael.3666;Will be cured after reboot.;
    guard.exe;c:\program files\grisoft\avg anti-spyware 7.5;Win32.Gael.3666;Will be cured after reboot.;
    msmsgs.exe;c:\program files\messenger;Win32.Gael.3666;Cured.;
    rapimgr.exe;c:\program files\microsoft activesync;Win32.Gael.3666;Will be cured after reboot.;
    wcescomm.exe;c:\program files\microsoft activesync;Win32.Gael.3666;Will be cured after reboot.;
    osa.exe;c:\program files\microsoft office\office10;Win32.Gael.3666;Cured.;
    setup50.exe;c:\program files\outlook express;Win32.Gael.3666;Cured.;
    stray.exe;c:\program files\royal mail\smartstamp\binary;Win32.Gael.3666;Will be cured after reboot.;
    wmpnetwk.exe;c:\program files\windows media player;Win32.Gael.3666;Cured.;
    unregmp2.exe;c:\windows\inf;Win32.Gael.3666;Cured. ;
    aspnet_state.exe;c:\windows\microsoft.net\framewor k\v1.1.4322;Win32.Gael.3666;Cured.;
    xpnetdiag.exe;c:\windows\network diagnostic;Win32.Gael.3666;Cured.;
    nircmd.exe;c:\windows;Win32.Gael.3666;Will be cured after reboot.;
    alg.exe;c:\windows\system32;Win32.Gael.3666;Will be cured after reboot.;
    autochk.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    cisvc.exe;c:\windows\system32;Win32.Gael.3666;Cure d.;
    clipsrv.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    cmd.exe;c:\windows\system32;Win32.Gael.3666;Cured. ;
    ctfmon.exe;c:\windows\system32;Win32.Gael.3666;Wil l be cured after reboot.;
    dllhost.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    dmadmin.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    ie4uinit.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    ieudinit.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    imapi.exe;c:\windows\system32;Win32.Gael.3666;Cure d.;
    locator.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    logonui.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    mnmsrvc.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    msdtc.exe;c:\windows\system32;Win32.Gael.3666;Cure d.;
    msiexec.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    netdde.exe;c:\windows\system32;Win32.Gael.3666;Cur ed.;
    ntsd.exe;c:\windows\system32;Win32.Gael.3666;Cured .;
    regsvr32.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    rsvp.exe;c:\windows\system32;Win32.Gael.3666;Cured .;
    rundll32.exe;c:\windows\system32;Win32.Gael.3666;W ill be cured after reboot.;
    scardsvr.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    sessmgr.exe;c:\windows\system32;Win32.Gael.3666;Cu red.;
    shmgrate.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    smlogsvc.exe;c:\windows\system32;Win32.Gael.3666;C ured.;
    spoolsv.exe;c:\windows\system32;Win32.Gael.3666;Wi ll be cured after reboot.;
    swreg.exe;c:\windows\system32;Win32.Gael.3666;Will be cured after reboot.;
    ups.exe;c:\windows\system32;Win32.Gael.3666;Cured. ;
    vssvc.exe;c:\windows\system32;Win32.Gael.3666;Cure d.;
    wmiapsrv.exe;c:\windows\system32\wbem;Win32.Gael.3 666;Cured.;
    wscntfy.exe;c:\windows\system32;Win32.Gael.3666;Wi ll be cured after reboot.;
    wuauclt.exe;c:\windows\system32;Win32.Gael.3666;Wi ll be cured after reboot.;
    antibagz-en.exe;C:\Documents and Settings\Graeme\Desktop;Win32.Gael.3666;Cured.;
    avgas-setup-7.5.0.50.exe;C:\Documents and Settings\Graeme\Desktop;Win32.Gael.3666;Cured.;
    combofix.exe.delete_on_reboot;C:\Documents and Settings\Graeme\Desktop;Win32.Gael.3666;Will be cured after reboot.;
    Silent Runners.vbs;C:\Documents and Settings\Graeme\Desktop;Probably BATCH.Virus;Incurable.Moved.;
    WinsockxpFix.exe;C:\Documents and Settings\Graeme\Desktop;Win32.Gael.3666;Cured.;
    aawsepersonal.exe;C:\Documents and Settings\Graeme\My Documents;Win32.Gael.3666;Cured.;
    ActionRegister.ARM.cab.exe;C:\Documents and Settings\Graeme\My Documents;Win32.Gael.3666;Cured.;
    AudioConverter.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim;Win32.Gael.3666;Cured.;
    epson22058eu.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim;Win32.Gael.3666;Cured.;
    epson6792eu.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim;Win32.Gael.3666;Cured.;
    Windows Media Player 11.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim;Win32.Gael.3666;Cured.;
    setup.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\ACTIVE SYNC 4-2;Win32.Gael.3666;Cured.;
    Mp3Decode.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\MUSIC;Win32.Gael.3666;Cured.;
    mydoomce.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\Smart Phone\install files for smart;Win32.Gael.3666;Cured.;
    PocketTVSmartphoneSetup.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\Smart Phone\install files for smart;Win32.Gael.3666;Cured.;
    setup update.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\Smart Phone\pocket msn;Win32.Gael.3666;Cured.;
    setup.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\Smart Phone\pocket msn;Win32.Gael.3666;Cured.;
    setup_se_2.0.2_en.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Phone Stuff\Smart Phone\Smart Explorer;Win32.Gael.3666;Cured.;
    security.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\security_35703600271603600.exe;W in32.Gael.3666;Cured.;
    zaSuiteSetup_61_737_000_en.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Smart Phone;Win32.Gael.3666;Cured.;
    setup_se_2.0.2_en.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Smart Phone\Applications;Win32.Gael.3666;Cured.;
    setup.exe;C:\Documents and Settings\Graeme\My Documents\Biggrim\Tom Tom 5;Win32.Gael.3666;Cured.;
    foolyou.exe.exe;C:\HJT;Win32.Gael.3666;Cured.;
    DW20.EXE;C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARED\DW;Win32 .Gael.3666;Cured.;
    DWTRIG20.EXE;C:\MSOCache\All Users\90000409-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARED\DW;Win32 .Gael.3666;Cured.;
    Acrobat.exe;C:\Program Files\Adobe\Acrobat 7.0\Acrobat;Win32.Gael.3666;Cured.;
    AcrobatInfo.exe;C:\Program Files\Adobe\Acrobat 7.0\Acrobat;Win32.Gael.3666;Cured.;
    acrobat_sl.exe.delete_on_reboot;C:\Program Files\Adobe\Acrobat 7.0\Acrobat;Win32.Gael.3666;Will be cured after reboot.;
    capserve.exe;C:\Program Files\Adobe\Acrobat 7.0\Acrobat\plug_ins\PaperCapture\Server\Roman;Win 32.Gael.3666;Cured.;
    acroaum.exe;C:\Program Files\Adobe\Acrobat 7.0\Acrobat\Updater;Win32.Gael.3666;Cured.;
    Acrobat Elements.exe;C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements;Win32.Gael.3666;Cured.;
    acrodist.exe;C:\Program Files\Adobe\Acrobat 7.0\Distillr;Win32.Gael.3666;Cured.;
    acrotray.exe.delete_on_reboot;C:\Program Files\Adobe\Acrobat 7.0\Distillr;Win32.Gael.3666;Will be cured after reboot.;
    AudioConverter.exe;C:\Program Files\Audio Converter;Win32.Gael.3666;Cured.;
    wmfdist.exe;C:\Program Files\Audio Converter;Win32.Gael.3666;Cured.;
    acad.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    AcSignApply.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    addplwiz.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    AdMigrator.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    AdRefMan.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    BrandSn.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    DwgCheckStandards.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    HPSETUP.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    pc3exe.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    senddmp.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    sfxfe32.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    slidelib.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    styexe.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    styshwiz.exe;C:\Program Files\AutoCAD 2005;Win32.Gael.3666;Cured.;
    flashplayer7_winax.exe;C:\Program Files\AutoCAD 2005\Support;Win32.Gael.3666;Cured.;
    ExpressViewer.exe;C:\Program Files\Autodesk\Autodesk DWF Viewer;Win32.Gael.3666;Cured.;
    CheckLiveUpdate.exe;C:\Program Files\Avanquest update;Win32.Gael.3666;Cured.;
    LiveUpdateLauncher.exe;C:\Program Files\Avanquest update;Win32.Gael.3666;Cured.;
    RunAs.exe;C:\Program Files\Avanquest update;Win32.Gael.3666;Cured.;
    setup.exe;C:\Program Files\Avanquest update\Engine;Win32.Gael.3666;Cured.;
    malfile.exe;C:\Program Files\AvantGo Connect;Win32.Gael.3666;Cured.;
    agsubs.exe;C:\Program Files\AvantGo Connect\AvantGo;Win32.Gael.3666;Cured.;
    AcHelp.exe;C:\Program Files\Common Files\Autodesk Shared;Win32.Gael.3666;Cured.;
    mtstack16.exe;C:\Program Files\Common Files\Autodesk Shared;Win32.Gael.3666;Cured.;
    PLU250.exe;C:\Program Files\Common Files\Autodesk Shared;Win32.Gael.3666;Cured.;
    WSCommCntr1.exe;C:\Program Files\Common Files\Autodesk Shared;Win32.Gael.3666;Cured.;
    IDriver.exe;C:\Program Files\Common Files\InstallShield\Driver\7\Intel 32;Win32.Gael.3666;Cured.;
    IDriver.exe;C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32;Win32.Gael.3666;Cured.;
    IDriver2.exe;C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32;Win32.Gael.3666;Cured.;
    DotNetInstaller.exe;C:\Program Files\Common Files\InstallShield\Professional\RunTime\10\50\Int el32;Win32.Gael.3666;Cured.;
    WZCNFLCT.EXE;C:\Program Files\Common Files\Microsoft Shared\Database Replication;Win32.Gael.3666;Cured.;
    DW20.EXE;C:\Program Files\Common Files\Microsoft Shared\DW;Win32.Gael.3666;Cured.;
    DWTRIG20.EXE;C:\Program Files\Common Files\Microsoft Shared\DW;Win32.Gael.3666;Cured.;
    EQNEDT32.EXE;C:\Program Files\Common Files\Microsoft Shared\Equation;Win32.Gael.3666;Cured.;
    MSPVIEW.EXE;C:\Program Files\Common Files\Microsoft Shared\MODI\11.0;Win32.Gael.3666;Cured.;
    msinfo32.exe;C:\Program Files\Common Files\Microsoft Shared\MSInfo;Win32.Gael.3666;Cured.;
    OFFPRV10.EXE;C:\Program Files\Common Files\Microsoft Shared\MSInfo;Win32.Gael.3666;Cured.;
    OINFOP11.EXE;C:\Program Files\Common Files\Microsoft Shared\MSInfo;Win32.Gael.3666;Cured.;
    MSPOCRDC.EXE;C:\Program Files\Common Files\Microsoft Shared\MSPaper;Win32.Gael.3666;Cured.;
    MSPSCAN.EXE;C:\Program Files\Common Files\Microsoft Shared\MSPaper;Win32.Gael.3666;Cured.;
    MSPVIEW.EXE;C:\Program Files\Common Files\Microsoft Shared\MSPaper;Win32.Gael.3666;Cured.;
    SrchAdmStp.exe;C:\Program Files\Common Files\Microsoft Shared\MSSearch\Bin;Win32.Gael.3666;Cured.;
    InkForm.exe;C:\Program Files\Common Files\Microsoft Shared\NoteSync Forms;Win32.Gael.3666;Cured.;
    VoiceFrm.exe;C:\Program Files\Common Files\Microsoft Shared\NoteSync Forms;Win32.Gael.3666;Cured.;
    DW.EXE;C:\Program Files\Common Files\Microsoft Shared\Office10;Win32.Gael.3666;Cured.;
    MSO7FTP.EXE;C:\Program Files\Common Files\Microsoft Shared\Office10;Win32.Gael.3666;Cured.;
    MSO7FTPA.EXE;C:\Program Files\Common Files\Microsoft Shared\Office10;Win32.Gael.3666;Cured.;
    MSO7FTPS.EXE;C:\Program Files\Common Files\Microsoft Shared\Office10;Win32.Gael.3666;Cured.;
    MSOICONS.EXE;C:\Program Files\Common Files\Microsoft Shared\Office10;Win32.Gael.3666;Cured.;
    MSOICONS.EXE;C:\Program Files\Common Files\Microsoft Shared\OFFICE11;Win32.Gael.3666;Cured.;
    MSOXMLED.EXE;C:\Program Files\Common Files\Microsoft Shared\OFFICE11;Win32.Gael.3666;Cured.;
    PHOTOED.EXE;C:\Program Files\Common Files\Microsoft Shared\PhotoEd;Win32.Gael.3666;Cured.;
    SmartTagInstall.exe;C:\Program Files\Common Files\Microsoft Shared\Smart Tag;Win32.Gael.3666;Cured.;
    SNAPVIEW.EXE;C:\Program Files\Common Files\Microsoft Shared\Snapshot Viewer;Win32.Gael.3666;Cured.;
    sapisvr.exe;C:\Program Files\Common Files\Microsoft Shared\Speech;Win32.Gael.3666;Cured.;
    link.exe;C:\Program Files\Common Files\Microsoft Shared\VBA\VBA6;Win32.Gael.3666;Cured.;
    mdm.exe.delete_on_reboot;C:\Program Files\Common Files\Microsoft Shared\VS7Debug;Win32.Gael.3666;Will be cured after reboot.;
    VS7JIT.EXE;C:\Program Files\Common Files\Microsoft Shared\VS7Debug;Win32.Gael.3666;Cured.;
    DFUICOM.EXE;C:\Program Files\Common Files\Microsoft Shared\Web Components\11;Win32.Gael.3666;Cured.;
    CFGWIZ.EXE;C:\Program Files\Common Files\Microsoft Shared\web server extensions\50\bin;Win32.Gael.3666;Cured.;
    OWSADM.EXE;C:\Program Files\Common Files\Microsoft Shared\web server extensions\50\bin;Win32.Gael.3666;Cured.;
    OWSRMADM.EXE;C:\Program Files\Common Files\Microsoft Shared\web server extensions\50\bin;Win32.Gael.3666;Cured.;
    TCPTEST.EXE;C:\Program Files\Common Files\Microsoft Shared\web server extensions\50\bin;Win32.Gael.3666;Cured.;
    FPCOUNT.EXE;C:\Program Files\Common Files\Microsoft Shared\web server extensions\50\isapi;Win32.Gael.3666;Cured.;
    CNFNOT32.EXE;C:\Program Files\Common Files\System\MSMAPI\1033;Win32.Gael.3666;Cured.;
    SCANOST.EXE;C:\Program Files\Common Files\System\MSMAPI\1033;Win32.Gael.3666;Cured.;
    SCANPST.EXE;C:\Program Files\Common Files\System\MSMAPI\1033;Win32.Gael.3666;Cured.;
    avgas.exe.delete_on_reboot;C:\Program Files\Grisoft\AVG Anti-Spyware 7.5;Win32.Gael.3666;Will be cured after reboot.;
    guard.exe.delete_on_reboot;C:\Program Files\Grisoft\AVG Anti-Spyware 7.5;Win32.Gael.3666;Will be cured after reboot.;
    Uninstall.exe;C:\Program Files\Grisoft\AVG Anti-Spyware 7.5;Win32.Gael.3666;Cured.;
    setup.exe;C:\Program Files\InstallShield Installation Information\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE};Win32.Gael.3666;Cured.;
    setup.exe;C:\Program Files\InstallShield Installation Information\{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B};Win32.Gael.3666;Cured.;
    setup.exe;C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A};Win32.Gael.3666;Cured.;
    iedw.exe;C:\Program Files\Internet Explorer;Win32.Gael.3666;Cured.;
    iexplore.exe;C:\Program Files\Internet Explorer;Win32.Gael.3666;Cured.;
    icwconn1.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    icwconn2.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    icwrmind.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    icwtutor.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    inetwiz.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    isignup.exe;C:\Program Files\Internet Explorer\Connection Wizard;Win32.Gael.3666;Cured.;
    Ad-Aware.exe;C:\Program Files\Lavasoft\Ad-Aware SE Personal;Win32.Gael.3666;Cured.;
    unregaaw.exe;C:\Program Files\Lavasoft\Ad-Aware SE Personal;Win32.Gael.3666;Cured.;
    UNWISE.EXE;C:\Program Files\Lavasoft\Ad-Aware SE Personal;Win32.Gael.3666;Cured.;
    astu.exe;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    CEAPPMGR.EXE;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    dbexport.exe;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    FormInst.exe;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    rapimgr.exe.delete_on_reboot;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Will be cured after reboot.;
    wcescomm.exe.delete_on_reboot;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Will be cured after reboot.;
    WCESMgr.exe;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    WMP10_Update.exe;C:\Program Files\Microsoft ActiveSync;Win32.Gael.3666;Cured.;
    Uninstall.exe;C:\Program Files\Microsoft ActiveSync\Orange Register;Win32.Gael.3666;Cured.;
    Uninstall.exe;C:\Program Files\Microsoft ActiveSync\Security Application;Win32.Gael.3666;Cured.;
    unins000.exe;C:\Program Files\Microsoft ActiveSync\WisBar Advance 2;Win32.Gael.3666;Cured.;
    AutoRout.exe;C:\Program Files\Microsoft AutoRoute;Win32.Gael.3666;Cured.;
    dw.exe;C:\Program Files\Microsoft AutoRoute;Win32.Gael.3666;Cured.;
    GRAPH.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MAKECERT.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MCDLC.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSE7.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSIMPORT.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSOFFICE.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSOHTMED.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSQRY32.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSTORDB.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSTORE.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    PROFLWIZ.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    SELFCERT.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    SETLANG.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    VTIDB.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    VTIDISC.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    VTIFORM.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    VTIPRES.EXE;C:\Program Files\Microsoft Office\Office10;Win32.Gael.3666;Cured.;
    MSOHELP.EXE;C:\Program Files\Microsoft Office\Office10\1033;Win32.Gael.3666;Cured.;
    MSOHELP.EXE;C:\Program Files\Microsoft Office\Office10\2057;Win32.Gael.3666;Cured.;
    DSSM.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    EXCEL.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    FINDER.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    GRAPH.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    INFOPATH.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSACCESS.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSE7.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSOHTMED.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSPUB.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSQRY32.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSTORDB.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSTORE.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    OIS.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    OUTLOOK.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    POWERPNT.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    PPTVIEW.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    PROFLWIZ.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    SELFCERT.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    SETLANG.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    UNBIND.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    WAVTOASF.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    WINWORD.EXE;C:\Program Files\Microsoft Office\OFFICE11;Win32.Gael.3666;Cured.;
    MSOHELP.EXE;C:\Program Files\Microsoft Office\OFFICE11\1033;Win32.Gael.3666;Cured.;
    SCHDPL32.EXE;C:\Program Files\Microsoft Office\OFFICE11\1033;Win32.Gael.3666;Cured.;
    UNPACK.EXE;C:\Program Files\Microsoft Office\OFFICE11\1033;Win32.Gael.3666;Cured.;
    AMRCodec.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    LiveUpdateLauncher.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    MMCenter.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    MOffice.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    mPhonetools.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    MPT_TEST_Info.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    TMonitor.exe;C:\Program Files\Motorola Phone Tools;Win32.Gael.3666;Cured.;
    mp4enc.exe;C:\Program Files\Motorola Phone Tools\Codec;Win32.Gael.3666;Cured.;
    DriverTool.exe;C:\Program Files\Motorola Phone Tools\Inf;Win32.Gael.3666;Cured.;
    Venturi.exe;C:\Program Files\Motorola Phone Tools\Venturi;Win32.Gael.3666;Cured.;
    moviemk.exe;C:\Program Files\Movie Maker;Win32.Gael.3666;Cured.;
    msnsusii.exe;C:\Program Files\MSN\MSNCoreFiles\Install;Win32.Gael.3666;Cur ed.;
    Digcore.exe;C:\Program Files\MSN\MSNCoreFiles\Install\MSN9Components;Win3 2.Gael.3666;Cured.;
    Msncli.exe;C:\Program Files\MSN\MSNCoreFiles\Install\MSN9Components;Win3 2.Gael.3666;Cured.;
    bckgzm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    chkrzm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    hrtzzm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    Rvsezm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    shvlzm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    zClientm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Gael.3666;Cured.;
    cb32.exe;C:\Program Files\NetMeeting;Win32.Gael.3666;Cured.;
    conf.exe;C:\Program Files\NetMeeting;Win32.Gael.3666;Cured.;
    wb32.exe;C:\Program Files\NetMeeting;Win32.Gael.3666;Cured.;
    msimn.exe;C:\Program Files\Outlook Express;Win32.Gael.3666;Cured.;
    oemig50.exe;C:\Program Files\Outlook Express;Win32.Gael.3666;Cured.;
    wab.exe;C:\Program Files\Outlook Express;Win32.Gael.3666;Cured.;
    wabmig.exe;C:\Program Files\Outlook Express;Win32.Gael.3666;Cured.;
    unins000.exe;C:\Program Files\PocketPool;Win32.Gael.3666;Cured.;
    ReportWizard.exe;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    SBSINGLE.EXE;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    SetFilesystemRights.exe;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    SetRegistryRights.exe;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    SmartStamp.EXE;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    SPLLOAD.EXE;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Cured.;
    stray.exe.delete_on_reboot;C:\Program Files\Royal Mail\SmartStamp\BINARY;Win32.Gael.3666;Will be cured after reboot.;
    CabWiz.exe;C:\Program Files\Theme Generator;Win32.Gael.3666;Cured.;
    makecab.exe;C:\Program Files\Theme Generator;Win32.Gael.3666;Cured.;
    SkinApp.exe;C:\Program Files\Theme Generator;Win32.Gael.3666;Cured.;
    InstallThemeSwitch.exe;C:\Program Files\Theme Generator\ThemeSwitch;Win32.Gael.3666;Cured.;
    wmccds.exe;C:\Program Files\Windows Media Connect 2;Win32.Gael.3666;Cured.;
    WMCCFG.exe;C:\Program Files\Windows Media Connect 2;Win32.Gael.3666;Cured.;
    migrate.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    mplayer2.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    setup_wm.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmdbexport.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmlaunch.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmpenc.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmplayer.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmpnscfg.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmpshare.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    wmsetsdk.exe;C:\Program Files\Windows Media Player;Win32.Gael.3666;Cured.;
    dialer.exe;C:\Program Files\Windows NT;Win32.Gael.3666;Cured.;
    hypertrm.exe;C:\Program Files\Windows NT;Win32.Gael.3666;Cured.;
    wordpad.exe;C:\Program Files\Windows NT\Accessories;Win32.Gael.3666;Cured.;
    PINBALL.EXE;C:\Program Files\Windows NT\Pinball;Win32.Gael.3666;Cured.;
    catchme.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    hh.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    HPLTLNK.EXE;C:\WINDOWS;Win32.Gael.3666;Cured.;
    IsUninst.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    nircmd.exe.delete_on_reboot;C:\WINDOWS;Win32.Gael. 3666;Will be cured after reboot.;
    NOTEPAD.EXE;C:\WINDOWS;Win32.Gael.3666;Cured.;
    regedit.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    Setup1.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    ST6UNST.EXE;C:\WINDOWS;Win32.Gael.3666;Cured.;
    TASKMAN.EXE;C:\WINDOWS;Win32.Gael.3666;Cured.;
    twunk_32.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    winhlp32.exe;C:\WINDOWS;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB873339;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB873339\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB885835;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB885835\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB885836;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB885836\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB886185;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB886185\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB887472;Win32.Ga el.3666;Cured.;
    msmsgs.exe;C:\WINDOWS\$hf_mig$\KB887472\SP2QFE;Win 32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB887472\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB887742;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB887742\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB888113;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB888113\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB888302;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB888302\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB890046;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB890046\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB890859;Win32.Ga el.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\$hf_mig$\KB890859\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$hf_mig$\KB890859\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\$hf_mig$\KB890859\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB890859\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB891781;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB891781\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB893756;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB893756\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB893756\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB894391;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB894391\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB896358;Win32.Ga el.3666;Cured.;
    hh.exe;C:\WINDOWS\$hf_mig$\KB896358\SP2QFE;Win32.G ael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB896358\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB896422;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB896422\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB896423;Win32.Ga el.3666;Cured.;
    spoolsv.exe;C:\WINDOWS\$hf_mig$\KB896423\SP2QFE;Wi n32.Gael.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB896423\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB896423\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB896424;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB896424\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB896424\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB896428;Win32.Ga el.3666;Cured.;
    telnet.exe;C:\WINDOWS\$hf_mig$\KB896428\SP2QFE;Win 32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB896428\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB898461;Win32.Ga el.3666;Cured.;
    spupdsvc.exe;C:\WINDOWS\$hf_mig$\KB898461;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB898461\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB899587;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB899587\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB899587\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB899591;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB899591\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB899591\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB900725;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB900725\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB900725\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB901017;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB901017\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB901017\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB901214;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB901214\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB902400;Win32.Ga el.3666;Cured.;
    migregdb.exe;C:\WINDOWS\$hf_mig$\KB902400\SP2QFE;W in32.Gael.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB902400\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB902400\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB904706;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB904706\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB904942;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB904942\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB905414;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB905414\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB905414\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB905749;Win32.Ga el.3666;Cured.;
    arpidfix.exe;C:\WINDOWS\$hf_mig$\KB905749\update;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB905749\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB908519;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB908519\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB908531;Win32.Ga el.3666;Cured.;
    verclsid.exe;C:\WINDOWS\$hf_mig$\KB908531\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB908531\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB910437;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB910437\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB911280;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB911280\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB911562;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB911562\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB911567;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB911567\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB911927;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB911927\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB912919;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB912919\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB913580;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB913580\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB914388;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB914388\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB914389;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB914389\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB915865;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB915865\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB916281;Win32.Ga el.3666;Cured.;
    iedw.exe;C:\WINDOWS\$hf_mig$\KB916281\SP2QFE;Win32 .Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB916281\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB916595;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB916595\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB917159;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB917159\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB917344;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB917344\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB917422;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB917422\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB917953;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB917953\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB918118;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB918118\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB918439;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB918439\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB918899;Win32.Ga el.3666;Cured.;
    iedw.exe;C:\WINDOWS\$hf_mig$\KB918899\SP2QFE;Win32 .Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB918899\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB919007;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB919007\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB920213;Win32.Ga el.3666;Cured.;
    agentsvr.exe;C:\WINDOWS\$hf_mig$\KB920213\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB920213\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB920214;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB920214\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB920670;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB920670\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB920683;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB920683\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB920685;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB920685\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB921398;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB921398\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB921883;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB921883\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB922582;Win32.Ga el.3666;Cured.;
    fltmc.exe;C:\WINDOWS\$hf_mig$\KB922582\SP2QFE;Win3 2.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB922582\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB922616;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB922616\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB922760;Win32.Ga el.3666;Cured.;
    iedw.exe;C:\WINDOWS\$hf_mig$\KB922760\SP2QFE;Win32 .Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB922760\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB922819;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB922819\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB923414;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB923414\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB923694;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB923694\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB923980;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB923980\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB924191;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB924191\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB924270;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB924270\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB924496;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB924496\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB925486;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB925486\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB925902;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB925902\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB926255;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB926255\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB926436;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB926436\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB927779;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB927779\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB927802;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB927802\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB928255;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB928255\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB928843;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB928843\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB929338;Win32.Ga el.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\$hf_mig$\KB929338\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$hf_mig$\KB929338\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\$hf_mig$\KB929338\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB929338\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB930178;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB930178\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB931261;Win32.Ga el.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB931261\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB931784;Win32.Ga el.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\$hf_mig$\KB931784\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$hf_mig$\KB931784\SP2QFE;W in32.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\$hf_mig$\KB931784\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB931784\update;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$hf_mig$\KB931836;Win32.Ga el.3666;Cured.;
    tzchange.exe;C:\WINDOWS\$hf_mig$\KB931836\SP2QFE;W in32.Gael.3666;Cured.;
    update.exe;C:\WINDOWS\$hf_mig$\KB931836\update;Win 32.Gael.3666;Cured.;
    msiexec.exe;C:\WINDOWS\$MSI31Uninstall_KB893803v2$ ;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$MSI31Uninstall_KB893803v2 $\spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtServicePackUninstallIDN MitigationAPIs$\spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtServicePackUninstallNLS DownlevelMapping$\spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB873339$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB885835$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB885836$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB885884$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB886185$\spun inst;Win32.Gael.3666;Cured.;
    msmsgs.exe;C:\WINDOWS\$NtUninstallKB887472$;Win32. Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB887472$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB887742$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB888113$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB888302$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB890046$\spun inst;Win32.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$NtUninstallKB890859$;Win3 2.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB890859$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB891781$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB893756$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB894391$\spun inst;Win32.Gael.3666;Cured.;
    hh.exe;C:\WINDOWS\$NtUninstallKB896358$;Win32.Gael .3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB896358$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB896422$\spun inst;Win32.Gael.3666;Cured.;
    spoolsv.exe;C:\WINDOWS\$NtUninstallKB896423$;Win32 .Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB896423$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB896424$\spun inst;Win32.Gael.3666;Cured.;
    telnet.exe;C:\WINDOWS\$NtUninstallKB896428$;Win32. Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB896428$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB898461$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB899587$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB899591$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB900725$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB901017$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB901214$\spun inst;Win32.Gael.3666;Cured.;
    migregdb.exe;C:\WINDOWS\$NtUninstallKB902400$;Win3 2.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB902400$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB904706$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB904942$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB905414$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB905749$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB908519$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB908531$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB909394$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB910437$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB911280$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB911562$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB911564$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB911567$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB911927$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB912919$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB913580$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB914388$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB914389$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB914440$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB915865$\spun inst;Win32.Gael.3666;Cured.;
    iedw.exe;C:\WINDOWS\$NtUninstallKB916281$;Win32.Ga el.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB916281$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB916595$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB917159$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB917344$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB917422$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB917734_WMP9$ \spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB917953$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB918118$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB918439$\spun inst;Win32.Gael.3666;Cured.;
    iedw.exe;C:\WINDOWS\$NtUninstallKB918899$;Win32.Ga el.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB918899$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB919007$\spun inst;Win32.Gael.3666;Cured.;
    agentsvr.exe;C:\WINDOWS\$NtUninstallKB920213$;Win3 2.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920213$\spun inst;Win32.Gael.3666;Cured.;
    agentsvr.exe;C:\WINDOWS\$NtUninstallKB920213_0$;Wi n32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920213_0$\sp uninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920214$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920670$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920683$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB920685$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB921398$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB921883$\spun inst;Win32.Gael.3666;Cured.;
    fltmc.exe;C:\WINDOWS\$NtUninstallKB922582$;Win32.G ael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB922582$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB922616$\spun inst;Win32.Gael.3666;Cured.;
    iedw.exe;C:\WINDOWS\$NtUninstallKB922760$;Win32.Ga el.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB922760$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB922819$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB923191$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB923414$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB923689$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB923694$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB923980$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB924191$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB924270$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB924496$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB924667$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB925398_WMP64 $\spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB925486$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB925902$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB926239$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB926255$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB926436$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB927779$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB927802$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB928255$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB928843$\spun inst;Win32.Gael.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\$NtUninstallKB929338$;Win3 2.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$NtUninstallKB929338$;Win3 2.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\$NtUninstallKB929338$;Win3 2.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB929338$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB929399$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB930178$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB931261$\spun inst;Win32.Gael.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\$NtUninstallKB931784$;Win3 2.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\$NtUninstallKB931784$;Win3 2.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\$NtUninstallKB931784$;Win3 2.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB931784$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB931836$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallKB932168$\spun inst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallMSCompPackV1$\ spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallWdf01005$\spun inst;Win32.Gael.3666;Cured.;
    logagent.exe;C:\WINDOWS\$NtUninstallWMFDist11$;Win 32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallWMFDist11$\spu ninst;Win32.Gael.3666;Cured.;
    setup_wm.exe;C:\WINDOWS\$NtUninstallwmp11$;Win32.G ael.3666;Cured.;
    unregmp2.exe;C:\WINDOWS\$NtUninstallwmp11$;Win32.G ael.3666;Cured.;
    wmplayer.exe;C:\WINDOWS\$NtUninstallwmp11$;Win32.G ael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallwmp11$\spunins t;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\$NtUninstallWudf01000$\spu ninst;Win32.Gael.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\Driver Cache\i386;Win32.Gael.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\Driver Cache\i386;Win32.Gael.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\Driver Cache\i386;Win32.Gael.3666;Cured.;
    tour.exe;C:\WINDOWS\Help\Tours\mmTour;Win32.Gael.3 666;Cured.;
    ie4uinit.exe;C:\WINDOWS\ie7;Win32.Gael.3666;Cured. ;
    iedw.exe;C:\WINDOWS\ie7;Win32.Gael.3666;Cured.;
    iexplore.exe;C:\WINDOWS\ie7;Win32.Gael.3666;Cured. ;
    mshta.exe;C:\WINDOWS\ie7;Win32.Gael.3666;Cured.;
    ieResetIcons.exe;C:\WINDOWS\ie7\spuninst;Win32.Gae l.3666;Cured.;
    spuninst.exe;C:\WINDOWS\ie7\spuninst;Win32.Gael.36 66;Cured.;
    ie4uinit.exe;C:\WINDOWS\ie7updates\KB928090-IE7;Win32.Gael.3666;Cured.;
    ieudinit.exe;C:\WINDOWS\ie7updates\KB928090-IE7;Win32.Gael.3666;Cured.;
    iexplore.exe;C:\WINDOWS\ie7updates\KB928090-IE7;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\ie7updates\KB928090-IE7\spuninst;Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\ie7updates\KB929969\spunin st;Win32.Gael.3666;Cured.;
    NETFXSBS10.exe;C:\WINDOWS\Microsoft.NET\Framework; Win32.Gael.3666;Cured.;
    aspnet_regiis.exe;C:\WINDOWS\Microsoft.NET\Framewo rk\v1.1.4322;Win32.Gael.3666;Cured.;
    aspnet_wp.exe;C:\WINDOWS\Microsoft.NET\Framework\v 1.1.4322;Win32.Gael.3666;Cured.;
    CasPol.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1 .4322;Win32.Gael.3666;Cured.;
    ConfigWizards.exe;C:\WINDOWS\Microsoft.NET\Framewo rk\v1.1.4322;Win32.Gael.3666;Cured.;
    csc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.43 22;Win32.Gael.3666;Cured.;
    cvtres.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1 .4322;Win32.Gael.3666;Cured.;
    IEExec.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1 .4322;Win32.Gael.3666;Cured.;
    ilasm.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1. 4322;Win32.Gael.3666;Cured.;
    InstallUtil.exe;C:\WINDOWS\Microsoft.NET\Framework \v1.1.4322;Win32.Gael.3666;Cured.;
    jsc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.43 22;Win32.Gael.3666;Cured.;
    MigPol.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1 .4322;Win32.Gael.3666;Cured.;
    MigPolWin.exe;C:\WINDOWS\Microsoft.NET\Framework\v 1.1.4322;Win32.Gael.3666;Cured.;
    ngen.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4 322;Win32.Gael.3666;Cured.;
    RegAsm.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1 .4322;Win32.Gael.3666;Cured.;
    RegSvcs.exe;C:\WINDOWS\Microsoft.NET\Framework\v1. 1.4322;Win32.Gael.3666;Cured.;
    vbc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.43 22;Win32.Gael.3666;Cured.;
    agentsvr.exe;C:\WINDOWS\msagent;Win32.Gael.3666;Cu red.;
    HelpCtr.exe;C:\WINDOWS\pchealth\helpctr\binaries;W in32.Gael.3666;Cured.;
    HelpHost.exe;C:\WINDOWS\pchealth\helpctr\binaries; Win32.Gael.3666;Cured.;
    HelpSvc.exe;C:\WINDOWS\pchealth\helpctr\binaries;W in32.Gael.3666;Cured.;
    HscUpd.exe;C:\WINDOWS\pchealth\helpctr\binaries;Wi n32.Gael.3666;Cured.;
    msconfig.exe;C:\WINDOWS\pchealth\helpctr\binaries; Win32.Gael.3666;Cured.;
    notiflag.exe;C:\WINDOWS\pchealth\helpctr\binaries; Win32.Gael.3666;Cured.;
    UploadM.exe;C:\WINDOWS\pchealth\UploadLB\Binaries; Win32.Gael.3666;Cured.;
    spuninst.exe;C:\WINDOWS\SoftwareDistribution\Downl oad\0facce6115ab861022eae3087e064a2a;Win32.Gael.36 66;Cured.;
    xpnetdg.exe;C:\WINDOWS\SoftwareDistribution\Downlo ad\0facce6115ab861022eae3087e064a2a\SP2QFE;Win32.G ael.3666;Cured.;
    update.exe;C:\WINDOWS\SoftwareDistribution\Downloa d\0facce6115ab861022eae3087e064a2a\update;Win32.Ga el.3666;Cured.;
    spuninst.exe;C:\WINDOWS\SoftwareDistribution\Downl oad\355f788b6de8a3ec79e9aa172e6317f1;Win32.Gael.36 66;Cured.;
    update.exe;C:\WINDOWS\SoftwareDistribution\Downloa d\355f788b6de8a3ec79e9aa172e6317f1\update;Win32.Ga el.3666;Cured.;
    accwiz.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    AcSignOpt.exe;C:\WINDOWS\system32;Win32.Gael.3666; Cured.;
    actmovie.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ahui.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    alg.exe.delete_on_reboot;C:\WINDOWS\system32;Win32 .Gael.3666;Will be cured after reboot.;
    arp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    at.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured.;
    atmadm.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    attrib.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    auditusr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    autoconv.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    autofmt.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    autolfn.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    blastcln.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    bootok.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    bootvrfy.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    cacls.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    calc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    charmap.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    chkdsk.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    chkntfs.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    cidaemon.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ckcnv.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    cleanmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    cliconfg.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    clipbrd.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    cmdl32.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    cmmon32.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    cmstp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    comp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    compact.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    conime.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    control.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    convert.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    cscript.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    ctfmon.exe.delete_on_reboot;C:\WINDOWS\system32;Wi n32.Gael.3666;Will be cured after reboot.;
    dcomcnfg.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ddeshare.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    defrag.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    dfrgfat.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    dfrgntfs.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    diantz.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    diskpart.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    diskperf.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    dllhst3g.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    dmremote.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    doskey.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    dplaysvr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    dpnsvr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    dpvsetup.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    drmupgds.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    drwtsn32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    dumprep.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    dvdplay.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    dvdupgrd.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    dwwin.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    dxdiag.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    esentutl.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    eudcedit.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    eventvwr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    expand.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    extrac32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    fc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured.;
    find.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    findstr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    finger.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    fixmapi.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    fltmc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    fontview.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    forcedos.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    freecell.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    fsquirt.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    fsutil.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    ftp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    grpconv.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    help.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    hostname.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    iexpress.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ipconfig.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ipsec6.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    ipv6.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    ipxroute.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    irftp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    label.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    lights.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    lnkstub.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    lodctr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    logagent.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    logman.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    logoff.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    lpq.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    lpr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    magnify.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    makecab.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    MAPISRVR.EXE;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    migpwd.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    mmc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    mobsync.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    mountvol.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    moveex.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    mplay32.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    mpnotify.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    mrinfo.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    MRT.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    msfeedssync.exe;C:\WINDOWS\system32;Win32.Gael.366 6;Cured.;
    msg.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    mshearts.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    mshta.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    mspaint.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    msswchx.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    mstinit.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    mstsc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    narrator.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    nbtstat.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    NCTAudioConvert3.exe;C:\WINDOWS\system32;Win32.Gae l.3666;Cured.;
    nddeapir.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    net.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    net1.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    netsetup.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    netsh.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    netstat.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    notepad.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    nslookup.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ntkrnlpa.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    ntvdm.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    odbcad32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    odbcconf.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    osk.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    osuninst.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    packager.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    pathping.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    pentnt.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    perfmon.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    ping.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    ping6.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    powercfg.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    print.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    progman.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    proquota.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    proxycfg.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    qappsrv.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    qprocess.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    qwinsta.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rasautou.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    rasdial.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rasphone.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    rcimlby.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rcp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    rdpclip.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rdsaddin.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    rdshost.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    recover.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    reg.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    regedt32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    regini.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    regwiz.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    replace.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    reset.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    rexec.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    route.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    routemon.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    rsh.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    rsm.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    rsmsink.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rsmui.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    rtcshare.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    runas.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    rundll32.exe.delete_on_reboot;C:\WINDOWS\system32; Win32.Gael.3666;Will be cured after reboot.;
    runonce.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    rwinsta.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    savedump.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    sc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured.;
    sdbinst.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    sethc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    setup.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    sfc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    shadow.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    shrpubw.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    shutdown.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    sigverif.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    skeys.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    smbinst.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    sndrec32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    sndvol32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    sol.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured. ;
    sort.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    spider.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    spnpinst.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    spoolsv.exe.delete_on_reboot;C:\WINDOWS\system32;W in32.Gael.3666;Will be cured after reboot.;
    sprestrt.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    spupdsvc.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    stimon.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    subst.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    swreg.exe.delete_on_reboot;C:\WINDOWS\system32;Win 32.Gael.3666;Will be cured after reboot.;
    swsc.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    swxcacls.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    syncapp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    syskey.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    sysocmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    systray.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    taskman.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    taskmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    tcmsetup.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    tcpsvcs.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    telnet.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    tftp.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    tourstart.exe;C:\WINDOWS\system32;Win32.Gael.3666; Cured.;
    tracert.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    tracert6.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    tscon.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    tscupgrd.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    tsdiscon.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    tskill.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    tsshutdn.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    tzchange.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    unlodctr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    upnpcont.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    userinit.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    usrmlnka.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    usrprbda.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    usrshuta.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    utilman.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    uwdf.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cured .;
    verclsid.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    verifier.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    vfind.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    vssadmin.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    w32tm.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    wdfmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    wextract.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    WgaTray.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    wiaacmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    winchat.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    WinFXDocObj.exe;C:\WINDOWS\system32;Win32.Gael.366 6;Cured.;
    winhlp32.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    winmine.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    winmsd.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    winver.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cur ed.;
    WISPTIS.EXE;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    wpabaln.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    wpdshextautoplay.exe;C:\WINDOWS\system32;Win32.Gae l.3666;Cured.;
    wpnpinst.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    write.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    wscntfy.exe.delete_on_reboot;C:\WINDOWS\system32;W in32.Gael.3666;Will be cured after reboot.;
    wscript.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    wuauclt.exe.delete_on_reboot;C:\WINDOWS\system32;W in32.Gael.3666;Will be cured after reboot.;
    wuauclt1.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    WudfHost.exe;C:\WINDOWS\system32;Win32.Gael.3666;C ured.;
    wupdmgr.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    xcopy.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cure d.;
    xmlinst.exe;C:\WINDOWS\system32;Win32.Gael.3666;Cu red.;
    comrepl.exe;C:\WINDOWS\system32\Com;Win32.Gael.366 6;Cured.;
    comrereg.exe;C:\WINDOWS\system32\Com;Win32.Gael.36 66;Cured.;
    accwiz.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    actmovie.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    admin.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    agentsvr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ahui.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    alg.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    arp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    at.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.366 6;Cured.;
    atmadm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    attrib.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    auditusr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    author.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    autochk.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    autoconv.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    autofmt.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    autolfn.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    bckgzm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    blastcln.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    bootok.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    bootvrfy.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    cacls.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    calc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    cb32.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    cfgwiz.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    change.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    charmap.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    chglogon.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    chgport.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    chgusr.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    chkdsk.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    chkntfs.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    chkrzm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    cidaemon.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    cintsetp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    cisvc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    ckcnv.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    cleanmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    clipbrd.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    clipsrv.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    cmd.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    cmdl32.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    cmmon32.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    cmstp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    comp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    compact.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    comrepl.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    comrereg.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    conf.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    conime.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    control.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    convert.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    cplexe.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    cprofile.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    cscript.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    csrss.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    ctfmon.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    dcomcnfg.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ddeshare.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    defrag.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    dfrgfat.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    dfrgntfs.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dialer.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    diantz.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    diskpart.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    diskperf.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dllhost.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    dllhst3g.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dmadmin.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    dmremote.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    doskey.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    dplaysvr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dpnsvr.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    dpvsetup.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    drwtsn32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dumprep.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    dvdupgrd.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    dwwin.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    dxdiag.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    esentutl.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    eudcedit.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    eventvwr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    evntcmd.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    evntwin.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    EXCH_regtrace.exe;C:\WINDOWS\system32\dllcache;Win 32.Gael.3666;Cured.;
    expand.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    explorer.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    extrac32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.366 6;Cured.;
    find.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    findstr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    finger.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    fixmapi.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    flattemp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fltmc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    fontview.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    forcedos.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fp98sadm.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fp98swin.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fpadmcgi.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fpcount.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    fpremadm.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    freecell.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fsutil.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    ftp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    fxsclnt.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    fxscover.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    fxssend.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    fxssvc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    grpconv.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    help.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    helpctr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    helphost.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    helpsvc.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    hh.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.366 6;Cured.;
    hostname.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    hrtzzm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    hscupd.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    icwconn1.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    icwconn2.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    icwrmind.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    icwtutor.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ie4uinit.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    iedw.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    iexplore.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    iexpress.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imapi.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    imekrmig.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imepadsv.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imjpdadm.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imjpdct.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    imjpdsvr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imjpinst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imjpmig.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    imjprw.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    imjpuex.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    imjputy.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    imkrinst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    imscinst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    inetwiz.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    ipconfig.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ipsec6.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    ipv6.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    ipxroute.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    irftp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    isignup.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    label.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    lights.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    lnkstub.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    locator.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    lodctr.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    logagent.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    logman.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    logoff.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    logonui.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    lpq.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    lpr.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    lsass.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    magnify.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    makecab.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    migisol.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    migload.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    migrate.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    migregdb.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    migwiz.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    migwiz_a.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    mmc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    mnmsrvc.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mobsync.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mofcomp.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mountvol.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    moviemk.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mplay32.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mplayer2.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    mpnotify.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    mrinfo.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    msconfig.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    msdtc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    msg.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    mshearts.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    mshta.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    msiexec.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    msimn.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    msinfo32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    msiregmv.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    msoobe.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    mspaint.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    msswchx.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mstinit.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    mstsc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    mtstocom.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    narrator.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    nbtstat.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    nddeapir.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    net.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    net1.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    netdde.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    netsetup.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    netsh.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    netstat.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    notepad.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    notiflag.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    nppagent.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    nslookup.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ntkrnlmp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ntkrnlpa.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ntkrpamp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ntsd.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    ntvdm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    odbcad32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    odbcconf.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    oemig50.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    oobebaln.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    osk.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    osuninst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    packager.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    pathping.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    pentnt.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    perfmon.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    pinball.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    ping.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    ping6.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    pintlphr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    powercfg.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    print.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    progman.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    proquota.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    proxycfg.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    qappsrv.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    qprocess.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    query.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    quser.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    qwinsta.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rasautou.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    rasdial.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rasphone.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    rcimlby.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rcp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    rdpclip.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rdsaddin.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    rdshost.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    recover.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    reg.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    regedit.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    regedt32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    regini.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    register.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    regsvr32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    regwiz.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    replace.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    reset.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    rexec.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    route.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    routemon.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    rsh.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    rsm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    rsmsink.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rsmui.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    rstrui.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    rsvp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    rtcshare.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    runas.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    rundll32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    runonce.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    rvsezm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    rwinsta.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    sapisvr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    savedump.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    sc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.366 6;Cured.;
    scardsvr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    scrcons.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    sdbinst.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    services.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    sessmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    sethc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    setup.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    setup50.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    setup_wm.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    sfc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    shadow.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    shmgrate.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    shrpubw.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    shtml.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    shutdown.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    shvlzm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    sigverif.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    skeys.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    smbinst.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    smi2smir.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    smlogsvc.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    smss.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    sndrec32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    sndvol32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    snmp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    snmptrap.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    sol.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    sort.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    spider.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    spnpinst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    spoolsv.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    sprestrt.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    srdiag.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    stimon.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    subst.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    svchost.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    syncapp.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    syskey.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    sysocmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    systray.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    taskman.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    taskmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    tcmsetup.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tcpsvcs.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    tcptest.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    telnet.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    tftp.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    tintlphr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tintsetp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tourP.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    tourstrt.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tracert.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    tracert6.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tscon.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    tscupgrd.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tsdiscon.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    tskill.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    tsprof.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    tsshutdn.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    twunk_32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    unlodctr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    unregmp2.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    unsecapp.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    uploadm.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    upnpcont.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    ups.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    userinit.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    utilman.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    verifier.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    vssadmin.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    vssvc.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    w32tm.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    wab.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.36 66;Cured.;
    wabmig.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    wb32.exe;C:\WINDOWS\system32\dllcache;Win32.Gael.3 666;Cured.;
    wbemtest.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    wextract.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    WgaTray.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wiaacmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    winchat.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    winhlp32.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    winhstb.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    winlogon.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    winmgmt.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    winmine.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    winmsd.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    winver.exe;C:\WINDOWS\system32\dllcache;Win32.Gael .3666;Cured.;
    wmiadap.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wmiapsrv.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    wmiprvse.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    wmplayer.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    wordpad.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wpabaln.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wpnpinst.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    write.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    wscntfy.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wscript.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wuauclt.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    wuauclt1.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    wupdmgr.exe;C:\WINDOWS\system32\dllcache;Win32.Gae l.3666;Cured.;
    xcopy.exe;C:\WINDOWS\system32\dllcache;Win32.Gael. 3666;Cured.;
    zclientm.exe;C:\WINDOWS\system32\dllcache;Win32.Ga el.3666;Cured.;
    Download.exe;C:\WINDOWS\system32\Macromed\Shockwav e 10;Win32.Gael.3666;Cured.;
    SwInit.exe;C:\WINDOWS\system32\Macromed\Shockwave 10;Win32.Gael.3666;Cured.;
    UNWISE.EXE;C:\WINDOWS\system32\Macromed\Shockwave 10;Win32.Gael.3666;Cured.;
    nppagent.exe;C:\WINDOWS\system32\npp;Win32.Gael.36 66;Cured.;
    msoobe.exe;C:\WINDOWS\system32\oobe;Win32.Gael.366 6;Cured.;
    oobebaln.exe;C:\WINDOWS\system32\oobe;Win32.Gael.3 666;Cured.;
    rstrui.exe;C:\WINDOWS\system32\Restore;Win32.Gael. 3666;Cured.;
    srdiag.exe;C:\WINDOWS\system32\Restore;Win32.Gael. 3666;Cured.;
    HPLTCOL1.EXE;C:\WINDOWS\system32\spool\drivers\w32 x86\3;Win32.Gael.3666;Cured.;
    HPLTLNK.EXE;C:\WINDOWS\system32\spool\drivers\w32x 86\3;Win32.Gael.3666;Cured.;
    HPLTCOL1.EXE;C:\WINDOWS\system32\spool\drivers\w32 x86\hewlett_packarddesigc58e;Win32.Gael.3666;Cured .;
    HPLTLNK.EXE;C:\WINDOWS\system32\spool\drivers\w32x 86\hewlett_packarddesigc58e;Win32.Gael.3666;Cured. ;
    HPLTCOL1.EXE;C:\WINDOWS\system32\spool\drivers\w32 x86\hewlett_packardhp_de4aca;Win32.Gael.3666;Cured .;
    HPLTLNK.EXE;C:\WINDOWS\system32\spool\drivers\w32x 86\hewlett_packardhp_de4aca;Win32.Gael.3666;Cured. ;
    regtlib.exe;C:\WINDOWS\system32\URTTemp;Win32.Gael .3666;Cured.;
    migload.exe;C:\WINDOWS\system32\usmt;Win32.Gael.36 66;Cured.;
    migwiz.exe;C:\WINDOWS\system32\usmt;Win32.Gael.366 6;Cured.;
    migwiz_a.exe;C:\WINDOWS\system32\usmt;Win32.Gael.3 666;Cured.;
    mofcomp.exe;C:\WINDOWS\system32\wbem;Win32.Gael.36 66;Cured.;
    scrcons.exe;C:\WINDOWS\system32\wbem;Win32.Gael.36 66;Cured.;
    unsecapp.exe;C:\WINDOWS\system32\wbem;Win32.Gael.3 666;Cured.;
    wbemtest.exe;C:\WINDOWS\system32\wbem;Win32.Gael.3 666;Cured.;
    winmgmt.exe;C:\WINDOWS\system32\wbem;Win32.Gael.36 66;Cured.;
    wmiadap.exe;C:\WINDOWS\system32\wbem;Win32.Gael.36 66;Cured.;
    wmiprvse.exe;C:\WINDOWS\system32\wbem;Win32.Gael.3 666;Cured.;
    CANOIT32.exe;C:\WINDOWS\twain_32\N122U;Win32.Gael. 3666;Cured.;
    SYSERROR.exe;C:\WINDOWS\twain_32\N122U;Win32.Gael. 3666;Cured.;
  4. 08-05-2007  #14
    biggrim
    biggrim is offline Newbie
    Most Recent combofix log:-

    "Graeme" - 2007-05-08 18:03:19 Service Pack 2
    ComboFix 07-05.07.3.V - Running from: "C:\Documents and Settings\Graeme\Desktop\"


    ((((((((((((((((((((((((((((((( Files Created from 2007-04-08 to 2007-05-08 ))))))))))))))))))))))))))))))))))


    2007-05-08 15:59 <DIR> d-------- C:\DOCUME~1\Graeme\DoctorWeb
    2007-05-04 17:50 49,152 --a------ C:\WINDOWS\nircmd.exe
    2007-05-04 16:31 182,912 --a------ C:\WINDOWS\system32\drivers\ndis.sys
    2007-05-04 16:07 <DIR> d-------- C:\WINDOWS\setup.pss
    2007-05-03 16:26 <DIR> d-------- C:\HJT
    2007-05-03 16:11 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2007-05-01 15:02 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
    2007-05-01 15:00 40,832 --a------ C:\WINDOWS\system32\drivers\motodrv.sys
    2007-05-01 15:00 20,992 --a------ C:\WINDOWS\system32\drivers\motmodem.sys
    2007-05-01 15:00 1,419,232 --a------ C:\WINDOWS\system32\wdfcoinstaller01005.dll
    2007-05-01 15:00 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
    2007-05-01 15:00 <DIR> d-------- C:\Program Files\Motorola
    2007-05-01 15:00 <DIR> d-------- C:\Program Files\Common Files\Motorola Shared
    2007-05-01 12:47 <DIR> d-------- C:\DOCUME~1\Graeme\APPLIC~1\InstallShield
    2007-05-01 12:46 25,600 --a------ C:\WINDOWS\system32\drivers\usbser.sys
    2007-05-01 12:46 <DIR> d-------- C:\Program Files\Avanquest update
    2007-05-01 12:45 92,064 --a------ C:\DOCUME~1\Graeme\mqdmmdm.sys
    2007-05-01 12:45 9,232 --a------ C:\DOCUME~1\Graeme\mqdmmdfl.sys
    2007-05-01 12:45 79,328 --a------ C:\DOCUME~1\Graeme\mqdmserd.sys
    2007-05-01 12:45 66,656 --a------ C:\DOCUME~1\Graeme\mqdmbus.sys
    2007-05-01 12:45 6,208 --a------ C:\DOCUME~1\Graeme\mqdmcmnt.sys
    2007-05-01 12:45 5,936 --a------ C:\DOCUME~1\Graeme\mqdmwhnt.sys
    2007-05-01 12:45 4,048 --a------ C:\DOCUME~1\Graeme\mqdmcr.sys
    2007-05-01 12:45 25,600 --a------ C:\DOCUME~1\Graeme\usbsermptxp.sys
    2007-05-01 12:45 22,768 --a------ C:\DOCUME~1\Graeme\usbsermpt.sys
    2007-05-01 12:45 <DIR> d-------- C:\Program Files\Motorola Phone Tools
    2007-05-01 12:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
    2007-04-10 15:37 <DIR> d-------- C:\Program Files\PocketPool


    (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )))


    2007-05-08 17:02:07 -------- d-----w C:\Program Files\Microsoft ActiveSync
    2007-05-08 15:01:30 117,248 ----a-w C:\WINDOWS\system32\wuauclt.exe
    2007-05-08 15:01:28 13,824 ----a-w C:\WINDOWS\system32\wscntfy.exe
    2007-05-08 15:01:20 57,856 ----a-w C:\WINDOWS\system32\spoolsv.exe
    2007-05-08 15:01:14 33,280 ----a-w C:\WINDOWS\system32\rundll32.exe
    2007-05-08 15:00:28 15,360 ----a-w C:\WINDOWS\system32\ctfmon.exe
    2007-05-08 15:00:22 44,544 ----a-w C:\WINDOWS\system32\alg.exe
    2007-05-03 08:58:42 283,648 ----a-w C:\WINDOWS\winhlp32.exe
    2007-05-03 08:58:40 30,720 ----a-w C:\WINDOWS\system32\xcopy.exe
    2007-05-03 08:58:40 29,696 ----a-w C:\WINDOWS\system32\xmlinst.exe
    2007-05-03 08:58:40 25,600 ----a-w C:\WINDOWS\twunk_32.exe
    2007-05-03 08:58:40 15,360 ----a-w C:\WINDOWS\TASKMAN.EXE
    2007-05-03 08:58:38 5,632 ----a-w C:\WINDOWS\system32\write.exe
    2007-05-03 08:58:38 32,256 ----a-w C:\WINDOWS\system32\wupdmgr.exe
    2007-05-03 08:58:38 32,256 ----a-w C:\WINDOWS\system32\wpnpinst.exe
    2007-05-03 08:58:38 32,256 ----a-w C:\WINDOWS\system32\wpabaln.exe
    2007-05-03 08:58:38 17,408 ----a-w C:\WINDOWS\system32\wpdshextautoplay.exe
    2007-05-03 08:58:38 165,376 ----a-w C:\WINDOWS\system32\wuauclt1.exe
    2007-05-03 08:58:38 146,432 ----a-w C:\WINDOWS\system32\WudfHost.exe
    2007-05-03 08:58:38 114,688 ----a-w C:\WINDOWS\system32\wscript.exe
    2007-05-03 08:58:36 8,704 ----a-w C:\WINDOWS\system32\wdfmgr.exe
    2007-05-03 08:58:36 8,192 ----a-w C:\WINDOWS\system32\winhlp32.exe
    2007-05-03 08:58:36 65,536 ----a-w C:\WINDOWS\system32\wextract.exe
    2007-05-03 08:58:36 5,632 ----a-w C:\WINDOWS\system32\winver.exe
    2007-05-03 08:58:36 433,664 ----a-w C:\WINDOWS\system32\wiaacmgr.exe
    2007-05-03 08:58:36 35,328 ----a-w C:\WINDOWS\system32\winchat.exe
    2007-05-03 08:58:36 189,952 ----a-w C:\WINDOWS\system32\WISPTIS.EXE
    2007-05-03 08:58:36 119,808 ----a-w C:\WINDOWS\system32\winmine.exe
    2007-05-03 08:58:36 11,776 ----a-w C:\WINDOWS\system32\winmsd.exe
    2007-05-03 08:58:32 49,664 ----a-w C:\WINDOWS\system32\w32tm.exe
    2007-05-03 08:58:32 289,792 ----a-w C:\WINDOWS\system32\vssvc.exe
    2007-05-03 08:58:30 98,304 ----a-w C:\WINDOWS\system32\verifier.exe
    2007-05-03 08:58:30 8,704 ----a-w C:\WINDOWS\system32\uwdf.exe
    2007-05-03 08:58:30 77,824 ----a-w C:\WINDOWS\system32\usrmlnka.exe
    2007-05-03 08:58:30 69,632 ----a-w C:\WINDOWS\system32\usrshuta.exe
    2007-05-03 08:58:30 61,440 ----a-w C:\WINDOWS\system32\usrprbda.exe
    2007-05-03 08:58:30 50,176 ----a-w C:\WINDOWS\system32\utilman.exe
    2007-05-03 08:58:30 33,792 ----a-w C:\WINDOWS\system32\vssadmin.exe
    2007-05-03 08:58:30 28,672 ----a-w C:\WINDOWS\system32\verclsid.exe
    2007-05-03 08:58:30 24,576 ----a-w C:\WINDOWS\system32\userinit.exe
    2007-05-03 08:58:30 18,432 ----a-w C:\WINDOWS\system32\ups.exe
    2007-05-03 08:58:28 75,776 ----a-w C:\WINDOWS\system32\telnet.exe
    2007-05-03 08:58:28 44,544 ----a-w C:\WINDOWS\system32\tscupgrd.exe
    2007-05-03 08:58:28 4,096 ----a-w C:\WINDOWS\system32\unlodctr.exe
    2007-05-03 08:58:28 347,136 ----a-w C:\WINDOWS\system32\tourstart.exe
    2007-05-03 08:58:28 31,744 ----a-w C:\WINDOWS\system32\tracert6.exe
    2007-05-03 08:58:28 3,072 ----a-w C:\WINDOWS\system32\systray.exe
    2007-05-03 08:58:28 19,456 ----a-w C:\WINDOWS\system32\tcpsvcs.exe
    2007-05-03 08:58:28 16,896 ----a-w C:\WINDOWS\system32\upnpcont.exe
    2007-05-03 08:58:28 16,896 ----a-w C:\WINDOWS\system32\tsshutdn.exe
    2007-05-03 08:58:28 16,896 ----a-w C:\WINDOWS\system32\tftp.exe
    2007-05-03 08:58:28 16,384 ----a-w C:\WINDOWS\system32\tskill.exe
    2007-05-03 08:58:28 15,360 ----a-w C:\WINDOWS\system32\taskman.exe
    2007-05-03 08:58:28 14,848 ----a-w C:\WINDOWS\system32\tsdiscon.exe
    2007-05-03 08:58:28 14,848 ----a-w C:\WINDOWS\system32\tscon.exe
    2007-05-03 08:58:28 135,680 ----a-w C:\WINDOWS\system32\taskmgr.exe
    2007-05-03 08:58:28 12,288 ----a-w C:\WINDOWS\system32\tracert.exe
    2007-05-03 08:58:28 12,288 ----a-w C:\WINDOWS\system32\tcmsetup.exe
    2007-05-03 08:58:26 9,728 ----a-w C:\WINDOWS\system32\sprestrt.exe
    2007-05-03 08:58:26 9,216 ----a-w C:\WINDOWS\system32\subst.exe
    2007-05-03 08:58:26 51,200 ----a-w C:\WINDOWS\system32\syncapp.exe
    2007-05-03 08:58:26 36,864 ----a-w C:\WINDOWS\system32\syskey.exe
    2007-05-03 08:58:26 16,896 ----a-w C:\WINDOWS\system32\spupdsvc.exe
    2007-05-03 08:58:26 14,848 ----a-w C:\WINDOWS\system32\stimon.exe
    2007-05-03 08:58:26 105,984 ----a-w C:\WINDOWS\system32\sysocmgr.exe
    2007-05-03 08:58:22 9,728 ----a-w C:\WINDOWS\system32\sfc.exe
    2007-05-03 08:58:22 89,600 ----a-w C:\WINDOWS\system32\smlogsvc.exe
    2007-05-03 08:58:22 8,192 ----a-w C:\WINDOWS\system32\smbinst.exe
    2007-05-03 08:58:22 77,824 ----a-w C:\WINDOWS\system32\shrpubw.exe
    2007-05-03 08:58:22 70,144 ----a-w C:\WINDOWS\system32\sigverif.exe
    2007-05-03 08:58:22 56,832 ----a-w C:\WINDOWS\system32\sol.exe
    2007-05-03 08:58:22 538,624 ----a-w C:\WINDOWS\system32\spider.exe
    2007-05-03 08:58:22 42,496 ----a-w C:\WINDOWS\system32\shmgrate.exe
    2007-05-03 08:58:22 26,112 ----a-w C:\WINDOWS\system32\skeys.exe
    2007-05-03 08:58:22 23,552 ----a-w C:\WINDOWS\system32\sort.exe
    2007-05-03 08:58:22 23,040 ----a-w C:\WINDOWS\system32\setup.exe
    2007-05-03 08:58:22 19,456 ----a-w C:\WINDOWS\system32\shutdown.exe
    2007-05-03 08:58:22 14,848 ----a-w C:\WINDOWS\system32\shadow.exe
    2007-05-03 08:58:22 138,752 ----a-w C:\WINDOWS\system32\sndvol32.exe
    2007-05-03 08:58:22 131,584 ----a-w C:\WINDOWS\system32\sndrec32.exe
    2007-05-03 08:58:22 11,776 ----a-w C:\WINDOWS\system32\spnpinst.exe
    2007-05-03 08:58:20 95,744 ----a-w C:\WINDOWS\system32\scardsvr.exe
    2007-05-03 08:58:20 77,312 ----a-w C:\WINDOWS\system32\sdbinst.exe
    2007-05-03 08:58:20 31,232 ----a-w C:\WINDOWS\system32\sethc.exe
    2007-05-03 08:58:20 31,232 ----a-w C:\WINDOWS\system32\sc.exe
    2007-05-03 08:58:20 15,872 ----a-w C:\WINDOWS\system32\rwinsta.exe
    2007-05-03 08:58:20 140,800 ----a-w C:\WINDOWS\system32\sessmgr.exe
    2007-05-03 08:58:20 14,336 ----a-w C:\WINDOWS\system32\runonce.exe
    2007-05-03 08:58:20 13,312 ----a-w C:\WINDOWS\system32\savedump.exe
    2007-05-03 08:58:18 9,728 ----a-w C:\WINDOWS\system32\reset.exe
    2007-05-03 08:58:18 77,312 ----a-w C:\WINDOWS\system32\rtcshare.exe
    2007-05-03 08:58:18 7,168 ----a-w C:\WINDOWS\system32\recover.exe
    2007-05-03 08:58:18 50,176 ----a-w C:\WINDOWS\system32\reg.exe
    2007-05-03 08:58:18 49,152 ----a-w C:\WINDOWS\system32\rsmui.exe
    2007-05-03 08:58:18 49,152 ----a-w C:\WINDOWS\system32\rsm.exe
    2007-05-03 08:58:18 4,608 ----a-w C:\WINDOWS\system32\regwiz.exe
    2007-05-03 08:58:18 33,792 ----a-w C:\WINDOWS\system32\regini.exe
    2007-05-03 08:58:18 3,584 ----a-w C:\WINDOWS\system32\regedt32.exe
    2007-05-03 08:58:18 25,600 ----a-w C:\WINDOWS\system32\routemon.exe
    2007-05-03 08:58:18 24,576 ----a-w C:\WINDOWS\system32\rsmsink.exe
    2007-05-03 08:58:18 19,968 ----a-w C:\WINDOWS\system32\route.exe
    2007-05-03 08:58:18 16,384 ----a-w C:\WINDOWS\system32\runas.exe
    2007-05-03 08:58:18 14,848 ----a-w C:\WINDOWS\system32\rsh.exe
    2007-05-03 08:58:18 132,608 ----a-w C:\WINDOWS\system32\rsvp.exe
    2007-05-03 08:58:18 13,824 ----a-w C:\WINDOWS\system32\rexec.exe
    2007-05-03 08:58:18 12,800 ----a-w C:\WINDOWS\system32\replace.exe
    2007-05-03 08:58:18 11,776 ----a-w C:\WINDOWS\system32\regsvr32.exe
    2007-05-03 08:58:16 9,216 ----a-w C:\WINDOWS\system32\proxycfg.exe
    2007-05-03 08:58:16 9,216 ----a-w C:\WINDOWS\system32\print.exe
    2007-05-03 08:58:16 67,072 ----a-w C:\WINDOWS\system32\rdshost.exe
    2007-05-03 08:58:16 62,464 ----a-w C:\WINDOWS\system32\rdpclip.exe
    2007-05-03 08:58:16 56,832 ----a-w C:\WINDOWS\system32\rasphone.exe
    2007-05-03 08:58:16 50,176 ----a-w C:\WINDOWS\system32\proquota.exe
    2007-05-03 08:58:16 49,152 ----a-w C:\WINDOWS\system32\powercfg.exe
    2007-05-03 08:58:16 35,840 ----a-w C:\WINDOWS\system32\rcimlby.exe
    2007-05-03 08:58:16 22,016 ----a-w C:\WINDOWS\system32\qwinsta.exe
    2007-05-03 08:58:16 21,504 ----a-w C:\WINDOWS\system32\rcp.exe
    2007-05-03 08:58:16 20,480 ----a-w C:\WINDOWS\system32\qprocess.exe
    2007-05-03 08:58:16 16,896 ----a-w C:\WINDOWS\system32\qappsrv.exe
    2007-05-03 08:58:16 13,824 ----a-w C:\WINDOWS\system32\rdsaddin.exe
    2007-05-03 08:58:16 11,776 ----a-w C:\WINDOWS\system32\rasautou.exe
    2007-05-03 08:58:16 11,264 ----a-w C:\WINDOWS\system32\rasdial.exe
    2007-05-03 08:58:16 109,568 ----a-w C:\WINDOWS\system32\progman.exe
    2007-05-03 08:58:14 58,368 ----a-w C:\WINDOWS\system32\packager.exe
    2007-05-03 08:58:14 40,448 ----a-w C:\WINDOWS\system32\osuninst.exe
    2007-05-03 08:58:14 33,280 ----a-w C:\WINDOWS\system32\ping6.exe
    2007-05-03 08:58:14 215,552 ----a-w C:\WINDOWS\system32\osk.exe
    2007-05-03 08:58:14 21,504 ----a-w C:\WINDOWS\system32\pathping.exe
    2007-05-03 08:58:14 17,920 ----a-w C:\WINDOWS\system32\ping.exe
    2007-05-03 08:58:14 15,872 ----a-w C:\WINDOWS\system32\perfmon.exe
    2007-05-03 08:58:14 15,360 ----a-w C:\WINDOWS\system32\pentnt.exe
    2007-05-03 08:58:08 76,800 ----a-w C:\WINDOWS\system32\nslookup.exe
    2007-05-03 08:58:08 69,632 ----a-w C:\WINDOWS\system32\odbcconf.exe
    2007-05-03 08:58:08 69,120 ----a-w C:\WINDOWS\system32\notepad.exe
    2007-05-03 08:58:08 419,840 ----a-w C:\WINDOWS\system32\ntvdm.exe
    2007-05-03 08:58:08 32,768 ----a-w C:\WINDOWS\system32\odbcad32.exe
    2007-05-03 08:58:08 31,744 ----a-w C:\WINDOWS\system32\ntsd.exe
    2007-05-03 08:58:06 86,016 ----a-w C:\WINDOWS\system32\netsh.exe
    2007-05-03 08:58:06 53,760 ----a-w C:\WINDOWS\system32\narrator.exe
    2007-05-03 08:58:06 42,496 ----a-w C:\WINDOWS\system32\net.exe
    2007-05-03 08:58:06 4,096 ----a-w C:\WINDOWS\system32\nddeapir.exe
    2007-05-03 08:58:06 36,864 ----a-w C:\WINDOWS\system32\netstat.exe
    2007-05-03 08:58:06 331,776 ----a-w C:\WINDOWS\system32\netsetup.exe
    2007-05-03 08:58:06 237,568 ----a-w C:\WINDOWS\system32\NCTAudioConvert3.exe
    2007-05-03 08:58:06 20,480 ----a-w C:\WINDOWS\system32\nbtstat.exe
    2007-05-03 08:58:06 124,928 ----a-w C:\WINDOWS\system32\net1.exe
    2007-05-03 08:58:06 111,104 ----a-w C:\WINDOWS\system32\netdde.exe
    2007-05-03 08:58:04 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe
    2007-05-03 08:58:04 6,656 ----a-w C:\WINDOWS\system32\msswchx.exe
    2007-05-03 08:58:04 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
    2007-05-03 08:58:04 407,552 ----a-w C:\WINDOWS\system32\mstsc.exe
    2007-05-03 08:58:04 343,040 ----a-w C:\WINDOWS\system32\mspaint.exe
    2007-05-03 08:58:04 20,992 ----a-w C:\WINDOWS\system32\msg.exe
    2007-05-03 08:58:04 126,976 ----a-w C:\WINDOWS\system32\mshearts.exe
    2007-05-03 08:58:04 12,288 ----a-w C:\WINDOWS\system32\mstinit.exe
    2007-05-03 08:58:02 6,144 ----a-w C:\WINDOWS\system32\msdtc.exe
    2007-05-03 08:58:00 815,104 ----a-w C:\WINDOWS\system32\mmc.exe
    2007-05-03 08:58:00 8,192 ----a-w C:\WINDOWS\system32\mountvol.exe
    2007-05-03 08:58:00 51,712 ----a-w C:\WINDOWS\system32\migpwd.exe
    2007-05-03 08:58:00 32,768 ----a-w C:\WINDOWS\system32\mnmsrvc.exe
    2007-05-03 08:58:00 22,016 ----a-w C:\WINDOWS\system32\mpnotify.exe
    2007-05-03 08:58:00 143,360 ----a-w C:\WINDOWS\system32\mobsync.exe
    2007-05-03 08:58:00 123,392 ----a-w C:\WINDOWS\system32\mplay32.exe
    2007-05-03 08:58:00 12,800 ----a-w C:\WINDOWS\system32\mrinfo.exe
    2007-05-03 08:57:58 85,504 ----a-w C:\WINDOWS\system32\makecab.exe
    2007-05-03 08:57:58 72,704 ----a-w C:\WINDOWS\system32\magnify.exe
    2007-05-03 08:57:58 37,888 ----a-w C:\WINDOWS\system32\MAPISRVR.EXE
    2007-05-03 08:57:56 8,192 ----a-w C:\WINDOWS\system32\lpr.exe
    2007-05-03 08:57:56 6,144 ----a-w C:\WINDOWS\system32\lpq.exe
    2007-05-03 08:57:56 59,392 ----a-w C:\WINDOWS\system32\logman.exe
    2007-05-03 08:57:56 514,560 ----a-w C:\WINDOWS\system32\logonui.exe
    2007-05-03 08:57:56 15,360 ----a-w C:\WINDOWS\system32\logoff.exe
    2007-05-03 08:57:54 9,728 ----a-w C:\WINDOWS\system32\label.exe
    2007-05-03 08:57:54 75,264 ----a-w C:\WINDOWS\system32\locator.exe
    2007-05-03 08:57:54 5,120 ----a-w C:\WINDOWS\system32\lodctr.exe
    2007-05-03 08:57:54 29,696 ----a-w C:\WINDOWS\system32\lights.exe
    2007-05-03 08:57:54 25,088 ----a-w C:\WINDOWS\system32\lnkstub.exe
    2007-05-03 08:57:54 100,864 ----a-w C:\WINDOWS\system32\logagent.exe
    2007-05-03 08:57:52 55,808 ----a-w C:\WINDOWS\system32\ipconfig.exe
    2007-05-03 08:57:52 53,248 ----a-w C:\WINDOWS\system32\ipv6.exe
    2007-05-03 08:57:52 44,032 ----a-w C:\WINDOWS\system32\ipsec6.exe
    2007-05-03 08:57:52 23,552 ----a-w C:\WINDOWS\system32\ipxroute.exe
    2007-05-03 08:57:52 152,576 ----a-w C:\WINDOWS\system32\irftp.exe
    2007-05-03 08:57:52 150,016 ----a-w C:\WINDOWS\system32\imapi.exe
    2007-05-03 08:57:50 7,680 ----a-w C:\WINDOWS\system32\hostname.exe
    2007-05-03 08:57:50 39,424 ----a-w C:\WINDOWS\system32\grpconv.exe
    2007-05-03 08:57:50 14,848 ----a-w C:\WINDOWS\system32\help.exe
    2007-05-03 08:57:50 114,688 ----a-w C:\WINDOWS\system32\iexpress.exe
    2007-05-03 08:57:48 9,216 ----a-w C:\WINDOWS\system32\finger.exe
    2007-05-03 08:57:48 9,216 ----a-w C:\WINDOWS\system32\find.exe
    2007-05-03 08:57:48 8,704 ----a-w C:\WINDOWS\system32\eventvwr.exe
    2007-05-03 08:57:48 7,168 ----a-w C:\WINDOWS\system32\forcedos.exe
    2007-05-03 08:57:48 56,320 ----a-w C:\WINDOWS\system32\fsutil.exe
    2007-05-03 08:57:48 55,296 ----a-w C:\WINDOWS\system32\freecell.exe
    2007-05-03 08:57:48 45,568 ----a-w C:\WINDOWS\system32\extrac32.exe
    2007-05-03 08:57:48 42,496 ----a-w C:\WINDOWS\system32\ftp.exe
    2007-05-03 08:57:48 39,424 ----a-w C:\WINDOWS\system32\esentutl.exe
    2007-05-03 08:57:48 3,072 ----a-w C:\WINDOWS\system32\fixmapi.exe
    2007-05-03 08:57:48 27,136 ----a-w C:\WINDOWS\system32\findstr.exe
    2007-05-03 08:57:48 23,040 ----a-w C:\WINDOWS\system32\fltmc.exe
    2007-05-03 08:57:48 20,992 ----a-w C:\WINDOWS\system32\fontview.exe
    2007-05-03 08:57:48 193,024 ----a-w C:\WINDOWS\system32\fsquirt.exe
    2007-05-03 08:57:48 193,024 ----a-w C:\WINDOWS\system32\eudcedit.exe
    2007-05-03 08:57:48 15,872 ----a-w C:\WINDOWS\system32\expand.exe
    2007-05-03 08:57:48 14,848 ----a-w C:\WINDOWS\system32\fc.exe
    2007-05-03 08:57:46 55,296 ----a-w C:\WINDOWS\system32\dvdplay.exe
    2007-05-03 08:57:46 45,568 ----a-w C:\WINDOWS\system32\drwtsn32.exe
    2007-05-03 08:57:46 180,224 ----a-w C:\WINDOWS\system32\dwwin.exe
    2007-05-03 08:57:46 17,920 ----a-w C:\WINDOWS\system32\dvdupgrd.exe
    2007-05-03 08:57:46 10,752 ----a-w C:\WINDOWS\system32\dumprep.exe
    2007-05-03 08:57:46 1,298,432 ----a-w C:\WINDOWS\system32\dxdiag.exe
    2007-05-03 08:57:44 249,856 ----a-w C:\WINDOWS\system32\drmupgds.exe
    2007-05-03 08:57:40 83,456 ----a-w C:\WINDOWS\system32\dpvsetup.exe
    2007-05-03 08:57:40 4,608 ----a-w C:\WINDOWS\system32\dllhst3g.exe
    2007-05-03 08:57:40 30,208 ----a-w C:\WINDOWS\system32\dplaysvr.exe
    2007-05-03 08:57:40 224,768 ----a-w C:\WINDOWS\system32\dmadmin.exe
    2007-05-03 08:57:40 18,432 ----a-w C:\WINDOWS\system32\dpnsvr.exe
    2007-05-03 08:57:40 15,872 ----a-w C:\WINDOWS\system32\dmremote.exe
    2007-05-03 08:57:40 10,752 ----a-w C:\WINDOWS\system32\doskey.exe
    2007-05-03 0844 17,920 ----a-w C:\WINDOWS\system32\diskperf.exe
    2007-05-03 0844 163,840 ----a-w C:\WINDOWS\system32\diskpart.exe
    2007-05-03 0840 85,504 ----a-w C:\WINDOWS\system32\diantz.exe
    2007-05-03 0840 82,432 ----a-w C:\WINDOWS\system32\dfrgfat.exe
    2007-05-03 0840 5,120 ----a-w C:\WINDOWS\system32\dcomcnfg.exe
    2007-05-03 0840 30,208 ----a-w C:\WINDOWS\system32\ddeshare.exe
    2007-05-03 0840 25,088 ----a-w C:\WINDOWS\system32\defrag.exe
    2007-05-03 0838 98,304 ----a-w C:\WINDOWS\system32\cscript.exe
    2007-05-03 0838 8,192 ----a-w C:\WINDOWS\system32\control.exe
    2007-05-03 0838 27,648 ----a-w C:\WINDOWS\system32\conime.exe
    2007-05-03 0838 13,824 ----a-w C:\WINDOWS\system32\convert.exe
    2007-05-03 0834 63,488 ----a-w C:\WINDOWS\system32\cmstp.exe
    2007-05-03 0834 47,104 ----a-w C:\WINDOWS\system32\cmdl32.exe
    2007-05-03 0834 39,936 ----a-w C:\WINDOWS\system32\cmmon32.exe
    2007-05-03 0834 388,608 ----a-w C:\WINDOWS\system32\cmd.exe
    2007-05-03 0834 33,280 ----a-w C:\WINDOWS\system32\clipsrv.exe
    2007-05-03 0834 17,408 ----a-w C:\WINDOWS\system32\compact.exe
    2007-05-03 0834 15,872 ----a-w C:\WINDOWS\system32\comp.exe
    2007-05-03 0834 102,912 ----a-w C:\WINDOWS\system32\clipbrd.exe
    2007-05-03 0832 80,384 ----a-w C:\WINDOWS\system32\charmap.exe
    2007-05-03 0832 8,192 ----a-w C:\WINDOWS\system32\cidaemon.exe
    2007-05-03 0832 7,680 ----a-w C:\WINDOWS\system32\ckcnv.exe
    2007-05-03 0832 64,000 ----a-w C:\WINDOWS\system32\cleanmgr.exe
    2007-05-03 0832 5,632 ----a-w C:\WINDOWS\system32\cisvc.exe
    2007-05-03 0832 20,480 ----a-w C:\WINDOWS\system32\cliconfg.exe
    2007-05-03 0832 11,776 ----a-w C:\WINDOWS\system32\chkdsk.exe
    2007-05-03 0832 11,264 ----a-w C:\WINDOWS\system32\chkntfs.exe
    2007-05-03 0830 71,680 ----a-w C:\WINDOWS\system32\blastcln.exe
    2007-05-03 0830 5,120 ----a-w C:\WINDOWS\system32\bootvrfy.exe
    2007-05-03 0830 4,608 ----a-w C:\WINDOWS\system32\bootok.exe
    2007-05-03 0830 18,432 ----a-w C:\WINDOWS\system32\cacls.exe
    2007-05-03 0830 114,688 ----a-w C:\WINDOWS\system32\calc.exe
    2007-05-03 0828 98,304 ----a-w C:\WINDOWS\system32\ahui.exe
    2007-05-03 0828 602,624 ----a-w C:\WINDOWS\system32\autoconv.exe
    2007-05-03 0828 588,800 ----a-w C:\WINDOWS\system32\autochk.exe
    2007-05-03 0828 580,608 ----a-w C:\WINDOWS\system32\autofmt.exe
    2007-05-03 0828 4,096 ----a-w C:\WINDOWS\system32\actmovie.exe
    2007-05-03 0828 25,088 ----a-w C:\WINDOWS\system32\at.exe
    2007-05-03 0828 221,696 ----a-w C:\WINDOWS\system32\AcSignOpt.exe
    2007-05-03 0828 19,456 ----a-w C:\WINDOWS\system32\arp.exe
    2007-05-03 0828 183,808 ----a-w C:\WINDOWS\system32\accwiz.exe
    2007-05-03 0828 14,336 ----a-w C:\WINDOWS\system32\auditusr.exe
    2007-05-03 0828 11,264 ----a-w C:\WINDOWS\system32\autolfn.exe
    2007-05-03 0828 11,264 ----a-w C:\WINDOWS\system32\attrib.exe
    2007-05-03 0828 11,264 ----a-w C:\WINDOWS\system32\atmadm.exe
    2007-05-03 0826 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE
    2007-05-03 0822 245,760 ----a-w C:\WINDOWS\Setup1.exe
    2007-05-03 0820 146,432 ----a-w C:\WINDOWS\regedit.exe
    2007-05-03 0800 69,120 ----a-w C:\WINDOWS\NOTEPAD.EXE
    2007-05-03 08:55:52 306,688 ----a-w C:\WINDOWS\IsUninst.exe
    2007-05-03 08:55:10 38,400 ----a-w C:\WINDOWS\HPLTLNK.EXE
    2007-05-03 08:55:10 10,752 ----a-w C:\WINDOWS\hh.exe
    2007-05-01 11:47:38 -------- d-----w C:\DOCUME~1\Graeme\APPLIC~1.\InstallShield
    2007-05-01 11:46:42 -------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-03-17 13:43:01 292,864 ----a-w C:\WINDOWS\system32\winsrv.dll
    2007-03-08 15:36:28 577,536 ----a-w C:\WINDOWS\system32\user32.dll
    2007-03-08 15:36:28 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
    2007-03-08 15:36:28 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
    2007-03-08 13:47:48 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys


    (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects]
    "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}"="C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll"
    "{AE7CD045-E861-484f-8273-0445EE161910}"="C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run]
    "Acrobat Assistant 7.0"="\"C:\\Program Files\\Adobe\\Acrobat 7.0\\Distillr\\Acrotray.exe\""
    @=""
    "BluetoothAuthenticationAgent"="rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent"
    "OLP-Tray"="C:\\PROGRA~1\\ROYALM~1\\SMARTS~1\\BINARY\\S TRAY.EXE"
    "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
    "combofix"="C:\\WINDOWS\\system32\\cmd.exe /c \\Combobatch.bat"

    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run]
    "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.ex e"
    "H/PC Connection Agent"="\"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks]
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll"


    HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa
    Authentication Packages msv1_0\0\0
    Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0
    Notification Packages scecli\0\0




    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost]
    HTTPFilter HTTPFilter\0\0
    LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnph ost\0SSDPSRV\0\0
    NetworkService DnsCache\0\0
    DcomLaunch DcomLaunch\0TermService\0\0
    rpcss RpcSs\0\0
    imgsvc StiSvc\0\0
    termsvcs TermService\0\0
    bthsvcs BthServ\0\0
    WudfServiceGroup WUDFSvc\0\0

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost


    [HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\MountPoints2\{c2eb7df2-7f98-11db-8eae-003018736265}]
    Shell\AutoRun\command D:\InstallTomTomHOME.exe

    ************************************************** ******************

    catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-05-08 18:04:31
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0


    ************************************************** ******************

    Completion time: 2007-05-08 18:04:32
    C:\ComboFix-quarantined-files.txt ... 2007-05-08 18:04
    C:\ComboFix2.txt ... 2007-05-04 17:50
    C:\ComboFixlog.txt ... 2007-05-04 17:56
  5. 08-05-2007  #15
    biggrim
    biggrim is offline Newbie
    Dr Web seems to have sorted everything. There were ALOT of issues. My PC seems to be running faster than ever so far. Internet is ok, networking is ok. I haven't yet checked my e-mails (outlook) as I don't want to get re-infected. What can I use to scan my e-mails?
    Is my problem now gone????
  6. 08-05-2007  #16
    Neal
    Neal is offline Dedicated Member
    That little sucker was everywhere wasn't it.

    I had a brain storm when I thought of Doctor Web.

    Yes that worm came by email, maybe as an attachment.

    I use Avast and it scans all incoming mail so does AVG and both are free.

    Do you even have an anti-virus program?

    AVG or Avast will compliment AVG anti-spyware really well.

    If you don't have anti-virus get it now before it is to late.


    http://free.grisoft.com/doc/1

    http://www.avast.com/
    Last edited by Neal; 08-05-2007 at 06:58 PM.
  7. 08-05-2007  #17
    biggrim
    biggrim is offline Newbie
    Thanks Neal,

    I downloaded AVG Anti-virus to go with the spyware. Just need to set it up to work with my outlook. I really can't be bothered with that hassle again. At least I have a better idea of howto deal with this if it happens again. Hopefully it won't.

    I just want to say a big thanks to everybody who pitchedin and helped me get to the bottom of this and erradicate that nasty little mo' fo'.

    CHEERS!!!!

    Graeme
  8. 09-05-2007  #18
    Neal
    Neal is offline Dedicated Member
    Save 20% on AVG Internet Security 2012 Suite!
    If you are no longer having any more trouble here is some preventative measures for you.

    Be sure to re-hide hidden files/folders if you were asked to unhide them

    Here are some preventive measures you can take to keep your computer from getting infected again. also keep all these and Ad-awareSE and SpybotS&D updated.

    http://www.d-a-l.com/help/showthread.php?t=32403

    Flush your restore points in ME and XP, by turning System Restore off and then back on.
    This will create a fresh restore point.

    Explained Here:
    Windows XP: http://vil.nai.com/vil/SystemHelpDoc...ysRestore.aspx

    Explained Here
    Microsoft ME:
    http://service1.symantec.com/SUPPORT...rc=sec_doc_nam


    RegProtect

    This small registry protection tool will save you hours of heartache by notifying you when some program good or bad is trying to access your registry.

    You have the option of allowing(good) items or blocking(bad)items.

    http://www.diamondcs.com.au/index.php?page=regprot


    To reduce the re-infection potential for malware and protect yourself against spyware, here are a few helpful suggestions:

    1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft. This will patch many of the security holes through which attackers can gain access to your computer. You CANNOT complete this update using an alternate browser.
    http://v5.windowsupdate.microsoft.co....aspx?ln=en-us

    http://www.microsoft.com/windows/ie/default.asp


    2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching, there are a some good free Antivirus programs that are decent, including AVG and Avast!.
    AVG: http://free.grisoft.com/doc/1

    Avast: http://www.avast.com/eng/avast_4_home.html


    3. In addtion to using Ad-aware consider using another free malware scanning/removal program:
    Windows Defender

    http://www.microsoft.com/athome/secu...e/default.mspx


    4. Consider using a free firewall if you are not already using one. Some good free ones are:
    Kerio
    http://www.sunbelt-software.com/Kerio.cfm

    Zone Labs Personal Firewall:
    Zone Labs



    5. Consider using an alternate free browser for general web surfing but you must use IE for windows update.
    Mozilla Firefox: www.mozilla.org/products/firefox/


    6. Consider increasing your browser security by using these programs:
    SpywareGuard will protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html
    SpywareBlaster will increase browser protection by blocking Thousands of known malware sites by adding them to IE's restricted sites zone. Download it here:

    http://www.javacoolsoftware.com/spywareblaster.html


    If you use SpywareBlaster, you can also use a customblocklist to add even more entries into IE restricted sites zone. Go to this site for the current list and how to use instructions: http://customblockinglist.cjb.net/


    IE-SPYAD is similar in that it adds thousands more known malware sites to IE's restricted zone. Download it here:
    https://netfiles.uiuc.edu/ehowes/www/resource.htm


    Block access to Untrustworthy Sites

    You can prevent your computer from visiting a myriad of untrustworthy sites and ad-servers by installing a customised hosts file. One of the best available is the: MVPS Hosts File. Simply follow the instructions to install the file in the correct location. This will not only make surfing safer but will improve website load times and block popups from many of the large ad-servers.



    *Remember just like your primary anti-virus software, it is important to keep all of these programs up-to-date and use them on a regular basis. It's Free
+ Reply to Thread
Page 2 of 2 FirstFirst 1 2
« General miss-behaving | Hijack This Log/Error 0E 0177 BFF8E64B »