Trojan.KillFiles2.2818

Technical Information

Modifies file system

Deletes the following files

%WINDIR%\inf\1394.pnf
%WINDIR%\inf\qd3x64.pnf
%WINDIR%\inf\ql2300.pnf
%WINDIR%\inf\ql40xx.pnf
%WINDIR%\inf\ql40xx2.pnf
%WINDIR%\inf\ramdisk.pnf
%WINDIR%\inf\rawsilo.pnf
%WINDIR%\inf\prnrc005.pnf
%WINDIR%\inf\rdpbus.pnf
%WINDIR%\inf\rndiscmp.pnf
%WINDIR%\inf\rspndr.pnf
%WINDIR%\inf\sbp2.pnf
%WINDIR%\inf\scrawpdo.pnf
%WINDIR%\inf\scsidev.pnf
%WINDIR%\inf\sdbus.pnf
%WINDIR%\inf\sffdisk.pnf
%WINDIR%\inf\prnts002.pnf
%WINDIR%\inf\ricoh.pnf
%WINDIR%\inf\prnxx002.pnf
%WINDIR%\inf\prnts003.pnf
%WINDIR%\inf\prnsv004.pnf
%WINDIR%\inf\prnsv003.pnf
%WINDIR%\inf\prnnr003.pnf
%WINDIR%\inf\prnnr004.pnf
%WINDIR%\inf\prnod002.pnf
%WINDIR%\inf\prnok002.pnf
%WINDIR%\inf\prnrc002.pnf
%WINDIR%\inf\prnrc003.pnf
%WINDIR%\inf\sisraid2.pnf
%WINDIR%\inf\prnrc004.pnf
%WINDIR%\inf\prnlx00z.pnf
%WINDIR%\inf\prnrc006.pnf
%WINDIR%\inf\prnrc00a.pnf
%WINDIR%\inf\prnrc00b.pnf
%WINDIR%\inf\prnrc00c.pnf
%WINDIR%\inf\prnsa002.pnf
%WINDIR%\inf\prnsh002.pnf
%WINDIR%\inf\prnso002.pnf
%WINDIR%\inf\prnms002.pnf
%WINDIR%\inf\prnsv002.pnf
%WINDIR%\inf\prnrc007.pnf
%WINDIR%\inf\prnnr002.pnf
%WINDIR%\inf\sisraid4.pnf
%WINDIR%\inf\tape.pnf
%WINDIR%\inf\wave.pnf
%WINDIR%\inf\wceisvista.pnf
%WINDIR%\inf\wd.pnf
%WINDIR%\inf\wdmaudio.pnf
%WINDIR%\inf\wdma_usb.pnf
%WINDIR%\inf\wfplwf.pnf
%WINDIR%\inf\wiabr002.pnf
%WINDIR%\inf\volsnap.pnf
%WINDIR%\inf\wiabr004.pnf
%WINDIR%\inf\wiabr006.pnf
%WINDIR%\inf\wiabr007.pnf
%WINDIR%\inf\wiabr008.pnf
%WINDIR%\inf\wiabr009.pnf
%WINDIR%\inf\wiabr00a.pnf
%WINDIR%\inf\wiaca00a.pnf
%WINDIR%\inf\wiaca00b.pnf
%WINDIR%\inf\vsmraid.pnf
%WINDIR%\inf\v_mscdsc.pnf
%WINDIR%\inf\volume.pnf
%WINDIR%\inf\vhdmp.pnf
%WINDIR%\inf\prnlx00x.pnf
%WINDIR%\inf\tdibth.pnf
%WINDIR%\inf\tpm.pnf
%WINDIR%\inf\transfercable.pnf
%WINDIR%\inf\tsprint.pnf
%WINDIR%\inf\tsusbhubfilter.pnf
%WINDIR%\inf\ts_generic.pnf
%WINDIR%\inf\smartcrd.pnf
%WINDIR%\inf\sti.pnf
%WINDIR%\inf\stexstor.pnf
%WINDIR%\inf\ts_wpdmtp.pnf
%WINDIR%\inf\usb.pnf
%WINDIR%\inf\usbcir.pnf
%WINDIR%\inf\usbport.pnf
%WINDIR%\inf\usbprint.pnf
%WINDIR%\inf\usbstor.pnf
%WINDIR%\inf\usbvideo.pnf
%WINDIR%\inf\umbus.pnf
%WINDIR%\inf\umpass.pnf
%WINDIR%\inf\unknown.pnf
%WINDIR%\inf\prnlx00y.pnf
%WINDIR%\inf\prnlx00w.pnf
%WINDIR%\inf\wiaca00d.pnf
%WINDIR%\inf\prnca00h.pnf
%WINDIR%\inf\prnca00i.pnf
%WINDIR%\inf\prnca00x.pnf
%WINDIR%\inf\prnca00y.pnf
%WINDIR%\inf\prnca00z.pnf
%WINDIR%\inf\prnep002.pnf
%WINDIR%\inf\prnep00g.pnf
%WINDIR%\inf\prnep003.pnf
%WINDIR%\inf\prnep005.pnf
%WINDIR%\inf\prnep00a.pnf
%WINDIR%\inf\prnep00b.pnf
%WINDIR%\inf\prnep00c.pnf
%WINDIR%\inf\prnep00d.pnf
%WINDIR%\inf\prnep00e.pnf
%WINDIR%\inf\prnca00d.pnf
%WINDIR%\inf\prnca00c.pnf
%WINDIR%\inf\prnep004.pnf
%WINDIR%\inf\prnca00g.pnf
%WINDIR%\inf\prnca00f.pnf
%WINDIR%\inf\prnca00b.pnf
%WINDIR%\inf\prnca00a.pnf
%WINDIR%\inf\ph3xibc7.pnf
%WINDIR%\inf\ph3xibc8.pnf
%WINDIR%\inf\ph3xibc9.pnf
%WINDIR%\inf\ph6xib64c0.pnf
%WINDIR%\inf\ph6xib64c1.pnf
%WINDIR%\inf\prnep00f.pnf
%WINDIR%\inf\prnbr002.pnf
%WINDIR%\inf\prnbr004.pnf
%WINDIR%\inf\prnep00l.pnf
%WINDIR%\inf\prnbr005.pnf
%WINDIR%\inf\prnbr007.pnf
%WINDIR%\inf\prnbr008.pnf
%WINDIR%\inf\prnbr009.pnf
%WINDIR%\inf\prnbr00a.pnf
%WINDIR%\inf\prnca003.pnf
%WINDIR%\inf\prnbr003.pnf
%WINDIR%\inf\ph3xibc5.pnf
%WINDIR%\inf\ph3xibc4.pnf
%WINDIR%\inf\prnbr006.pnf
%WINDIR%\inf\prnfx002.pnf
%WINDIR%\inf\prnky009.pnf
%WINDIR%\inf\prngt002.pnf
%WINDIR%\inf\prnle003.pnf
%WINDIR%\inf\prnle004.pnf
%WINDIR%\inf\prnlx002.pnf
%WINDIR%\inf\prnlx003.pnf
%WINDIR%\inf\prnlx004.pnf
%WINDIR%\inf\prnlx005.pnf
%WINDIR%\inf\prnky008.pnf
%WINDIR%\inf\prnky007.pnf
%WINDIR%\inf\prnle002.pnf
%WINDIR%\inf\prnlx006.pnf
%WINDIR%\inf\prnlx00a.pnf
%WINDIR%\inf\prnlx00b.pnf
%WINDIR%\inf\prnlx00c.pnf
%WINDIR%\inf\prnlx00d.pnf
%WINDIR%\inf\prnlx00e.pnf
%WINDIR%\inf\prnlx00v.pnf
%WINDIR%\inf\prnlx007.pnf
%WINDIR%\inf\prnlx008.pnf
%WINDIR%\inf\prnlx009.pnf
%WINDIR%\inf\wiabr005.pnf
%WINDIR%\inf\wiaca00c.pnf
%WINDIR%\inf\prnca00e.pnf
%WINDIR%\inf\prngt003.pnf
%WINDIR%\inf\prngt004.pnf
%WINDIR%\inf\prnhp002.pnf
%WINDIR%\inf\prnhp003.pnf
%WINDIR%\inf\prnhp004.pnf
%WINDIR%\inf\prnhp005.pnf
%WINDIR%\inf\prnky006.pnf
%WINDIR%\inf\prnge001.pnf
%WINDIR%\inf\prnky005.pnf
%WINDIR%\inf\prnin002.pnf
%WINDIR%\inf\prnkm003.pnf
%WINDIR%\inf\prnkm004.pnf
%WINDIR%\inf\prnkm005.pnf
%WINDIR%\inf\prnky002.pnf
%WINDIR%\inf\prnky003.pnf
%WINDIR%\inf\prnky004.pnf
%WINDIR%\inf\prnin003.pnf
%WINDIR%\inf\prnin004.pnf
%WINDIR%\inf\prnkm002.pnf
%WINDIR%\inf\mdmrock4.pnf
%WINDIR%\inf\wiaca00e.pnf
%WINDIR%\prefetch\setup.exe-7c026c7f.pf
%WINDIR%\prefetch\setup.exe-d38bbfde.pf
%WINDIR%\prefetch\setx.exe-a7e52bf4.pf
%WINDIR%\prefetch\shutdown.exe-e7d5c9cc.pf
%WINDIR%\prefetch\sidebar.exe-fa75ea61.pf
%WINDIR%\prefetch\smss.exe-e9c28fc6.pf
%WINDIR%\prefetch\spoolsv.exe-d1f6b8b6.pf
%WINDIR%\prefetch\sppsvc.exe-b0f8131b.pf
%WINDIR%\prefetch\taskhost.exe-7238f31d.pf
%WINDIR%\prefetch\steamservice.exe-57e215d3.pf
%WINDIR%\prefetch\svchost.exe-007fea55.pf
%WINDIR%\prefetch\svchost.exe-05f624ab.pf
%WINDIR%\prefetch\svchost.exe-63699c7d.pf
%WINDIR%\prefetch\svchost.exe-7cfedea3.pf
%WINDIR%\prefetch\svchost.exe-95b0c790.pf
%WINDIR%\prefetch\svchost.exe-cf79ee4c.pf
%WINDIR%\prefetch\setup.exe-663c249b.pf
%WINDIR%\prefetch\setup.exe-421f8e21.pf
%WINDIR%\prefetch\setup.exe-bed2ec70.pf
%WINDIR%\prefetch\setup.exe-2ef91a4e.pf
%WINDIR%\prefetch\setup.exe-2d9f1c3b.pf
%WINDIR%\prefetch\regsvr32.exe-8461dbee.pf
%WINDIR%\prefetch\rundll32.exe-038e6267.pf
%WINDIR%\prefetch\rundll32.exe-36dac103.pf
%WINDIR%\prefetch\rundll32.exe-46a5f75f.pf
%WINDIR%\prefetch\rundll32.exe-685a8f09.pf
%WINDIR%\prefetch\rundll32.exe-7438e4d5.pf
%WINDIR%\prefetch\rundll32.exe-860c49a4.pf
%WINDIR%\prefetch\svchost.exe-fedb32d0.pf
%WINDIR%\prefetch\rundll32.exe-9cc17d45.pf
%WINDIR%\prefetch\steamsetup_2.10.91.91.exe-91d3eed3.pf
%WINDIR%\prefetch\rundll32.exe-c211633d.pf
%WINDIR%\prefetch\searchfilterhost.exe-77482212.pf
%WINDIR%\prefetch\searchindexer.exe-4a6353b9.pf
%WINDIR%\prefetch\searchprotocolhost.exe-0cb8cade.pf
%WINDIR%\prefetch\services.exe-511d36f4.pf
%WINDIR%\prefetch\setup.exe-04541c92.pf
%WINDIR%\prefetch\setup.exe-2078b256.pf
%WINDIR%\prefetch\rundll32.exe-a148e651.pf
%WINDIR%\prefetch\regsvr32.exe-d5170e12.pf
%WINDIR%\prefetch\rundll32.exe-e6258edf.pf
%WINDIR%\prefetch\thunderbird setup 78.9.1 (x64-07c878f8.pf
%WINDIR%\prefetch\thunderbird.exe-5119524c.pf
%WINDIR%\prefetch\vc_redist.x86.exe-1dcb7807.pf
%WINDIR%\prefetch\vc_redist.x86.exe-35b8af5d.pf
%WINDIR%\prefetch\vc_redist.x86.exe-380848fe.pf
%WINDIR%\prefetch\vc_redist.x86.exe-473d0913.pf
%WINDIR%\prefetch\vc_redist.x86.exe-4da5e6b3.pf
%WINDIR%\prefetch\vc_redist.x86.exe-92eb15bb.pf
%WINDIR%\prefetch\vssvc.exe-b8afc319.pf
%WINDIR%\prefetch\wermgr.exe-0f2ac88c.pf
%WINDIR%\prefetch\vc_redist.x86.exe-1c5672a5.pf
%WINDIR%\prefetch\reg.exe-e7e8bd26.pf
%WINDIR%\prefetch\vc_redist.x64.exe-d3a3c549.pf
%WINDIR%\prefetch\winlogon.exe-b020dc41.pf
%WINDIR%\prefetch\winmail.exe-1092d371.pf
%WINDIR%\prefetch\winmail.exe-f551299c.pf
%WINDIR%\prefetch\winrar-x64-531.exe-91d4b934.pf
%WINDIR%\prefetch\wmiadap.exe-f8dfdfa2.pf
%WINDIR%\prefetch\wmiprvse.exe-1628051c.pf
%WINDIR%\prefetch\wuauclt.exe-70318591.pf
%WINDIR%\prefetch\wevtutil.exe-ef5861c4.pf
%WINDIR%\prefetch\wevtutil.exe-400d93e8.pf
%WINDIR%\inf\ph3xibc3.pnf
%WINDIR%\prefetch\vc_redist.x64.exe-625f2779.pf
%WINDIR%\prefetch\vcredist_x86.exe-163efd5c.pf
%WINDIR%\prefetch\tsetup.1.4.3.exe-ef3d6f27.pf
%WINDIR%\prefetch\tsetup.1.4.3.tmp-56512ee9.pf
%WINDIR%\prefetch\uninstall.exe-a11d6b07.pf
%WINDIR%\prefetch\unpack200.exe-bb96da5f.pf
%WINDIR%\prefetch\unregmp2.exe-2294b148.pf
%WINDIR%\prefetch\vcredist_x64.exe-24aea5d8.pf
%WINDIR%\prefetch\vcredist_x64.exe-8227a7ef.pf
%WINDIR%\prefetch\vc_redist.x64.exe-b0c890fd.pf
%WINDIR%\prefetch\rdrservicesupdater.exe-3d26e665.pf
%WINDIR%\prefetch\trustedinstaller.exe-3cc531e5.pf
%WINDIR%\prefetch\vcredist_x86.exe-73b7ff73.pf
%WINDIR%\prefetch\vcredist_x86.exe-96cf69cf.pf
%WINDIR%\prefetch\vcredist_x86.exe-c622f3ef.pf
%WINDIR%\prefetch\vc_redist.x64.exe-26342efb.pf
%WINDIR%\prefetch\vc_redist.x64.exe-2c3b2083.pf
%WINDIR%\prefetch\vc_redist.x64.exe-442857d9.pf
%WINDIR%\prefetch\vc_redist.x64.exe-5c158f2f.pf
%WINDIR%\prefetch\vcredist_x64.exe-d4929c6b.pf
%WINDIR%\prefetch\vcredist_x64.exe-a53f124b.pf
%WINDIR%\inf\ph3xibc6.pnf
%WINDIR%\prefetch\ose00000.exe-2a4efdbf.pf
%WINDIR%\prefetch\msiexec.exe-a2d55cb6.pf
%WINDIR%\temp\dmiacf5.tmp
%WINDIR%\temp\fwtsqmfile00.sqm
%WINDIR%\temp\ts_548c.tmp
%WINDIR%\temp\ts_5a4a.tmp
%WINDIR%\temp\ts_5b54.tmp
%WINDIR%\temp\ts_624b.tmp
%WINDIR%\temp\ts_67ca.tmp
%WINDIR%\prefetch\agglglobalhistory.db
%WINDIR%\temp\ts_6ab9.tmp
%WINDIR%\temp\ts_947a.tmp
%WINDIR%\temp\ts_996d.tmp
%WINDIR%\prefetch\42.0.2311.135_chrome_installe-7fd75326.pf
%WINDIR%\prefetch\acrordrdc1501020056_en_us.exe-3b58c109.pf
%WINDIR%\prefetch\agapplaunch.db
%WINDIR%\prefetch\agglfaulthistory.db
%WINDIR%\inf\wudfusbcciddriver.pnf
%WINDIR%\inf\wsdscdrv.pnf
%WINDIR%\inf\xnacc.pnf
%WINDIR%\inf\wsdprint.pnf
%WINDIR%\inf\wpdmtphw.pnf
%WINDIR%\inf\wiaca00i.pnf
%WINDIR%\inf\wiaep002.pnf
%WINDIR%\inf\wiaep003.pnf
%WINDIR%\inf\wiahp001.pnf
%WINDIR%\inf\wiaky002.pnf
%WINDIR%\inf\wialx002.pnf
%WINDIR%\inf\wialx003.pnf
%WINDIR%\prefetch\agglfgapphistory.db
%WINDIR%\inf\wialx004.pnf
%WINDIR%\temp\ts_6d1b.tmp
%WINDIR%\inf\wialx006.pnf
%WINDIR%\inf\wiaxx002.pnf
%WINDIR%\inf\windowssideshowenhanceddriver.pnf
%WINDIR%\inf\winusb.pnf
%WINDIR%\inf\wpdcomp.pnf
%WINDIR%\inf\wpdfs.pnf
%WINDIR%\inf\wpdmtp.pnf
%WINDIR%\inf\wialx005.pnf
%WINDIR%\inf\wiacn001.pnf
%WINDIR%\inf\wiasa002.pnf
%WINDIR%\prefetch\aggluad_p_s-1-5-21-1238866942-1249195528-555854008-1000.db
%WINDIR%\prefetch\aggluad_s-1-5-21-1238866942-1249195528-555854008-1000.db
%WINDIR%\prefetch\jaureg.exe-2358f266.pf
%WINDIR%\prefetch\javaw.exe-dccf0ab8.pf
%WINDIR%\prefetch\javaws.exe-ed58c697.pf
%WINDIR%\prefetch\jp2launcher.exe-7dccd1b9.pf
%WINDIR%\prefetch\jre-8u45-windows-x64.exe-61cc34b3.pf
%WINDIR%\prefetch\lsass.exe-419f2d06.pf
%WINDIR%\prefetch\lsm.exe-e22ff25c.pf
%WINDIR%\prefetch\mctadmin.exe-c9cfa3b9.pf
%WINDIR%\prefetch\installer.exe-6c3ab888.pf
%WINDIR%\prefetch\pfsvperfstats.bin
%WINDIR%\prefetch\installer.exe-5857fafb.pf
%WINDIR%\prefetch\msiexec.exe-e09a077a.pf
%WINDIR%\prefetch\ndp48-x86-x64-allos-enu.exe-54656820.pf
%WINDIR%\prefetch\netsh.exe-f1b6da12.pf
%WINDIR%\prefetch\ntosboot-b00dfaad.pf
%WINDIR%\prefetch\opera_29.0.1795.47_setup.exe-839f60fd.pf
%WINDIR%\prefetch\opera_29.0.1795.47_setup.exe-9c628850.pf
%WINDIR%\prefetch\ose.exe-51c16f0e.pf
%WINDIR%\prefetch\mscorsvw.exe-90526fac.pf
%WINDIR%\prefetch\mscorsvw.exe-245ed79e.pf
%WINDIR%\inf\wiaca00f.pnf
%WINDIR%\prefetch\ie4uinit.exe-8b333e8b.pf
%WINDIR%\prefetch\default-browser-agent.exe-91aa6c8a.pf
%WINDIR%\prefetch\audiodg.exe-bdfd3029.pf
%WINDIR%\prefetch\bfsvc.exe-9c7a4dee.pf
%WINDIR%\prefetch\bspatch.exe-dd9e5e46.pf
%WINDIR%\prefetch\chrome.exe-5617a1bf.pf
%WINDIR%\prefetch\clrgc.exe-5d5b90f5.pf
%WINDIR%\prefetch\cmd.exe-4a81b364.pf
%WINDIR%\prefetch\cmd.exe-ac113aa8.pf
%WINDIR%\prefetch\install.exe-7d6e11a9.pf
%WINDIR%\inf\xcbdav.pnf
%WINDIR%\prefetch\agrobust.db
%WINDIR%\prefetch\dllhost.exe-5e46fa0d.pf
%WINDIR%\prefetch\dllhost.exe-766398d2.pf
%WINDIR%\prefetch\dllhost.exe-b2eb1806.pf
%WINDIR%\prefetch\drvinst.exe-4cb4314a.pf
%WINDIR%\prefetch\firefox setup 78.0.2.exe-691327d9.pf
%WINDIR%\prefetch\firefox.exe-18acfcff.pf
%WINDIR%\prefetch\ie4uinit.exe-3a7e0c67.pf
%WINDIR%\prefetch\csrss.exe-3fe41f7e.pf
%WINDIR%\prefetch\conhost.exe-1f3e9d7e.pf
%WINDIR%\inf\ph3xibc2.pnf
%WINDIR%\inf\ph3xibc12.pnf
%WINDIR%\inf\ph3xibc11.pnf
%WINDIR%\inf\mdmaiwat.pnf
%WINDIR%\inf\mdmar1.pnf
%WINDIR%\inf\mdmarch.pnf
%WINDIR%\inf\mdmarn.pnf
%WINDIR%\inf\mdmati.pnf
%WINDIR%\inf\mdmatm2k.pnf
%WINDIR%\inf\mdmbsb.pnf
%WINDIR%\inf\mdmaus.pnf
%WINDIR%\inf\mdmbr002.pnf
%WINDIR%\inf\mdmbr004.pnf
%WINDIR%\inf\mdmbr005.pnf
%WINDIR%\inf\mdmbr006.pnf
%WINDIR%\inf\mdmbr007.pnf
%WINDIR%\inf\mdmbr008.pnf
%WINDIR%\inf\mdmaiwa.pnf
%WINDIR%\inf\mdmairte.pnf
%WINDIR%\inf\mdmboca.pnf
%WINDIR%\inf\mdmaiwa5.pnf
%WINDIR%\inf\mdmaiwa4.pnf
%WINDIR%\inf\mdmags64.pnf
%WINDIR%\inf\mdmagm64.pnf
%WINDIR%\inf\keyboard.pnf
%WINDIR%\inf\ks.pnf
%WINDIR%\inf\kscaptur.pnf
%WINDIR%\inf\ksfilter.pnf
%WINDIR%\inf\lltdio.pnf
%WINDIR%\inf\mdmbr00a.pnf
%WINDIR%\inf\lsi_fc.pnf
%WINDIR%\inf\lsi_sas2.pnf
%WINDIR%\inf\mdmbtmdm.pnf
%WINDIR%\inf\lsi_scsi.pnf
%WINDIR%\inf\mchgr.pnf
%WINDIR%\inf\mcx2.pnf
%WINDIR%\inf\mdm3com.pnf
%WINDIR%\inf\mdm5674a.pnf
%WINDIR%\inf\mdmadc.pnf
%WINDIR%\inf\lsi_sas.pnf
%WINDIR%\inf\ipmidrv.pnf
%WINDIR%\inf\input.pnf
%WINDIR%\inf\machine.pnf
%WINDIR%\inf\mdmbug3.pnf
%WINDIR%\inf\mdmelsa.pnf
%WINDIR%\inf\mdmc26a.pnf
%WINDIR%\inf\mdmeric2.pnf
%WINDIR%\inf\mdmetech.pnf
%WINDIR%\inf\mdmfj2.pnf
%WINDIR%\inf\mdmgatew.pnf
%WINDIR%\inf\mdmgcs.pnf
%WINDIR%\inf\mdmgen.pnf
%WINDIR%\inf\mdmeiger.pnf
%WINDIR%\inf\mdmdyna.pnf
%WINDIR%\inf\mdmeric.pnf
%WINDIR%\inf\mdmgl001.pnf
%WINDIR%\inf\mdmgl005.pnf
%WINDIR%\inf\mdmgl006.pnf
%WINDIR%\inf\mdmgl007.pnf
%WINDIR%\inf\mdmgl008.pnf
%WINDIR%\inf\mdmgl009.pnf
%WINDIR%\inf\mdmgl010.pnf
%WINDIR%\inf\mdmgl002.pnf
%WINDIR%\inf\mdmgl003.pnf
%WINDIR%\inf\mdmgl004.pnf
%WINDIR%\inf\iscsi.pnf
%WINDIR%\inf\image.pnf
%WINDIR%\inf\divacx64.pnf
%WINDIR%\inf\mdmcdp.pnf
%WINDIR%\inf\mdmcm28.pnf
%WINDIR%\inf\mdmcodex.pnf
%WINDIR%\inf\mdmcom1.pnf
%WINDIR%\inf\mdmcommu.pnf
%WINDIR%\inf\mdmcomp.pnf
%WINDIR%\inf\mdmdsi.pnf
%WINDIR%\inf\mdmbw561.pnf
%WINDIR%\inf\mdmdp2.pnf
%WINDIR%\inf\mdmcpq.pnf
%WINDIR%\inf\mdmcxhv6.pnf
%WINDIR%\inf\mdmcxpv6.pnf
%WINDIR%\inf\mdmdcm5.pnf
%WINDIR%\inf\mdmdcm6.pnf
%WINDIR%\inf\mdmdf56f.pnf
%WINDIR%\inf\mdmdgitn.pnf
%WINDIR%\inf\mdmcpq2.pnf
%WINDIR%\inf\mdmcpv.pnf
%WINDIR%\inf\mdmcrtix.pnf
%WINDIR%\prefetch\wusa.exe-f04b35c8.pf
%WINDIR%\inf\mdmgsm.pnf
%WINDIR%\inf\igdlh.pnf
%WINDIR%\inf\battery.pnf
%WINDIR%\inf\bda.pnf
%WINDIR%\inf\blbdrive.pnf
%WINDIR%\inf\brmfcmdm.pnf
%WINDIR%\inf\brmfcmf.pnf
%WINDIR%\inf\brmfcsto.pnf
%WINDIR%\inf\brmfcumd.pnf
%WINDIR%\inf\compositebus.pnf
%WINDIR%\inf\brmfcwia.pnf
%WINDIR%\inf\bth.pnf
%WINDIR%\inf\bthmtpenum.pnf
%WINDIR%\inf\bthpan.pnf
%WINDIR%\inf\bthprint.pnf
%WINDIR%\inf\bthspp.pnf
%WINDIR%\inf\cdrom.pnf
%WINDIR%\inf\averfx2swtv_x64.pnf
%WINDIR%\inf\averfx2swtv_noavin_x64.pnf
%WINDIR%\inf\avmx64c.pnf
%WINDIR%\inf\averfx2hbtv_x64.pnf
%WINDIR%\inf\averfx2hbh826d_noaverir_x64.pnf
%WINDIR%\inf\61883.pnf
%WINDIR%\inf\acpipmi.pnf
%WINDIR%\inf\adp94xx.pnf
%WINDIR%\inf\adpahci.pnf
%WINDIR%\inf\adpu320.pnf
%WINDIR%\inf\af9035bda.pnf
%WINDIR%\inf\agp.pnf
%WINDIR%\inf\circlass.pnf
%WINDIR%\inf\amdsata.pnf
%WINDIR%\inf\brmfport.pnf
%WINDIR%\inf\angel264.pnf
%WINDIR%\inf\angelu64.pnf
%WINDIR%\inf\arc.pnf
%WINDIR%\inf\arcsas.pnf
%WINDIR%\inf\atiilhag.pnf
%WINDIR%\inf\atiriol6.pnf
%WINDIR%\inf\avc.pnf
%WINDIR%\inf\amdsbs.pnf
%WINDIR%\inf\acpi.pnf
%WINDIR%\inf\angel64.pnf
%WINDIR%\inf\averhbh826_noaverir_x64.pnf
%WINDIR%\inf\cpu.pnf
%WINDIR%\inf\hal.pnf
%WINDIR%\inf\hcw85b64.pnf
%WINDIR%\inf\hcw85c64.pnf
%WINDIR%\inf\hdaudbus.pnf
%WINDIR%\inf\hdaudio.pnf
%WINDIR%\inf\hdaudss.pnf
%WINDIR%\inf\hidbth.pnf
%WINDIR%\inf\gameport.pnf
%WINDIR%\inf\crcdisk.pnf
%WINDIR%\inf\hcw72b64.pnf
%WINDIR%\inf\hiddigi.pnf
%WINDIR%\inf\hpoa1nd.pnf
%WINDIR%\inf\hpoa1sd.pnf
%WINDIR%\inf\hpoa1so.pnf
%WINDIR%\inf\hpoa1ss.pnf
%WINDIR%\inf\hpsamd.pnf
%WINDIR%\inf\iastorv.pnf
%WINDIR%\inf\hidir.pnf
%WINDIR%\inf\hidirkbd.pnf
%WINDIR%\inf\hidserv.pnf
%WINDIR%\inf\iirsp2.pnf
%WINDIR%\inf\iirsp.pnf
%WINDIR%\inf\faxcn002.pnf
%WINDIR%\inf\cxfalpal_ibv64.pnf
%WINDIR%\inf\cxraptor_fm1216mk5_ibv64.pnf
%WINDIR%\inf\cxraptor_fm1236mk5_ibv64.pnf
%WINDIR%\inf\cxraptor_philipstuv1236d_ibv64.pnf
%WINDIR%\inf\dc21x4vm.pnf
%WINDIR%\inf\digitalmediadevice.pnf
%WINDIR%\inf\disk.pnf
%WINDIR%\inf\fdc.pnf
%WINDIR%\inf\flpydisk.pnf
%WINDIR%\inf\display.pnf
%WINDIR%\inf\dot4prt.pnf
%WINDIR%\inf\eaphost.pnf
%WINDIR%\inf\ehstorcertdrv.pnf
%WINDIR%\inf\ehstorpwddrv.pnf
%WINDIR%\inf\elxstor.pnf
%WINDIR%\inf\faxca003.pnf
%WINDIR%\inf\faxcn001.pnf
%WINDIR%\inf\cxfalcon_ibv64.pnf
%WINDIR%\inf\dot4.pnf
%WINDIR%\prefetch\wininit.exe-5322684a.pf
%WINDIR%\inf\mdmhaeu.pnf
%WINDIR%\inf\mdminfot.pnf
%WINDIR%\inf\net8187bv64.pnf
%WINDIR%\inf\net8187se64.pnf
%WINDIR%\inf\netathrx.pnf
%WINDIR%\inf\netavpna.pnf
%WINDIR%\inf\netavpnt.pnf
%WINDIR%\inf\netb57va.pnf
%WINDIR%\inf\msdsm.pnf
%WINDIR%\inf\netbc664.pnf
%WINDIR%\inf\netbxnda.pnf
%WINDIR%\inf\nete1e3e.pnf
%WINDIR%\inf\nete1g3e.pnf
%WINDIR%\inf\netefe3e.pnf
%WINDIR%\inf\netevbda.pnf
%WINDIR%\inf\netg664.pnf
%WINDIR%\inf\netimm.pnf
%WINDIR%\inf\net1yx64.pnf
%WINDIR%\inf\netbvbda.pnf
%WINDIR%\inf\net8185.pnf
%WINDIR%\inf\net44amd.pnf
%WINDIR%\inf\net1qx64.pnf
%WINDIR%\inf\net1kx64.pnf
%WINDIR%\inf\megasr.pnf
%WINDIR%\inf\memory.pnf
%WINDIR%\inf\mf.pnf
%WINDIR%\inf\modemcsa.pnf
%WINDIR%\inf\monitor.pnf
%WINDIR%\inf\mpio.pnf
%WINDIR%\inf\netip6.pnf
%WINDIR%\inf\msclmd.pnf
%WINDIR%\inf\netirda.pnf
%WINDIR%\inf\msdv.pnf
%WINDIR%\inf\msmouse.pnf
%WINDIR%\inf\msports.pnf
%WINDIR%\inf\mstape.pnf
%WINDIR%\inf\mtconfig.pnf
%WINDIR%\inf\multiprt.pnf
%WINDIR%\inf\ndiscap.pnf
%WINDIR%\inf\megasas.pnf
%WINDIR%\inf\ndisuio.pnf
%WINDIR%\inf\mshdc.pnf
%WINDIR%\inf\netk57a.pnf
%WINDIR%\inf\netl160a.pnf
%WINDIR%\inf\netl1c64.pnf
%WINDIR%\inf\nettcpip.pnf
%WINDIR%\inf\nettun.pnf
%WINDIR%\inf\netvfx64.pnf
%WINDIR%\inf\netvg62a.pnf
%WINDIR%\inf\netvwifibus.pnf
%WINDIR%\inf\netw5v64.pnf
%WINDIR%\inf\netxex64.pnf
%WINDIR%\inf\mdmzyxlg.pnf
%WINDIR%\inf\netsstpt.pnf
%WINDIR%\inf\netsstpa.pnf
%WINDIR%\inf\nulhpopr.pnf
%WINDIR%\inf\nvraid.pnf
%WINDIR%\inf\nv_lh.pnf
%WINDIR%\inf\pcmcia.pnf
%WINDIR%\inf\ph3xibc0.pnf
%WINDIR%\inf\ph3xibc1.pnf
%WINDIR%\inf\ph3xibc10.pnf
%WINDIR%\inf\netxfx64.pnf
%WINDIR%\inf\ntprint.pnf
%WINDIR%\inf\megasas2.pnf
%WINDIR%\inf\nfrd960.pnf
%WINDIR%\inf\mdmhandy.pnf
%WINDIR%\inf\netl1e64.pnf
%WINDIR%\inf\netl260a.pnf
%WINDIR%\inf\netloop.pnf
%WINDIR%\inf\netmscli.pnf
%WINDIR%\inf\netmyk00.pnf
%WINDIR%\inf\netnb.pnf
%WINDIR%\inf\netnvm64.pnf
%WINDIR%\inf\netrtl64.pnf
%WINDIR%\inf\netserv.pnf
%WINDIR%\inf\netrtx64.pnf
%WINDIR%\inf\netr28ux.pnf
%WINDIR%\inf\netr28x.pnf
%WINDIR%\inf\netr7364.pnf
%WINDIR%\inf\netrasa.pnf
%WINDIR%\inf\netrass.pnf
%WINDIR%\inf\netrast.pnf
%WINDIR%\inf\netrndis.pnf
%WINDIR%\inf\netnvma.pnf
%WINDIR%\inf\netpacer.pnf
%WINDIR%\inf\mdmhay2.pnf
%WINDIR%\inf\netnwifi.pnf
%WINDIR%\inf\mdmaiwa3.pnf
%WINDIR%\inf\mdmmts.pnf
%WINDIR%\inf\mdmneuhs.pnf
%WINDIR%\inf\mdmnis1u.pnf
%WINDIR%\inf\mdmnis2u.pnf
%WINDIR%\inf\mdmnis3t.pnf
%WINDIR%\inf\mdmnis5t.pnf
%WINDIR%\inf\mdmlasno.pnf
%WINDIR%\inf\mdmnokia.pnf
%WINDIR%\inf\mdmntt1.pnf
%WINDIR%\inf\mdmnttd2.pnf
%WINDIR%\inf\mdmnttd6.pnf
%WINDIR%\inf\mdmnttme.pnf
%WINDIR%\inf\mdmnttp.pnf
%WINDIR%\inf\mdmnttp2.pnf
%WINDIR%\inf\mdmnttte.pnf
%WINDIR%\inf\mdmmot64.pnf
%WINDIR%\inf\mdmnova.pnf
%WINDIR%\inf\mdmmotou.pnf
%WINDIR%\inf\mdmmoto1.pnf
%WINDIR%\inf\mdmmod.pnf
%WINDIR%\inf\mdmminij.pnf
%WINDIR%\inf\mdmiodat.pnf
%WINDIR%\inf\mdmirmdm.pnf
%WINDIR%\inf\mdmisdn.pnf
%WINDIR%\inf\mdmjf56e.pnf
%WINDIR%\inf\mdmke.pnf
%WINDIR%\inf\mdmkortx.pnf
%WINDIR%\inf\mdmolic.pnf
%WINDIR%\inf\mdmlasat.pnf
%WINDIR%\inf\mdmomrn3.pnf
%WINDIR%\inf\mdmlucnt.pnf
%WINDIR%\inf\mdmmcd.pnf
%WINDIR%\inf\mdmmcom.pnf
%WINDIR%\inf\mdmmct.pnf
%WINDIR%\inf\mdmmega.pnf
%WINDIR%\inf\mdmmetri.pnf
%WINDIR%\inf\mdmmhrtz.pnf
%WINDIR%\inf\mdmhayes.pnf
%WINDIR%\inf\mdmmhzel.pnf
%WINDIR%\inf\mdmmc288.pnf
%WINDIR%\inf\mdmoptn.pnf
%WINDIR%\inf\mdmosi.pnf
%WINDIR%\inf\mdmpace.pnf
%WINDIR%\inf\mdmtdkj4.pnf
%WINDIR%\inf\mdmtdkj5.pnf
%WINDIR%\inf\mdmtdkj6.pnf
%WINDIR%\inf\mdmtdkj7.pnf
%WINDIR%\inf\mdmtexas.pnf
%WINDIR%\inf\mdmti.pnf
%WINDIR%\inf\mdmtkr.pnf
%WINDIR%\inf\mdmzyp.pnf
%WINDIR%\inf\mdmtdkj3.pnf
%WINDIR%\inf\mdmtdkj2.pnf
%WINDIR%\inf\mdmusrgl.pnf
%WINDIR%\inf\mdmusrk1.pnf
%WINDIR%\inf\mdmusrsp.pnf
%WINDIR%\inf\mdmvdot.pnf
%WINDIR%\inf\mdmvv.pnf
%WINDIR%\inf\mdmwhql0.pnf
%WINDIR%\inf\mdmx5560.pnf
%WINDIR%\inf\mdmtron.pnf
%WINDIR%\inf\mdmusrg.pnf
%WINDIR%\inf\mdmzyxel.pnf
%WINDIR%\inf\mdmusrf.pnf
%WINDIR%\inf\mdmzoom.pnf
%WINDIR%\inf\mdmpenr.pnf
%WINDIR%\inf\mdmpin.pnf
%WINDIR%\inf\mdmpn1.pnf
%WINDIR%\inf\mdmpp.pnf
%WINDIR%\inf\mdmpsion.pnf
%WINDIR%\inf\mdmracal.pnf
%WINDIR%\inf\mdmrock.pnf
%WINDIR%\inf\mdmsupra.pnf
%WINDIR%\inf\mdmtdk.pnf
%WINDIR%\inf\mdmsuprv.pnf
%WINDIR%\inf\mdmsier.pnf
%WINDIR%\inf\mdmsii64.pnf
%WINDIR%\inf\mdmsmart.pnf
%WINDIR%\inf\mdmsonyu.pnf
%WINDIR%\inf\mdmsun1.pnf
%WINDIR%\inf\mdmsun2.pnf
%WINDIR%\inf\mdmsupr3.pnf
%WINDIR%\inf\mdmrock3.pnf
%WINDIR%\inf\mdmrock5.pnf
%WINDIR%\prefetch\xcopy.exe-41e6513f.pf

Deletes itself.

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3&del /q "<Full path to file>"' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c ping 127.0.0.1 -n 3&del /q "<Full path to file>"
'%WINDIR%\syswow64\ping.exe' 127.0.0.1 -n 3

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial