Websites Redirected(RESOLVED)

  1. 30-07-2009  #1
    bassman1365
    bassman1365 is offline Newbie

    Smile Websites Redirected(RESOLVED)

    Hello,

    I am new on here and wondered if someone would be able to help.

    I have a problem accessing two (so far) secure website.

    Basically having typed the site into the address bar (In Explorer or Firefox) and pressing the enter key instead of loading up the websites in question I end up loading up some kind of Russian Forum (I believe called 'Slody's Homepage').

    The address typed into the bar displays as the correct one but for some reason loads up the Russian forum.

    Prior to this problem I was having problems loading onto the sites (Apache server error).

    I have run anti virus scans with McAfee (Stated no virus detected) and have cleared the cookies etc but to no avail, I am still left with this problem.

    I am running XP service pack 1 I believe.

    I am concerned that I have a virus or spyware on the computer which I can't find.

    Any help at all would be appreciated.

    Many thanks in advance.
  2. 31-07-2009  #2
    Neal
    Neal is offline Dedicated Member
    Please download and install the latest version of HijackThis v2.0.2:

    CLICK HERE to download the HijackThis Installer:TrendSecure | Download TrendMicro HijackThis

    1. Save HJTInstall.exe to your desktop.
    2. Double-click on HJTInstall.exe to run the program.
    3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
    4. Accept the license agreement by clicking the "I Accept" button.
    5. Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
    6. Click "Save log" to save the log file and then the log will open in Notepad.
    7. Click on "Edit -> Select All" then click on "Edit -> Copy" to copy the entire contents of the log.
    8. Come back here to this thread and paste the log in your next reply.
    9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.
  3. 31-07-2009  #3
    bassman1365
    bassman1365 is offline Newbie
    Thanks for replying, it is appreciated.

    I have installed the software and the results are as follows.....

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:11:34, on 31/07/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\Explorer.EXE
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\USB Storage RW\shwicon.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\Real\RealJukebox\tsystray.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = BBC NEWS | News Front Page
    O1 - Hosts: 82.146.56.35 personal.barclays.co.uk
    O1 - Hosts: 82.146.56.35 barclays.co.uk
    O1 - Hosts: 82.146.56.35 ibank.barclays.co.uk
    O1 - Hosts: 82.146.56.35 Personal Banking - Barclays Personal Banking
    O1 - Hosts: 82.146.56.35 hsbc.co.uk
    O1 - Hosts: 82.146.56.35 Personal banking: product, service, online, internet: HSBC Bank UK
    O1 - Hosts: 82.146.56.35 personal.hsbc.co.uk
    O1 - Hosts: 82.146.56.35 abbey.com
    O1 - Hosts: 82.146.56.35 Abbey Personal Banking
    O1 - Hosts: 82.146.56.35 Abbey Personal Banking
    O1 - Hosts: 82.146.56.35 abbey.co.uk
    O1 - Hosts: 82.146.56.35 Banesto
    O1 - Hosts: 82.146.56.35 banesto.es
    O1 - Hosts: 82.146.56.35 Index Publico
    O1 - Hosts: 82.146.56.35 bbvanet.com
    O1 - Hosts: 82.146.56.35 Halifax Online Banking - UK Banks, Finance, Personal, Telephone & Internet Banking
    O1 - Hosts: 82.146.56.35 halifax.co.uk
    O1 - Hosts: 82.146.56.35 bankofscotlandhalifax.co.uk
    O1 - Hosts: 82.146.56.35 www.bankofscotlandhalifax-online.co.uk
    O1 - Hosts: 82.146.56.35 The Co-operative Bank | Personal banking | Online banking
    O1 - Hosts: 82.146.56.35 co-operativebank.co.uk
    O1 - Hosts: 82.146.56.35 The Co-operative Bank | Personal banking | Online banking
    O1 - Hosts: 82.146.56.35 co-operativebank.com
    O1 - Hosts: 82.146.56.35 welcome2.co-operativebankonline.co.uk
    O1 - Hosts: 82.146.56.35 welcome6.co-operativebankonline.co.uk
    O1 - Hosts: 82.146.56.35 welcome8.co-operativebankonline.co.uk
    O1 - Hosts: 82.146.56.35 welcome10.co-operativebankonline.co.uk
    O1 - Hosts: 82.146.56.35 Woolwich Mortgages - An award winning mortgage lender
    O1 - Hosts: 82.146.56.35 woolwich.co.uk
    O1 - Hosts: 82.146.56.35 cahoot.com
    O1 - Hosts: 82.146.56.35 Banking online in the UK from cahoot
    O1 - Hosts: 82.146.56.35 Banking online in the UK from cahoot
    O1 - Hosts: 82.146.56.35 cahoot.co.uk
    O1 - Hosts: 82.146.56.35 smile.co.uk - the internet bank
    O1 - Hosts: 82.146.56.35 smile.co.uk
    O1 - Hosts: 82.146.56.35 VR-NetWorld - Das Portal der Volksbanken Raiffeisenbanken - Startseite
    O1 - Hosts: 82.146.56.35 volksbank.de
    O1 - Hosts: 82.146.56.35 www.berliner-volksbank.de
    O1 - Hosts: 82.146.56.35 postbank.de
    O1 - Hosts: 82.146.56.35 Postbank: Willkommen auf der Startseite. Kostenloses Girokonto, gnstiger Kredit, Angebote fr Sparen und Anlegen - und vieles mehr!
    O1 - Hosts: 82.146.56.35 banking.postbank.de
    O1 - Hosts: 82.146.56.35 direkt.postbank.de
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\VIDEOD~1\ARCURL~1.DLL
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\sw g.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [KYE_Showicon] "C:\Program Files\USB Storage RW\shwicon.exe" -t"KYE\USB Storage RW"
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\Coloreal\coloreal.exe"
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [RealJukeboxSystray] "C:\Program Files\Real\RealJukebox\tsystray.exe"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Compaq32 Service Drivers] msconfig32.exe
    O4 - HKCU\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O15 - Trusted Zone: Personal banking: product, service, online, internet: HSBC Bank UK
    O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - domain availability domains for sale at hostance.net
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Common Files\AOL\AOL Spyware Protection\\aolserv.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 10728 bytes


    Hope this is of help,

    Many thanks.
  4. 31-07-2009  #4
    bassman1365
    bassman1365 is offline Newbie
    If it is any help, the two websites which are affected are Personal banking: product, service, online, internet: HSBC Bank UK and Halifax Online Banking - UK Banks, Finance, Personal, Telephone & Internet Banking.

    Many thanks
  5. 31-07-2009  #5
    Neal
    Neal is offline Dedicated Member
    Please download HostsXpert v4.1 and unzip it to your Desktop.

    * Double click HostsXpert.exe to launch the program.
    * Click Restore MS Hosts File to restore your Hosts file to its default condition.
    * Click Make ReadOnly to secure it against further infection.
    * Exit the program.



    Download SDFIX and save it to your Desktop.

    Double click SDFix.exe and choose Install to extract it to its own folder on the Desktop. Please then reboot your computer in Safe Mode by doing the following :
    • Restart your computer
    • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    • Instead of Windows loading as normal, a menu with options should appear;
    • Select the first option, to run Windows in Safe Mode, then press "Enter".
    • Choose your usual account.
    • In Safe Mode, right click the SDFix.zip folder and choose Extract All,
    • Open the extracted folder and double click RunThis.bat to start the script.
    • Type Y to begin the script.
    • It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
    • Press any Key and it will restart the PC.
    • Your system will take longer that normal to restart as the fixtool will be running and removing files.
    • When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
    • Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt back onto the forum with a new HijackThis log
  6. 31-07-2009  #6
    bassman1365
    bassman1365 is offline Newbie
    I ran all the programmes that you recommended and I've pasted the logs below.


    SDFix: Version 1.240
    Run by Kendo! on 31/07/2009 at 20:51

    Microsoft Windows XP [Version 5.1.2600]
    Running From: C:\SDFix

    Checking Services :

    Name :
    msdirectx

    Path :
    \??\C:\Documents and Settings\Owner\msdirectx.sys

    msdirectx - Deleted



    Restoring Default Security Values
    Restoring Default Hosts File

    Rebooting


    Checking Files :

    No Trojan Files Found






    Removing Temp Files

    ADS Check :



    Final Check :

    catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
    Rootkit scan 2009-07-31 21:02:59
    Windows 5.1.2600 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb tmp.log 131072 bytes
    C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp .edb 65536 bytes
    C:\WINDOWS\SoftwareDistribution\EventCache\{037DC6 06-EBA7-48AC-904A-28A74D26DFD0}.bin 8 bytes
    C:\WINDOWS\SoftwareDistribution\EventCache\{1253FE 26-4D7A-4E3B-A6EB-0A45A594433C}.bin 8 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\cdm.cab 46774 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\cdm.dll 92696 bytes executable
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuapi.c ab 199514 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuapi.c at 7828 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuapi.d ll 561688 bytes executable
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuapi.i nf 393 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuauclt .cab 31702 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuauclt .exe 51224 bytes executable
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuaucpl .cab 0 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuident .cab 7582 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wuident .txt 1284 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wusetup .cab 21196 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wusetup .cat 39216 bytes
    C:\WINDOWS\SoftwareDistribution\SelfUpdate\wusetup .inf 15362 bytes

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 19


    Remaining Services :




    Authorized Application Key Export:

    Remaining Files :


    File Backups: - C:\SDFix\backups\backups.zip

    Files with Hidden Attributes :

    Mon 5 Feb 2001 34,331 A..H. --- "C:\compaq\Monitors\5500\INSTALL.EXE"
    Tue 19 Mar 2002 21,653 A..H. --- "C:\compaq\Monitors\5500\SETMON.EXE"
    Wed 28 May 2003 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Wed 28 May 2003 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv14.bak"
    Sat 15 Jul 2006 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv15.bak"
    Tue 20 Jan 2009 173 A..H. --- "C:\Program Files\InterActual\InterActual Player\itiD.tmp"
    Thu 9 Jul 2009 20,688 A.SHR --- "C:\Program Files\McAfee\MQC\MRU.bak"
    Thu 9 Jul 2009 265 A.SHR --- "C:\Program Files\McAfee\MQC\qcconf.bak"
    Sat 23 May 2009 236,440 A..H. --- "C:\Documents and Settings\Owner\Local Settings\Temp\BIT53.tmp"

    Finished!






    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:09:32, on 31/07/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\wuauclt.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\USB Storage RW\shwicon.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\Real\RealJukebox\tsystray.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = BBC NEWS | News Front Page
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\VIDEOD~1\ARCURL~1.DLL
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\sw g.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [KYE_Showicon] "C:\Program Files\USB Storage RW\shwicon.exe" -t"KYE\USB Storage RW"
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\Coloreal\coloreal.exe"
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [RealJukeboxSystray] "C:\Program Files\Real\RealJukebox\tsystray.exe"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O15 - Trusted Zone: Personal banking: product, service, online, internet: HSBC Bank UK
    O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - new cars hybrid real estate at hostance.net
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Common Files\AOL\AOL Spyware Protection\\aolserv.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 8799 bytes
  7. 31-07-2009  #7
    Neal
    Neal is offline Dedicated Member
    You may still have a worm or two on your system, so...



    * Click here to use the F-Secure Online Scanner
    • Then click the Start Scanning button below.
    • You should get a notification (bar on top) to install the activeX. Click on it and select to install the ActiveX.
    • Once the ActiveX is installed, you should accept the License terms by clicking OK below to start the scan.
    • In case you are having problems with installing the ActiveX/starting the scan, please read here.
    • Click the Full System Scan button.
    • It will start to download scanner components and databases. This can take a while.
    • The main scan will start.
    • Once the scan finished scanning, click the Automatic cleaning (recommended) button
    • It could be possible that your firewall gives an alert - allow it, because that's a connection you establish to submit infected files to F-Secure.
    • The cleaning can take a while, so please be patient.
    • Then click the Show report button and copy and paste what's present under results in your next reply.
  8. 01-08-2009  #8
    bassman1365
    bassman1365 is offline Newbie
    I've used the online scanner as suggested. It basically said that the computer was clean and there was no option to clean files.

    The report is printed below.




    Scanning Report
    Saturday, August 1, 2009 14:16:51 - 15:29:30
    Computer name: LOUISE
    Scanning type: Scan system for malware, spyware and rootkits
    Target: C:\ D:\


    --------------------------------------------------------------------------------

    No malware found

    --------------------------------------------------------------------------------

    Statistics
    Scanned:
    Files: 44690
    System: 3702
    Not scanned: 603
    Actions:
    Disinfected: 0
    Renamed: 0
    Deleted: 0
    Not cleaned: 0
    Submitted: 0
    Files not scanned:
    C:\HIBERFIL.SYS
    C:\PAGEFILE.SYS
    C:\WINDOWS\TEMP\MCMSC_65MEBGK512RZHPD
    C:\WINDOWS\TEMP\MCMSC_UDKOZEQCFRU6L0S
    C:\WINDOWS\TEMP\SQLITE_7RASXCBVL2O2BJE
    C:\WINDOWS\TEMP\SQLITE_HZMKUSXJC6CVCGQ
    C:\WINDOWS\TEMP\SQLITE_N2GECVG162ZUZJH
    C:\WINDOWS\TEMP\SQLITE_QWEDY8IJFR0XHCA
    C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
    C:\WINDOWS\SYSTEM32\CONFIG\SAM
    C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
    C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
    C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\EVENTCACHE\{036165 30-43DB-4CCD-8C4B-F5D293D96651}.BIN
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DPNET.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DPNHPAST.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DPNHUPNP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DPNLOBBY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DPVVOX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DRMSTOR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DRMV2CLT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DSKQUOP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DSOUND.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DSOUND3D.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DSQUERY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DTSGNUP.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DX7VB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\DX8VB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\ELS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\ENCAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FASTPROX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FONTEXT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FP4AWEBS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FPEXEDLL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FXSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\FXSCLNT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\GDI32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\GCKERNEL.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\H323.TSP
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\H323MSP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HALMPS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HELPSVC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HID.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HIDCLASS.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HOTPLUG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HOWTOP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\HYPERTRM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSGINA.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSGR3EN.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSJET40.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSJTER40.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSJTES40.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSMSGS.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSOE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSOERES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSPQM.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSPRIVS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSRATING.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSRD2X40.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSTAPE.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSTINIT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSTLSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSTSC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSVIDCTL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSXBDE40.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSXML.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MSXML2.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\MYDOCS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NCOBJAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NDDENB32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NDIS.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NETBT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NETCFGP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NETCFGX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NETPLWIZ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NETSHELL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NMMKCERT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NMNT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NPPAGENT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTDLL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTIO412.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTIO804.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTKRNLMP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTKRNLPA.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTMSSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\NTOSKRNL.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCIIDEX.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCA200E.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCHSHELL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCHSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PDH.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCMCIA.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCLXL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PCL5ERES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERFMON.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERFDISK.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERFCTRS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERFOS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERFPROC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERM2.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERM2DLL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PHONE.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PID.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PHOTOWIZ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PINBALL.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PING.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERM3.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PLOTUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PJLMON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PLYR_ERR.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PROGMAN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PNGFILT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PROQUOTA.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PS5UI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PROVTHRD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSBASE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSCHED.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSCRIPT5.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSISRNDR.AX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSISDECD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSTOREC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PSTORSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PTPUSD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QASF.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QDV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QCAP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QDVD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QEDIT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QIC157.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QMGR.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QMGRPRXY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QPROCESS.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QUARTZ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QUERY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\PERM3DD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RACPLDLG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RAMDISK.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RAMDISK.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASADHLP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASAPI32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASAUTO.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASDLG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASCHAP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASTAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QMGR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RCIMLBY.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RCBDYCTL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RASTLS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDCHOST.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDBSS.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RCP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPDR.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPDD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPCLIP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPSND.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPWD.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDPWSX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REDBOOK.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDSHOST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RDSADDIN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\QEDWIPES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REDIR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REG.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGEDIT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGOPT.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGSVR32.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REGWIZC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REMASST.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REMOTEPG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REMOTESP.TSP
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REPDRVFS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RESUTILS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\REXEC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RIAFUI1.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RIAFRES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RIAFUI2.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RICHED20.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RNDISMP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\ROCKET.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RPCRT4.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RRCM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RPCSS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RSAENH.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RSH.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RSHX32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RSMPS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RSTRUI.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RTCSHARE.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RTIPXMIB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RTL8139.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RUNDLL32.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RTUTILS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\RUNONCE.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAFEMODE.HTT
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAFRCDLG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAFRSLV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAFRDM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAMLIB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SBE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SBEIO.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SBP2PORT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCARDDLG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCARDSVR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCCSCCP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCECLI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCESRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCRIPT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAPI.CPL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCRNSAVE.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCROBJ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCRRUN.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SDBINST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SCSIPORT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SECURITY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SECUR32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SECLOGON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SENDCMSG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SENDCMSG.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SENDMAIL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SENSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SERIAL.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SENS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SERVDEPS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SESSMGR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SAMSRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SETHC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SETUP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SETUP50.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SFC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SETUP_WM.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SETUPQRY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SFLOPPY.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SFC_OS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHELL32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHDOCLC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHFOLDER.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHGINA.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHSCRAP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHSVCS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHTML.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHUTDOWN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHTML.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SIGTAB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SIGVERIF.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SISAGP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SIMPDATA.TLB
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SKEYS.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SISNIC.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SLAYERXP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SKINS.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SLBCSP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SLIP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SLBIOP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SFCFILES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SL_ANET.ACM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMBALI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMBBATT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMLOGCFG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMI2SMIR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMBCLASS.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SHDOCVW.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMLOGSVC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMSS.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNIFFPOL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNDREC32.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SMTPSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPCL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPMIB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPINCL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPSMIR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SONYDCAM.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SONYAIT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SOFTKBD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SNMPSNAP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPGRMR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPIDER.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPLITTER.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPOOLSS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPTIP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SPOOLSV.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SQLOLEDB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SQLSRV32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SQLUNIRL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SQLXMLX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SR.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRCHCTLS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRRSTR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRCLIENT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRV.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRVSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSBEZIER.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SS3DFO.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SR_UIP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SRCHUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSDPAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSDPSRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSFLWBOX.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSMARQUE.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSMYPICS.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSMYST.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSPIPES.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSSTARS.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSTEXT3D.SCR
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STDPROV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SSTUB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STIMON.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STI_CI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STOBJECT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STORPROP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STREAM.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STREAMIP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STRMDLL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STUB_FPSRVADM.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\STUB_FPSRVWIN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SVCHOST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SWENUM.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SXS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYNCENG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYNCUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSAUDIO.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSDM.CPL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSFILES.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSMOD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSMOD_A.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSMON.OCX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSRESTP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSOCMGR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYSSETUP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\SYS_SRV.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\T2EMBED.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TAPE.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TAPI3.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TAPI32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TAPISRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TASKMGR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPMIB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPIP6.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPIP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPMON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPTEST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPMONUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TCPTSAT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TDC.OCX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TDI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TDPIPE.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TDTCP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TELNET.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TERMDD.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TERMMGR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TIMEDATE.CPL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\THEMEUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TFFSPORT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TERMSRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TIP.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TOURSTRT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TP4MON.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TRACERT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TRIEDIT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TRKWKS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TSCFGWMI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TSOC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TTYRES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TTY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TSHOOT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TSWEB1.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TTYUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TUNMP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TWAIN_32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\TXFLOG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UDFS.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UDHISAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\ULIB.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UMANDLG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UMPNPMGR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIDRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIDRVUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIMDM.TSP
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIMDMAT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIPLAT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNIRES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPLOADM.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNREGMP2.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPDATE.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPNPCONT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPNP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPNPHOST.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPNPUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UPS.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USB8023.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\URLMON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\URL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBEHCI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBCCGP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBAUDIO.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UNTFS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBHUB.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBINTEL.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBMON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBOHCI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBPORT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBSCAN.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBPRINT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBSER.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBSTOR.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBUHCI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USER32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USBUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USERACT.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USERENV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USERINIT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USMTDEF.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\USP10.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UTILMAN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VBISURF.AX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VBAJET32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\UXTHEME.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VBSCRIPT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VFWWDM32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VERSION.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VDMREDIR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VDMDBG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VGA.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VGX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VIAIDE.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VIAAGP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VIDEOPRT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VIEWPROV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VOLSNAP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VSSVC.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\VSSAPI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\W32TIME.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\W95UPGNT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WAB.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WAB32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WAB32RES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WABFIND.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WABIMP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WABMIG.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WACOMPEN.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WADV01NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WADV02NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WADV05NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WANARP.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WATCHDOG.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WATV02NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WATV01NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WATV04NT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMCNTL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMCOMN.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMCONS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMCORE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMDISP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMESS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMPERF.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMPROX.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMTEST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WBEMUPGD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WCEUSBSH.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WCH7XXNT.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WDIGEST.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WDMAUD.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WDMAUD.DRV
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WEBCHECK.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WEBCLNT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WEBPUB.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WEBVW.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WELCOME.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WEXTRACT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WHATNEWP.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIAACMGR.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIADEFUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIADSS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIASCR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIASERVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIASHEXT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIAVIDEO.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIN32K.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINBRAND.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WIN32SPL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINHLP32.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINHTTP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WININET.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINIPSEC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINLOGON.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINMM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINNTBBU.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINSPOOL.DRV
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINSCARD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINRNR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINSRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WKSSVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINVER.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINTRUST.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WINSTA.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WLDAP32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WLNOTIFY.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMACCESS.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMDMLOG.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMDMPS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMADMOD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIADAP.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIACPI.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMASF.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIAPSRV.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIAPRPL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIAPRES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMICOOKR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIDCPRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPCIMA.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPJOBJ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPIPRT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPDSKQ.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPROV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPSESS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPRVSE.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIPRVSD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMNETMGR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMIUTILS.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMISVC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMADMOE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMP.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMP.OCX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPCD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPLAYER.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPLAYER.CHM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPCORE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPLOC.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMSDMOD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPUI.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPSHELL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMPOCM.INF
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMSDMOE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMSTREAM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMV8DS32.AX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMVCORE.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMVDMOD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WMVDS32.AX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WORDPAD.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WOW32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WPABALN.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WPNPINST.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WS2HELP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WS2_32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSCRIPT.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHCON.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHEXT.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHIP6.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHIRDA.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHOM.OCX
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHRM.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSHTCPIP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSNMP32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSIINTXX.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSOCK32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSTCODEC.SYS
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WSTDECOD.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\WTSAPI32.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XCOPY.EXE
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XACTSRV.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XENROLL.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XOLEHLP.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPOB2RES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT00P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPSP1RES.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT01P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT02P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT03P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT04P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT05P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT06P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT08P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT11P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT10P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT09P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT13P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT14P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT15P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT16P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT17P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT18P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT19P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT21P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT20P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT23P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XRXWIADR.DLL
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT26P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT25P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\XPTHT24P.HTM
    C:\WINDOWS\SOFTWAREDISTRIBUTION\DOWNLOAD\EB5FF0AE9 FDAA24285C4924997A7AA90\BACKUP\ZIPFLDR.DLL
    C:\DOCUMENTS AND SETTINGS\KENDO!\LOCAL SETTINGS\TEMP\ETILQS_TRUPMHK8RRQBBNKPBIET
    C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EA563F5ED0B8 EA72081A19B9B561DD25_14C913DC-D28D-4855-8F16-B661158C219F

    --------------------------------------------------------------------------------

    Options
    Scanning engines:
    Scanning options:
    Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML XXX ANI AVB BAT CMD JOB LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
    Use advanced heuristics

    --------------------------------------------------------------------------------

    Copyright © 1998-2009 Product support | Send virus sample to F-Secure
    F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.
  9. 01-08-2009  #9
    Neal
    Neal is offline Dedicated Member
    Let me see a new hijackthis log please and tell me how your computer is behaving now please.
  10. 02-08-2009  #10
    bassman1365
    bassman1365 is offline Newbie
    Save 20% on AVG Internet Security 2012 Suite!
    The computer seems to be working fine, all the websites that I couldn't access before are all working fine now.

    A big thanks for all the help.

    This is the new hijack this log.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:23:47, on 02/08/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\USB Storage RW\shwicon.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\Real\RealJukebox\tsystray.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    c:\program files\common files\mcafee\mna\mcnasvc.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    c:\PROGRA~1\mcafee\msc\mcupdui.exe
    c:\program files\mcafee\virusscan\mcinsupd.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = BBC NEWS | News Front Page
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~1\ArcSoft\VIDEOD~1\ARCURL~1.DLL
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\sw g.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [KYE_Showicon] "C:\Program Files\USB Storage RW\shwicon.exe" -t"KYE\USB Storage RW"
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\Coloreal\coloreal.exe"
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [RealJukeboxSystray] "C:\Program Files\Real\RealJukebox\tsystray.exe"
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O15 - Trusted Zone: Personal banking: product, service, online, internet: HSBC Bank UK
    O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - new cars hybrid real estate at hostance.net
    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Common Files\AOL\AOL Spyware Protection\\aolserv.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    --
    End of file - 8794 bytes
+ Reply to Thread
Page 1 of 2 1 2 LastLast
« [Resolved] infected computer | Google results redirect »