Technical Information
- C:\boots\boot.exe
- <SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\heidelb.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\paris.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\parism.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\pisa.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\pisam.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\praguem.jpg.exe
- <SYSTEM32>\oobe\images\backoff.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\tyrol.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\venice.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\venicem.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\verona.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\veronam.jpg.exe
- <SYSTEM32>\oobe\images\backdown.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\bulzano.jpg.exe
- <SYSTEM32>\oobe\html\mouse\images\prague.jpg.exe
- <SYSTEM32>\config\systemprofile\Templates\winword2.doc.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\ul_logo.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_built.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg.exe
- <SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\window_up.jpg.exe
- %WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg.exe
- %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg.exe
- <SYSTEM32>\config\systemprofile\Templates\excel.xls.exe
- <SYSTEM32>\config\systemprofile\Templates\excel4.xls.exe
- <SYSTEM32>\config\systemprofile\Templates\winword.doc.exe
- <SYSTEM32>\oobe\images\backover.jpg.exe
- <SYSTEM32>\oobe\images\backup.jpg.exe
- <SYSTEM32>\oobe\images\mslogo.jpg.exe
- %WINDIR%\Web\Wallpaper\Azul.jpg.exe
- %WINDIR%\Web\Wallpaper\Crystal.jpg.exe
- %WINDIR%\Web\Wallpaper\Follow.jpg.exe
- %WINDIR%\Web\Wallpaper\Friend.jpg.exe
- %WINDIR%\Web\Wallpaper\Home.jpg.exe
- %WINDIR%\Web\Wallpaper\Moon flower.jpg.exe
- %WINDIR%\Web\Wallpaper\Ascent.jpg.exe
- %WINDIR%\Web\Wallpaper\Autumn.jpg.exe
- %WINDIR%\Web\Wallpaper\Peace.jpg.exe
- %WINDIR%\Web\Wallpaper\Radiance.jpg.exe
- %WINDIR%\Web\Wallpaper\Red moon desert.jpg.exe
- %WINDIR%\Web\Wallpaper\Ripple.jpg.exe
- %WINDIR%\Web\Wallpaper\Stonehenge.jpg.exe
- %WINDIR%\Web\Wallpaper\Tulips.jpg.exe
- %WINDIR%\Web\Wallpaper\Vortec space.jpg.exe
- %WINDIR%\Web\Wallpaper\Power.jpg.exe
- %WINDIR%\Web\Wallpaper\Purple flower.jpg.exe
- <SYSTEM32>\oobe\images\wpatop.jpg.exe
- <SYSTEM32>\oobe\images\wpakey.jpg.exe
- <SYSTEM32>\oobe\images\wpaflag.jpg.exe
- <SYSTEM32>\oobe\images\newbtm8.jpg.exe
- <SYSTEM32>\oobe\images\newmark1.jpg.exe
- <SYSTEM32>\oobe\images\newmark8.jpg.exe
- <SYSTEM32>\oobe\images\newtop1.jpg.exe
- <SYSTEM32>\oobe\images\newtop8.jpg.exe
- <SYSTEM32>\oobe\images\nextdown.jpg.exe
- <SYSTEM32>\oobe\images\nextoff.jpg.exe
- <SYSTEM32>\oobe\images\newbtm1.jpg.exe
- <SYSTEM32>\oobe\images\nextover.jpg.exe
- <SYSTEM32>\oobe\images\oemcoa.jpg.exe
- <SYSTEM32>\oobe\images\skipdown.jpg.exe
- <SYSTEM32>\oobe\images\skipoff.jpg.exe
- <SYSTEM32>\oobe\images\skipover.jpg.exe
- <SYSTEM32>\oobe\images\skipup.jpg.exe
- <SYSTEM32>\oobe\images\wpaback.jpg.exe
- <SYSTEM32>\oobe\images\wpabtm.jpg.exe
- <SYSTEM32>\oobe\images\nextup.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\start_up.jpg.exe
- %WINDIR%\Web\Wallpaper\Wind.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_secure.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_data.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_networks.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_robust.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg.exe
- C:\Documents and Settings\Default User\Templates\excel4.xls.exe
- C:\Documents
- C:\boots\systems
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg.exe
- C:\Documents and Settings\Default User\Templates\excel.xls.exe
- C:\Documents and Settings\Default User\Templates\powerpnt.ppt.exe
- %WINDIR%\Help\Tours\htmlTour\best_road.jpg.exe
- C:\Documents and Settings\Default User\Templates\winword.doc.exe
- C:\Documents and Settings\Default User\Templates\winword2.doc.exe
- %HOMEPATH%\Templates\excel.xls.exe
- %HOMEPATH%\Templates\excel4.xls.exe
- %HOMEPATH%\Templates\powerpnt.ppt.exe
- %HOMEPATH%\Templates\winword.doc.exe
- %HOMEPATH%\Templates\winword2.doc.exe
- %WINDIR%\Help\Tours\htmlTour\best_road_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\control_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\desktop_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img123.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img126.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img136.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img149.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\intro_logo.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\logo.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img116.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img121.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\pen_icon.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\question_icon.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\read_icon.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img110.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img109.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img103.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\folder_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\gradient.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\icon_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img004b.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img014.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img033.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img033a.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\end_up.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img034.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img046.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img060.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img068.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img072.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img074a.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img089.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img100.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\img040.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg.exe
- %WINDIR%\Web\Wallpaper\Windows XP.jpg.exe
- %WINDIR%\Help\Tours\htmlTour\best_road.jpg
- <SYSTEM32>\oobe\html\mouse\images\praguem.jpg
- <SYSTEM32>\oobe\html\mouse\images\tyrol.jpg
- <SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg
- <SYSTEM32>\oobe\html\mouse\images\venice.jpg
- <SYSTEM32>\oobe\html\mouse\images\venicem.jpg
- <SYSTEM32>\oobe\images\newbtm8.jpg
- <SYSTEM32>\oobe\html\mouse\images\prague.jpg
- <SYSTEM32>\oobe\html\mouse\images\pisam.jpg
- <SYSTEM32>\oobe\images\backoff.jpg
- <SYSTEM32>\oobe\images\backover.jpg
- <SYSTEM32>\oobe\images\backup.jpg
- <SYSTEM32>\oobe\images\mslogo.jpg
- <SYSTEM32>\oobe\images\newbtm1.jpg
- <SYSTEM32>\oobe\html\mouse\images\verona.jpg
- <SYSTEM32>\oobe\images\backdown.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg
- <SYSTEM32>\oobe\html\mouse\images\veronam.jpg
- <SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt
- %WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\window_up.jpg
- %WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
- %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
- <SYSTEM32>\config\systemprofile\Templates\excel.xls
- <SYSTEM32>\oobe\html\mouse\images\paris.jpg
- <SYSTEM32>\oobe\html\mouse\images\pisa.jpg
- <SYSTEM32>\oobe\html\mouse\images\parism.jpg
- <SYSTEM32>\config\systemprofile\Templates\winword2.doc
- <SYSTEM32>\oobe\html\mouse\images\bulzano.jpg
- <SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg
- <SYSTEM32>\oobe\html\mouse\images\heidelb.jpg
- <SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg
- <SYSTEM32>\config\systemprofile\Templates\excel4.xls
- <SYSTEM32>\config\systemprofile\Templates\winword.doc
- %WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg
- <SYSTEM32>\oobe\images\newmark1.jpg
- <SYSTEM32>\oobe\images\nextdown.jpg
- %WINDIR%\Web\Wallpaper\Follow.jpg
- %WINDIR%\Web\Wallpaper\Friend.jpg
- %WINDIR%\Web\Wallpaper\Home.jpg
- %WINDIR%\Web\Wallpaper\Moon flower.jpg
- %WINDIR%\Web\Wallpaper\Peace.jpg
- %WINDIR%\Web\Wallpaper\Azul.jpg
- %WINDIR%\Web\Wallpaper\Crystal.jpg
- %WINDIR%\Web\Wallpaper\Power.jpg
- %WINDIR%\Web\Wallpaper\Red moon desert.jpg
- %WINDIR%\Web\Wallpaper\Ripple.jpg
- %WINDIR%\Web\Wallpaper\Stonehenge.jpg
- %WINDIR%\Web\Wallpaper\Tulips.jpg
- %WINDIR%\Web\Wallpaper\Vortec space.jpg
- %WINDIR%\Web\Wallpaper\Purple flower.jpg
- %WINDIR%\Web\Wallpaper\Radiance.jpg
- <SYSTEM32>\oobe\images\newtop1.jpg
- <SYSTEM32>\oobe\images\newmark8.jpg
- <SYSTEM32>\oobe\images\wpatop.jpg
- <SYSTEM32>\oobe\images\nextoff.jpg
- <SYSTEM32>\oobe\images\nextover.jpg
- <SYSTEM32>\oobe\images\nextup.jpg
- <SYSTEM32>\oobe\images\oemcoa.jpg
- %WINDIR%\Web\Wallpaper\Ascent.jpg
- <SYSTEM32>\oobe\images\newtop8.jpg
- %WINDIR%\Web\Wallpaper\Autumn.jpg
- <SYSTEM32>\oobe\images\skipdown.jpg
- <SYSTEM32>\oobe\images\wpaback.jpg
- <SYSTEM32>\oobe\images\wpabtm.jpg
- <SYSTEM32>\oobe\images\wpaflag.jpg
- <SYSTEM32>\oobe\images\wpakey.jpg
- <SYSTEM32>\oobe\images\skipoff.jpg
- <SYSTEM32>\oobe\images\skipover.jpg
- <SYSTEM32>\oobe\images\skipup.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\control_up.jpg
- %WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg
- %WINDIR%\Help\Tours\htmlTour\desktop_up.jpg
- %WINDIR%\Help\Tours\htmlTour\end_up.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg
- %WINDIR%\Help\Tours\htmlTour\img040.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\img004b.jpg
- %WINDIR%\Help\Tours\htmlTour\img014.jpg
- %WINDIR%\Help\Tours\htmlTour\img033.jpg
- %WINDIR%\Help\Tours\htmlTour\img033a.jpg
- %WINDIR%\Help\Tours\htmlTour\img034.jpg
- %WINDIR%\Help\Tours\htmlTour\gradient.jpg
- %WINDIR%\Help\Tours\htmlTour\folder_up.jpg
- %WINDIR%\Help\Tours\htmlTour\icon_up.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_networks.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_data.jpg
- %WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\best_robust.jpg
- %WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg
- %WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\best_secure.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg
- %WINDIR%\Help\Tours\htmlTour\img046.jpg
- %WINDIR%\Help\Tours\htmlTour\best_road_big.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg
- %WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg
- %WINDIR%\Help\Tours\htmlTour\img060.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg
- %WINDIR%\Help\Tours\htmlTour\question_icon.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
- %WINDIR%\Help\Tours\htmlTour\ul_logo.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_built.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg
- %WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
- %WINDIR%\Help\Tours\htmlTour\start_up.jpg
- %WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg
- %WINDIR%\Help\Tours\htmlTour\read_icon.jpg
- %WINDIR%\Help\Tours\htmlTour\pen_icon.jpg
- %WINDIR%\Help\Tours\htmlTour\img068.jpg
- %WINDIR%\Help\Tours\htmlTour\img074a.jpg
- %WINDIR%\Help\Tours\htmlTour\img089.jpg
- %WINDIR%\Help\Tours\htmlTour\img100.jpg
- %WINDIR%\Help\Tours\htmlTour\img103.jpg
- %WINDIR%\Help\Tours\htmlTour\img109.jpg
- %WINDIR%\Help\Tours\htmlTour\img110.jpg
- %WINDIR%\Help\Tours\htmlTour\img072.jpg
- %WINDIR%\Help\Tours\htmlTour\img116.jpg
- %WINDIR%\Help\Tours\htmlTour\img123.jpg
- %WINDIR%\Help\Tours\htmlTour\img126.jpg
- %WINDIR%\Help\Tours\htmlTour\img136.jpg
- %WINDIR%\Help\Tours\htmlTour\img149.jpg
- %WINDIR%\Help\Tours\htmlTour\intro_logo.jpg
- %WINDIR%\Help\Tours\htmlTour\logo.jpg
- %WINDIR%\Help\Tours\htmlTour\img121.jpg
- %WINDIR%\Web\Wallpaper\Wind.jpg
- %WINDIR%\Web\Wallpaper\Windows XP.jpg
- 'C:\boots\boot.exe' <Full path to file> %APPDATA%/Microsoft/Windows/"Start Menu"/Programs/Startup/systems.exe
- '<SYSTEM32>\cmd.exe' /c c:/boots/boot.exe <Full path to file> %APPDATA%/Microsoft/Windows/"Start Menu"/Programs/Startup/systems.exe
- '<SYSTEM32>\cmd.exe' /c start cmd /c color 2 ^&^ echo *****^&^echo *********^&^echo ****************^&^echo **** ****^&^echo **** ****^&^ech...
- '<SYSTEM32>\cmd.exe' /c color 2 & echo *****&echo *********&echo ****************&echo **** ****&echo **** ****&echo **** ...