Malware

Valkyrie Final Verdict

File Name: 6df071963b8025beeb1bbac9b57ef0d7c7f7bf2a

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: 6df071963b8025beeb1bbac9b57ef0d7c7f7bf2a

MD5: 4996fe396abf69522dba0efad2d622a6

First Seen Date: 2015-09-28 19:10:17 ( 9 year(s) 9 month(s) 12 day(s) ago )

Number of Clients Seen: 12

Last Analysis Date: 2016-04-13 12:45:04 ( 9 year(s) 2 month(s) 25 day(s) ago )

Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.

Verdict Source: Signature Based Detection

Analysis Summary

Analysis Type	Date	Verdict
Signature Based Detection	2016-04-13 12:45:04	Malware
Static Analysis Overall Verdict	2016-04-13 12:45:04	No Threat Found
Dynamic Analysis Overall Verdict	2016-04-13 12:45:04	Highly Suspicious
File Certificate Validation	2016-04-13 12:45:04	Not Applicable

Static Analysis

Static Analysis Overall Verdict	Result
No Threat Found

Detector	Result
Optional Header LoaderFlags field is valued illegal	Clean
Non-ascii or empty section names detected	Clean
Illegal size of optional Header	Clean
Optional Header NumberOfRvaAndSizes field is valued illegal	Clean
Based on the sections entropy check! file is possibly packed	Clean
Timestamp value suspicious	Clean
Header Checksum is zero!	Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed	Clean
Packer detection on signature database	Unknown
Anti-vm present	Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger	Clean
TLS callback functions array detected	Clean

Anti-debug calls

UnhandledExceptionFilter

IsDebuggerPresent

TerminateProcess

Dynamic Analysis

Dynamic Analysis Overall Verdict	Result
Highly Suspicious

Suspicious Behaviors
Has no visible windows

Behavioral Information

QueryProcessAddress

SetupInstallFileW

WaitForPrinterChange

GetIpForwardTable2

BufferedPaintUnInit

D3DKMTSetAllocationPriority

?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ

GradientFill

PSPropertyBag_WriteGUID

OemToCharA

SetupDiGetActualSectionToInstallA

GetThemeBool

EmptyClipboard

ImageList_WriteEx

SetThemeAppProperties

PathStripPathW

FDICreate

WinHttpTimeFromSystemTime

CryptHashData

GetThemeFont

BCryptHashData

HidD_GetInputReport

ChooseColorW

SetupUninstallNewlyCopiedInfs

SetPriorityClass

SpInfSetDirIdHandler

GetThemeInt

OpenPrinter2W

SetupInstallFromInfSectionW

widMessage

CPExportKey

IsBadReadPtr

GetUserNameExW

GetThemeSysString

GetFormW

OpenPrinterA

SetWindowText

GetPerAdapterInfo

GetSysColorW

CharNextA

GetThemeSysInt

AdvancedDocumentPropertiesA

DllCanUnloadNow

EndDeferWindowPos

DnsQueryConfigAllocEx

PrinterMessageBoxW

SetDIBitsToDevice

GdipRotatePathGradientTransform

DnsApiFree

iswspace

InitializeFlatSB

CryptGenRandom

SetScrollInfo

DrawThemeBackground

GetThemeBackgroundExtent

GdipTransformPath

BtnSetEvent

FlatSB_SetScrollProp

D3DKMTGetDisplayModeList

VirtualFree

SubtractRect

GetThemeFilename

NPCancelConnection

DllGetClassObject

D3DKMTLock

HidD_GetNumInputBuffers

ScheduleJob

WNetAddConnection2W

PathRemoveExtensionA

ExtTextOutW

@Qforms@TApplication@HandleException$qqrp14System@TObject

CPCreateHash

wodMessage

VarMonthName

EndBufferedPaint

PlayGdiScriptOnPrinterIC

setsockopt

D3DKMTPresent

DeletePrinterDataExW

SetGadgetRootInfo

IsAppThemed

GetBestInterfaceEx

CorePrinterDriverInstalledW

GetThemeTextMetrics

IUnknown_SetSite

D3DKMTGetThunkVersion

GdipFillEllipseI

ExcludeUpdateRgn

EnumJobsW

WSHOpenSocket2

BeginBufferedPaint

OpenAdapter10_2

SetWindowTheme

GdipDrawImageI

DocumentPropertiesW

AddMonitorW

LresultFromObject

GdipAddPathBezier

KeCreateInstance

CheckETWTLS

IStream_Reset

D3DKMTOpenAdapterFromDeviceName

GdipSetPenDashOffset

PSGetNameFromPropertyKey

CPAcquireContext

WinHttpCreateProxyResolver

PSPropertyBag_ReadGUID

CreateDialogIndirectParamW

StartDocPrinterW

CallWindowProcA

GetThemeIntList

send

NetWkstaTransportEnum

IsValidDevmodeW

GetThemeDocumentationProperty

GdipDeletePrivateFontCollection

EnumPrintProcessorsW

CryptAcquireContextA

AdvancedDocumentPropertiesW

ATMGetOutlineW

TaskDialogIndirect

D3DKMTDestroyAllocation

GetThemeRect

DdeInitializeW

GetThemeSysColor

CM_Run_Detection

D3DKMTQueryAdapterInfo

ReadDirectoryChangesW

GdipAlloc

ConvertInterfaceGuidToLuid

EnumPrinterKeyW

DevRtlGetThreadLogToken

SxsOleAut32MapIIDToProxyStubCLSID

D3DKMTSetContextSchedulingPriority

FindStdColor

DhcpQueryLeaseInfo

VariantToString

SystemParametersInfo

GdipGetPenCustomStartCap

GetTextFaceAliasW

_unlock

WinHttpOpen

RtlMoveMemoryW

GetBrushOrgEx

StgIsStorageFile

SHGetFolderPathA

GetIpNetEntry2

NextMethod

CryptCreateHash

DllGetVersion

GdipRotateLineTransform

SetScrollPos

CM_Register_Device_InterfaceW

WinHttpCrackUrl

timeBeginPeriod

NotifyUnicastIpAddressChange

modMessage

CryptImportKey

ImageList_Destroy

ExtTextOutA

EnableThemeDialogTexture

PCVISIT_Hooks_Install

NPGetCaps

AddPrinterConnectionW

ExistsService

PropVariantToBooleanWithDefault

GetIfEntry2

D3DKMTCreateDevice

D3DKMTDestroySynchronizationObject

ImageList_Write

GetThemeBackgroundRegion

NPGetUser

GdipEnumerateMetafileDestPointI

GetUserNameExA

SetupDiGetWizardPage

GdipGetFontHeight

GdipResetPath

GetAdaptersAddresses

DUserSendEvent

AddPrintProcessorW

DrawThemeEdge

DefFrameProcA

LoadResource

AtlAxAttachControl

ChooseColorA

CryptDestroyHash

NtOpenKey

GetOutlineTextMetricsA

CPGetProvParam

StartDocDlgW

D3DKMTOpenAdapterFromGdiDisplayName

GdipImageGetFrameDimensionsCount

InitCommonControlsEx

D3DKMTCloseAdapter

D3DKMTCreateContext

WSHGetSocketInformation

NtUnloadKey2

DocumentPropertiesA

OpenThemeData

GetThemeAppProperties

SetCapture

FreeADsMem

GetNetResourceFromLocalPathW

BufferedPaintInit

CM_Get_Global_State

_cexit

ADsBuildVarArrayInt

D3DKMTSetDisplayMode

RegisterServiceCtrlHandlerExA

SealMessage

GdipReleaseDC

EnumPortsW

GetClassLongW

ExtSelectClipRgn

DeleteMonitorW

IEGetWriteableFolderPath

SHStrDupW

SetupScanFileQueueW

DeletePortW

InheritsFrom

ImageList_Remove

WNetAddConnection3A

ConvertStringSecurityDescriptorToSecurityDescriptorW

HtmlHelpA

PathStripPathA

GdipGetTextureTransform

GdipScaleLineTransform

InstallPrinterDriverFromPackageW

CreateDXGIFactory1

BtnSetFontColor

CharNextW

PropVariantToUInt32WithDefault

SxsOleAut32RedirectTypeLibrary

GetDefaultPrinterW

OleDraw

FlatSB_EnableScrollBar

WSHStringToAddress

gethostbyname

SetDefaultDllDirectories

SetStdHandle

DdeInitializeA

OleCreateFontIndirect

EnumPrinterDriversW

CryptGetHashParam

EnableTheming

CreateDialogIndirectParamA

CryptReleaseContext

DhcpRequestParams

DwmIsCompositionEnabled

SxsOleAut32MapConfiguredClsidToReferenceClsid

DeletePrinterIC

SslDecryptPacket

D3DKMTGetContextSchedulingPriority

Thread32Next

SLGetWindowsInformationDWORD

GdipCreateMetafileFromFile

IStream_Read

VARIANT_UserMarshal

NetShareEnum

GetRngInterface

GdipGetHatchStyle

CPGetUserKey

D3DKMTQueryResourceInfo

GetThemeColor

CoTaskMemAlloc

PrivateExtractIconsA

SetWinMetaFileBits

ConvertSidToStringSidW

NPAddConnection

WSAStartup

DeletePrinterKeyW

CopyFileExW

SetConsoleMode

GdipSetImageAttributesOutputChannel

DrawThemeIcon

DriverProc

GetPrinterDataExW

DeletePrintProvidorW

DrawThemeParentBackground

DwmDefWindowProc

BCryptImportKeyPair

AddAccessDeniedAceEx

GetUpdateRect

ImmGetCompositionStringA

TraceRegisterExA

getaddrinfo

CPSetKeyParam

ExecToStack

wnsprintfW

IsThemeBackgroundPartiallyTransparent

PathToRegion

SHGetValueA

DeletePrintProcessorW

beepdl_getresultstring

CM_MapCrToWin32Err

PlaySoundW

GdipSetPageUnit

SetupInstallFromInfSectionA

GetThemeSysBool

OpenPrinterW

DrawStateA

D3DKMTWaitForSynchronizationObject

MoveFileExW

EnumClipboardFormats

CryptDestroyKey

GdipSetStringFormatFlags

LocalFileTimeToFileTime

LCIDToLocaleName

FreeContextBuffer

D3DKMTCreateAllocation

CreateUri

IsThemeDialogTextureEnabled

InternetSetCookieExW

GetGadgetRgn

EnumFormsW

GetCorePrinterDriversW

ImageList_DrawEx

AddPrinterW

SetupDiBuildDriverInfoList

ND_WU1

GetFileVersionInfoW

CryptBinaryToStringA

GdipDrawClosedCurve2I

GetPrinterDriverDirectoryW

WSHGetWildcardSockaddr

ObjectFromLresult

EnumMonitorsW

AddPrinterDriverExW

GetConsoleWindow

DllGetInterface

IEIsProtectedModeProcess

ChangeWindowMessageFilterEx

WerReportCreate

DeleteMetaFile

CreateEvent

DrawThemeTextEx

GdipGetRegionBoundsI

SoftpubCleanup

ADsEncodeBinaryData

_controlfp_s

GetThemeSysColorBrush

NPGetConnection

AddPrinterDriverExA

DUserFlushMessages

DeletePrinterDriverPackageW

RegEnumKeyExW

EnumPrintProcessorDatatypesW

GdipImageForceValidation

ConfigurePortW

RegisterTraceGuidsW

UploadPrinterDriverPackageW

OleCreateFromFile

GdipDeletePen

DCICloseProvider

DeleteMethod

ProgIDFromCLSID

fscanf

DrawStateW

ImmGetCompositionStringW

GetThemeMargins

D3DKMTSetVidPnSourceOwner

IUnknown_QueryService

I_RpcExtInitializeExtensionPoint

D3DKMTGetMultisampleMethodList

ShellExecuteExA

GetShortPathNameW

BuildSecurityDescriptorA

GetMartaExtensionInterface

PSCreateMemoryPropertyStore

SetupDiOpenClassRegKey

SetupInstallFileA

?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z

show

ResetSecurity

PutMethod

?SetHeight@Element@DirectUI@@QAEJH@Z

CompatValue

GetPrinterW

ResumeThread

DdeUnaccessData

GdipGetCustomLineCapStrokeJoin

PSCoerceToCanonicalValue

_ultow

NetServerEnum

GetPrinterDriverW

GetConsoleCP

SetPrinterDataW

CreateToolbarEx

NPCloseEnum

GdipEnumerateMetafileDestPoints

CM_Get_Next_Log_Conf

NSS_Get_SECOID_AlgorithmIDTemplate_Util

DeletePrinterDataW

SetPrinterW

GetThemeSysFont

IsThemeActive

GetJobW

floor

WSAttemptAutodialName

DdeUninitialize

GetStartupInfo

EnumPrinterDataExW

DrawMenuBar

ATMGetOutlineA

DefFrameProcW

NSS_Shutdown

SetPaletteEntries

CM_Register_Device_InterfaceA

TaskDialog

GetProcessTimesW

GdipSetLineColors

GdipIsInfiniteRegion

SHAnsiToUnicode

SetPortW

BCryptFinishHash

CoInitializeEx

FtpCreateDirectoryA

NetGetJoinInformation

D3DKMTDestroyContext

CPGenRandom

GetCORSystemDirectory

CPSignHash

GetShortPathNameA

DeviceCapabilitiesW

NtSetVolumeInformationFile

CloseThemeData

GdipGetImageHeight

PtInRegion

D3DKMTSetGammaRamp

IECancelSaveFile

SpawnDerivedClass

GdipCreateBitmapFromScan0

DnsFlushResolverCache

FlushPrinter

GetTickCount64

ImageList_Add

GetThemeTextExtent

Dhcpv6QueryLeaseInfo

fseek

RegisterClassNameW

CryptAcquireContextW

GetThemeMetric

WerUICreate

GetPrinterDataW

inet_addr

FindNextChangeNotification

SpInfFindFirstLine

D3D11CreateDevice

InitSecurityInterfaceW

SleepConditionVariableCS

IsNetworkAlive

GdipGetLogFontW

GdipDrawPieI

PSPropertyBag_ReadBSTR

SetupDiOpenDevRegKey

ImageList_Create

NPGetResourceParent

PORT_Free

FreeMibTable

PropVariantToGUID

FindActCtxSectionStringA

SetupDiOpenDeviceInterfaceRegKey

_XcptFilter

GetMetaDataInternalInterface

SetupSetDirectoryIdA

PSCreateAdapterFromPropertyStore

FlatSB_SetScrollInfo

D3DKMTPollDisplayChildren

PCVISIT_Hooks_SynthMouseEvent

ClosePrinter

mciSendCommandA

CPDecrypt

CPSetProvParam

WSNoteSuccessfulHostentLookup

extractall

SECMOD_AddNewModule

waveOutRestart

waveOutReset

CheckDlgButton

GdipGetEmHeight

BCryptCreateHash

GdipGetBrushType

EnumPrintersW

D3DKMTWaitForVerticalBlankEvent

DeletePrinterConnectionW

VarIdiv

waveOutGetDevCapsA

SslDecrementProviderReferenceCount

SafeArrayUnaccessData

OpenServiceW

GetThemeString

GetCurrentThemeName

RegLoadKeyW

NPGetConnection3

CryptVerifySignatureA

CPDuplicateKey

GetPropertyOrigin

CreatePrinterIC

ImageList_GetImageCount

CPHashData

DeleteFormW

DeletePrinterDriverExW

DeleteHandle

BeginUpdateResourceA

GetProcAddress

FindActCtxSectionStringW

NotifyIpInterfaceChange

GetGadgetTicket

PropVariantToStringAlloc

GetAdaptersInfo

GetPrintProcessorDirectoryW

SpoolerPrinterEvent

GetFileInformationByHandleExW

GdipGetImageGraphicsContext

CERT_DestroyName

D3DKMTDestroyDCFromMemory

CoInternetIsFeatureEnabledForIUri

CryptSignHashA

SetupSetDirectoryIdW

glOrtho

WICCreateImagingFactory_Proxy

GdipGetGenericFontFamilyMonospace

Get

?GetClassInfoPtr@CCBase@DirectUI@@SGPAUIClassInfo@2@XZ

RegDeleteKeyExA

WinHttpReceiveResponse

AVIFileGetStream

GetWindowTheme

SHGetFolderPathW

GetSystemPaletteEntries

closesocket

WinHttpGetDefaultProxyConfiguration

CreateHalftonePalette

SslOpenProvider

SpInfUnlockInf

DUserFlushDeferredMessages

CallWindowProcW

AddPortExW

StrCmpLogicalW

SetJobW

GdipSetPenStartCap

ImageList_SetDragCursorImage

DwmSetIconicLivePreviewBitmap

GetRoleTextW

ConvertStringSidToSidA

WNetCloseEnum

Borland32

CM_Set_DevNode_Registry_PropertyW

BCryptVerifySignature

OleInitialize

CscNetApiGetInterface

CERT_GetOrgName

DCIBeginAccess

OpenFile

OleCreatePropertyFrame

LangDialog

FlatSB_SetScrollRange

NtMapViewOfSection

_DllBidFinalize@0

WSAGetLastError

SetupSetNonInteractiveMode

IStream_Size

GetCLRFunction

AddPrinterConnection2W

DllGetClassForm

GdipSetPathFillMode

wcsncat

ExecQueryWmi

CM_Reenumerate_DevNode

DocumentPropertySheets

ConvertLangIdToCultureName

GdipEnumerateMetafileSrcRectDestPoint

CreateTypeLib2

HitTestThemeBackground

ImageList_Read

SpInfLineFromContext

StrStrIW

NtLoadKey2

D3DKMTSignalSynchronizationObject

download_quiet

D3DKMTCreateSynchronizationObject

BtnCreate

GetAncestor

GlobalMemoryStatusEx

_uri_dec

GdipDrawImageRectRect

GetThemePartSize

VarCat

SetupScanFileQueueA

CM_Open_DevNode_Key_Ex

SetupDiGetActualSectionToInstallW

ntohs

IsValidDevmodeA

CryptGetKeyParam

StrStrIA

socket

GdipGetNearestColor

SslLookupCipherLengths

WSHJoinLeaf

joyGetPosEx

GetThemeBackgroundContentRect

NPGetUniversalName

SetAbortProc

GetClassLongA

ShowHTMLDialog

CertGetCertificateChain

?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z

midMessage

InitVariantFromBuffer

listen

MoveToEx

CreateProcessWithTokenW

CryptSetKeyParam

Module32Next

GetDeviceCaps

MsgWaitForMultipleObjectsEx

GdipEnumerateMetafileSrcRectDestRectI

GetClassInfo

GetGadgetFocus

CPEncrypt

GetStartupFlags

GlobalFlags

GetThemeEnumValue

OpenSCManagerW

BtnSetEnabled

PSPropertyBag_WriteDWORD

SafeArrayCreateEx

strstr

WSHNotify

DrawThemeText

RtlZeroMemory

CPDestroyKey

gethostname

GdipShearMatrix

ConvertStringSidToSidW

ReadProcessMemory

GdipSetLineWrapMode

LsaSetTrustedDomainInformation

AddJobW

GetDateFormatEx

ShowWebInPopUp

WSCDeinstallProvider

Put

AddAce

WSHAddressToString

GetAltMonthNames

PTReleaseMemory

NtNotifyChangeMultipleKeys

CPGetHashParam

getnameinfo

CloseOSObject

ImageList_DragEnter

GetHGlobalFromStream

VerifyVersionInfoW

GetExpandedNameA

_CxxThrowException

GetCharWidth32A

FlatSB_GetScrollInfo

auxGetDevCapsA

WTSFreeMemory

D3DKMTSetQueuedLimit

InternetSetFilePointer

CM_Set_DevNode_Registry_Property_ExW

SetPixelFormat

GdiAddGlsBounds

OpenSCManagerA

Set

mciSendStringA

FindNextUrlCacheEntryA

GdipMultiplyMatrix

CM_Get_Device_IDA

GdipMultiplyLineTransform

TranslateMDISysAccel

DhcpIsEnabled

OpenEventW

NtQueryValueKey

SetupCopyErrorA

GdipBeginContainerI

FreeADsStr

SetupGetLineByIndexA

NetStatisticsGet

ImageList_EndDrag

GetVolumeInformationW

waveOutOpen

SendMessageW

freeaddrinfo

TryEnterCriticalSection

ResetPrinterW

SetBkColor

SetDefaultPrinterW

AddFormW

FindNextPrinterChangeNotification

GdipCreateBitmapFromStreamICM

VkKeyScanA

PathIsURLA

SHUnicodeToAnsi

I_CryptNetGetConnectivity

WidenPath

IsValidLinkInfo

FlatSB_ShowScrollBar

EndDialog

_wtoi64

CM_Set_DevNode_Registry_Property_ExA

NPGetReconnectFlags

DCIEndAccess

DdeQueryStringW

DiskPrompt

NPGetResourceInformation

GdipGetImageType

AddPrintProvidorW

SetupRemoveFromSourceListW

HidD_SetNumInputBuffers

CryptGetUserKey

sprintf

SetupDiGetHwProfileListExA

BCryptOpenAlgorithmProvider

FDIDestroy

CoRevokeClassObject

SetupDiCreateDeviceInterfaceRegKeyA

CM_Connect_MachineA

AllocADsMem

GetUrlCacheEntryInfoExW

SxsOleAut32MapIIDToTLBPath

CreateDIBPatternBrush

DllStartup

QueryPerformanceFrequency

GdipDeleteFont

LoadCursorW

SetWindowOrgEx

GdipDeleteGraphics

CM_Connect_MachineW

SetupInstallFileExW

strrchr

GdipGetPathGradientGammaCorrection

CreateWaitableTimerA

DirectSoundCreate

mixerGetDevCapsA

GdipGetStringFormatLineAlign

BeginBufferedAnimation

LCMapStringEx

feof

GetThemePosition

GdipDisposeImage

CertDllVerifyRevocation

NtResumeThread

CM_Get_Child_Ex

PSPropertyBag_ReadDWORD

GdipGetFontCollectionFamilyCount

I_RpcExceptionFilter

VkKeyScanW

ProcCallEngine

SHGetFolderLocation

WSHOpenSocket

CopyIcon

GdipSetPenMode

AddFontResourceA

MainPattern

CMTranslateRGBsExt

SetClassLong

GdipCreateSolidFill

GdipBitmapLockBits

WSAttemptAutodialAddr

AlphaBlend

FillPath

GdipSetPenColor

NtSetSecurityObject

CloseWindow

FDICopy

GdipSetSolidFillColor

ImageList_GetIcon

waveInGetDevCapsA

ExecNotificationQueryWmi

GdipResetPathGradientTransform

GetMessagePos

WaitForSingleObjectEx

D3DKMTRender

glBlendFunc

GdipGetCustomLineCapBaseInset

SetupCopyErrorW

GdipGetFontUnit

SendMessageA

GetSysColorBrush

_memicmp

GetRawInputData

SetupFreeSourceListW

_mkdir

GdiplusStartup

PathFindFileNameW

SetupQueryInfFileInformationW

InitPropVariantFromStringAsVector

waveOutPrepareHeader

NtWaitForSingleObject

GdipBeginContainer2

FindNextUrlCacheEntryW

wglDeleteContext

ScriptPlace

GetHandleInformation

VarUdateFromDate

AVIFileInit

GetVolumeInformationA

SHDeleteValueW

GdipIsOutlineVisiblePathPointI

DeleteMenu

GetHostConfigurationFile

GdipGetDpiY

RpcStringBindingComposeA

WerUIStart

__p__commode

ATOB_ConvertAsciiToItem_Util

GetThreadLocale

GetLogicalDriveStringsA

IsCharAlphaNumericA

SetupDiGetHwProfileListExW

SpInfGetLineCount

GetUserProfileDirectoryW

GetSidIdentifierAuthority

glViewport

LoadCursorA

ImageList_ReplaceIcon

WideCharToMultiByte

SHGetValueW

getprotobyname

SslLookupCipherSuiteInfo

NetApiBufferFree

FindFirstFileW

GetPrinterDriverPackagePathW

DebugBreakProcess

SetupQueryInfFileInformationA

CPHashSessionKey

malloc

RegDeleteKeyExW

glColorMaterial

SetGadgetStyle

QueryRemoteFonts

DeletePrinterDriverW

D3DKMTGetDeviceState

D3DKMTDestroyDevice

WSPStartup

OleLoadPicture

GetModuleHandleExW

CryptSIPGetSignedDataMsg

WSACancelAsyncRequest

ImageList_BeginDrag

GdipSetInterpolationMode

RegQueryValueW

GdipCreateLineBrush

GdipDrawImageRect

GetFontLanguageInfo

GdipFillRectanglesI

InterlockedPushEntrySList

SetupDeleteErrorW

ScriptShape

SplDriverUnloadComplete

DrawDibRealize

WSAAccept

GdipAddPathBeziers

WinHttpCloseHandle

VerQueryValueW

CM_Get_Device_ID_List_SizeW

CreatePalette

GdipIsVisiblePoint

CMCreateTransformExtW

UnregisterClass

AttachWndProcW

SetPrinterDataExW

VarDecFromR8

WinHttpSetTimeouts

waveInAddBuffer

ImmReleaseContext

RegQueryValueA

HidP_SetUsageValueArray

CM_Get_Device_IDW

RmEndSession

GdiAddGlsRecord

D3DKMTSetDisplayPrivateDriverFormat

gethostbyaddr

shutdown

WSHGetSockaddrType

GdipCreateHalftonePalette

CPReleaseContext

InternetUnlockRequestFile

NPOpenEnum

NetQueryDisplayInformation

GdipGetPathPoints

mciSendStringW

CM_Create_Range_List

WinHttpOpenRequest

RegDeleteKeyA

DevicePropertySheets

SetupDiCreateDeviceInterfaceRegKeyW

SetupFreeSourceListA

fclose

TerminateThread

PathMatchSpecW

CloseThreadpoolWait

FlatSB_SetScrollPos

CountClipboardFormats

mixerGetNumDevs

VarImp

GdipDrawRectangleI

WNetGetConnectionW

TlsSetValue

SECITEM_FreeItem_Util

IsCharAlphaNumericW

GdipSetTextRenderingHint

RegisterMessagePumpHook

GetGadgetRect

GetKeyboardLayout

CryptRetrieveObjectByUrlW

SetupInstallFileExA

?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ

RestoreDC

NtSetInformationKey

SetGadgetParent

EnableScrollBar

DllGetClassInfo

CPSetHashParam

DhcpFreeLeaseInfo

WaitCommEvent

HeapWalk

GetThemeSysSize

VarDecFromR4

DCICreatePrimary

RegLoadKeyA

SetupGetLineByIndexW

ShutdownBlockReasonDestroy

GlobalAlloc

InitCommonControls

GdipSaveGraphics

MinVersion

GdipRestoreGraphics

CPGenKey

GetClassNameA

NsiAllocateAndGetTable

CM_Set_HW_Prof_Ex

_strrev

D3DKMTUnlock

GdipTranslateRegionI

ImageList_SetIconSize

FreePropVariantArray

WinHttpSetOption

GdipRotateTextureTransform

GdipGetPenDashCap197819

SetupGetTargetPathW

GdipDrawImageRectI

CallNamedPipeW

SetupDiGetClassDevPropertySheetsW

IsThemePartDefined

PSPropertyBag_ReadStream

kcfg_Create

ShellExecuteExW

IsWindowEnabled

DCIDestroy

GetMappedFileNameA

WSHGetBroadcastSockaddr

CM_Set_DevNode_Registry_PropertyA

GdipGetGenericFontFamilySansSerif

GdipGetDpiX

TravelLogCreateInstance

SHBrowseForFolderA

StrRetToStrW

VariantCompare

DdeCreateDataHandle

ChangeClipboardChain

DnsFree

HandleFtp

GetProcessId

DestroyLinkInfo

waveOutGetNumDevs

ScreenToClient

CPImportKey

GetUserObjectSecurity

SendMessage

GetCurrentHwProfileA

SetFocus

FindAtomW

NtSuspendProcess

GetCharWidthW

DnsGetProxyInformation

RpcStringBindingComposeW

BtnSetText

GetNumberFormatA

CreateMenu

GdipSetMetafileDownLevelRasterizationLimit

waveOutPause

SetupDiGetClassDevsExA

SamCloseHandle

GdipGetRegionScansI

CryptStringToBinaryW

CryptGetProvParam

getpeername

DsGetDcCloseW

GdipGraphicsClear

InsertMenuA

VarInt

ImageList_GetDragImage

Int64Op

MapFileAndCheckSumA

TracePrintfExA

WinVerifyTrust

ImgApplyChanges

GdipGetImageEncodersSize

GetOpenFileNameW

CM_Request_Device_Eject_ExA

LockFile

VariantToStringWithDefault

GdipAddPathBezierI

SetupDeleteErrorA

DeleteFile

SetSearchPathMode

SetWindowTextW

QueryFullProcessImageNameA

mciGetErrorStringA

GdipGetSmoothingMode

_DllBidEntryPoint@36

CM_Get_Device_ID_List_SizeA

BlessIWbemServicesObject

GdipGetPageScale

DdeGetData

CoCreateInstance

printf

DeleteUrlCacheEntryA

OutputDebugStringA

InstallHinfSectionW

GdipIsClipEmpty

DMOGetName

InternetCloseHandle

TransparentBlt

DrawDibDraw

SslEncryptPacket

InstallHinfSectionA

GdipGetImageWidth

OutputDebugStringW

InsertMenuW

UpdateResourceA

CreateThreadpoolWait

SetupDiAskForOEMDisk

SetupGetFileCompressionInfoExA

ShouldDisplayPunycodeForUri

glTexSubImage2D

DdeQueryStringA

CM_Get_Parent

WinHelpW

wglDescribePixelFormat

EnumPrinterDataW

ImmGetContext

LocalReAlloc

GdipIsVisiblePathPoint

BCryptDestroyHash

_post_url@8

recvfrom

SpInfFreeInfFile

HeapCompact

CreateDUIWrapper

GdipIsMatrixIdentity

CreateErrorInfo

MsgWaitForMultipleObjects

_jsondec

Wow64RevertWow64FsRedirection

ZeroMemoryA

RtlMoveMemory

SetupDiGetClassDevsExW

CreateProcessWithLogonW

GdipDrawImagePointRectI

NPAddConnection3

NtCreatePagingFile

SetupDiGetClassDevPropertySheetsA

SetupGetTargetPathA

waveOutSetVolume

DwmSetWindowAttribute

CPDuplicateHash

InitGadgets

SHBrowseForFolderW

CryptStringToBinaryA

DeleteUrlCacheEntryW

GetClassNameW

DrawThemeBackgroundEx

DdeDisconnect

DllBidTraceCW

HidP_GetUsageValueArray

HidD_SetFeature

GetLocaleInfoW

GetModuleInformationW

WerReportSubmit

AllowPermLayer

RasHangUpA

EndMethodEnumeration

_configthreadlocale

GdipGetLineSpacing

CallNamedPipeA

SetupGetInfFileListA

URLDownloadToCacheFileW

GetBufferedPaintTargetRect

PathRemoveExtensionW

SetWindowTextA

GetCharWidthA

StrokePath

NtCancelIoFile

?Initialize@CCBase@DirectUI@@QAEJIPAVElement@2@PAK@Z

EqualSid

GetOpenFileNameA

PolyBezier

UpdatePanningFeedback

EndBufferedAnimation

SetupGetFileCompressionInfoExW

SetupGetInfFileListW

InitializeProcessForWsWatch

DWriteCreateFactory

PathFindFileNameA

CreateMailslotA

RtlQueryElevationFlags

CloseColorProfile

QueryFullProcessImageNameW

AllocADsStr

CM_Query_Remove_SubTree_Ex

GetLocaleInfoA

GdipPathIterIsValid

GetComboBoxInfo

WinHelpA

NetRemoteComputerSupports

_lcreat

wglMakeCurrent

GetUserDefaultLangID

LsaOpenPolicy

GdipCreateRegionPath

IUnknown_Set

acmStreamOpen

NtCreateProcessEx

GdipPathIterRewind

ImageList_LoadImageW

SeekPrinter

GetTimeZoneInformation

inet_ntoa

SetGadgetFocusEx

GdipGetCellAscent

SHQueryValueExW

_wcmdln

WTSRegisterSessionNotification

TraceDumpExA

BufferedPaintRenderAnimation

VerLanguageNameW

ioctlsocket

??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z

CoRegisterInitializeSpy

DwmExtendFrameIntoClientArea

GdipCreateImageAttributes

PORT_Realloc_Util

InitMemoryAllocate

ImageList_DragShowNolock

ClearCommError

isspace

SfcIsFileProtected

HidD_FlushQueue

LockSetForegroundWindow

CommitSpoolData

mixerGetLineInfoA

RemoveFontResourceA

SetThreadPriority

GdipGetPathWorldBounds

SetupDiMoveDuplicateDevice

GetObjectText

SetThreadLocale

?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z

__lconv_init

SHCreateMemStream

SetSecurityInfo

ImageList_GetImageInfo

VerifyClientKey

PropVariantToStringWithDefault

NtOpenSymbolicLinkObject

BCryptGetProperty

TlsFree

CoRegisterMessageFilter

ImageList_LoadImageA

GdipGetLineBlendCount

SetNamedSecurityInfoW

GdipGetPathGradientCenterPointI

FindProcess

CompareStringA

MsimtfIsWindowFiltered

WSAGetOverlappedResult

ShowOwnedPopups

WNetOpenEnumA

GdipGetFamily

AttachThreadInput

WinHttpQueryDataAvailable

NtUnmapViewOfSection

PSPropertyBag_ReadStrAlloc

NtSetSystemInformation

SetupGetLineTextA

GetBufferedPaintDC

SetupInstallServicesFromInfSectionExW

SHBindToParent

SetClassLongW

GetTextExtentPoint32W

SetThreadAffinityMask

Dhcpv6FreeLeaseInfo

ith_getlasterror

GetMonitorInfoW

SslFreeObject

ImageList_SetOverlayImage

GdipGetMetafileHeaderFromMetafile

IsValidCodePage

GetCurrentProcessIdW

BufferedPaintStopAllAnimations

wcsncmp

GdipGetStringFormatTrimming

ReadEventLogA

SslIncrementProviderReferenceCount

NetLocalGroupDelMembers

NtGetCurrentProcessorNumber

bind

htonl

GdipGetMetafileHeaderFromFile

DeleteSecurityContext

PropertySheetW

GdipGetLinePresetBlendCount

GetScrollInfo

ith_getresultstring

MessageBoxIndirectW

CLSIDFromProgID

SetupQueryDrivesInDiskSpaceListW

ATMGetFontPathsA

ToUnicode

InternetGetConnectedState

MultiByteToWideChar

ObjectStublessClient10

GdipCreateStreamOnFile

GdipDeleteFontFamily

?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z

BZ2_bzDecompressEnd

HeapAlloc

PSStringFromPropertyKey

timeGetTime

RegisterServiceCtrlHandlerA

?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z

htons

_TrackMouseEvent

SamEnumerateDomainsInSamServer

GrayStringA

GetMethod

Alloc

SetupSetDirectoryIdExW

GdipGetWorldTransform

VirtualAllocEx

D3DKMTEscape

_wcsnicmp

GdipGetLogFontA

SetFormW

_putenv

I_RpcInitFwImports

OleCreatePictureIndirect

SetTextCharacterExtra

DeactivateActCtx

NtCreateKey

SHGetFolderPath

SelectClipPath

GdipCreateBitmapFromHBITMAP

GetViewportOrgEx

GetCurrentProcessW

sendto

FindCloseChangeNotification

NtAreMappedFilesTheSame

PrintWindow

GetDialogBaseUnits

D3DKMTQueryAllocationResidency

GdipSetStringFormatLineAlign

SetupQueryDrivesInDiskSpaceListA

GdipDrawCurve

ImageList_SetImageCount

GdipCloneImage

GetThemePropertyOrigin

GdipCreateFontFromLogfontW

DirectDrawCreate

SetMenuItemInfoW

WinHttpSendRequest

GetVersionExA

DestroyMenu

GdipTranslateWorldTransform

SamQuerySecurityObject

GdipCreateCustomLineCap

GdipIsVisibleRegionRect

CM_Test_Range_Available

sndPlaySoundA

BSTR_UserSize

GetWindowText

AddVectoredContinueHandler

_CorExeMain

SetClassLongA

SetupSetDirectoryIdExA

NtQueryObject

SetupDiGetDeviceInfoListClass

GetCharABCWidthsA

CM_Get_Depth_Ex

TerminateProcess

VerFindFileA

GdipFlush

Launcher

auxMessage

_lwrite

GdipSetPathGradientCenterColor

FreeLibraryWhenCallbackReturns

BeginEnumeration

ADsSetLastError

GetModuleFileNameExW

memmove

ClipCursor

GetCurrentProcess

GetTraceLoggerHandle

GetVersionExW

CM_Is_Dock_Station_Present_Ex

DUserPostEvent

GetCPInfoExW

GetNearestPaletteIndex

GetScrollPos

DragFinish

GdipCombineRegionRegion

StringFromCLSID

LookupIconIdFromDirectory

CERT_GetDefaultCertDB

FlatSB_GetScrollProp

SetupQueryInfVersionInformationA

AddPortW

?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z

GetCalendarInfoW

DisableContainerHwnd

EventRegister

DllBidInitialize

getJit

waveOutGetPosition

GrayStringW

srand

UninitializeFlatSB

CreateXmlReader

SetNamedSecurityInfoA

PurgeComm

CM_Disable_DevNode_Ex

GPBExecutePack

HeapFree

PK11_ImportCert

ImmSetCandidateWindow

GdipDeleteCachedBitmap

EnumChildWindows

GetModuleFileNameExA

SetupInstallServicesFromInfSectionExA

ImageList_Copy

CPVerifySignature

ImmGetConversionStatus

Polyline

GdipCreatePen1

PCVISIT_Hooks_EnableRealInputs

GdipCreatePen2

FlsFree

_ftol

_lseek

SetMenuItemInfoA

PropertySheetA

SetupDiGetHwProfileList

GdipCreateBitmapFromStream

??2@YAPAXI@Z

ActivateKeyboardLayout

GdipCreateFromHDC

PrintDlgA

GdipGetImagePalette

SetGadgetFocus

SetStretchBltMode

VarPow

SetupGetMultiSzFieldA

TracePrintfA

CreateStdAccessibleObject

QualifierSet_Delete

SetupDiCreateDeviceInfoListExW

GdipGetPathGradientTransform

GdipSetImageAttributesOutputChannelColorProfile

NtQuerySystemTime

HeapDestroy

waveOutWrite

SamLookupDomainInSamServer

GdipGetAdjustableArrowCapHeight

ExitThread

BTOA_DataToAscii

__dllonexit

realloc

SECITEM_AllocItem_Util

RealChildWindowFromPoint

WSHSetSocketInformation

joyGetDevCapsA

SHFileOperationW

GetMethodQualifierSet

SetConsoleInputExeNameW

CM_Move_DevNode

?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z

SetupDiCreateDeviceInterfaceW

GdipSetLineLinearBlend

SetupDiClassNameFromGuidExA

FlatSB_GetScrollRange

InstallColorProfileW

GdipSetPathGradientPresetBlend

GetHashInterface

WSAAsyncSelect

CM_Remove_SubTree

WindowFromPoint

ftell

acmStreamConvert

timeEndPeriod

GdipSetImageAttributesWrapMode

DllGetClassObjectEx

WinHttpGetProxyForUrl

DllRegisterServer

FileWrite

__vbaExceptHandler

modf

LZOpenFileA

GetAsymmetricEncryptionInterface

GetFileVersionInfoSize

MiniDumpWriteDump

GdipCreateRegion

ExcludeClipRect

SetKernelObjectSecurity

CreateClassEnumWmi

kcfg_GetTxtLen

SetupDiRemoveDevice

FreeCredentialsHandle

GdipGetRegionHRgn

SearchPathA

WNetDisconnectDialog

CoFreeUnusedLibraries

AccessibleObjectFromWindow

SetupDiCreateDeviceInfoListExA

SetupDiCreateDeviceInterfaceA

HttpOpenRequestA

CM_Enable_DevNode

SHDeleteKeyW

GdipSetAdjustableArrowCapHeight

StartDocPrinterA

GdipEnumerateMetafileDestPoint

VarAbs

SetupDiSetSelectedDevice

_decrypt_file_2@12

NtUnloadKey

_except_handler4_common

GdipGetPenWidth

SetupDiClassNameFromGuidExW

IESaveFile

SetupLogFileA

InternetConnectA

NtQueryKey

GetFullPathName

SizeofResource

MonitorFromRect

GetScrollRange

SetupGetMultiSzFieldW

AMGetErrorTextA

waveOutUnprepareHeader

SetupQueryInfVersionInformationW

QueryServiceStatusEx

GdipAddPathArc

CM_Get_Next_Res_Des_Ex

LoadTypeLibEx

CM_Add_Empty_Log_Conf_Ex

CM_Get_Class_NameW

?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z

SetupLogFileW

HidP_TranslateUsagesToI8042ScanCodes

CompareStringW

NtClose

SetupDiOpenDeviceInterfaceA

SetFileTime

GdipGetPropertyIdList

PR_Close

SetupGetLineTextW

GetMonitorInfoA

SpawnInstance

FontIsLinked

SpInfGetField

beepdl_getresultlen

GdipSetPenTransform

SpInfFindNextMatchLine

recv

GdipSetPathGradientFocusScales

HttpOpenRequestW

RemovePropW

PrintDlgW

VarAdd

SetupAddSectionToDiskSpaceListW

EnumDisplayMonitors

ND_RI2

DebugBreak

SetupQueueDefaultCopyW

SHFileOperationA

ScriptGetFontProperties

SetupGetSourceInfoW

GetLastInputInfo

CryptSetHashParam

GdipDrawPolygonI

GdipSetPathGradientBlend

SetupGetSourceInfoA

GetModuleFileNameEx

WritePropertyValue

RemovePropA

TranslateColors

RegisterServiceCtrlHandlerW

SetupQueueDefaultCopyA

select

GetDlgCtrlID

DragQueryPoint

SetFileAttributesW

GdipGetInterpolationMode

DrawEdge

OleFlushClipboard

GetColorDirectoryW

DllBidCtlProc

EnumWindowsW

HidD_GetIndexedString

SetupAddSectionToDiskSpaceListA

SuspendThread

mixerGetLineControlsA

NtSetContextThread

OpenEventA

GetWindowTextLength

CreateSemaphoreExW

GetFileVersionInfoA

SearchPathW

getservbyname

WinHttpGetIEProxyConfigForCurrentUser

GdipGetClipBounds

GdipGetDC

WerReportCloseHandle

GdipBitmapUnlockBits

GetTextExtentPoint32A

StretchBlt

GetStdHandle

OpenMutex

WNetGetConnectionA

fread

NetRemoteTOD

FtpOpenFileA

GdipSetLinePresetBlend

GdiIsMetaPrintDC

NtOpenThread

GdipSetPenEndCap

CM_Enumerate_Classes_Ex

EnableWindow

SetPropW

ApphelpCheckShellObject

GdipGetPenEndCap

CreateControl

PathAppendA

GetWriteWatch

RegisterDragDrop

GetKeyboardState

GetProcessWindowStation

_read

EncodePointer

GetWindowsDirectoryW

CloseThreadpoolTimer

GdipSaveImageToStream

GdipDrawDriverString

GetSidSubAuthority

QualifierSet_Next

AddAtomW

RegEnumKeyExA

WinHttpReadData

remove

CM_Get_Class_NameA

__WSAFDIsSet

IIDFromString

PtVisible

GdipCreateBitmapFromHICON

GdipDrawImagePointsI

SetupDiDestroyClassImageList

CreateSemaphoreA

SetFileAttributesA

NetLocalGroupGetMembers

SysFreeString

SetFileSecurityW

??0CCBase@DirectUI@@QAE@KPBG@Z

GdipGetFontSize

MapVirtualKeyW

GdipRotateWorldTransform

SetFileSecurityA

QueryPerformanceCounter

ClientToScreen

CoInternetGetSession

_exit

InsertMenuItemA

?CreateAccNameLabel@HWNDHost@DirectUI@@IAEPAUHWND__@@PAU3@@Z

OpenEvent

SetupDiSetDeviceInstallParamsA

DisableThreadLibraryCalls

IEE

GetKeyNameTextA

CM_Modify_Res_Des_Ex

GdipCreateMetafileFromStream

GdipGetPenTransform

DispatchMessageW

CloneEnumWbemClassObject

?SetNotifyHandler@CCBase@DirectUI@@QAEXP6GHIIJPAJPAX@Z1@Z

GdipClonePen

CreateSemaphoreW

NPEnumResource

CreateWellKnownSidW

PathRemoveFileSpecW

BeginPanningFeedback

GetComputerName

PathAppendW

IEGetProcessModule

Time

SetPropA

SHAutoComplete

SetupDiClassNameFromGuidW

FreeAddrInfoExW

Update

GdipGetMatrixElements

GdipGetImagePaletteSize

MapViewOfFileEx

RegCloseKey

SslImportKey

WSACleanup

HidP_GetScaledUsageValue

NetUseEnum

DwmEnableMMCSS

WTHelperGetProvSignerFromChain

TrackPopupMenu

CM_Delete_Class_Key_Ex

HeapReAlloc

ImageList_SetBkColor

NtLoadKeyEx

GetCurrentThread

GetBufferedPaintTargetDC

SetupDiClassNameFromGuidA

NtOpenSection

CM_Get_Version

RegFlushKey

GdipCombineRegionRect

SendInput

?IsContentProtected@Element@DirectUI@@UAE_NXZ

InternetConnectW

SetupDiSetDeviceInstallParamsW

GetKernelObjectSecurity

ScriptItemize

GdipGetRegionDataSize

AVIStreamGetFrame

BlessIWbemServices

NetUserDel

CM_Move_DevNode_Ex

acmStreamUnprepareHeader

TraceEvent

PTConvertDevModeToPrintTicket

SetMenu

GdipLoadImageFromFile

GetViewportExtEx

GdipGetPathGradientPresetBlend

CoInternetParseUrl

InternetOpenUrlA

PR_GetError

QueryContextAttributesA

NPFormatNetworkName

SetGadgetRect

AreFileApisANSI

CreateXmlReaderInputWithEncodingName

ATMRemoveFontA

DbgUiDebugActiveProcess

GdipRecordMetafileI

glLoadIdentity

CertOpenStore

DebugActiveProcessStop

MkParseDisplayName

___CPPdebugHook

SetThreadpoolTimer

GdipTransformMatrixPointsI

GdipAddPathCurve

NtWriteFileGather

NetShareDel

exit

GetDesktopWindow

FDIIsCabinet

PTConvertPrintTicketToDevMode

GetAccCursorInfo

SetProcessWindowStation

GdipRecordMetafile

GdipDeletePathIter

PK11_GetTokenName

GdipSetSmoothingMode

SetupCloseInfFile

GdipGetLineWrapMode

ConvertStringSecurityDescriptorToSecurityDescriptor

GdipGetImageEncoders

HidD_Hello

SpInfLockInf

?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z

FtpOpenFileW

GdipIsVisibleRectI

CoGetClassObject

ReleaseSRWLockExclusive

LoadAcceleratorsA

DialogBoxIndirectParamA

GdipCreateFontFamilyFromName

ND_WI4

BCryptGenRandom

SafeArrayAllocDescriptorEx

waveOutClose

mxdMessage

Delete

CPGetKeyParam

VarNeg

MoveFileExA

CloseSpoolFileHandle

GdipGetImagePixelFormat

ImageList_DragLeave

IsProcessDPIAware

StrToIntW

GdipDeleteMatrix

StrFormatByteSize64A

HidP_GetSpecificButtonCaps

GdipSetPenDashCap197819

CoInternetParseIUri

WinHttpConnect

_mbscmp

OleTranslateColor

raise

LookupAccountSidLocalA

GdipSetClipHrgn

UrlMkSetSessionOption

IsValidURL

GetCipherInterface

NetServerTransportEnum

LoadKeyboardLayoutW

NtReplaceKey

CERT_ChangeCertTrust

SetupDiInstallDriverFiles

GdipSetCustomLineCapWidthScale

OleLockRunning

CryptExportKey

DestroyCaret

DCIOpenProvider

GetCharABCWidthsW

CMCreateProfileW

ntohl

GetRecordInfoFromGuids

PORT_GetError

NtDeleteKey

CERT_DecodeCertFromPackage

VarParseNumFromStr

_initterm

GdipRecordMetafileStream

AllocConsole

LogonUserW

DestroyWindow

GdipDrawCurve2I

GdipSetClipRect

CERT_GetCommonName

FormatMessageW

CM_Disable_DevNode

NtQueryAttributesFile

SetGadgetMessageFilter

RtlFillMemory

SetupDiEnumDeviceInfo

WerReportSetParameter

InternetOpenUrlW

waveInReset

midiOutGetVolume

GdipVectorTransformMatrixPointsI

QualifierSet_GetNames

GetAcceptExSockaddrs

HttpCloseDependencyHandle

LogonUserA

MapVirtualKeyA

ImmUnlockIMC

FreeResource

UnrealizeObject

midiStreamRestart

WinStationEnumerateW

mixerGetControlDetailsA

GdipSetPathGradientPath

fgetc

GetPixel

VarOr

PeekMessageW

EnumProcessesW

NetGroupGetUsers

BCryptGetFipsAlgorithmMode

NtCreateToken

SetupDiLoadClassIcon

CoCreateGuid

CreateRemoteThread

PropVariantGetElementCount

GetEnhMetaFileW

SetConsoleCtrlHandler

LsaNtStatusToWinError

GetKeyNameTextW

Arc

??1CritSecLock@DirectUI@@QAE@XZ

GdipIsMatrixInvertible

EnumPrintersA

GdipDeleteBrush

LoadAcceleratorsW

SamGetGroupsForUser

SafeArrayDestroy

QueryServiceConfigW

RegisterServiceCtrlHandlerExW

SafeArraySetIID

GetWindowsDirectoryA

CloseClipboard

_invoke_watson

CreateICW

time

VarNumFromParseNum

OffsetClipRgn

StartPage

StrFormatByteSizeW

SetDllDirectoryW

ImageList_GetBkColor

InsertMenuItemW

GdipImageRotateFlip

D3DKMTOpenResource

AcceptEx

GdipGetPenCustomEndCap

CMP_RegisterNotification

FlatSB_GetScrollPos

PeekMessageA

LoadLibraryShim

CreateEventExW

IsEqualGUID

GdipGetImageRawFormat

FormatMessageA

ImmSetConversionStatus

CertNameToStrW

FindFirstFreeAce

GdipGetClip

GdipGetPenBrushFill

GetCurrentThreadId

?Register@ClassInfoBase@DirectUI@@QAEJXZ

SleepEx

NtNotifyChangeKey

GdipSaveAddImage

NtNotifyChangeDirectoryFile

GetSystemTime

MsiSummaryInfoGetPropertyA

IsTNT

GetBitmapBits

DefMDIChildProcA

GdipRotatePenTransform

LsaSetInformationPolicy

SetServiceObjectSecurity

LoadKeyboardLayoutA

waveInGetNumDevs

ExtractAssociatedIconA

SHGetKnownFolderPath

SetupDiDestroyDriverInfoList

wglGetProcAddress

SHChangeNotify

CreateICA

RmShutdown

GdipSetImageAttributesColorMatrix

CreateEllipticRgn

CMDeleteTransform

QueryServiceConfigA

DdeSetUserHandle

DispatchMessageA

WSAConnect

GetNames

strtoul

IsTextUnicode

EnumDesktopWindows

LookupAccountSidLocalW

GetUdpStatistics

??0ClassInfoBase@DirectUI@@QAE@XZ

wcstoul

CoLockObjectExternal

glClear

CM_Get_Class_Key_NameW

InternetOpenW

SetThreadUILanguage

DbgBreakPoint

SetupGetStringFieldW

CreateProfileFromLogColorSpaceW

GdipDrawImage

CreateSymbolicLinkW

GdipSetTextContrast

SetupDiOpenClassRegKeyExW

InternetCreateUrlW

GetTcpStatistics

ConvertInterfaceNameToLuidW

_strupr

EVENT_SINK_Invoke

GetEnhMetaFilePaletteEntries

SetupDiGetHwProfileFriendlyNameA

GdipGetPathGradientBlend

HttpQueryInfoW

_iob

SetCursorPos

_hwrite

CoGetInterfaceAndReleaseStream

ReallocADsMem

LoadImageA

QualifierSet_Get

DefWindowProcW

ExtractIconEx

JsVarRelease

SetupAdjustDiskSpaceListW

UnionRect

NtFlushKey

LineTo

QueryColorProfile

CryptCATAdminAcquireContext

PageSetupDlgW

CryptDecrypt

GdipFillPolygon2I

SetupDiOpenClassRegKeyExA

memcmp

MapViewOfFile

DrawCaption

GetFileVersionInfoSizeW

GetFileAttributesEx

LeaveCriticalSection

LockWindowUpdate

GdipCreateMetafileFromWmfFile

GetAclInformation

kcfg_GetResultStr

PR_Seek

SetupDiSetSelectedDriverA

GetObjectW

DocumentEvent

TranslateAcceleratorW

GdipDisposeImageAttributes

InternetOpenA

GetLongPathNameW

RegOpenKeyExA

CharPrevA

CM_Open_DevNode_Key

RasEditPhonebookEntryA

EndDoc

SetProcessDEPPolicy

ReadConsoleW

SafeArrayAccessData

midiStreamStop

SetupDiCancelDriverInfoSearch

NtQueryInformationToken

SetupDiGetClassBitmapIndex

ND_RU1

SetWindowPos

GdipEnumerateMetafileDestRectI

PORT_GetError_Util

FreeLibraryW

WerReportSetUIOption

UnsealMessage

GdipCreateFont

SafeArrayPutElement

WNetGetUserA

CM_Free_Range_List

StrChrW

EVENT_SINK_AddRef

VarI4FromStr

LoadImageW

CM_Query_And_Remove_SubTree_ExW

GetMessageA

CreateGadget

GetTimeFormatW

NtFlushBuffersFile

GlobalUnlock

GetPos

GetClientRect

RegisterServiceProcess

GetSystemTimes

TranslateAcceleratorA

RevertToSelf

ATMBeginFontChange

ClearCommBreak

DeleteObject

BeginMethodEnumeration

Module32First

_jsonproc

SendMessageTimeoutW

RegisterClassExA

GdipSetImagePalette

CertDuplicateCertificateChain

GetFileInformationByHandle

midiOutClose

GdipPathIterNextMarkerPath

CharPrevW

SetupAdjustDiskSpaceListA

GetMessageW

ResizePalette

ResolveIpNetEntry2

GetTimeFormatA

PutInstanceWmi

CertControlStore

CORPolicyEE

InvalidateGadget

GdipCreatePath2

GetStretchBltMode

OffsetViewportOrgEx

GdipSetStringFormatAlign

RegCreateKeyExW

KillProc

GdipGetPathPointsI

CreateUrlCacheEntryA

?EndDefer@Element@DirectUI@@QAEXK@Z

HideCaret

RegisterClassExW

SendMessageTimeoutA

HidP_SetData

SetCurrentDirectoryW

GetTickCount

DllBidFinalize

QueryServiceStatus

QualifierSet_BeginEnumeration

CPDestroyHash

ShowWindow

QualifierSet_EndEnumeration

ith_getoption

NtDelayExecution

GetPolyFillMode

VarDecFromCy

ATMSetFlags

GdipDrawArcI

SetupDiSetSelectedDriverW

GetEnhMetaFileBits

GetObjectA

GdipDrawRectangle

GdipGetPathGradientPointCount

glDeleteTextures

VarDecFromI4

SymGetLineFromAddr64

WcsGetDefaultRenderingIntent

CM_Get_Res_Des_Data

GdipRecordMetafileStreamI

midiInGetDevCapsA

BtnSetFont

CreatePropertySheetPageW

CryptSIPPutSignedDataMsg

SetupDiGetCustomDevicePropertyA

StartServiceW

CreateURLMonikerEx

GdipAddPathRectangles

Chord

CM_Request_Eject_PC_Ex

GdipSetTextureWrapMode

SetSecurityDescriptorDacl

GdipResetPageTransform

GetPrintCapabilitiesThunk2

RegOpenKeyW

ResetDCA

DeleteAce

wsprintfW

toupper

GdipGetLineRectI

CM_Disconnect_Machine

GdipSetRenderingOrigin

PaintRgn

InitializeSecurityContextA

SetCurrentDirectoryA

mouse_event

_CorDllMain

IsIconic

SetupPromptForDiskA

NPGetConnectionPerformance

InvertRect

NetUserModalsGet

waveOutGetVolume

CM_Get_Parent_Ex

GetSecurityDescriptorGroup

CM_Query_And_Remove_SubTree_ExA

RasEnumEntriesA

GdipGetAdjustableArrowCapFillState

ImageList_GetIconSize

CreatePopupMenu

HidD_GetManufacturerString

GdipClonePath

GdipAddPathPath

SymFunctionTableAccess64

DestroyEnvironmentBlock

SetupPromptForDiskW

WinHttpQueryHeaders

GdipCreateCachedBitmap

SetupDiRemoveDeviceInterface

_vscwprintf

CPDeriveKey

GetMenuState

ATMFontStatusA

_open

GetKeyboardType

GetDC

EndDocPrinter

?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ

CM_Get_Resource_Conflict_DetailsW

WTSEnumerateSessionsA

InterlockedPopEntrySList

CreateDC

ExtCreatePen

CM_Delete_Range

acmStreamPrepareHeader

TerminateProcessW

WSAAsyncGetHostByAddr

wsprintfA

GetCurrentInputMessageSource

GetDUserModule

GetWindowLong

CreateMultiProfileTransform

GetWindowTextW

SetLastError

NetWkstaUserGetInfo

StrDupW

GdipBitmapSetResolution

LookupPrivilegeNameA

GdipGetLineRect

GetCurrentApartmentType

GetCurrentThreadCompartmentId

SxsLookupClrGuid

GdipCreateRegionHrgn

AVIStreamRelease

NtCreateNamedPipeFile

NtOpenProcessToken

GdipCloneStringFormat

VerQueryValue

ImageList_Draw

SetupDiOpenDeviceInfoW

PropVariantToInt32

CM_Get_Resource_Conflict_DetailsA

lstrcpy

__getmainargs

CM_Get_Device_ID_Size_Ex

GdipAddPathRectangleI

NtQuerySymbolicLinkObject

GdipGetStringFormatFlags

__CxxFrameHandler

GdipCreateHatchBrush

ADsGetLastError

VarXor

DllBidCtlProcW

GetLongPathNameA

SetMetaRgn

CallNextHookEx

ConnectServerWmi

GetDllDirectoryW

NtMakeTemporaryObject

PathQuoteSpacesA

_setjmp3

GdipSetImageAttributesThreshold

StartServiceA

HttpQueryInfoA

SetupDiGetHwProfileFriendlyNameW

?set_terminate@@YAP6AXXZP6AXXZ@Z

CreateMutex

SysStringLen

SwapBuffers

VarBstrFromBool

ImageGetCertificateData

SafeArrayGetRecordInfo

UnRegisterTypeLib

NetLocalGroupAddMembers

CreateSolidBrush

RegOpenKeyA

ConvertDefaultLocale

CoGetApartmentType

midiOutGetNumDevs

RegQueryValueEx

DefWindowProcA

GdipGetPathGradientCenterColor

SHPathPrepareForWriteA

NetConnectionEnum

VirtualUnlock

TextOutA

GdipGetPenMode

FilterCreateInstance

GetWindowTextA

CreateMemoryResourceNotification

GdipInvertMatrix

GdipDrawString

GetPropertyHandle

NtCreateUserProcess

SetupDiGetCustomDevicePropertyW

GdipSetStringFormatTrimming

VarMod

CoGetCallContext

SetFileAttributes

_strlwr

lstrcpyA

CopySid

SystemTimeToTzSpecificLocalTime

LookupAccountNameW

CreateLinker

GetQualifierSet

CM_Get_First_Log_Conf

GdipScaleTextureTransform

?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z

CM_Open_Class_Key_ExA

CoInternetIsFeatureEnabledForUrl

WNetCancelConnection2W

GetPrinterA

_snprintf

DrawDibClose

SetKeyboardState

GetPropW

InitializeCriticalSectionAndSpinCount

GetClassInfoExW

DeleteCriticalSection

SHPathPrepareForWriteW

GetAppContainerFolderPath

ShellLink

SetActiveWindow

VirtualQuery

mciSendCommandW

LsaDeleteTrustedDomain

GetNumberOfEventLogRecords

MenuItemFromPoint

acmStreamReset

GetRecordInfoFromTypeInfo

FindCloseUrlCache

?SetWidth@Element@DirectUI@@QAEJH@Z

WSAEnumNetworkEvents

SamOpenUser

RtlDecompressBuffer

IsBadCodePtr

InitializeSecurityDescriptor

GdipClosePathFigure

GdipGetStringFormatAlign

GetSpoolFileHandle

RasEnumConnectionsA

GdipDrawImagePointRect

TextOutW

SetupTermDefaultQueueCallback

ND_RI4

wcschr

GdipImageGetFrameDimensionsList

CommitUrlCacheEntryW

_except_handler3

LoadIconWithScaleDown

SetupDiOpenDeviceInterfaceW

OleUIBusyW

lstrcpyW

GetProcessExecutableHeap

Module32NextW

free

BSTR_UserFree

EnumDisplaySettingsA

strncpy

RegSetValueExW

PropVariantClear

VarWeekdayName

PathQuoteSpacesW

CoMarshalInterThreadInterfaceInStream

SaveDC

CM_Set_DevNode_Problem_Ex

GetPropA

CloseEnhMetaFile

GdipScaleMatrix

NetScheduleJobDel

_errno

SetupDiGetSelectedDriverA

InitializeCriticalSectionEx

CoMarshalInterface

GetColorProfileFromHandle

EnumFontFamiliesW

IsWindowVisible

FlsAlloc

GdipDrawCurve3I

Wow64GetThreadContext

DdeFreeDataHandle

PR_Open

DirectDrawEnumerateA

fwprintf

DeleteUrlCacheContainerA

WSCGetProviderPath

WSAStringToAddressA

LoadUserProfileW

UnlockFile

_purecall

GdipRecordMetafileFileName

RegDeleteValueA

GdipIsMatrixEqual

GdipIsVisiblePointI

D3DKMTCheckVidPnExclusiveOwnership

ATMGetBuildStrA

SetupIterateCabinetW

GdipSetStringFormatHotkeyPrefix

ReleaseCapture

DnsApiAlloc

WSHIoctl

GetTextCharacterExtra

beepdl_getoption

SetPixel

GdipGetAllPropertyItems

GetTempPathA

GetCurrentProcessId

CM_Get_Device_Interface_Alias_ExW

RemoveVectoredContinueHandler

VarBstrCmp

ATMEnumMMFontsA

SHGetPropertyStoreForWindow

GdipGetImageDimension

GetClassInfoExA

RealizePalette

wcsncpy

CreateLinkInfoW

waveInUnprepareHeader

getsockname

GetGUIThreadInfo

GdipLoadImageFromStream

LPSAFEARRAY_UserSize

SHCreateAssociationRegistration

NtOpenProcess

GdipDrawLines

VirtualLock

LsaRetrievePrivateData

CreatePenIndirect

_crt_debugger_hook

WTSGetActiveConsoleSessionId

CreateCompatibleBitmap

GdipCloneRegion

GetTempPath

GetTempPathW

GdipBeginContainer

RegDeleteValueW

NetUserAdd

StgCreateDocfile

CertFreeCertificateContext

GetCommState

EndEnumeration

CheckMenuItem

GdipGetMetafileDownLevelRasterizationLimit

EnumDisplaySettingsW

glFlush

DefSubclassProc

memchr

SetupIterateCabinetA

DefWindowProc

NamespaceCallout

SetupDiSelectBestCompatDrv

SHCreateDirectoryExW

LsaClose

DirectDrawEnumerateW

SetupDiGetDevicePropertyW

CreateIcon

JsVarToExtension

LsaEnumerateAccountRights

Clone

WSAAsyncGetHostByName

SetLoadedByMscoree

SetMenuItemBitmaps

SetupGetLineCountW

GetDCEx

OpenThemeDataEx

CM_Locate_DevNode_ExA

CloseWbemTextSource

GdipMultiplyWorldTransform

DdeNameService

GdipFree

GdipResetClip

CharLowerA

ReleaseBindInfo

GetROP2

?DirectionProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ

GlobalAddAtomW

AngleArc

SamFreeMemory

_set_error_mode

GdipCreateRegionRect

DwmEnableComposition

UnregisterHotKey

DisplayGraphics

OpenProcessToken

CreateStatusWindowW

GdipCloneFontFamily

IsDBCSLeadByteEx

NtResumeProcess

CloseMetaFile

CLSIDFromProgIDEx

ADsBuildEnumerator

lstrcpynA

SymGetOptions

DosDateTimeToFileTime

?OnDestroy@HWNDHost@DirectUI@@UAEXXZ

SetupDiGetActualSectionToInstallExW

GdipTranslatePathGradientTransform

GetCurrentProcessorNumber

SetServiceBits

PSCreatePropertyStoreFromObject

SetWindowLong

GdipCloneBrush

EnumEnhMetaFile

CharLowerW

GdipTranslateLineTransform

CM_Free_Res_Des

GdipDrawLineI

DllFunctionCall

CreateRectRgn

midiOutLongMsg

GdipFillPie

NtReadFile

SkinH_Attach

RpcAsyncInitializeHandle

GdipTranslateRegion

WSAStringToAddressW

RegCreateKeyA

kcfg_GetIniStrLen

BZ2_bzDecompressInit

GetTitleBarInfo

ImmNotifyIME

CM_Get_Device_Interface_List_ExW

SystemFunction036

EnumResourceNamesA

ATMSelectObject

BufferedPaintClear

?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ

CommitUrlCacheEntryA

GdipCreateLineBrushI

Polygon

CryptCATClose

PR_fprintf

SetupGetLineCountA

GdipGetPointCount

EnumFontFamiliesA

GdipCreateMatrix

ith_dltext

RtlUnwind

DllBidInitializeA

ImageList_DragMove

RegOpenKeyEx

GdipDeletePath

GdipFillRectangle

GetRegionData

_wcsicmp

CM_Open_Class_Key_ExW

SetupDiGetActualSectionToInstallExA

WSAIoctl

CM_Locate_DevNode_ExW

CERT_DecodeTrustString

_lclose

SetEnhMetaFileBits

BCryptDestroyKey

midiOutOpen

EndMenu

??3@YAXPAX@Z

GdipGetFontStyle

SdbReleaseDatabase

midiOutReset

SHGetIconOverlayIndexA

strncmp

DirectInputCreateW

glPixelStorei

GdipSetCustomLineCapBaseInset

VarDateFromStr

CMGetPS2ColorRenderingIntent

EnumResourceNamesW

VARIANT_UserUnmarshal

GetMethodOrigin

IsBadHugeReadPtr

RtlDllShutdownInProgress

ValidateRect

RegCreateKeyW

lstrcpynW

CM_Get_Class_Key_NameA

CreateBindCtx

GetProcessAffinityMask

CoTaskMemFree

SetCurrentProcessExplicitAppUserModelID

ImmIsIME

NetUseDel

GetLogicalProcessorInformation

WSAAsyncGetServByPort

FlushInstructionCache

PathIsUNCW

PlayEnhMetaFile

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

VarMul

CLSIDFromString

SetUrlCacheEntryInfoA

GdipDrawImagePointsRect

WSAUnhookBlockingHook

NtCreateMailslotFile

PK11_FreeSlot

GdipAddPathCurve3I

NtUnlockFile

CreateEllipticRgnIndirect

CryptCATAdminReleaseContext

SetThreadDesktop

CheckMenuRadioItem

wglChoosePixelFormat

PatBlt

RtlExitUserThread

WSAIsBlocking

GdipAddPathArcI

GetMenuItemID

NetShareGetInfo

NtCreateProcess

difftime

CancelDeviceWakeupRequest

FindClose

ATMGetMenuNameA

HidP_GetCaps

GdipFillRegion

WcsCreateIccProfile

DwmSetIconicThumbnail

GetVersion

GdipGetPenCompoundCount

NsiFreeTable

CM_Run_Detection_Ex

PORT_SetError_Util

GdipGetLinePresetBlend

RegSetKeySecurity

WinStationRegisterConsoleNotification

ControlService

ImmLockIMC

GdipFillPolygon2

GetUserGeoID

RtlNtStatusToDosError

?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ

StrFromTimeIntervalA

capGetDriverDescriptionA

ImageList_Replace

PR_GetSpecialFD

GetVolumePathNameW

CM_Delete_DevNode_Key

GdipBitmapGetPixel

GdipSetLineBlend

InternetErrorDlg

GdipFillPolygonI

GdipGetPathGradientBlendCount

Process32Next

SetupDiGetDeviceInterfaceDetailA

SetSecurityDescriptorOwner

SetRect

PORT_ZAlloc

OleRegEnumVerbs

DuplicateTokenEx

QueryWorkingSet

GetMenuBarInfo

GdipAddPathCurve2I

RevokeDragDrop

CryptCATAdminReleaseCatalogContext

GdipCloneImageAttributes

PathIsUNCA

GdipCreateFromHWND

SetTextAlign

GetSystemMenu

VarRound

PCVISIT_Hooks_RealMouseEvent

GdipSetPenMiterLimit

ExtFloodFill

WSAEventSelect

GdipGetImageThumbnail

pSetupGetField

Create

AttachConsole

PTGetPrintCapabilities

ConvertSecurityDescriptorToStringSecurityDescriptorW

GdipSetPenCompoundArray

GetProfileType

SetupRemoveFromDiskSpaceListW

SetupDiSetClassInstallParamsA

DllGetClassObjectInternal

InitiateSystemShutdownExW

OleIsCurrentClipboard

DeleteEnhMetaFile

CreateDialogParamA

PSPropertyBag_WriteStr

BtnSetVisibility

glTranslatef

GdipStringFormatGetGenericDefault

vsprintf

CM_Request_Device_Eject_ExW

RegDeleteTreeA

SetupDiDeleteDeviceInfo

SetRectRgn

DetachWndProc

GetAllParameters

GlobalAddAtomA

SetupDiSetClassInstallParamsW

CopyEnhMetaFileA

PathRemoveArgsA

CoRevokeInitializeSpy

GdipGetFamilyName

UpdateScreen

RegGetKeySecurity

TlsAlloc

SetupGetInfInformationW

ResolveDelayLoadedAPI

AtlAxGetControl

CryptGetObjectUrl

QualifierSet_Put

GdipCreateStringFormat

CancelIo

CoSuspendClassObjects

ATMProperlyLoaded

CreateDialogParamW

PathIsDirectoryA

PtInRect

_close

VarFormatPercent

SxsOleAut32MapIIDOrCLSIDToTypeLibrary

GdipDrawCachedBitmap

CoCreateInstanceEx

SHGetDataFromIDListW

UnloadUserProfile

kcfg_GetIniSectionLen

I_RpcVerifierCorruptionExpected

EnumDependentServicesW

NtWow64ReadVirtualMemory64

UnhandledExceptionFilter

OffsetRgn

DestroyAcceleratorTable

_get_terminate

SetupDiGetDriverInstallParamsW

SetConsoleCursorPosition

CreateWellKnownSid

AcquireSRWLockShared

DestroyIcon

SHGetPathFromIDList

GdipFillPolygon

ImgLoad

MulDiv

MsiSIPGetSignedDataMsg

FindFirstFileA

CM_Free_Res_Des_Ex

GetWsChanges

EndPagePrinter

DllBidEntryPointA

UrlMkGetSessionOption

NtSaveKeyEx

SetFilePointer

LsaLookupNames

MsiOpenDatabaseA

SetBkMode

GdipGetPropertySize

AdjustTokenPrivilegesW

DsGetDcNameA

CM_Find_Range

HidP_MaxDataListLength

SetupSetSourceListA

GdipDrawEllipse

CollectOSObjectData

fopen

CM_Query_Resource_Conflict_List

RemoveWindowSubclass

SwitchToThread

GetFocus

DeleteColorTransform

FrameRgn

SafeArrayGetUBound

CM_Enumerate_EnumeratorsA

RegDeleteTreeW

glTexParameteri

GdipDrawBeziers

NetScheduleJobEnum

TabbedTextOutA

OffsetRect

beepdl_setoption

SHGetDataFromIDListA

SetupDiGetDriverInstallParamsA

GetEnvironmentVariable

GdipCloneBitmapArea

CM_Setup_DevNode

UuidFromStringW

CM_Uninstall_DevNode

GdipPathIterGetSubpathCount

SoftpubLoadMessage

lstrcatA

SetupRenameErrorA

ConvertSecurityDescriptorToStringSecurityDescriptorA

SetUserObjectSecurity

NtExtendSection

SetupVerifyInfFileW

RegisterWindowMessageW

PORT_Alloc_Util

PolyDraw

EventWrite

RegisterEventSourceW

GetModuleFileName

RegQueryValueExA

CERT_DestroyCertList

SetMapMode

ImmDestroyContext

SetupGetFileQueueCount

CreateAcceleratorTableA

GetCurrentObject

SetupDiGetSelectedDriverW

DdeAccessData

GdipAddPathLine2I

MsiSIPPutSignedDataMsg

OpenThreadToken

UnpackDDElParam

PTOpenProviderEx

SetupRenameErrorW

GdipCreateHICONFromBitmap

InternetGetCookieExW

SetROP2

EVENT_SINK_GetIDsOfNames

RegisterWindowMessageA

SetupVerifyInfFileA

CM_Set_HW_Prof_Flags_ExW

CERT_DestroyCertificate

CoInternetIsFeatureEnabled

GetParent

SetupDiGetDeviceInterfaceDetailW

InternetCrackUrlA

GetExitCodeProcess

GetPrivateProfileIntW

glBindTexture

TabbedTextOutW

EnumThreadWindows

GdipDrawBezierI

CreateAcceleratorTableW

SHSetValueW

StrokeAndFillPath

lstrcatW

wcsrchr

GdipSetCustomLineCapStrokeJoin

GetMessageExtraInfo

OpenWbemTextSource

CM_Set_HW_Prof_Flags_ExA

EnumDependentServicesA

IsAppThemedW

ReadFile

PSLookupPropertyHandlerCLSID

InternetCrackUrlW

GdiFlush

GetPrivateProfileIntA

SetupInitDefaultQueueCallbackEx

StartDocA

AcquireCredentialsHandleA

RegQueryValueExW

WerUIUpdateUIForState

CM_Enumerate_EnumeratorsW

FileTimeToLocalFileTime

CheckBitmapBits

ChangeDisplaySettingsExA

GdipEnumerateMetafileDestRect

fflush

HidD_GetSerialNumberString

GdipGetVisibleClipBounds

GetCapture

GdipPathIterGetCount

GdipDrawLine

UuidToStringA

puts

GdipIsEmptyRegion

GlobalSize

SpInfLoadInfFile

SamOpenDomain

HttpDuplicateDependencyHandle

rand

SetupDiUnremoveDevice

RegisterEventSourceA

CMConvertIndexToColorName

RtlInitUnicodeString

SelectObject

CryptEncrypt

WbemObjectToText

InitProcessPriv

IcmpCloseHandle

GdipGetStringFormatDigitSubstitution

NdrClientCall2

GetCurrentDirectoryW

SymInitialize

GetKeyboardLayoutNameW

GdipCreateLineBrushFromRectWithAngleI

GetTextFaceW

CM_Modify_Res_Des

GdipGetCompositingMode

LoadStringW

SHGetDesktopFolder

GetWindow

BtnRefresh

CreateMutexA

VariantChangeType

PostMessageA

GdipCreatePath2I

ReleaseMutex

atol

EtwRegisterTraceGuidsW

SymGetModuleBase64

SetupTerminateFileLog

joyGetPos

atoi

SetupDiOpenDeviceInfoA

IsValidSecurityDescriptor

LoadIconW

GdipGetImageAttributesAdjustedPalette

SetupDiCreateDevRegKeyW

CreateFontA

atof

SHGetMalloc

PathStripToRootA

SHGetSpecialFolderPath

AddAtom

SafeArrayCopyData

_findfirst

CancelIoEx

InternetSetStatusCallback

UnregisterTraceGuids

ShowWindowAsync

InternetAutodial

RegOpenKey

SetupGetIntField

CharToOemBuffA

SetSecurity

Install

WSCInstallProvider

SetupQueueRenameA

UnregisterClassA

GdipDrawClosedCurve

GdipDrawPolygon

GdiplusShutdown

GdipSetPathGradientCenterPointI

LockFileEx

PathStripToRootW

NtSetValueKey

GetCurrentDirectoryA

GdipSetPathGradientTransform

SHGetSetSettings

GetStartupInfoA

UrlCanonicalizeW

CreateFontW

StartDocW

EscapeCommFunction

NotifyServiceStatusChangeW

CreateItemMoniker

GdipGetPathGradientWrapMode

LoadIconA

BringWindowToTop

EnumerateSecurityPackagesA

TranslateMessage

GetTraceEnableLevel

GetUserDefaultLCID

wcscat

GdipSetClipGraphics

FreeConsole

WSARecv

initDialog

PlaySoundA

AccessCheck

Wow64SetThreadContext

GetStringTypeExA

HidP_GetUsageValue

LCMapStringA

GdipGetStringFormatTabStops

GetTextColor

PathFindExtensionA

Intf

GetWindowInfo

FlsGetValue

OleLoadPictureEx

SetupDiCreateDevRegKeyA

CreateAsyncBindCtxEx

PostThreadMessageA

GdipSetImageAttributesToIdentity

DeleteService

GdipDrawLinesI

mmioRead

DdeConnect

GetUnzDllVersion

GdipTransformMatrixPoints

WinSqmIsOptedIn

glEnable

DirectSoundCaptureEnumerateA

GetStartupInfoW

CERT_AsciiToName

SetWindowRgn

GdipSetCustomLineCapStrokeCaps

GetClipboardFormatNameW

GetTokenInformation

CM_Next_Range

GdipSetPenCustomEndCap

LoadStringA

UnregisterClassW

CompareFileTime

CorExitProcess

?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ

RtlUnhandledExceptionFilter

NetScheduleJobGetInfo

PathFindExtensionW

GdipSetClipRectI

NtQueryDirectoryFile

NtDeleteValueKey

GetOverlappedResult

GetThreadTimes

MapWindowPoints

RegCreateKeyExA

UrlCanonicalizeA

ChildWindowFromPoint

GdipCreateBitmapFromGdiDib

GetTextFaceA

memcpy

AllowSetForegroundWindow

HidP_GetLinkCollectionNodes

SetupCloseFileQueue

GetClipboardFormatNameA

PostThreadMessageW

VariantToUInt32

GetTraceEnableFlags

GdipSetImageAttributesColorKeys

VariantCopyInd

UuidCreate

DeferWindowPos

WaitForMultipleObjectsEx

BtnGetPosition

SetupDiCallClassInstaller

LsaLookupSidsW

OpenDesktopW

FreeLibrary

SetupSetFileQueueFlags

EventUnregister

LCMapStringW

GdipGetPathWorldBoundsI

GetStringTypeExW

CMCreateMultiProfileTransform

CM_Get_Class_Registry_PropertyA

SetupSetSourceListW

GdipDrawBezier

CM_Get_Device_Interface_ListW

_adjust_fdiv

FindResourceW

InstallerModuleEntry

GetSecurityDescriptorDacl

GdipSetClipPath

@Madexcept@initialization$qqrv

GetAddrInfoW

NtQuerySystemInformationW

SetErrorInfo

CM_Query_Arbitrator_Free_Size_Ex

GetPropertyQualifierSet

GetObjectType

HidP_SetUsageValue

CopyEnhMetaFileW

?terminate@@YAXXZ

BufferedPaintSetAlpha

SetupDiGetDeviceInstanceIdW

OpenDesktopA

getsockopt

CM_Open_Class_KeyA

SetupRemoveFromDiskSpaceListA

CMP_WaitNoPendingInstallEvents

RegEnumKeyEx

CM_Register_Device_Driver

SetupUninstallOEMInfA

SetWaitableTimer

GdipSetPixelOffsetMode

EnumDateFormatsExW

CLSIDFromOle1Class

AddAccessAllowedAceEx

WINNLSEnableIME

GetFontAssocStatus

SHGetFileInfoA

midiStreamOut

LookupPrivilegeValueW

glBegin

PostQueuedCompletionStatus

GetDemultiplexedStub

EVENT_SINK_Release

CM_Open_Class_KeyW

SetupAddInstallSectionToDiskSpaceListW

DdeQueryConvInfo

SHGetFileInfoW

CreateProcessW

NtConnectPort

SetWindowSubclass

CM_Get_Device_Interface_ListA

LookupPrivilegeValueA

VariantToUInt64

NSPStartup

VarBstrCat

KiUserExceptionDispatcher

GetScrollBarInfo

SetupDestroyDiskSpaceList

lstrlen

GdipCreateLineBrushFromRectI

SetupGetInfInformationA

WritePrinter

D3DKMTOpenAdapterFromLuid

SetupDiGetDeviceInstanceIdA

pSetupIsUserAdmin

NtSetEaFile

PathRemoveArgsW

GetFileVersionInfoSizeA

NtDeviceIoControlFile

DeleteDC

CM_Request_Device_EjectW

RegisterTypeLib

glDepthFunc

HidD_FreePreparsedData

CM_Get_HW_Prof_Flags_ExW

SetupRemoveFileLogEntryA

GdipRemovePropertyItem

GdipFillEllipse

GdipWindingModeOutline

GdipGetAdjustableArrowCapWidth

HidP_GetValueCaps

SetupQueueRenameW

DwmGetWindowAttribute

SHDoDragDrop

NetGetAnyDCName

RegOpenKeyExW

DrawFocusRect

CreateEventA

wglSwapBuffers

GdipFillPieI

IsZoomed

LPSAFEARRAY_UserMarshal

SafeArrayGetLBound

CreateProcessA

GetServiceDisplayNameA

SetThreadContext

GdipFillPath

CM_Get_Next_Res_Des

CreateEnvironmentBlock

SetupDiRegisterCoDeviceInstallers

PropVariantToString

EndPaint

CreateMDIWindowW

GetKeyboardLayoutNameA

GetProcessImageFileNameA

GdipReversePath

CM_Remove_SubTree_Ex

NtQueryInformationProcess

SetupGetStringFieldA

FindResourceA

CMTranslateColors

midiOutSetVolume

SetupUninstallOEMInfW

fwrite

LocalUnlock

GetEBKM

CM_Request_Device_EjectA

Netbios

ImmGetCompositionWindow

FlushConsoleInputBuffer

GetProcessImageFileNameW

GdipGetPenCompoundArray

SafeArrayCreate

longjmp

PR_Init

CM_Get_DevNode_Status_Ex

CM_Get_HW_Prof_Flags_ExA

CreateEventW

CM_Detect_Resource_Conflict

FlushFileBuffers

CreateStreamOnHGlobal

PostMessageW

RevokeBindStatusCallback

SetupRemoveFileLogEntryW

GdipSetPathGradientCenterPoint

CloseDesktop

SetupAddInstallSectionToDiskSpaceListA

Exec

CreateMutexW

ToAsciiEx

InternetFindNextFileA

VarDecFromDate

NetWkstaGetInfo

GdipSaveAdd

CryptSIPVerifyIndirectData

midiOutUnprepareHeader

GdipDeleteRegion

DispGetIDsOfNames

GdipGetImageBounds

DirectSoundEnumerateA

GdipAddPathClosedCurveI

CM_Get_DevNode_Registry_PropertyA

DcomChannelSetHResult

NtRestoreKey

LoadMenuW

UuidCreateSequential

GetThreadDesktop

IsWindowUnicode

SetServiceStatus

SetupOpenMasterInf

PStoreCreateInstance

GetSecurityDescriptorLength

BZ2_bzDecompress

GdipCreatePathIter

QueryActCtxW

GetDIBits

f29

PropVariantToBSTR

VariantCopy

f23

RegEnumValue

CertOpenSystemStoreW

strcat

CreateHatchBrush

CryptVerifySignatureW

GetProcessIoCounters

CryptCATEnumerateMember

ConvertStringSecurityDescriptorToSecurityDescriptorA

GetThreadPriority

HidD_GetHidGuid

SetupQueueCopyIndirectW

IsBadWritePtr

GdipIsVisiblePathPointI

MoveFileA

InternetSetStatusCallbackW

ConnectToPrinterDlg

FtpSetCurrentDirectoryA

PropVariantToVariant

GdipDeleteStringFormat

CM_Delete_DevNode_Key_Ex

CopyFileA

PSGetPropertyFromPropertyStorage

SetupAddToDiskSpaceListW

GetLayeredWindowAttributes

OleGetClipboard

RaiseFailFastException

GetServiceDisplayNameW

mmioOpenA

GetComputerNameA

URLDownloadToFileW

DsGetDcNextA

SetDefaultPrinterA

EnterCriticalSection

GdipSetWorldTransform

ZwQuerySystemInformation

SetupDecompressOrCopyFileA

NtRequestWaitReplyPort

GdipCreateTextureIA

SetupDiInstallClassW

Heap32ListFirst

PR_Read

CryptEnumProvidersA

__vbaEnd

IEDllLoader

_decode_pointer

ForwardGadgetMessage

ReleaseStgMedium

auxSetVolume

WakeAllConditionVariable

PCVISIT_Hooks_RealKeyboardChanged

GetRandom

QueryServiceObjectSecurity

GdipGetPenMiterLimit

RegUnLoadKeyA

CreateILockBytesOnHGlobal

CryptCATOpen

GetMenuItemInfoW

LoadLibraryA

CM_Get_DevNode_Status

GdipGetClipBoundsI

CreateProcess

ChangeServiceConfig2W

GetComputerNameW

RegLoadMUIStringW

TrackMouseEvent

StretchDIBits

SetLayout

wrapcallbackaddr

NtSetQuotaInformationFile

GetPrinterDriverA

__GetMainArgs

MoveFileW

SetPixelV

GdipGetTextureImage

SetupInstallFilesFromInfSectionW

?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z

NetUserGetInfo

LoadMenuA

RegGetValueA

GetEnvironmentVariableA

WritePrivateProfileSectionW

GetUserDefaultUILanguage

GdipSetPenDashArray

RegSaveKeyA

HidP_GetSpecificValueCaps

PropVariantToUInt32

GdipGetStringFormatTabStopCount

f31

GdipCreateBitmapFromGraphics

EndUpdateResourceA

SetThreadStackGuarantee

_strnicmp

strcpy

GetMailslotInfo

IsProcessorFeaturePresent

LoadLibraryW

GdipClearPathMarkers

SetupDiInstallClassA

GetFileAttributesExW

GdipGetHatchForegroundColor

CreateRoundRectRgn

CopyFileW

?Delete@BasePrivate@@YAXPAX@Z

WaitForThreadpoolTimerCallbacks

SetEvent

ImmCreateContext

GetModuleInformation

Show

SetupOpenFileQueue

SdbInitDatabase

GdipMultiplyPenTransform

VariantInit

EventActivityIdControl

GetLongPathName

GetMenuItemInfoA

SetupAddToDiskSpaceListA

DirectSoundCaptureEnumerate

RegUnLoadKeyW

GdipScalePathGradientTransform

RegisterBindStatusCallback

??1CCBase@DirectUI@@UAE@XZ

_hypot

midiOutGetDevCapsA

zetXbm28RVdB9VOetDffZqnXzXyrpKSIMkNrost18dop

SHGetShellStyleHInstance

OpenProcess

NetUserGetLocalGroups

CopyFile

keybd_event

OnClick

RegGetValueW

GetAddrInfoExW

CoGetMalloc

GdipSetPenWidth

KeModuleStart

UrlCacheUpdateEntryExtraData

EnumPageFilesW

SetupRemoveInstallSectionFromDiskSpaceListA

RegQueryInfoKeyA

LZClose

CM_Set_DevNode_Problem

DnsQueryExW

DdeGetLastError

midiStreamProperty

GdipGetSolidFillColor

connect

CM_Get_Class_Registry_PropertyW

DoDragDrop

FileTimeToDosDateTime

SetVolumeLabelW

GetSaveFileNameA

LockWorkStation

InternetCanonicalizeUrlA

CoGetContextToken

SetDCPenColor

CERT_GetCertTrust

CM_Get_Device_Interface_List_Size_ExA

InitSecurityInterfaceA

CreateDirectory

GdipSetPenBrushFill

tmpnam

NtQueryFullAttributesFile

GdipEnumerateMetafileSrcRectDestPoints

_write

VarFix

SetupPromptReboot

OpenFileMappingW

GdipAddPathPolygon

FtpFindFirstFileA

GetDiskFreeSpaceA

GetFileSize

WinStationGetLoggedOnCount

SetWindowThemeAttribute

GetEnhMetaFileDescriptionW

RegSaveKeyW

RedrawWindow

?SetFontSize@Element@DirectUI@@QAEJH@Z

NtAlertResumeThread

GetFileAttributesExA

GetConsoleOutputCP

InternetCanonicalizeUrlW

GdipFillRectangleI

WSACreateEvent

GdipCreateFontFromLogfontA

RasCreatePhonebookEntryA

GetEnvironmentVariableW

SetVolumeLabelA

GetGlyphOutlineA

GdipIsOutlineVisiblePathPoint

WVTAsn1CatMemberInfoDecode

IntersectRect

GetLengthSid

NtFreeVirtualMemory

GdipTranslatePenTransform

CommDlgExtendedError

CoInternetCanonicalizeIUri

GetCommConfig

GetClipRgn

CM_Set_HW_Prof_FlagsA

RmRestart

URLDownloadToFileA

f19

CM_Get_DevNode_Registry_PropertyW

OemToCharBuffA

HeapSize

CM_Register_Device_Interface_ExW

GdipEnumerateMetafileSrcRectDestPointI

PropVariantToBuffer

_vsnwprintf_s

Serialize

CM_Reenumerate_DevNode_Ex

glGenTextures

HidP_GetData

f16

SetupRemoveInstallSectionFromDiskSpaceListW

GetPhysicalCursorPos

SetParent

ATMEnumFontsA

MethCallEngine

SetupQueueDeleteA

RtlRunDecodeUnicodeString

EnumPageFilesA

f12

GetDiskFreeSpaceW

GdipGetPenColor

mmioSeek

GdipSetMatrixElements

FlushViewOfFile

LookupIconIdFromDirectoryEx

CoInternetCombineUrlEx

HidP_UsageListDifference

SetupDecompressOrCopyFileW

GetBkMode

GdipGetRegionData

GetSystemDefaultUILanguage

BlockInput

GdipAddPathClosedCurve2

GdipCloneMatrix

GetLogicalDrives

CM_Set_HW_Prof_FlagsW

SetPolyFillMode

GdipAddPathRectangle

Thread32First

GdipGetTextRenderingHint

GetEnhMetaFileDescriptionA

GetDlgItem

CertOpenSystemStoreA

NetFileEnum

RegQueryInfoKeyW

ToAscii

CreateTimerQueueTimer

LocalAlloc

HidD_GetPreparsedData

PK11_GetInternalKeySlot

GdipResetPenTransform

WTHelperProvDataFromStateData

FlsSetValue

GdipClosePathFigures

GetSaveFileNameW

OpenFileMappingA

?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z

CoGetObjectContext

DMOEnum

NtQueryQuotaInformationFile

GetUserDefaultLocaleName

InternetQueryOptionW

GdipGetCustomLineCapBaseCap

GetNearestColor

_atoi64

CMGetNamedProfileInfo

VarFormatNumber

ImmSetOpenStatus

ith_getresultlen

EnumSystemLocalesA

__wgetmainargs

CM_Get_Device_Interface_List_SizeW

SetupDiGetClassRegistryPropertyW

DnsNameCompare_W

ChangeWindowMessageFilter

DMOGetTypes

NtCompressKey

ModifyMenuW

GetProductInfo

GdipGetStringFormatHotkeyPrefix

LsaStorePrivateData

HeapCreate

GetFileTime

GlobalFree

GetProfileStringA

ExtractIconExA

DrawDibOpen

WVTAsn1CatNameValueDecode

GdipSetCustomLineCapBaseCap

EnumSystemLocalesW

StackWalk64

strlen

CM_Add_Res_Des

StgOpenStorage

SetDlgItemTextW

CreateServiceW

GdipGetPenFillType

CoRegisterClassObject

GdipSetStringFormatMeasurableCharacterRanges

CertDuplicateStore

OpenProcessW

MsiCloseHandle

GdipGetLineColors

VarDecCmp

SetupQueueDeleteSectionW

?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z

glEnd

SafeArraySetRecordInfo

GdipSetEmpty

EnumServicesStatusA

SetupDiGetClassDevsW

MonitorFromWindow

CoUninitializeEE

ConvertSidToStringSidA

GetThreadUILanguage

midiStreamClose

SoftpubAuthenticode

Shell_NotifyIconW

InitializeCriticalSection

Escape

InterlockedExchange

DeviceIoControl

GetACP

GetCommTimeouts

EnumSystemLocalesEx

IcmpCreateFile

ProjectorMain

GetNamedSecurityInfoW

GetUrlCacheEntryBinaryBlob

FillRect

PathCreateFromUrlW

Shell_NotifyIconA

ImmSetCompositionFontW

UnmapViewOfFile

NtSetInformationFile

ImmSetCompositionWindow

GdipGetTextContrast

_______SQL______Process______Available@0

GetProfileStringW

CoInternetCombineIUri

GdipFillRectangles

ModifyMenuA

PolyPolyline

TranslateBitmapBits

SpInfGetNextInf

GetTokenForVTableEntry

NSS_Initialize

SetUnhandledExceptionFilter

GetCursor

CM_Get_Child

GetNamedSecurityInfoA

CM_Get_Res_Des_Data_Size

CM_Get_HW_Prof_FlagsA

CoUnmarshalInterface

PhysicalToLogicalPoint

CommandLineToArgvW

NtUnloadKeyEx

InternetQueryOptionA

IsWellKnownSid

GdipLoadImageFromFileICM

gluPerspective

RpcBindingSetAuthInfoExW

NtDeleteFile

ExtractIconExW

MessageBeep

GetUrlCacheEntryInfoW

SetupDiGetClassDevsA

CreateProcessAsUserW

CM_Get_Device_Interface_List_SizeA

wglCreateContext

PostMessage

CreateIpNetEntry

NetServerGetInfo

DdePostAdvise

WVTAsn1SpcIndirectDataContentDecode

GdipCombineRegionRectI

GdipIsVisibleRegionRectI

ScrollWindow

RasGetErrorStringA

ATMFontAvailableA

WinExec

GetSystemMetrics

glTexCoord2f

InterlockedDecrement

SetSecurityDescriptorSacl

CreateDirectoryW

GetDlgItemTextA

IsValidSid

NtQueryMultipleValueKey

EndPage

CM_Get_HW_Prof_FlagsW

CoResumeClassObjects

GdipEnumerateMetafileSrcRectDestPointsI

ArcTo

DirectSoundEnumerate

LoadCursor

GetIpAddrTable

__setusermatherr

SpInfGetVersionDatum

DllBidTraceCWW

CreateDIBSection

SetupGetFileQueueFlags

GetMenuCheckMarkDimensions

BeginDeferWindowPos

CreateDirectoryA

SetupDefaultQueueCallbackW

GdipAddPathLine

DnsQuery_A

HeapValidate

acmStreamSize

LoadCursorFromFileA

ImmSetCompositionStringW

DefineDosDeviceA

CM_Locate_DevNodeA

QueryServiceLockStatusA

CoInternetCombineUrl

GdipDrawRectanglesI

SpInfGetLineFieldCount

GdipGetVisibleClipBoundsI

CM_Enable_DevNode_Ex

CM_Add_ID_ExA

SpInfGetVersionNode

ImmSetCompositionFontA

ZwUnmapViewOfSection

GdipGetEncoderParameterList

IsDebuggerPresent

_mbsstr

GdipLoadImageFromStreamICM

GetFontData

WSAAsyncGetProtoByName

GetOEMCP

LsaFreeMemory

GetTextExtentPointA

GdipSetPathGradientSurroundColorsWithCount

GdipGetImageDecodersSize

GetDlgItemTextW

LdrLoadDll

CM_Locate_DevNodeW

MakeSelfRelativeSD

SafeArrayPtrOfIndex

glVertex3f

WSASetLastError

CreateActCtx

ReleaseSemaphore

GetAsyncKeyState

GetAccountType

GdipVectorTransformMatrixPoints

wglSetPixelFormat

GetMessageTime

SetupDefaultQueueCallbackA

memset

strcmp

GetPrivateProfileSectionW

FtpGetCurrentDirectoryA

SamRidToSid

ImmSetCompositionStringA

SysReAllocStringLen

GdipMeasureString

RpcBindingSetOption

InitializeAcl

CM_Add_ID_ExW

SHRegGetBoolUSValueW

Zombie_GetTypeInfoCount

auxGetNumDevs

SetHandleCount

GetConsoleScreenBufferInfo

PutClassWmi

GetTextExtentPointW

IsAdmin

GetPrivateProfileSectionA

IcmpSendEcho

SdbGetMatchingExe

SetupGetNonInteractiveMode

IEShowSaveFileDialog

QueryMemoryResourceNotification

CreateIoCompletionPort

InitializeSRWLock

SetupQueueCopyIndirectA

WSAAsyncGetProtoByNumber

CM_Get_First_Log_Conf_Ex

SetCommTimeouts

GetModuleFileNameA

CreateServiceA

RegSetValueExA

ExtCreateRegion

GdipGetPenLineJoin

CM_Get_DevNode_Registry_Property_ExA

GdipDrawArc

DrawAnimatedRects

CMGetPS2ColorSpaceArray

waveInPrepareHeader

SafeArrayGetElement

CoWaitForMultipleHandles

SetupDiDeleteDevRegKey

GdipGetLineTransform

GdipBitmapSetPixel

AreAllAccessesGranted

DeregisterEventSource

CreatePatternBrush

InternetQueryDataAvailable

CharToOemA

NtQueryVolumeInformationFile

NtGetContextThread

CryptCATAdminEnumCatalogFromHash

CryptCATAdminAddCatalog

NtCreateSection

SetCoalescableTimer

NtFsControlFile

PORT_Free_Util

glDisable

SetupDiGetClassRegistryPropertyA

VariantChangeTypeEx

GetThemeStream

DebugSetProcessKillOnExit

CreateCaret

LdrShutdownThread

SetupDiRegisterDeviceInfo

HidD_GetPhysicalDescriptor

RtlGetVersion

NtSignalAndWaitForSingleObject

Sleep

GetModuleBaseNameA

wvsprintfW

GetPriorityClass

GetPublisher

CM_Add_Res_Des_Ex

HidP_GetButtonCaps

SHAppBarMessage

RemoveDirectoryA

GetDeviceDriverFileNameA

VariantToInt32WithDefault

?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z

CM_Setup_DevNode_Ex

wcscmp

IsCompositionActive

GdipPathIterNextPathType

ATMMakePFMA

SetupDiCreateDeviceInfoA

OpenMutexA

GdipGetPenDashOffset

CreateEnhMetaFileA

SHCreateItemFromIDList

GetServiceKeyNameA

CM_Register_Device_Driver_Ex

Encrypt

ith_setoption

gluBuild2DMipmaps

HttpSendRequestA

StartServiceCtrlDispatcherA

beepdl_dltext

GetLayout

getprotobynumber

SymGetSymFromAddr64

SetupDiBuildClassInfoListExW

ATMMakePSSA

PulseEvent

SetupDiCreateDeviceInfoW

SoftpubLoadSignature

SetWindowContextHelpId

CreateUrlCacheContainerA

GdipDrawPath

CoGetDefaultContext

InternetSetOptionExA

SendDlgItemMessageW

GetServiceKeyNameW

CharUpperBuffW

GdipGetRegionScans

OleRun

OpenThread

CloseToolhelp32Snapshot

GdipStringFormatGetGenericTypographic

Heap32ListNext

??_U@YAPAXI@Z

CM_Query_And_Remove_SubTreeA

AddMandatoryAce

LockServiceDatabase

_controlfp

GdipGetCustomLineCapType

RegSetValueEx

GetClipBox

GdipGetMetafileHeaderFromEmf

MoveFile

WSCWriteProviderOrder

PSEnumeratePropertyDescriptions

GdipGetHemfFromMetafile

RegSetValueA

PK11_ListCerts

RegNotifyChangeKeyValue

GdipMultiplyTextureTransform

SetupDiBuildClassInfoListExA

GetTimeFormatEx

MessageBoxA

VarDiv

Zombie_GetTypeInfo

GetCORVersion

SetupDiGetDriverInfoDetailW

OpenMutexW

beepdl_getlasterror

SetProcessDPIAware

GetObject

GdipScalePenTransform

VarR4FromDec

GdipSetCompositingMode

LsaAddAccountRights

wvsprintfA

GetMenuStringW

SetupDiGetDeviceInterfaceAlias

HidD_GetConfiguration

GetBinaryTypeA

SHCreateStreamOnFileW

WSASetBlockingHook

DsGetDcOpenA

LockResource

GdiRealizationInfo

GdipPathIterCopyData

GetMonitorInfo

EnumWindows

StartServiceCtrlDispatcherW

SHGetPathFromIDListEx

SetClipboardViewer

PathAddExtensionW

StrCatBuffW

SendDlgItemMessageA

LPtoDP

DispCallFunc

acmStreamClose

CoUninitialize

_lock

GdipDrawImagePointsRectI

ADsBuildVarArrayStr

EnumFontsA

GdipGetImageFlags

GetSystemPowerStatus

FlashWindow

GdipGetPathGradientPath

mixerOpen

SafeArrayCopy

PR_GetOpenFileInfo

DrawThemeParentBackgroundEx

GetWindowThreadProcessId

strchr

SetupDiInstallClassExA

VarFormatCurrency

VARIANT_UserSize

NtAllocateVirtualMemory

GetKeyboardLayoutList

SetProcessAffinityMask

NetGroupEnum

AVIStreamInfo

MessageBoxW

BeginPaint

SetupDiGetDriverInfoDetailA

SetThreadToken

HidP_GetExtendedAttributes

DwmEnableBlurBehindWindow

CoInitializeEE

CompareTo

LogicalToPhysicalPoint

GetPath

VarDecAdd

CreateCompatibleDC

PSFormatForDisplay

OleSetClipboard

GdipNewPrivateFontCollection

QueueUserAPC

RemoveDirectoryW

WNetEnumResourceW

StgCreateDocfileOnILockBytes

GetMenuStringA

GetWindowExtEx

CharUpperBuffA

glClearColor

EnumFontsW

gluLookAt

NtSetInformationObject

InvalidateRect

WNetEnumResourceA

SHQueryRecycleBinA

GdipGetPixelOffsetMode

GetLastActivePopup

CloseServiceHandle

SetErrorMode

SetEnvironmentVariableW

GdipCreatePathGradientI

SetupRemoveSectionFromDiskSpaceListA

CM_Get_Device_Interface_Alias_ExA

GdipGetPathLastPoint

WcsGetDefaultColorProfileSize

GdipTranslateClip

isprint

SetTargetForVTableEntry

SpInfGetLineByIndex

GdipPrivateAddMemoryFont

GdipGetPenUnit

Ellipse

SetupBackupErrorW

DeleteFileA

EndPath

CharUpperW

GdipDrawCurve3

wcslen

CreateBrushIndirect

AVIStreamGetFrameClose

GetPrivateProfileSectionNamesW

PathAddExtensionA

EnumDateFormatsW

GdipDrawCurve2

SamGetAliasMembership

SetTimer

TraceDeregisterExA

FindNextFileA

DllBidFinalizeA

SelectClipRgn

PathUnquoteSpacesW

CreateIconIndirect

SetupDiGetDeviceInfoListDetailW

GetBestRoute

FindFirstChangeNotificationA

GdipFillClosedCurve2I

GdipIsVisibleClipEmpty

SHEmptyRecycleBinA

WNetUseConnectionW

SpInfLocateSection

glShadeModel

GdipAddPathLineI

GetWindowRect

GdipAddPathEllipse

GetProcessVersion

GdipDrawCurveI

FrameRect

StgOpenStorageOnILockBytes

SoftpubCheckCert

SetDIBits

SetupDiInstallClassExW

ZwSuspendProcess

SetEnvironmentVariableA

NtQueryEaFile

CallWindowProc

NetUseGetInfo

GdipResetLineTransform

CM_Enumerate_Classes

LpkEditControl

DeleteFileW

DdeCmpStringHandles

FtpGetFileSize

GetAltTabInfoW

DeleteAtom

BaseIsAppcompatInfrastructureDisabled

kcfg_LoadFromString

BtnSetChecked

VarBstrFromCy

SHEmptyRecycleBinW

SetClipboardData

EnumServicesStatusW

GdipAddPathCurveI

CreateEnhMetaFileW

GdipSetPathGradientSigmaBlend

_DllBidInitialize@0

FileTimeToSystemTime

FindFirstUrlCacheEntryW

auxGetVolume

IsValidLocaleName

SetDlgItemTextA

SetLayeredWindowAttributes

FindFirstChangeNotificationW

GdipSetLineGammaCorrection

NtDuplicateObject

GetThreadContext

ImageList_Duplicate

MapDialogRect

GetDateFormatA

GdipPathIterNextMarker

HTTPSCertificateTrust

SendMessageCallbackA

SetupDiGetDeviceInfoListDetailA

CheckRemoteDebuggerPresent

SetupRemoveSectionFromDiskSpaceListW

glColor4f

GeoEmbedWatermark_Jpg_LoadLib

GdipAddPathLine2

GetStockObject

UrlIsW

GetIDNFlagsForUri

GetActiveWindow

GdipGetPropertyItemSize

GdipCreateRegionRgnData

GdipAddPathCurve2

GdipCreateBitmapFromFile

MoveWindow

GdipAddPathCurve3

SetThreadErrorMode

LookupAccountNameA

GlobalLock

HidP_SetUsages

MaskBlt

GdiAddFontResourceW

HidP_SetScaledUsageValue

SetupDiSelectOEMDrv

GetCurrentPositionEx

WindowFromPhysicalPoint

GetDateFormatW

GdipDrawImageRectRectI

GetPrivateProfileSectionNamesA

SetupQueueDeleteSectionA

RegQueryInfoKey

CreateJobObjectA

GdipDrawBeziersI

CM_First_Range

PathUnquoteSpacesA

UpdateColors

_gcvt

GetSystemDefaultLocaleName

RegisterClass

isalnum

DrawTextExWW

SetupDiGetDeviceInstallParamsA

LsaQueryInformationPolicy

NtQueryOpenSubKeys

GetSystemDefaultLCID

DisableProcessWindowsGhosting

GetStandardColorSpaceProfileW

_rmdir

DestroyPropertySheetPage

SetCommMask

CM_Get_Log_Conf_Priority_Ex

CM_Get_Device_ID_List_Size_ExW

CreateIconFromResourceEx

NtQueryInformationThread

CM_Enumerate_Enumerators_ExW

glNormal3f

CMP_UnregisterNotification

GetAce

NtQuerySection

GdipDrawRectangles

midiInGetNumDevs

FreeSid

_setmbcp

InternalGetDeviceConfig

midiOutPrepareHeader

SetupCancelTemporarySourceList

GetPrivateProfileStringW

CoCreateFreeThreadedMarshaler

CM_Get_Device_ID_List_ExA

FindWindowW

WcsOpenColorProfileW

FindNextUrlCacheContainerA

MsiSIPVerifyIndirectData

EmptyWorkingSet

SetupDiGetClassInstallParamsA

_chmod

SHRegSetPathW

?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z

GdipDeleteCustomLineCap

PlayEnhMetaFileRecord

GdipGetHatchBackgroundColor

GetRunningObjectTable

NtRaiseException

SetupDiSetDeviceRegistryPropertyA

GetSystemWow64DirectoryA

LookupAccountSidW

Module32FirstW

FindFirstUrlCacheEntryA

Wow64DisableWow64FsRedirection

SaferiIsExecutableFileType

GdipGetPropertyItem

GetFileTitleA

GetTextExtentExPointWPri

GetIpStatistics

SetupQueueDeleteW

RasGetConnectStatusA

?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ

ATMGetVersion

SetupDiGetDeviceInstallParamsW

RtlConvertSidToUnicodeString

VarBstrFromDate

SetWindowPlacement

WSASend

GdipGetImageHorizontalResolution

SetThreadPreferredUILanguages

PTMergeAndValidatePrintTicket

VerQueryValueA

D3DKMTOpenAdapterFromHdc

GetSystemDirectoryW

GdipStartPathFigure

CharUpperA

SpInfGetPrevInf

FindWindowA

glScalef

GetDoubleClickTime

EnumDisplayDevicesW

LineDDA

__set_app_type

GetFileVersionInfo

CoInternetGetSecurityUrl

ReallocADsStr

CoGetMarshalSizeMax

_encode_pointer

GdipEnumerateMetafileDestPointsI

AddAccessAllowedAce

SHGetKnownFolderIDList

__winitenv

timeKillEvent

OpenOSObject

GetProcessTimes

GlobalGetAtomNameW

GetWindowTextLengthW

OffsetWindowOrgEx

FindNextFileW

ATMFontSelected

SHGetPathFromIDListW

GdipTranslateClipI

_wcslwr

CreateScalableFontResourceA

mmioClose

StringFromIID

SetConsoleTitleA

PCVISIT_Hooks_TopLevelWindowChanged

WerReportAddDump

LsaRemoveAccountRights

_amsg_exit

GlobalGetAtomNameA

GetFileSizeEx

CM_Enumerate_Enumerators_ExA

GetThreadPreferredUILanguages

ImageList_AddMasked

GdipCreateLineBrushFromRectWithAngle

GetSystemWow64DirectoryW

FreeEnvironmentStringsW

GetColorProfileHeader

GetWindowTextLengthA

OpenClipboard

_lread

GetActiveObject

NetFileClose

GdipMeasureCharacterRanges

NetSessionEnum

SHGetPathFromIDListA

SetupFindNextLine

GetSecurityInfo

_wtoi

GetCommandLineA

GetPaletteEntries

SetupBackupErrorA

GetFileTitleW

InitThread

CM_Unregister_Device_InterfaceW

ShowCursor

SetupDiGetDeviceRegistryPropertyA

NetUserGetGroups

sscanf

GetIconInfo

LookupAccountNameLocalA

ADsFreeEnumerator

ChildWindowFromPointEx

CM_Get_Device_Interface_List_Size_ExW

GetCommandLineW

ConvertPrintTicketToDevModeThunk2

KillTimer

MAPISendDocuments

CryptCATEnumerateAttr

NSS_NoDB_Init

Wow64EnableWow64FsRedirection

isdigit

SetupLogErrorW

__p__fmode

GdipSetImageAttributesRemapTable

GetMenu

DPtoLP

ReadPrinter

CertGetCertificateContextProperty

SetupDiCreateDeviceInfoList

StopService

_initterm_e

EnumFontFamiliesExA

RectInRegion

CM_Get_Version_Ex

UnzDllExec

RegisterTouchHitTestingWindow

RpcEpResolveBinding

GetBufferedPaintBits

LookupAccountNameLocalW

GdipSetPathGradientGammaCorrection

WSASetEvent

FreeEnvironmentStringsA

_acmdln

PCVISIT_Hooks_SynthKeyboardChanged

ImmAssociateContext

SetupInstallFilesFromInfSectionA

GetEnhMetaFileHeader

AppendMenuA

GetTempFileNameW

EnumDisplayDevicesA

SetupDiGetDeviceRegistryPropertyW

WinHttpSetStatusCallback

Process32NextW

SetupAddToSourceListW

SetupDiGetClassImageIndex

GetTempFileNameA

SetupDiSetDeviceRegistryPropertyW

CreateHardLinkW

NtLockRegistryKey

SaferiChangeRegistryScope

ImmGetVirtualKey

GetPrivateProfileStringA

SamLookupNamesInDomain

AbortDoc

AdjustTokenPrivileges

SelectPalette

GetAtomNameW

CreateBitmap

WindowFromDC

SHBrowseForFolder

SetupLogErrorA

EnumProcessModules

NetSessionDel

GdipCreateMatrix3I

TranslateCharsetInfo

D3DKMTCreateDCFromMemory

wcscpy

CM_Get_Hardware_Profile_Info_ExW

SetWindowLongA

CreateDIBitmap

SHGetStockIconInfo

CM_Unregister_Device_InterfaceA

GetProfileIntA

EnumFontFamiliesExW

NtRenameKey

GdipCreateFontFromDC

RegisterClipboardFormatA

GdipResetWorldTransform

GetQueuedCompletionStatus

CM_Get_Device_ID_List_Size_ExA

RegisterClipboardFormatW

CoAddRefServerProcess

CreateFileMapping

CM_Add_Range

SnmpUtilOidCpy

GdipRecordMetafileFileNameI

GetSystemDirectoryA

CM_Get_Sibling_Ex

LPSAFEARRAY_UserUnmarshal

GdipSetStringFormatDigitSubstitution

GdipAddPathClosedCurve

midiStreamOpen

CopyImage

DllBidEntryPoint

CM_Get_Device_ID_List_ExW

GdipCloneCustomLineCap

CoInitializeSecurity

SetupAddToSourceListA

GetVolumeInformation

GetModuleBaseNameW

InterlockedIncrement

AppendMenuW

GetNativeSystemInfo

GetBkColor

VarSub

GdipGetPenStartCap

ScrollWindowEx

GdipCreatePathGradientFromPath

HttpSendRequestW

LookupAccountSidA

BitBlt

SetupDiGetClassInstallParamsW

CM_Query_And_Remove_SubTreeW

RegisterRawInputDevices

RegEnumValueW

StrRChrA

NdrAsyncClientCall

CM_Get_Res_Des_Data_Ex

CM_Get_Hardware_Profile_Info_ExA

SetWindowLongW

DialogBoxIndirectParam

LsaQueryTrustedDomainInfo

AVIFileOpenA

LoadLibraryExA

GdipGetCellDescent

AddRefActCtx

RegEnumKeyA

FindMimeFromData

GetTopWindow

AVIFileExit

SetBitmapDimensionEx

CoInternetQueryInfo

SetupDiDestroyDeviceInfoList

PolyBezierTo

LookupPrivilegeDisplayNameA

SysAllocStringLen

GetExplicitEntriesFromAclW

FindTextW

wcsstr

SetupDiGetClassImageListExA

VarNot

ExpandEnvironmentStringsW

NtCreateThread

GetThemeBitmap

NetShareCheck

SetupDiEnumDriverInfoA

GdipSetPropertyItem

PropVariantToBoolean

SetupCopyOEMInfW

CM_Get_Device_ID_ListA

VarDateFromUdate

ExpandEnvironmentStringsA

GetMapMode

SymGetModuleInfo64

CertVerifyCertificateChainPolicy

CM_Get_Class_Key_Name_ExA

DefMDIChildProcW

OpenServiceA

GetFileType

GetDriveTypeA

VarFormatDateTime

EnumResourceLanguagesW

GdipGetCustomLineCapWidthScale

LoadBitmapA

LocalFree

GdipSetLineSigmaBlend

SetupQueueRenameSectionW

CloseEventLog

ProcessIdToSessionId

LoadLibraryExW

SHGetSpecialFolderPathW

IsDBCSLeadByte

SetupDiEnumDriverInfoW

signal

GetWorldTransform

GdipGetPathTypes

SetWindowsHookExW

DirectSoundCaptureCreate

LdrSetDllManifestProber

GetSubMenu

WSAAsyncGetServByName

GdipAddPathClosedCurve2I

CM_Query_Arbitrator_Free_Data_Ex

SetupDiGetClassImageListExW

SetupPrepareQueueForRestoreW

SetupQueueCopyA

CoInternetCreateZoneManager

GdipGetPathGradientFocusScales

GetDriveTypeW

CM_Get_Device_Interface_List_ExA

SetViewportOrgEx

HidD_GetAttributes

GdipCreateMatrix2

_stricmp

GdipGetAdjustableArrowCapMiddleInset

WNetConnectionDialog

GdipCreateMatrix3

GdipComment

CM_Get_Class_Key_Name_ExW

GdipCreateTexture2

DefDlgProcA

GetExplicitEntriesFromAclA

CM_Get_Res_Des_Data_Size_Ex

QueryServiceConfig2A

SetupDiSelectDevice

IsWindowRedirectedForPrint

Heap32First

SetWindowsHookExA

GdipIsVisibleRect

GetRgnBox

CMCheckRGBs

AssocQueryStringW

IsWindowVisibleW

CreateInstanceEnumWmi

WriteProfileStringA

HidD_SetConfiguration

FatalAppExitA

SetupQueueRenameSectionA

GdipGetEncoderParameterListSize

WSCEnumProtocols

GetFullPathNameW

GdipCreateMetafileFromWmf

CreateToolhelp32Snapshot

NetUserEnum

HidD_SetOutputReport

RtlComputeCrc32

SetMenuDefaultItem

FindTextA

ShellExecuteW

SetupQueueCopyW

GetNextDlgTabItem

CreateFileMappingA

D3DKMTEnumAdapters

CM_Free_Res_Des_Handle

CoInitialize

GdipGetPageUnit

VerLanguageName

Free

VerSetConditionMask

EnumResourceLanguagesA

ATMGetVersionExA

CM_Set_HW_Prof

NtQuerySecurityObject

WerReportAddFile

PrivIsDllSynchronizationHeld

GetLocaleInfoEx

GetSidSubAuthorityCount

VarCyMulI4

PCVISIT_Hooks_EnableSynthInputs

VariantToBooleanWithDefault

GetIcmpStatistics

PathRemoveBackslashA

MsiSIPIsMyTypeOfFile

EnableMenuItem

CreateProcessInternalW

FindWindowExA

GetFullPathNameA

GdipWidenPath

SetupDiSetDriverInstallParamsA

GetCurrentPackageId

AnimateWindow

SetupDiClassGuidsFromNameA

LsaOpenPolicyW

RaiseException

JsVarAddRef

GdipSetPenLineJoin

DefDlgProcW

GdipSetPenLineCap197819

LockClrVersion

CM_Get_Hardware_Profile_InfoW

EqualRgn

AtlAxWinInit

HeapSetInformation

WinStationFreeMemory

GetSystemWindowsDirectoryW

CM_Get_Device_Interface_AliasA

ReleaseDC

ShellExecuteA

SetupDiClassGuidsFromNameW

RpcMgmtIsServerListening

SetCaretPos

WSAWaitForMultipleEvents

GdipCreateHBITMAPFromBitmap

SetupFindNextMatchLineA

LPSAFEARRAY_UserFree

RectVisible

ReportEventA

SaferGetPolicyInformation

SafeArrayRedim

ScaleWindowExtEx

GetQueueStatus

GetSysColor

RasDialA

HtmlHelpW

RtlFreeUnicodeString

RegisterClassA

FindWindowExW

PathFileExistsA

EnumProcesses

CMCheckColors

GetForegroundWindow

D3DKMTCheckSharedResourceAccess

FtpPutFileA

SetupGetFileCompressionInfoW

CM_Get_Global_State_Ex

CM_Get_Device_Interface_AliasW

wglGetPixelFormat

LsaLookupSids

MsiGetSummaryInformationA

mixerClose

SetRectEmpty

IsCharLowerA

GetWindowLongA

SetupPrepareQueueForRestoreA

RegisterClassW

GdipCloneBitmapAreaI

VirtualQueryEx

GetSystemWindowsDirectoryA

WriteProcessMemory

AllocateAndInitializeSid

CM_Get_Hardware_Profile_InfoA

DdeCreateStringHandleW

CM_Merge_Range_List

SetupDiGetHwProfileFriendlyNameExW

InterlockedCompareExchange

qmbJf2dfL45aWPCl8Oz97mTZjSbY4RH8AbooSi3mUq4tep7U

WaitMessage

SetupQuerySourceListW

ShutdownBlockReasonCreate

CreateActCtxA

QueryDosDeviceA

DragAcceptFiles

SetupDiGetINFClassA

GdipMeasureDriverString

SoftpubInitialize

SystemFunction035

GdipDrawEllipseI

NetLocalGroupEnum

PTCloseProvider

getservbyport

ATMBBoxBaseXYShowTextA

GdipDrawPie

ObtainUserAgentString

EnumServicesStatusExA

SHCreateItemFromParsingName

CM_Set_Class_Registry_PropertyA

SHGetSpecialFolderPathA

_strcmpi

BSTR_UserMarshal

SetArcDirection

GetUpdateRgn

_hread

CM_Unregister_Device_Interface_ExW

GlobalDeleteAtom

GdipDrawImagePoints

SetupDiSetDriverInstallParamsW

QueryDosDeviceW

WiseMain

DestroyWindowW

MAPISendMail

GetTargetForVTableEntry

IsCharLowerW

_swab

RegEnumKeyW

_snwprintf

CM_Get_Device_ID_Size

GetWindowLongW

SetupGetFileCompressionInfoA

HidP_GetUsages

GdipCreateBitmapFromResource

CreateActCtxW

SetupDiGetHwProfileFriendlyNameExA

UnhookWindowsHookEx

GetMenuDefaultItem

AcquireSRWLockExclusive

SetupQuerySourceListA

CM_Get_Log_Conf_Priority

CM_Set_Class_Registry_PropertyW

ATMFinish

CoReleaseMarshalData

SpInfLocateLine

SetCriticalSectionSpinCount

SetupDiGetINFClassW

SnmpExtensionInit

SetupFindNextMatchLineW

PathFileExistsW

mixerSetControlDetails

ReportEventW

RegisterHotKey

GdipCreateBitmapFromFileICM

RegOpenCurrentUser

EventEnabled

GetLastInputInfo�p@�"�@

CreateThreadpoolTimer

SetSystemPowerState

FindExecutableW

GdipDrawClosedCurveI

ATMEndFontChange

fputs

SetupSetFileQueueAlternatePlatformA

WNetGetUniversalNameA

DecodePointer

ScriptGetProperties

GdipGetPenDashStyle

PSPropertyBag_ReadStr

GdipCreateLineBrushFromRect

GdipGetMetafileHeaderFromWmf

SHRegGetPathW

LookupPrivilegeValue

GdipCreatePathGradient

VarEqv

GdipSetPathGradientLinearBlend

CreateDesktopA

waveOutGetErrorTextA

UninstallColorProfileW

GdipEmfToWmfBits

lstrcmpA

FindResourceExW

HidP_MaxUsageListLength

CM_Add_IDA

SendNotifyMessageA

SetupSetPlatformPathOverrideA

GetListBoxInfo

GdipGetPathFillMode

DrawTextA

GdipSetInfinite

OpenEventLogA

SetupDiGetClassImageList

CM_Request_Eject_PC

GetFileSecurityW

GdipGetFontCollectionFamilyList

GetFileSecurityA

GdipEnumerateMetafileSrcRectDestRect

CM_Dup_Range_List

RealGetWindowClassW

glGetIntegerv

GdipDrawClosedCurve2

SetupSetFileQueueAlternatePlatformW

GdipSaveImageToFile

SystemParametersInfoA

Beep

GdipAddPathEllipseI

GdipAddPathPieI

ATMForceFontChange

SetCommState

SetCursor

DdeCreateStringHandleA

OleCreatePropertyFrameIndirect

CM_Unregister_Device_Interface_ExA

CM_Add_IDW

GdipSetAdjustableArrowCapMiddleInset

DescribePixelFormat

AbortPrinter

GdipSetTextureTransform

NtWriteVirtualMemory

GdipGetPropertyCount

GdipCreateFromHDC2

lstrcmpW

ADsGetObject

SetupCreateDiskSpaceListA

SetupQueryInfOriginalFileInformationW

NotifyWinEvent

GdipCreateBitmapFromDirectDrawSurface

FindResourceExA

GetSystemDefaultLangID

VarCyFromStr

glFinish

CM_Query_Remove_SubTree

VarFormat

SetEntriesInAclW

GdipRotateMatrix

GdipWarpPath

GetClassName

WVTAsn1SpcPeImageDataDecode

SetupInitializeFileLogW

NetApiBufferSize

I_RpcInitImports

__CxxFrameHandler3

RegisterGPNotificationInternal

CreateWindowEx

IsCharUpperW

SetTokenInformation

GdipAddPathRectanglesI

ZwMapViewOfSection

SetupDiBuildClassInfoList

GetBitmapDimensionEx

SetSystemFileCacheSize

FindExecutableA

CreatePropertySheetPageA

DrawIcon

SetupCreateDiskSpaceListW

SetEntriesInAclA

SetupFindFirstLineW

RtlIsThreadWithinLoaderCallout

VkKeyScanExA

ImageList_CoCreateInstance

GdipCreateTexture2I

SetupQueryInfOriginalFileInformationA

PCVISIT_Hooks_Remove

LoadLibrary

GetWindowOrgEx

CMCreateDeviceLinkProfile

GetCurrentActCtx

GetCaretPos

GdipAddPathPolygonI

GdipAddPathBeziersI

SystemParametersInfoW

CMGetPS2ColorRenderingDictionary

ReuseDDElParam

EqualRect

QuerySpoolMode

WSAResetEvent

GdipResetImageAttributes

SetupInitializeFileLogA

InterlockedExchangeAdd

TrackPopupMenuEx

UrlGetPartW

ConvertDevModeToPrintTicketThunk2

HttpExtensionProc

CMGetInfo

GdipSetPageScale

GdipGetTextureWrapMode

VarR4FromStr

FlushProcessWriteBuffers

CM_Invert_Range_List

?New@BasePrivate@@YAPAXI_N@Z

ChangeDisplaySettingsA

WaitForSingleObject

SetupQuerySpaceRequiredOnDriveA

CryptCATCatalogInfoFromContext

GetSecurityDescriptorSacl

GdipGetRenderingOrigin

Call

Heap32Next

GetTabbedTextExtentA

LsaEnumerateTrustedDomains

PeekMessage

SetupGetFieldCount

CreatePolygonRgn

MapGenericMask

GetModuleHandleA

waveInOpen

RegConnectRegistryW

VarCmp

NetWkstaUserEnum

SetupDiDeleteDeviceInterfaceRegKey

strtol

CM_Query_Arbitrator_Free_Data

Ox12121212

GdipCreateFromHWNDICM

GlobalHandle

CreateFileMappingW

CM_Intersect_Range_List

D3DKMTInvalidateActiveVidPn

glVertex2f

CreateRectRgnIndirect

SetupGetBackupInformationW

WSCUpdateProvider

InternetReadFile

NtEnumerateKey

RegConnectRegistryA

StartPagePrinter

SamQueryInformationUser

SetupDiDeleteDeviceInterfaceData

glVertex2i

CommitUrlCacheEntryBinaryBlob

SHGetInstanceExplorer

TermMemoryAllocate

AVIStreamGetFrameOpen

MsiQueryProductStateA

NtReadFileScatter

CoSetProxyBlanket

PR_ErrorToString

VARIANT_UserFree

GdipFillClosedCurve2

GdipPathIterNextSubpath

GdipCreateRegionRectI

SetupDiInstallDevice

NdrOleInitializeExtension

IsMenu

GdipAddPathPie

_access

DrawTextW

GetSecurityDescriptorOwner

DeviceCapabilitiesA

CM_Free_Resource_Conflict_Handle

NtWow64QueryInformationProcess64

GdipGetPathGradientRectI

GetCursorInfo

______SQL______Process______Available

UnregisterMessagePumpHook

SetupGetBackupInformationA

DestroyCursor

GdipFillClosedCurveI

CoTaskMemRealloc

EnumProcessModulesW

SetupDiClassGuidsFromNameExW

AdjustWindowRectEx

CoInternetCreateSecurityManager

GetDiskFreeSpaceExA

OpenWindowStationW

CreateURLMonikerEx2

SetupQuerySpaceRequiredOnDriveW

ChangeDisplaySettingsW

GetTextMetricsW

EVENT_SINK_QueryInterface

CreateWindowExW

SnmpExtensionQuery

DdeFreeStringHandle

GetCatalogObject2

SetScrollRange

WSASocketA

GdipIsEqualRegion

HttpAddRequestHeadersA

GetDeviceDriverBaseNameA

NlsGetCacheUpdateCount

SetupGetSourceFileSizeA

FtpCommandA

SetupDiClassGuidsFromNameExA

SetupSetPlatformPathOverrideW

FindFirstUrlCacheContainerA

NtWriteFile

OpenWindowStationA

GdipGetLineBlend

AddEventHandler

GdipPlayMetafileRecord

CreateWindowExA

CreateSemaphore

GdipGetPathGradientSurroundColorsWithCount

GetDiskFreeSpaceExW

GdipTransformRegion

InvalidateRgn

GetDIBColorTable

CharNextExA

GdipSetPathMarker

SystemTimeToFileTime

GetTabbedTextExtentW

SetupCommitFileQueue

MergeAndValidatePrintTicketThunk2

CM_Get_Device_ID_ListW

PathMatchSpecExW

SendNotifyMessageW

glPopMatrix

OpenInputDesktop

SetThreadpoolWait

DuplicateHandle

HidP_InitializeReportForID

LoadBitmapW

WSASocketW

PolyPolygon

GetTextMetricsA

CMConvertColorNameToIndex

GdipPathIterNextSubpathPath

WcsGetDefaultColorProfile

GetStringTypeA

GdipSetImageAttributesGamma

GdipCreateTextureIAI

get

PSPropertyBag_ReadBOOL

BSTR_UserUnmarshal

Rectangle

DrawFrameControl

SetupInstallServicesFromInfSectionW

SetSecurityDescriptorGroup

GetDevicePowerState

CM_Is_Dock_Station_Present

CM_Get_DevNode_Registry_Property_ExW

GdipGetPathGradientPresetBlendCount

CopyRect

CertDuplicateCertificateContext

CoAllowSetForegroundWindow

CloseFigure

DragDetect

PSGetPropertyDescription

SetCommConfig

SetupGetSourceFileSizeW

SetupDiEnumDeviceInterfaces

GetCursorPos

ActivateActCtx

CoGetPSClsid

SetupDiGetClassDescriptionA

ExtEscape

VirtualProtect

@System@FreeMem$qpv

GdipSetAdjustableArrowCapFillState

SetupDiSetClassRegistryPropertyW

EnumColorProfilesW

SetFileInformationByHandleW

ZwCreateSection

GetFileAttributesA

UrlEscapeA

ResetEvent

LZCopy

NtQuerySystemInformation

GdipGetMetafileHeaderFromStream

SetupOpenInfFileW

CertFreeCertificateChain

SetProcessWorkingSetSize

CM_Free_Log_Conf_Ex

SetupDiGetClassDescriptionW

GetMenuItemRect

_onexit

SetConsoleCtrlHandlerW

GetStringTypeW

GetProcessMemoryInfo

PnpIsFilePnpDriver

SetTextJustification

ExtractIconW

RegisterGPNotification

SetupInitDefaultQueueCallback

GetModuleFileNameW

GetThemeTransitionDuration

DsGetSiteNameA

GdipPathIterHasCurve

NetGetDCName

NtLockFile

IntersectClipRect

CreateFontIndirect

GdipGetGenericFontFamilySerif

NtContinue

SetupDiSetClassRegistryPropertyA

GdipGetPenDashCount

WaitForInputIdle

GetSystemInfo

InitializeConditionVariable

VirtualProtectEx

GdipGetCompositingQuality

RasGetEntryDialParamsA

CM_Uninstall_DevNode_Ex

GetTokenInformationW

GetClassInfoA

RmStartSession

DrawTextExA

NtTranslateFilePath

ADsEnumerateNext

CertCloseStore

SetupDuplicateDiskSpaceListW

GetMenuItemCount

CM_Get_Sibling

DwmInvalidateIconicBitmaps

SHGetFolderPathAndSubDirW

GetUserNameW

UpdateLayeredWindow

SetupDiGetClassDescriptionExA

glPushMatrix

CertAddEncodedCertificateToStore

CloseWindowStation

ChooseFontW

SetWindowExtEx

DrawTextExW

ResetWriteWatch

FloodFill

PathParseIconLocationW

VirtualFreeEx

CM_Get_Device_ID_ExW

PathGetArgsW

SetupDuplicateDiskSpaceListA

StringFromGUID2

ScaleViewportExtEx

GdipGetRegionBounds

CoReleaseServerProcess

GdipGetPathGradientRect

GetFileAttributesW

GdipScaleWorldTransform

StrFormatKBSizeW

CM_Free_Log_Conf

GetModuleHandleW

IsAsyncMoniker

currentdate

GdipAddPathString

GetClassInfoW

SetBrushOrgEx

LdrAddRefDll

GdipSetPenDashStyle

RtlRunEncodeUnicodeString

PSPropertyBag_WriteStream

Process32First

GdipIsStyleAvailable

GetUserObjectInformationA

DragQueryFileW

ZwSystemDebugControl

CM_Get_Device_ID_ExA

InternetGetLastResponseInfoW

CreatePipe

GdipGetRegionScansCount

PathCombineA

GetComputerNameExW

NtCompactKeys

GdipCloneFont

CreateFontIndirectA

LsaEnumerateAccountsWithUserRight

SetDIBColorTable

IsCharUpperA

CM_Get_Resource_Conflict_Count

CheckTokenMembership

GetTextExtentExPointW

GetNextDlgGroupItem

OleUninitialize

WNetOpenEnumW

CM_Get_Depth

IsValidLocale

WSACancelBlockingCall

GlobalMemoryStatus

GetVersionEx

RpcBindingFromStringBindingW

lstrcmpiA

WriteConsoleA

GetTextExtentExPointA

GetUserNameA

@Forms@TApplication@HandleException$qqrp14System@TObject

GdipSetClipRegion

download

EtwUnregisterTraceGuids

CreateFileA

CompareStringEx

OleIconToCursor

LoadTypeLib

PathCombineW

DeleteUrlCacheEntry

SetupFindFirstLineA

D3DKMTCheckMonitorPowerState

GdipCreatePath

ATMGetPostScriptNameA

RegDeleteKeyW

GdipSetPenCustomStartCap

GdipGetFontHeightGivenDPI

CryptFindOIDInfo

RegisterWindowMessage

GetUserObjectInformation

WriteFile

GetProcessHeap

SetForegroundWindow

StrCmpNW

GdipAddPathStringI

IsUserAnAdmin

CM_Detect_Resource_Conflict_Ex

MonitorFromPoint

EnumCalendarInfoW

SetTextColor

TextToWbemObject

WritePrivateProfileStringW

lstrcmpiW

IsRectEmpty

GetIfTable

IsAccelerator

HidP_GetUsagesEx

GetLastError

SetupRemoveFromSourceListA

GdipImageSelectActiveFrame

SetSysColors

ZwQueryInformationProcess

_llseek

SetupCommitFileQueueW

NetApiBufferReallocate

Pie

FindFirstFileExW

GetWinMetaFileBits

GdipMultiplyPathGradientTransform

ReadConsoleInputA

PSPropertyBag_Delete

WriteConsoleW

InflateRect

SetupCloseLog

CompatFlagsFromClsid

GdipSetCompositingQuality

ContinueDebugEvent

AVISaveOptionsFree

GdipFillClosedCurve

IsBadStringPtrA

PathCleanupSpec

SetupInstallServicesFromInfSectionA

FillRgn

NtCreateFile

CreateFontIndirectW

CheckRadioButton

RpcAsyncCompleteCall

DeleteAtomW

IsClipboardFormatAvailable

GdipIsVisibleRegionPointI

ShouldShowIntranetWarningSecband

WritePrivateProfileStringA

SetupDiChangeState

GdipTransformPoints

SetupCommitFileQueueA

GdipGetCustomLineCapStrokeCaps

GdipResetTextureTransform

GdipFlattenPath

UpdateWindow

NtSaveKey

IsBadStringPtrW

SetDlgItemInt

SetupDiSetDeviceInterfaceDefault

SetConsoleTextAttribute

SetCommBreak

GetUserObjectInformationW

RpcBindingFromStringBindingA

GdipGetPenDashArray

GetEnvironmentStrings

CoDisconnectObject

SetupOpenInfFileA

InstallA

GdipSetLineTransform

ATMAddFontA

FreeAddrInfoW

EnumDeviceDrivers

DragQueryFileA

CreateFile

EnumCalendarInfoA

HidD_GetProductString

GetCPInfo

GdipImageGetFrameCount

ADsOpenObject

GdipIsVisibleRegionPoint

glTexImage2D

GdipSetPathGradientWrapMode

WakeConditionVariable

GetLocalTime

SetupOpenLog

SamConnect

GetSystemDefaultLCIDW

HidP_UnsetUsages

CharLowerBuffW

CopyAcceleratorTableA

GdipGetImageVerticalResolution

GetEnvironmentStringsA

PostQuitMessage

VerifyVersionInfoA

SysAllocString

NetScheduleJobAdd

IsDialogMessageW

CM_Query_Arbitrator_Free_Size

GdipCreateTexture

wvnsprintfW

WSACloseEvent

SetupQueueCopySectionW

VarBoolFromStr

glMatrixMode

GdipSetStringFormatTabStops

ExitProcess

CM_Register_Device_Interface_ExA

GdipGetLineGammaCorrection

GetDefaultPrinterA

CopyAcceleratorTableW

DrawIconEx

NtQueryInformationFile

CreatePen

GetDOSEnvironment

glClearDepth

RegEnumValueA

UrlUnescapeW

CMIsProfileValid

EnumServicesStatusExW

HTTPSFinalProv

BeginPath

CharLowerBuffA

ReleaseSRWLockShared

DialogBoxParamW

Process32FirstW

CloseHandle

GetWindowThreadProcessIdW

SetupGetSourceFileLocationW

RmGetList

LocaleNameToLCID

waveInClose

StrCmpNIW

UrlUnescapeA

CM_Create_DevNodeW

fprintf

SetupQueryFileLogW

SetupOpenAppendInfFileW

DialogBoxParamA

GdipCreateAdjustableArrowCap

GdipGetPathGradientCenterPoint

RpcBindingFree

SymSetOptions

ShowCaret

SetupDiDrawMiniIcon

VarR8FromStr

EndPanningFeedback

WintrustCertificateTrust

_DllBidCtlProc@24

IsCharAlphaW

CreateDialogIndirectParam

CreateDCA

UnlockServiceDatabase

GdipGetPathData

SetViewportExtEx

GdipSetAdjustableArrowCapWidth

IsWow64Process

GetComputerNameExA

VerLanguageNameA

GdipGetPathGradientSurroundColorCount

OleLoadFromStream

NtOpenFile

GdipEndContainer

SetupEnumInfSectionsW

DdeClientTransaction

GetWindowRgn

?Initialize@Base@@YGXXZ

GetDlgItemInt

ChoosePixelFormat

PeekNamedPipe

RoundRect

SetupEnumInfSectionsA

CombineRgn

wvnsprintfA

GetCatalogObject

SetupQueryFileLogA

GdipSetPenUnit

SetupQueueCopySectionA

OleSetMenuDescriptor

CreateThread

CM_Create_DevNodeA

UnlockFileEx

CreateFileW

RmRegisterResources

GetModuleHandle

GdipCreateMetafileFromEmf

CM_Create_DevNode_ExW

IsWindow

tolower

SetupOpenAppendInfFileA

InternetGetLastResponseInfoA

VarAnd

NetUseAdd

GeoEmbedWatermark_Bmp_LoadLib

CreateDCW

CryptEnumProviderTypesA

RegRestoreKeyW

SetupDiGetClassDescriptionExW

GetErrorInfo

SetHandleInformation

SetEndOfFile

ChooseFontA

HidD_GetFeature

ReleaseActCtx

DeleteTimerQueueTimer

GetKeyState

RegReplaceKeyW

GetConsoleMode

GlobalFindAtomW

RemoveMenu

CreateCursor

RpcStringFreeA

WaitForMultipleObjects

GetCommModemStatus

GdipNewInstalledFontCollection

GdipGetImageDecoders

GetModuleBaseName

CM_Create_DevNode_ExA

RtlGetNtVersionNumbers

ZeroMemory

WcsGetUsePerUserProfiles

LocalLock

SaferIdentifyLevel

SafeArrayGetIID

GdipPrivateAddFontFile

OleSetContainedObject

CM_Add_Empty_Log_Conf

CryptCATAdminCalcHashFromFileHandle

IsDlgButtonChecked

lstrlenA

CM_Free_Log_Conf_Handle

SetFilePointerEx

IsChild

GdipPathIterEnumerate

GdipCombineRegionPath

EnumResourceTypesA

BCryptCloseAlgorithmProvider

LocalAllocW

RpcStringFreeW

ATMGetFontBBox

CompareSecurityIds

ATMXYShowTextA

SHGetSpecialFolderLocation

SetupDiGetSelectedDevice

_c_exit

GlobalFindAtomA

??1type_info@@UAE@XZ

IsCharAlphaA

NtWaitForMultipleObjects

QueryServiceConfig2W

_lopen

ShowScrollBar

NtQueryOpenSubKeysEx

GetTextAlign

GetClipboardData

lstrlenW

NtEnumerateValueKey

SetupGetSourceFileLocationA

GdipSetImageAttributesNoOp

CreateURLMoniker

GetWindowPlacement

FindAtom

OpenProcessTokenW

CM_Get_Class_Name_ExW

GlobalReAlloc

waveInStart

AVIFileRelease

??_V@YAXPAX@Z

PropVariantCompareEx

GdipTransformPointsI

SetupDiInstallDeviceInterfaces

GetDCOrgEx

InternetSetOptionW

GetEnvironmentStringsW

DebugActiveProcess

GdipTranslateMatrix

SetupCopyOEMInfA

ImpersonateSelf

GdipGetStringFormatMeasurableCharacterRangeCount

InternetSetOptionA

ExtractIconA

CM_Get_Class_Name_ExA

WaitForDebugEvent

ExitWindowsEx

ShellExecuteEx

ImageList_DrawIndirect

VirtualAlloc

CM_Get_Next_Log_Conf_Ex

GetSystemTimeAsFileTime

LoadIcon

VariantClear

GetWindowDC

InternetWriteFile

NtSaveMergedKeys

SetupComm

RemoveFontResourceExW

_itow

NtLoadKey

CryptGenKey

GetExitCodeThread

CreateIconFromResource

CopyBindInfo

EnumResourceTypesW

IsDialogMessageA

TlsGetValue

GdipTranslateTextureTransform

DwmGetColorizationColor

CM_Delete_Class_Key

SetupGetBinaryField

GetCurrentProcessExplicitAppUserModelID

QueryFilePath

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Windows\system32\IMM32.DLL

C:\Windows\system32\UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Windows\syswow64\WININET.dll

C:\Users\win7\AppData\Local\Temp\is-LJK8F.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\is-N9LB8.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

C:\Windows\system32\DUser.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\FonbOmacd\NijosoBeelta.exe

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Windows\system32\CRTDLL.dll

C:\Windows\syswow64\DEVOBJ.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

C:\Windows\syswow64\GDI32.dll

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\ImageGUI.dll

C:\Users\win7\AppData\Local\Tempfolder\UlynWioaa\NyjgitAcuifz.exe

C:\Users\win7\AppData\Local\Tempfolder\VekaWem\YghaPigdi.exe

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

C:\Windows\system32\olepro32.dll

C:\Windows\GeoOCX\WebCam\20090916\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IXP000.TMP\M.exe

C:\Users\win7\AppData\Local\Temp\7zS77D6.tmp\515f52bb88450.exe

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

C:\Windows\system32\DNSAPI.dll

C:\Users\win7\AppData\Local\Temp\7zSB2EF.tmp\515f05cb479e3.exe

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\PunepyRiyaqi\KyvtokDuq.exe

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\Windows\syswow64\LPK.dll

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll

C:\Users\win7\AppData\Local\Temp\Set7B32.tmp

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Users\win7\AppData\Local\Tempfolder\VoivvTieci\RevhGaa.exe

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewer.dll

C:\Users\win7\AppData\Local\Tempfolder\ortmp\orion.exe

C:\Windows\SysWOW64\svchost.exe

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\setup.exe

C:\Users\win7\AppData\Local\Temp\is-A86TG.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Windows\SysWOW64\cmd.execf

C:\Windows\syswow64\USER32.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\VeicfBubhoxn\AruundNulnio.exe

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_Parser.dll

C:\Windows\SysWOW64\ntdll.dll

C:\Users\win7\AppData\Local\Temp\7zS55DB.tmp\515f05c5b9ea2.exe

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

C:\Windows\syswow64\MSCTF.dll

C:\Windows\syswow64\RPCRT4.dll

C:\Windows\syswow64\oleaut32.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2.dll

C:\Windows\syswow64\shlwapi.DLL

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-U098A.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\LiurloUwodmue\WauqJokvud.exe

C:\Users\win7\AppData\Local\Temp\is-7OHN6.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

C:\Windows\system32\opengl32.dll

C:\Windows\syswow64\CFGMGR32.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

C:\Windows\syswow64\ADVAPI32.dll

C:\Users\win7\AppData\Local\Temp\is-I1FLQ.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

C:\Windows\syswow64\SHELL32.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll

C:\Windows\syswow64\USP10.dll

C:\Windows\syswow64\normaliz.DLL

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\cpSetup.exe

C:\Windows\system32\DDRAW.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\setup_31011.exe

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\is-JKHB7.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\is-OTV7R.tmp\is-NQO4R.tmp

C:\Users\win7\AppData\Local\Tempfolder\EosolfHovha\ZicnaIjav.exe

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

C:\Windows\syswow64\SspiCli.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Tempfolder\ShraHas\FakboMumvu.exe

C:\Users\win7\Documents\MSDCSC\msdcsc.exe

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-HHG9D.tmp\is-PS2RH.tmp

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\is-CQABJ.tmp\is-H9UQD.tmp

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\gert0.dll

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

C:\Windows\system32\msimg32.dll

C:\Users\win7\AppData\Local\Tempfolder\MihkoObinza\IbolrFirbeti.exe

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Windows\system32\LZ32.DLL

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-JR7C5.tmp\sample.tmp

C:\Users\win7\AppData\Local\Tempfolder\ImyubaWob\ReojatGegaiv.exe

C:\Windows\system32\mpr.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-1M7DH.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\sfx1\_bbg.exe

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Windows\system32\crtdll.dll

C:\Windows\SysWOW64\MSIEXEC.EXE

C:\Users\win7\AppData\Local\Temp\~nsu.tmp\Au_.exe

C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\setup_31011.exe

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

C:\Windows\system32\winmm.dll

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ginst0.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\V8._85296_20150814221218.exe

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Windows\system32\oleacc.dll

c:\2bbba39a5fce003b322b2010\update\update.exe

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Windows\system32\ODBC32.DLL

C:\Users\win7\AppData\Local\Tempfolder\QiiorAsikv\RoubFedeseu.exe

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\QegmaNudp\HuiagbFoopro.exe

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7336.tmp\515f52b8125c4.exe

C:\Users\win7\AppData\Local\Temp\is-N1BG4.tmp\sample.tmp

C:\Windows\syswow64\urlmon.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\IML32.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.exe

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\cetrainers\CETEAD5.tmp\extracted\sample

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\7za.exe

C:\Users\win7\AppData\Local\Temp\9c2704c22ceab0ebc352c74d631e8669\downloaderOFFER1.exe

C:\CFVS_HookDll.dll

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

C:\Windows\system32\wsock32.dll

C:\Windows\GeoOCX\WebCam\20090916\DMPTZControlDLL.dll

C:\Windows\syswow64\USERENV.dll

C:\Users\win7\AppData\Local\Temp\is-VLHR2.tmp\sample.tmp

C:\Windows\GeoOCX\WebCam\20090916\LiveClient_8200.dll

C:\Windows\system32\DCIMAN32.dll

C:\Windows\syswow64\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

C:\Windows\syswow64\comdlg32.dll

C:\Windows\SysWOW64\DUser.dll

C:\Windows\syswow64\msvcrt.dll

C:\Windows\syswow64\iertutil.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Tempfolder\DoltuJonisep\MufjCucgi.exe

C:\Windows\svchost.exe

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\~zs227B.tmp\ZapSpot.exe

C:\Users\win7\AppData\Local\Temp\is-J8BHU.tmp\sample.tmp

C:\Windows\system32\ODBC32.dll

C:\sample

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\pftB084.tmp\Disk1\Setup.exe

C:\Windows\syswow64\SETUPAPI.dll

C:\Users\win7\AppData\Local\Temp\is-FD9AA.tmp\sample.tmp

C:\Windows\system32\version.DLL

c:\da8df086ca54f7fdd325c4\update\update.exe

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\tsldrl6660\setup.exe

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\is-B8GN7.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

C:\Windows\syswow64\ole32.DLL

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEO.dll

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001

C:\Windows\syswow64\NSI.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

C:\Windows\system32\SXS.DLL

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-HDJS0.tmp\is-9FF4K.tmp

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\checktbexist.exe

C:\Windows\syswow64\KERNELBASE.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

C:\32788R22FWJFW\swreg.exe

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

C:\Windows\SysWOW64\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\GetPrivateInstaller_woautorun.exe

C:\Users\win7\AppData\Local\Tempfolder\ZicicHhli\MexosiShmoc.exe

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\SkinH.DLL

C:\Windows\syswow64\CRYPTBASE.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

C:\Windows\syswow64\profapi.dll

C:\Windows\SysWOW64\sechost.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS7BFD.tmp\515f05ca0c035.exe

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Windows\system32\ebkp.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Windows\system32\dwmapi.dll

C:\Windows\syswow64\WS2_32.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Windows\system32\winspool.drv

C:\Windows\system32\hhctrl.ocx

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Windows\GeoOCX\WebCam\20090916\GvCrypto.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-0SC4M.tmp\is-FTU3B.tmp

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\sxe19DB.tmp

C:\Users\win7\AppData\Local\Tempfolder\ZoidpOsi\FaopxuWhhagpa.exe

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\V8._85296_20150814221218.exe

C:\Windows\syswow64\crypt32.dll

C:\Windows\system32\GLU32.dll

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Windows\system32\CRTDLL.DLL

C:\Users\win7\AppData\Local\Temp\pftD7AF~tmp\Disk1\Setup.exe

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\7zS2C7E.tmp\515f5b4a5a32e.exe

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

C:\Windows\syswow64\OLEAUT32.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-4KG8T.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

C:\Windows\system32\WINMM.dll

C:\Users\win7\AppData\Local\Tempfolder\WikaaPavnu\OdapGhy.exe

C:\Users\win7\AppData\Local\Tempfolder\MycoVifazo\LanfVydnau.exe

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\cpSetup.exe

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe

C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\is-KJ4HI.tmp\sample.tmp

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderOFFER1.exe

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2.dll

C:\Users\win7\AppData\Local\Temp\ginstall.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\pft3E71.tmp\setup.exe

C:\Users\win7\AppData\Local\Temp\71d8cec149ec9115178e8020d4510ae0\downloaderDDLR.exe

C:\DLL_Loader.exe

LoadLibrary

C:\Windows\system32\shell32.dll

c:\windows\system32\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.dll

c:\windows\syswow64\msyuv.dll

C:\Users\win7\AppData\Local\Temp\nsnADC0.tmp\NSISdl.dll

C:\Windows\SysWOW64\SHLWAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\is-0BDME.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\NSISdl.dll

msimg32.dll

C:\Users\win7\AppData\Local\Temp\12aubfff5\QBInstaller.dll

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsi2FE6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\is-97GVD.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj2942.tmp\NSISdl.dll

c:\windows\syswow64\msvcrt.dll

C:\Users\win7\AppData\Local\Temp\nsj32A5.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.EN

imagehlp.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.EN

Msimg32.dll

cfgmgr32.dll

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~de2314.tmp

c:\windows\system32\lpk.dll

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.dll

netutils.dll

Ntdll.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.EN

imm32.dll

C:\Users\win7\AppData\Local\Temp\Donate.ico

C:\Users\win7\AppData\Local\Temp\nsq370A.tmp\Processes.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll

C:\Windows\system32\advapi32.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.EN

C:\Windows\SysWOW64\SHELL32.DLL

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\NSISdl.dll

activeds.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\DEU\ChipsetDEU.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\NSISdl.dll

wdmaud.drv

profapi.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf8574.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.dll

RASAPI32.dll

libmpg123-0.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.dll

C:\Windows\system32\Oleaut32.dll

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.ENU

C:\Windows\system32\CRTDLL.DLL

C:\Windows\System32\cmd.exe

c:\windows\syswow64\usp10.dll

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.EN

c:\windows\system32\certcredprovider.dll

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\nsArray.dll

c:\windows\system32\imagehlp.dll

gdi32.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\System.dll

RICHED20.DLL

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.ENU

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\System.dll

STARBURN.DLL

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nswF984.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsi3C49.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.EN

C:\Users\win7\AppData\Local\Temp\nse2542.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\is-CRKNN.tmp\_isetup\_shfoldr.dll

C:\Windows\System32\davclnt.dll

C:\Users\win7\AppData\Local\Temp\nsj9023.tmp\Processes.dll

MSHTML.dll

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\System.dll

COMDLG32.DLL

C:\Windows\System32\autochk.exe

AUDIOSES.DLL

C:\Windows\system32\DSound.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\System.dll

wsock32.dll

C:\Users\win7\AppData\Local\Temp\nsuB310.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\System.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

PSAPI.DLL

C:\Users\win7\AppData\Local\Temp\mss863E.tmp

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse28D5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf865E.tmp\NSISdl.dll

URLMON.DLL

C:\Windows\GeoOCX\WebCam\20090916\LiveX_8320.ocx

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

C:\ntdll.dll

WINMM.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.dll

c:\windows\syswow64\setupapi.dll

C:\Windows\System32\actskin4.ocx

C:\Windows\system32\DSOUND.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\rd7CD8.tmp\____mmfp.ocx

c:\windows\syswow64\shell32.dll

C:\Users\win7\AppData\Local\Temp\nsv511F.tmp\Processes.dll

C:\Windows\system32\MSCOREE.DLL

DUI70.dll

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\nsArray.dll

wininet.dll

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\nsArray.dll

MSVFW32.dll

advapi32.dll

UXTHEME.DLL

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.EN

WINSTA.dll

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa7589.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.ENU

SHFolder.dll

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\PB7DC5.ENU

uSER32

C:\pftpns.dll

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\nsArray.dll

MSVCRT.dll

user32.dll

Advapi32.dll

C:\sampleENU.dll

API-MS-WIN-Service-winsvc-L1-1-0.dll

IPHLPAPI.dll

gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\System.dll

mscoree.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.dll

api-ms-win-downlevel-ole32-l1-1-0.dll

C:\Windows Update\update.bat

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsm6C72.tmp\Processes.dll

C:\Windows\SysWOW64\OLE32.DLL

winspool.drv

C:\Users\win7\AppData\Local\Temp\nstE5EE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\gert0.dll

MSHTML.DLL

C:\Users\win7\AppData\Local\Temp\nsf8F5B.tmp\Processes.dll

c:\windows\system32\mswsock.dll

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\NSISdl.dll

propsys.dll

SkinH

C:\Windows\system32\riched20.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\nsisdl.dll

C:\Users\win7\AppData\Local\Temp\is-JVQIJ.tmp\sample.ENU

C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\nsArray.dll

c:\windows\system32\drivers\acpipmi.sys

OLEACC.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv94A7.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\JPN\ChipsetJPN.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.ENU

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_ParserLOC.dll

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsbAB5F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.ENU

VERSION.dll

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm217D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.dll

c:\Users\win7\AppData\Local\Temp\sfx1\gdipacc.dll

C:\Users\win7\AppData\Local\Temp\nsoB080.tmp\Processes.dll

hhctrl.ocx

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\System.dll

WS2_32.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.dll

USER32.dll

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\System.dll

CRTDLL.DLL

msacm32.dll

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.dll

c:\windows\syswow64\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.EN

C:\Windows\system32\spool\DRIVERS\x64\3\STDNAMES.GPD

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm86C0.tmp\nsWeb.dll

anote.dll

Ole32.dll

riched32.dll

C:\Users\win7\AppData\Local\Temp\nsc79CF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\nsJSON.dll

urlmon.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nssD71A.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsg94E6.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\ginstall.dll

OLEAUT32

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll

cryptnet.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\FIN\ChipsetFIN.dll

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.ENU

rasapi32.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.ENU

C:\Windows\system32\ole32.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.dll

bcrypt.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\System.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\uxtheme.dll

C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

C:\Users\win7\AppData\Local\Temp\nsr2DF7.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsw2DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr44D.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-EU83C.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsn9631.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.ENU

std.ndll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nss3DB5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\nsArray.dll

C:\Windows\system32\wshtcpip.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\HUN\ChipsetHUN.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-KJ4HI.tmp\sample.EN

wpcap.dll

./nme.ndll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfD7E9.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsv6907.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\ENU\ChipsetENU.dll

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\nsArray.dll

c:\windows\system32\msvidc32.dll

KerNel32

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\nsArray.dll

GDI32.DLL

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.dll

SetupResources.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\ginst0.dll

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-JVQIJ.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsr9390.tmp\NSISdl.dll

shfolder.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.EN

OLE32.DLL

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\NSISdl.dll

shlwapi.dll

BugReport.dll

mscms.dll

C:\Procmon.exe

C:\Windows\System32\wshqos.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.EN

C:\sample.en_US

DMDskRes2.dll

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.dll

C:\Windows\system32\user32.dll

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\004cf069.a

kernel32

C:\Users\win7\AppData\Local\Temp\nsy71E0.tmp\nsWeb.dll

c:\windows\syswow64\imm32.dll

c:\windows\system32\autochk.exe

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.dll

msvcrt.dll

C:\Users\win7\AppData\Local\Temp\is-PTDNB.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsv37BB.tmp\a97db507-fa53-474b-870e-0e4ef6b2e105.dll

C:\Users\win7\AppData\Local\Temp\000a3a58.a

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz4E31.tmp\NSISdl.dll

c:\windows\system32\scecli.dll

C:\32788R22FWJFW\swreg.ENU

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Xtra.x32

c:\windows\system32\ntlanman.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.ENU

std.dll

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.EN

c:\windows\syswow64\comdlg32.dll

HHCTRL.OCX

cryptsp.dll

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-40HMF.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\System.dll

KERNEL32.DLL

C:\Users\win7\AppData\Local\Temp\is-NAM86.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg5F03.tmp\NSISdl.dll

DCIMAN32.DLL

ucc12.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi3C4A.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.ENU

WindowsCodecs.dll

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\SimpleSC.ENU

C:\sample

C:\Users\win7\AppData\Local\Temp\000a40c1.a

C:\Windows\system32\nlasvc.dll

C:\Users\win7\AppData\Local\Temp\nsf78C3.tmp\nsWeb.dll

Msftedit.DLL

C:\Users\win7\AppData\Local\Temp\nsh2DC2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.ENU

pythondll

C:\Users\win7\AppData\Local\Temp\nsz8067.tmp\NSISdl.dll

COMCTL32.DLL

winmm.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.EN

C:\Windows\System32\imageres.dll

C:\Users\win7\AppData\Local\Temp\nsm6C24.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.EN

SHELL32.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\NSISdl.dll

COMDLG32.dll

nssutil3.dll

C:\Users\win7\AppData\Local\Temp\nsv1C3F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nss8CB8.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.dll

c:\program files\uselesscreations\uc3d\modules\none

C:\Krnlmodule.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.ENU

C:\Windows\GeoOCX\WebCam\20090916\GvCryptoENU.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\nsArray.dll

usp10.dll

d2d1.dll

c:\windows\explorer.exe

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\System.dll

c:\windows\system32\quartz.dll

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd8B0A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\GLF804B.tmp

User32.dll

C:\Users\win7\AppData\Local\Temp\nsh21FA.tmp\NSISdl.dll

OLEAUT32.dll

kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Inetc.dll

C:\Users\win7\AppData\Local\Temp\PB7DC5.EN

C:\Users\win7\AppData\Local\Temp\nsz2952.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\Uninst.bat

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\nsArray.dll

setupapi.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.EN

c:\windows\syswow64\lpk.dll

<NULL>

C:\PROGRA~2\WMACON~1\wma.hlp

c:\windows\system32\kerberos.dll

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.ENU

c:\windows\system32\mpg2splt.ax

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.EN

CFGMGR32.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.dll

C:\Windows\system32\crtdll.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\System.dll

GdiPlus.dll

C:\Windows\system32\shlwapi.dll

C:\Users\win7\AppData\Local\Temp\nsu2A1E.tmp\System.dll

comctl32.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.dll

ADVAPI32.dll

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.ENU

SHELL32.DLL

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsisdt.dll

C:\Users\win7\AppData\Local\Temp\is-2PQ60.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsd8A78.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg397F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\System.dll

RPCRT4.dll

SHLWAPI.dll

ddraw.dll

C:\Windows\GeoOCX\WebCam\20090916\ImageGUILOC.dll

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\NSISdl.dll

GDI32.dll

MMDEVAPI.DLL

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-MEJF8.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd2314.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl7701.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsf825A.tmp\NSISdl.dll

ATMLIB

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\System.dll

KeRnEl32

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsjFCDB.tmp\NSISdl.dll

C:\Windows\system32\wbem\xml\wmi2xml.dll

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ActSys\SSL\import.bat

c:\windows\system32\msmpeg2vdec.dll

dbghelp.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsoE348.tmp\ZipDLL.dll

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse2946.tmp\nsWeb.dll

SPINF.dll

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss8901.tmp\NSISdl.dll

DSound.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsp78B3.tmp\ZipDLL.dll

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.dll

C:\Users\win7\AppData\Local\Temp\nsaC56C.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nss8D53.tmp\NSISdl.dll

C:\Windows\syswow64\KERNELBASE.dll

C:\Windows\system32\spool\DRIVERS\x64\3\UNIRES.DLL

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\nsArray.dll

C:\Windows\system32\Stdole2.tlb

c:\windows\system32\normaliz.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb1F1C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm8B56.tmp\System.dll

MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsxA014.tmp\NSISdl.dll

./std.ndll

C:\Users\win7\AppData\Local\Temp\nss8D54.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsi2599.tmp\NSISdl.dll

Kernel32.dll

snmpapi.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\NSISdl.dll

C:\PROGRA~2\WMACON~1\unwise.exe

9953ec

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\nsArray.dll

C:\Windows\system32\acppage.dll

C:\Windows\system32\urlmon.dll

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\NSISdl.dll

c:\windows\system32\wdmaud.drv

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.ENU

c:\windows\system32\vbicodec.ax

C:\Users\win7\AppData\Local\Temp\nsf34A9.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\nsArray.dll

netapi32.dll

Msi.DLL

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.ENU

c:\windows\syswow64\wdmaud.drv

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.EN

c:\windows\syswow64\iertutil.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.ENU

./nme.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.EN

Shell32

Msi.dll

c:\windows\system32\midimap.dll

C:\Users\win7\AppData\Local\Temp\nsf785C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq6A1F.tmp\NSISdl.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\30280e5e7d89ffe702df50de4d339fc7\System.Configuration.Install.ni.dll

user32

C:\Users\win7\AppData\Local\Temp\nsb5F81.tmp\Processes.dll

c:\windows\system32\fxsmon.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\99cdfef98595ed91f14936cf52a49c54\System.Management.ni.dll

C:\Windows\system32\wer.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.EN

MPR.DLL

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.ENU

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\System.dll

api-ms-win-core-winrt-l1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\nsArray.dll

Shell32.Dll

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\nsJSON.dll

version.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nstC967.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgEBAB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgDDF8.tmp\NSISdl.dll

c:\windows\system32\tspkg.dll

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsz761B.tmp\SimpleSC.EN

c:\windows\system32\wininet.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\TRK\ChipsetTRK.dll

wintrust.dll

ntmarta.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\System.dll

dwmapi.dll

C:\Users\win7\AppData\Local\Temp\nspB8C8.tmp\NSISdl.dll

C:\Windows\System32\shdocvw.dll

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.ini

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.ENU

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\System.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoWatermark.dll

MSFTEDIT.DLL

xmllite.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\nsArray.dll

C:\Windows\system32\CRTDLL.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\THA\ChipsetTHA.dll

C:\Windows\system32\spool\DRIVERS\x64\3\UNIDRV.DLL

C:\Users\win7\AppData\Local\Temp\nsw2F00.tmp\nsWeb.dll

C:\rarlng.dll

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.EN

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2ENU.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPlus.DLL

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq9488.tmp\StdUtils.dll

c:\windows\system32\oleaut32.dll

C:\Windows\system32\symsrv.dll

C:\Windows\System32\WMAUDI~1.EXE

C:\Windows\SysWOW64\jscript9.dll

C:\Users\win7\AppData\Local\Temp\nsj8D9B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsz2953.tmp\Processes.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\716ee14dc9aafde2b5f7f387d842661d\System.ServiceProcess.ni.dll

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd88F2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\nsArray.dll

MMDevAPI.DLL

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp8CDB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsz2869.tmp\nsArray.dll

peAccess.dll

c:\windows\syswow64\psapi.dll

C:\Users\win7\AppData\Local\Temp\nsv2B57.tmp\Processes.dll

C:\Windows\GeoOCX\WebCam\20090916\GvClient_8200.ocx

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\System.dll

C:\Windows\system32\odbcint.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsfB926.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm2FF9.tmp\nsResize.dll

./std.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.ENU

KeRNEL32

C:\Windows\system32\ntshrui.dll

c:\windows\system32\pku2u.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoEditAVIDllV2LOC.dll

C:\Users\win7\AppData\Local\Temp\nsa2A47.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.ENU

c:\windows\system32\drivers\adpu320.sys

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\PTB\ChipsetPTB.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.dll

SXS.DLL

MSVCRT.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm2F5E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn5530.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\SVE\ChipsetSVE.dll

C:\Users\win7\AppData\Local\Temp\nsb2AE4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsq7BC0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.EN

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsoE5CF.tmp\NSISdl.dll

OLEAUT32.DLL

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\nsArray.dll

C:\Windows\system32\xmllite.dll

c:\windows\system32\clbcatq.dll

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\NSISdl.dll

C:\PROGRA~2\WMACON~1\UNWISE.EXE

C:\Windows\system32\VB6ES.DLL

C:\Users\win7\AppData\Local\Temp\nsz73B5.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\VSD492D.tmp\DotNetFX\dotnetchk.exe

c:\windows\system32\authui.dll

C:\Users\win7\AppData\Local\Temp\nskD36.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\nsRandom.ENU

WS2_32.DLL

C:\Users\win7\AppData\Local\Temp\nsw92C5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsn326B.tmp\nsArray.dll

mshtml.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.EN

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\NSISdl.dll

c:\windows\syswow64\iyuv_32.dll

C:\Users\win7\AppData\Local\Temp\nsb7C4D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv82B9.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nse8C9C.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nst7172.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\NSISdl.dll

C:\PYTHON27.DLL

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.dll

sfc.dll

C:\Users\win7\AppData\Local\Temp\nsh8605.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.EN

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewerENU.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa29F9.tmp\NSISdl.dll

c:\windows\system32\msctf.dll

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\nsArray.dll

ole32.dll

c:\windows\system32\scext.dll

slc.dll

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsz66B4.tmp\NSISdl.dll

USER32.DLL

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.EN

DWMAPI.DLL

VERSION.DLL

C:\Users\win7\AppData\Local\Temp\nsm56AC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn6FCD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.dll

c:\windows\system32\tcpmon.dll

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\nsArray.dll

C:\Windows\system32\RichEd20.DLL

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.ENU

c:\windows\system32\cca.dll

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj3EBB.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx2EBD.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.ENU

c:\windows\system32\usbmon.dll

C:\Users\win7\AppData\Local\Temp\nsa77EF.tmp\NSISdl.dll

C:\PROGRA~2\WMACON~1\readme.txt

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.ENU

comdlg32.dll

Atl.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\12auf94d4\QBInstaller.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\System.dll

atl.dll

c:\windows\system32\imageres.dll

uxtheme.dll

c:\windows\system32\imaadp32.acm

C:\Windows\system32\spool\DRIVERS\x64\3\FXSWZRD.DLL

Advapi32.DLL

UberIcon.dll

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\NSISdl.dll

C:\ProgramData\BrouwsEe2save\515f5b4a5a364.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\install.bmp

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.ENU

c:\windows\syswow64\ole32.dll

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\System.dll

c:\windows\system32\drivers\adpahci.sys

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\nsArray.dll

C:\DLL_Loader.exe

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm7E60.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\000a37d8.a

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\NSISdl.dll

c:\windows\system32\aelupsvc.dll

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\nsArray.dll

C:\Windows\system32\WINMM.dll

C:\Users\win7\AppData\Local\Temp\nsz7681.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsmE3A2.tmp\NSISdl.dll

AFFLIB.DLL

C:\Windows\System32\userinit.exe

C:\Users\win7\AppData\Local\Temp\nsr152F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\NSISdl.dll

jscript9.dll

C:\Users\win7\AppData\Local\Temp\nsb2DE7.tmp\NSISdl.dll

HID.dll

UIAutomationCore.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\botva2.dll

werui.dll

C:\Users\win7\AppData\Local\Temp\nsr6C43.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsz1AD7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\mchppIc.exe

shell32.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.dll

orcmn.dll

c:\windows\system32\wldap32.dll

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.EN

c:\windows\syswow64\msg711.acm

WSLib.dll

C:\Users\win7\AppData\Local\Temp\Report.ico

C:\Users\win7\AppData\Local\Temp\nsyA321.tmp\NSISdl.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\SimpleSC.dll

WINTRUST.dll

AdvApi32.dll

C:\Users\win7\AppData\Local\Temp\nsr90DC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsjC29C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\RUS\ChipsetRUS.dll

c:\windows\syswow64\wininet.dll

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsvB61D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.dll

c:\windows\syswow64\midimap.dll

C:\Users\win7\AppData\Local\Temp\is-J8BHU.tmp\sample.ENU

c:\users\win7\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.ENU

dxgi.dll

c:\windows\system32\ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.EN

c:\windows\system32\sbe.dll

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsp9949.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\nsArray.dll

C:\ProgramData\Soearcho--NewTeAb\515f05c5b9edb.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.EN

DDraw.dll

msls31.dll

oleaut32.dll

c:\windows\syswow64\difxapi.dll

C:\Users\win7\AppData\Local\Temp\nsx7FD6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf1C2F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr5EA6.tmp\NSISdl.dll

c:\windows\system32\ole32.dll

C:\Users\win7\AppData\Local\Temp\nsaF4CC.tmp\nsWeb.dll

CRYPTBASE.dll

API-MS-WIN-Service-Management-L2-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsgBB49.tmp\nsDialogs.dll

C:\DXGIDebug.dll

Clusapi.DLL

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.EN

iphlpapi.dll

gdi32

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\NSISdl.dll

ntshrui.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\SimpleSC.EN

pl_rsrc_english.dll

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\SimpleSC.ENU

c:\windows\system32\advapi32.dll

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\NSISdl.dll

api-ms-win-downlevel-shlwapi-l2-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.ENU

C:\Windows\system32\DXGIDebug.dll

rpcrt4.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\SimpleSC.EN

c:\windows\system32\msg711.acm

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsjA6FF.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\botva2.dll

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh20C2.tmp\NSISdl.dll

c:\windows\system32\rasplap.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsh7DA5.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsp842D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.dll

C:\sampleLOC.dll

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\nsArray.dll

Psapi.dll

C:\Users\win7\AppData\Local\Temp\nsr1619.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.ENU

MsiMsg.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm16E4.tmp\nsExec.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.dll

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\NSISdl.dll

c:\windows\system32\drivers\afd.sys

c:\windows\system32\napinsp.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq5CD1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\004cf347.a

c:\windows\system32\qasf.dll

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nstC9B5.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\000a397e.a

C:\Users\win7\AppData\Local\Temp\nso723E.tmp\nsWeb.dll

IPHLPAPI.DLL

C:\ProgramData\BBroowsee2save\515f52bb88489.dll

c:\windows\system32\vboxtray.exe

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\NSISdl.dll

WININET.dll

c:\windows\syswow64\clbcatq.dll

C:\Users\win7\AppData\Local\Temp\nsy25F8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy8F48.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsm1732.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsi26D2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\ButtonLinker.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nse29C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\CHT\ChipsetCHT.dll

C:\Windows\SysWOW64\ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsrD5FC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\ESP\ChipsetESP.dll

aida_icons2k.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

C:\Users\win7\AppData\Local\Temp\nsx7139.tmp\NSISdl.dll

winhttp.dll

C:\Windows\GeoOCX\WebCam\20090916\RPBAudio.ocx

C:\Windows\system32\MSVBVM60.DLL

C:\Users\win7\AppData\Local\Temp\nsb2ED1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.EN

C:\Windows\system32\D3D10Warp.dll

c:\windows\system32\drivers\agp440.sys

C:\Users\win7\AppData\Local\Temp\nsyCAD5.tmp\NSISdl.dll

C:\Windows\system32\IconCodecService.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\_isetup\_shfoldr.dll

c:\windows\system32\winrnr.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.EN

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\NSISdl.dll

C:\Windows\System32\wship6.dll

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsuA912.tmp\SimpleSC.dll

C:\Windows\system32\iphlpapi.dll

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEOLOC.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.ENU

kernel256

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa7626.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsg7ACE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\nsArray.dll

C:\Windows\SysWOW64\NETAPI32.DLL

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\ITA\ChipsetITA.dll

C:\Users\win7\AppData\Local\Temp\nsu8F4C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfF539.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\System.dll

wmvcore.dll

C:\Users\win7\Documents\MSDCSC\msdcsc.ENU

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsh21AD.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\NSISdl.dll

OLEPRO32.DLL

RichEd20.DLL

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\PLK\ChipsetPLK.dll

C:\Users\win7\AppData\Local\Temp\nsy7596.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\nsArray.dll

MsVfW32.dll

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nscA033.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2FCB.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\inetc.dll

C:\Users\win7\AppData\Local\Temp\nsw2EB2.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\NSISdl.dll

c:\windows\syswow64\imagehlp.dll

C:\Users\win7\AppData\Local\Temp\nsq1EDE.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg84CC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\System.dll

HHCtrl.OCX

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn3133.tmp\System.dll

IDAPI32.DLL

c:\windows\syswow64\wldap32.dll

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\nsArray.dll

c:\windows\system32\psapi.dll

C:\Users\win7\AppData\Local\Temp\GLK76A3.tmp

c:\windows\system32\mscoree.dll

kernel32

C:\Windows\system32\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nsm23E4.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.EN

C:\Windows\system32\kernel32.dll

gdiplus

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\SimpleSC.dll

ADVAPI32.DLL

C:\Windows\SysWOW64\DDRAW.dll

C:\Users\win7\AppData\Local\Temp\nsi3EB0.tmp\AdvSplash.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.dll

c:\windows\system32\cmd.exe

secur32.dll

c:\windows\system32\drivers\acpi.sys

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\System.dll

c:\windows\system32\drivers\adp94xx.sys

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\Ksicfg.ENU

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\System.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\\wminet_utils.dll

././nme.ndll

C:\Users\win7\AppData\Local\Temp\nst58AB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss559E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.ENU

c:\windows\system32\setupapi.dll

C:\Users\win7\AppData\Local\Temp\is-VLONM.tmp\_isetup\_isdecmp.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsi190A.tmp\System.dll

iertutil.dll

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\SimpleSC.EN

C:\Windows\SysWOW64\cryptnet.dll

C:\Users\win7\AppData\Local\Temp\nsb2D4B.tmp\nsWeb.dll

C:\Windows\system32\spool\DRIVERS\x64\3\unidrv.hlp

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.EN

C:\Windows\System32\msxml3r.dll

C:\KRenameShell.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Text Asset.x32

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\Scan.ico

shlwapi

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsk4343.tmp\KillProcDLL.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\System.dll

c:\windows\system32\msacm32.drv

c:\windows\syswow64\sechost.dll

c:\windows\syswow64\msadp32.acm

c:\windows\system32\msvidctl.dll

C:\Users\win7\AppData\Local\Temp\nsh7DF3.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nst2711.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nspB38C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\System.dll

c:\windows\system32\tsbyuv.dll

c:\windows\system32\msrle32.dll

Wtsapi32.dll

c:\windows\system32\userinit.exe

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\System.dll

SensApi.dll

C:\Windows\System32\rdpclip.exe

C:\Users\win7\AppData\Local\Temp\nsr1493.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\System.dll

c:\windows\syswow64\tsbyuv.dll

c:\windows\system32\imm32.dll

C:\Windows\System32\MsAudio.ocx

C:\Users\win7\AppData\Local\Temp\nss55EB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.dll

Secur32.dll

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.EN

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsp1CFF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.ENU

C:\Windows\system32\spool\DRIVERS\x64\3\unidrvui.dll

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.ENU

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\CTOSChk.exe

C:\Users\win7\AppData\Local\Temp\nsz78A3.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\ci0-temp\AlexaBooster.set

C:\Users\win7\AppData\Local\Temp\nsw6B78.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc218E.tmp\StdUtils.dll

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\GDIPLUS.DLL

C:\Windows\system32\spool\DRIVERS\x64\3\FXSTIFF.DLL

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\4b335bfaa07fc54f2d72213d33f53e97\System.Data.ni.dll

MSWSOCK.dll

Wintrust.dll

KERNEL32.dll

C:\Users\win7\AppData\Local\Temp\nsk8D58.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsmA023.tmp\NSISdl.dll

c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini

C:\Windows\system32\EhStorShell.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\SimpleSC.ENU

wtsapi32.dll

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\NSISdl.dll

ntdll.dll

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\nsArray.dll

C:\Windows\system32\VB6DE.DLL

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsx9767.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsg6E82.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsh86A0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.dll

AVICAP32.DLL

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f45bc0251cceb599622f55cc1c7f4aba\System.Transactions.ni.dll

C:\Users\win7\AppData\Local\Temp\nsc2229.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm39A9.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.EN

srvcli.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.dll

PSAPI.DLL

C:\Windows\SysWOW64\bcryptprimitives.dll

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\Base64.dll

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk5A41.tmp\NSISdl.dll

kernel32

Rstrtmgr.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\nsArray.dll

c:\windows\system32\difxapi.dll

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.dll

C:\UNZDLL.DLL

C:\Users\win7\AppData\Local\Temp\is-NAM86.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsj17C4.tmp\NSISdl.dll

Sage.DLL

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\NSISdl.dll

RTUTILS.DLL

C:\Users\win7\AppData\Local\Temp\nsa8374.tmp\nsWeb.dll

CABINET

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\UserInfo.dll

c:\windows\system32\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\nsArray.dll

CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss6E66.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nst76AF.tmp\nsArray.dll

Cabinet.dll

C:\Users\win7\AppData\Local\Temp\nsl1D39.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq784D.tmp\NSISdl.dll

C:\CFVS_HookDll.dll

D3D10Warp.dll

C:\Users\win7\AppData\Local\Temp\nsz8333.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsm2FAC.tmp\System.dll

psapi.dll

SETUPAPI.DLL

C:\Windows\SysWOW64\DUser.dll

C:\Windows\GeoOCX\WebCam\20090916\GVMegaPixelViewerLOC.dll

C:\Users\win7\AppData\Local\Temp\nsc1790.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsk1BB2.tmp\NSISdl.dll

C:\multisearchbar.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\abecd46ce0b212dad31a9e8f9adf073f\System.EnterpriseServices.ni.dll

C:\Users\win7\AppData\Local\Temp\nsc2FBC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw229C.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\HEB\ChipsetHEB.dll

C:\Users\win7\AppData\Local\Temp\nsgD1D8.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\SimpleSC.ENU

C:\Windows\system32\sfc.dll

NTDLL

mpr.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\DAN\ChipsetDAN.dll

C:\Windows\system32\vb6chs.dll

C:\Users\win7\AppData\Local\Temp\nsb1ECF.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsv516D.tmp\NSISdl.dll

c:\python27\dlls\py.ico

C:\Users\win7\AppData\Local\Temp\nsk86CB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.EN

c:\windows\system32\drivers\1394ohci.sys

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsmA33E.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr9E6E.tmp\NSISdl.dll

c:\windows\system32\vboxmrxnp.dll

Wship6.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\FRA\ChipsetFRA.dll

C:\Users\win7\AppData\Local\Temp\GLKFD8.tmp

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\nsArray.dll

C:\sa.dll

C:\CFVS_Injector.exe

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.ENU

NTDLL.dll

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\System.dll

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

C:\PROGRA~2\WMACON~1\settings.ini

C:\Users\win7\AppData\Local\Temp\nsm2EC2.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsa1FFC.tmp\StdUtils.dll

WSOCK32.dll

C:\Users\win7\AppData\Local\Temp\nsi70E6.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\RarSFX0\VjxjVBc.exe

C:\Users\win7\AppData\Local\Temp\nsrACF5.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiB060.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsk1EB4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsm7CD9.tmp\UserInfo.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsg1E51.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.EN

fnsSkinx.dll

SHFOLDER

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\nsArray.dll

WS2_32

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\TextXtra.x32

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-KJ4HI.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsq7C0E.tmp\SimpleSC.EN

C:\Windows\system32\ebkp.dll

UxTheme.dll

SetupApi.DLL

C:\Users\win7\AppData\Local\Temp\nsg2DB8.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy8AF5.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\nsArray.dll

libnspr4.dll

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.ENU

C:\Windows\SysWOW64\msi.dll

oleacc.dll

C:\Users\win7\AppData\Local\Temp\nso5FD6.tmp\SimpleSC.EN

C:\Windows\system32\Comcat.dll

C:\Users\win7\AppData\Local\Temp\is-A86TG.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsj8371.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw399A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\proj.dll

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-1M7DH.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\System.dll

kernel32.DLL

C:\Users\win7\AppData\Local\Temp\nsd6F41.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\System.dll

C:\Windows\system32\napinsp.dll

C:\32788R22FWJFW\swreg.EN

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\nsArray.dll

smime3.dll

C:\Users\win7\AppData\Local\Temp\nsa1D48.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\ci0-temp\logo.bmp

C:\Users\win7\AppData\Local\Temp\nsf44AB.tmp\Processes.dll

Kernel32.DLL

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc878.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.EN

c:\windows\system32\msadp32.acm

C:\Users\win7\AppData\Local\Temp\nsj7ED1.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsy7C6F.tmp\NSISdl.dll

C:\Windows\winhlp32.exe

C:\sample.

C:\Users\win7\AppData\Local\Temp\nsk86CC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv1EA5.tmp\SimpleSC.EN

DUser.dll

mdmins32.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\NOR\ChipsetNOR.dll

c:\windows\syswow64\msvidc32.dll

C:\Users\win7\AppData\Local\Temp\nss95B4.tmp\SimpleSC.EN

API-MS-Win-Security-LSALookup-L1-1-0.dll

c:\windows\system32\comdlg32.dll

OPENGL32

C:\Users\win7\AppData\Local\Temp\nsn8BFD.tmp\SimpleSC.dll

api-ms-win-downlevel-advapi32-l2-1-0.dll

ntdll

d3d11.dll

c:\windows\system32\usp10.dll

C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll

GDIPlus

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\System.dll

c:\windows\syswow64\msctf.dll

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.EN

C:\Windows\SysWOW64\SCHTASKS.exe

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\ithttp.dll

c:\windows\system32\ws2_32.dll

c:\windows\system32\drivers\aliide.sys

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\System.dll

c:\windows\syswow64\iccvid.dll

oledlg.dll

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\nsArray.dll

opengl32.dll

c:\windows\syswow64\ws2_32.dll

C:\Users\win7\AppData\Local\Temp\nsrEE5B.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.dll

VBoxOGL.dll

c:\windows\syswow64\nsi.dll

avifil32.dll

C:\Windows\system32\imageres.dll

C:\Users\win7\AppData\Local\Temp\nsa41D8.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-JR7C5.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nszA5E1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\Cleaning.ico

C:\Users\win7\AppData\Local\Temp\nsiA311.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv4429.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\nsArray.dll

C:\Windows\syswow64\CRYPT32.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.EN

msvcrt

DMDskRes.dll

C:\Users\win7\AppData\Local\Temp\nsa7AC6.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\SimpleSC.ENU

C:\Windows\system32\spool\DRIVERS\x64\3\FXSUI.DLL

C:\Users\win7\AppData\Local\Temp\nso26A4.tmp\SimpleSC.EN

C:\Windows\system32\Oleacc.dll

NETAPI32.dll

C:\Users\win7\AppData\Local\Temp\nsn9595.tmp\Processes.dll

Atl71.dll

c:\windows\syswow64\msrle32.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsl5ED4.tmp\NSISdl.dll

C:\Windows\system32\spool\DRIVERS\x64\3\FXSAPI.DLL

c:\windows\system32\iyuv_32.dll

C:\Users\win7\AppData\Local\Temp\is-J8BHU.tmp\sample.EN

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsc94BA.tmp\NSISdl.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\StdUtils.dll

USER32

c:\windows\system32\nlaapi.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nse1C71.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-S45LH.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\ELL\ChipsetELL.dll

C:\Users\win7\AppData\Local\Temp\is-36CJS.tmp\_isetup\_shfoldr.dll

c:\windows\system32\sechost.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\botva2.dll

WINHTTP.dll

Ole32

C:\Users\win7\AppData\Local\Temp\nsw2E15.tmp\UserInfo.dll

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2ENU.dll

C:\Users\win7\AppData\Local\Temp\nsa2BC4.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsg1FD8.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsh7D56.tmp\nsArray.dll

C:\Windows\System32\drprov.dll

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.ENU

MediaInfo.dll

C:\Users\win7\AppData\Local\Temp\is-Q8QEV.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\LangDLL.dll

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.dll

tmplugin.dll

c:\windows\system32\wsdmon.dll

C:\Users\win7\AppData\Local\Temp\nsr4717.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\is-C85U7.tmp\_isetup\_shfoldr.dll

C:\Windows\system32\twext.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\CSY\ChipsetCSY.dll

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg1DB6.tmp\nsArray.dll

c:\windows\system32\msv1_0.dll

C:\Users\win7\AppData\Local\Temp\nso71A2.tmp\NSISdl.dll

user32

C:\Users\win7\AppData\Local\Temp\nswD479.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsb21D1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\NSISdl.dll

msdmo.dll

C:\Windows\system32\ExplorerFrame.dll

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsv7A59.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsf795F.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsfB523.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\SimpleSC.ENU

C:\Windows\system32\asycfilt.dll

C:\Users\win7\AppData\Local\Temp\nsc7BA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\PB7DC5.tmp

C:\Users\win7\AppData\Local\Temp\nsp1E37.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx23D5.tmp\nsArray.dll

gdi32.DLL

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.ENU

riched20.dll

C:\Users\win7\AppData\Local\Temp\nsb4533.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso8AB8.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsgC3AA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg2C80.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.dll

C:\Windows\GeoOCX\WebCam\20090916\IA_VIDEOENU.dll

C:\Windows\system32\networkexplorer.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsm7EFC.tmp\SimpleSC.EN

C:\Windows\system32\spool\DRIVERS\x64\3\FXSDRV.DLL

C:\Windows\GeoOCX\WebCam\20090916\eMapView.ocx

C:\Users\win7\AppData\Local\Temp\nsq1D0A.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nst89EC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr2F7D.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsw7C7C.tmp\NSISdl.dll

DWrite.dll

c:\windows\syswow64\normaliz.dll

C:\Users\win7\AppData\Local\Temp\nsc3142.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.EN

MSIMG32.dll

C:\Users\win7\AppData\Local\Temp\nse6637.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.dll

.\bin\InstallerDlg.dll

C:\Windows\System32\wshtcpip.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.ENU

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll

C:\Users\win7\AppData\Local\Temp\nse8C9B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb7B63.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl1E23.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso282A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nskB31F.tmp\NSISdl.dll

security.dll

C:\Users\win7\AppData\Local\Temp\nsk377C.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nso27DC.tmp\nsArray.dll

WINSPOOL.DRV

C:\Users\win7\AppData\Local\Temp\nsaCE68.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsg2E54.tmp\SimpleSC.EN

c:\windows\system32\credssp.dll

ieframe.dll

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.EN

icm32.dll

USERENV.dll

user32

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\CallbackCtrl.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\Uninstall.ico

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\CallbackCtrl.dll

midimap.dll

C:\CnCerT.Net.SKiller.exe

C:\Users\win7\AppData\Local\Temp\nsb4835.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw9718.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsm7EAE.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsd257B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.dll

olepro32.dll

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn1711.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\AdvSplash.dll

C:\multisearchbarside.dll

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsf9226.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsl29EA.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.dll

././nme.dll

c:\windows\system32\shlwapi.dll

C:\Users\win7\AppData\Local\Temp\scratch.bat

C:\Windows\system32\Msimtf.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\nsArray.dll

userenv.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\NLD\ChipsetNLD.dll

SETUPAPI.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll

c:\windows\system32\msdrm.dll

C:\Users\win7\AppData\Local\Temp\nsy2694.tmp\NSISdl.dll

crypt32.dll

C:\Users\win7\Documents\MSDCSC\msdcsc.EN

C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\12dc10e5c0e8d176cf21a16a6fc5fc3b\Microsoft.VisualBasic.ni.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.ENU

c:\windows\system32\iertutil.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsu8CFA.tmp\nsArray.dll

mscorsec.dll

c:\windows\system32\mshtml.dll

C:\Users\win7\AppData\Local\Temp\nsc7B08.tmp\NSISdl.dll

c:\windows\system32\localspl.dll

C:\Users\win7\AppData\Local\Temp\nsc20F2.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsi3D34.tmp\NSISdl.dll

C:\Windows\System32\perfos.dll

C:\Users\win7\AppData\Local\Temp\nsz2A5F.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\Font Asset.x32

C:\Users\win7\AppData\Local\Temp\nsu7799.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsh223F.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsdB20B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa2C60.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\000a3d85.a

DSOUND.dll

C:\Windows\System32\appidpolicyconverter.exe

C:\Users\win7\AppData\Local\Temp\nsc230A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse2888.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj71D1.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsc16F4.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nst899E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskCCD2.tmp\System.dll

shell32

C:\Users\win7\AppData\Local\Temp\nsl2C9F.tmp\nsArray.dll

GUILib.dll

COMCTL32.dll

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp1D4D.tmp\SimpleSC.ENU

shdocvw.dll

c:\windows\system32\appidpolicyconverter.exe

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.EN

ws2_32.dll

c:\windows\system32\pnrpnsp.dll

pstorec.dll

C:\Windows\SysWOW64\schtasks.exe

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsr20B2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsmC906.tmp\SimpleSC.ENU

C:\Windows\system32\Olepro32.dll

c:\windows\syswow64\urlmon.dll

C:\Users\win7\AppData\Local\Temp\nsp794E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr1F7B.tmp\StdUtils.dll

dhcpcsvc.DLL

c:\windows\system32\urlmon.dll

c:\windows\system32\vaultcredprovider.dll

C:\Users\win7\AppData\Local\Temp\nsg6866.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss7FB7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsn2607.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsy1A30.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsk7894.tmp\NSISdl.dll

BubbleBound.gam

C:\Users\win7\AppData\Local\Temp\nse7338.tmp\SimpleSC.dll

C:\Windows\system32\spool\DRIVERS\x64\3\XPSSVCS.DLL

C:\Users\win7\AppData\Local\Temp\004cf942.a

C:\Users\win7\AppData\Local\Temp\nsf1CCB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh6D3D.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nstDAFD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa330E.tmp\System.dll

DEVRTL.dll

C:\Users\win7\AppData\Local\Temp\nsn7A19.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsjB723.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\SimpleSC.EN

PSAPI.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en-US\mscorrc.dll

COMCTL32

C:\Users\win7\AppData\Local\Temp\nsq76D2.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa73C0.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\TempFolder.aaa\xtras\BUDAPI.X32

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\nsArray.dll

C:\Windows\System32\msxml6r.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\Ksicfg.ENU

imageres.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\CHS\ChipsetCHS.dll

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc2358.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\botva2.dll

API-MS-Win-Security-SDDL-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nss6FEC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\System.dll

KERNEL32

C:\Users\win7\AppData\Local\Temp\nsv751C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nso2273.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy7192.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsiCBAF.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy90EA.tmp\SimpleSC.ENU

Riched32.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nst41CF.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\is-BOPSL.tmp\beepdl.dll

C:\Users\win7\AppData\Local\Temp\nsw852A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\System.dll

C:\BZIP2.DLL

C:\Windows\GeoOCX\WebCam\20090916\POSLiveViewX_8198.ocx

C:\Users\win7\AppData\Local\Temp\nso4E8D.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsb2D07.tmp\Processes.dll

IEFRAME.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\KOR\ChipsetKOR.dll

C:\Users\win7\AppData\Local\Temp\nss7ACA.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nstE5A0.tmp\NSISdl.dll

c:\windows\system32\user32.dll

C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

C:\Users\win7\AppData\Local\Temp\is-3IOQ3.tmp\_isetup\_shfoldr.dll

C:\Users\win7\AppData\Local\Temp\nsa36FA.tmp\StdUtils.dll

LZ32.DLL

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd8219.tmp\SimpleSC.ENU

c:\windows\syswow64\user32.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsa395F.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\PtzStick_ParserENU.dll

MPR.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsa1C10.tmp\nsWeb.dll

USeR32

C:\Users\win7\AppData\Local\Temp\nsc13AE.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsh3BAC.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr3019.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsc9F98.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsw7D18.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-779AA.tmp\Ksicfg.EN

OLEACC.DLL

MFC42.DLL

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll

C:\Users\win7\AppData\Local\Temp\nsb204B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nst8DF1.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\nsArray.dll

KeRnEl32

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\nsArray.dll

CRYPTSP.dll

C:\Users\win7\AppData\Local\Temp\nss8054.tmp\System.dll

c:\windows\system32\smartcardcredentialprovider.dll

C:\Users\win7\AppData\Local\Temp\nspB916.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\Creative_ALchemy_AL6_Cleanup.0001.dir.0000\~df394b.tmp

C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nseBF64.tmp\NSISdl.dll

DINPUT.DLL

C:\Users\win7\AppData\Local\Temp\nsi246C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\System.dll

c:\windows\system32\gdi32.dll

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\InstallOptions.dll

C:\Users\win7\AppData\Local\Temp\nse2972.tmp\NSISdl.dll

C:\Windows\system32\Asycfilt.dll

C:\Users\win7\AppData\Local\Temp\nsa85A4.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nst1B49.tmp\nsArray.dll

ncrypt.dll

C:\Users\win7\AppData\Local\Temp\nsl7B53.tmp\SimpleSC.EN

C:\Windows\System32\kernel32.dll

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\NSISdl.dll

newdev.dll

C:\Users\win7\AppData\Local\Temp\nss80A2.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsqDF2.tmp\NSISdl.dll

SetupApi.dll

C:\Users\win7\AppData\Local\Temp\nsi3082.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr397B.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsz9033.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsq7720.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nswC408.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nse73D4.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\is-JR7C5.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nslAE1B.tmp\SimpleSC.dll

C:\1033\\ImageGenRes.dll

C:\Users\win7\AppData\Local\Temp\nslB62D.tmp\Processes.dll

C:\Windows\system32\spool\DRIVERS\x64\3\FXSRES.DLL

C:\Users\win7\AppData\Local\Temp\GLCE8F.tmp

C:\Users\win7\AppData\Local\Temp\nsz8FE5.tmp\nsArray.dll

KerNel32

\\?\C:\sample

C:\Users\win7\AppData\Local\Temp\nst1AFB.tmp\SimpleSC.dll

C:\ProgramData\Barowasse2saave\515f05ca0c06e.dll

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd18C9.tmp\nsArray.dll

c:\windows\syswow64\imaadp32.acm

C:\Users\win7\AppData\Local\Temp\nso28C6.tmp\NSISdl.dll

C:\Windows\system32\pnrpnsp.dll

C:\Users\win7\AppData\Local\Temp\nsx16D5.tmp\lxdl.dll

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.ENU

FoxSDKU32w.dll

PROPSYS.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.EN

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsz58CB.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd70C7.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\FsmSetup\Install.EN

C:\Users\win7\AppData\Local\Temp\nsc6DB9.tmp\nsArray.dll

NTDLL.DLL

C:\Users\win7\AppData\Local\Temp\nsi2F54.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsg6C03.tmp\SimpleSC.ENU

c:\windows\syswow64\shlwapi.dll

C:\Users\win7\AppData\Local\Temp\nse8B64.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsf7910.tmp\UserInfo.dll

c:\windows\system32\davclnt.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.EN

NSI.dll

C:\Users\win7\AppData\Local\Temp\nst3E5D.tmp\Processes.dll

C:\Users\win7\AppData\Local\Temp\nsy92DC.tmp\SimpleSC.ENU

MSISIP.DLL

C:\Users\win7\AppData\Local\Temp\nsa7A29.tmp\nsRandom.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsa7674.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsmC422.tmp\SimpleSC.EN

c:\windows\syswow64\rpcrt4.dll

C:\Users\win7\AppData\Local\Temp\nsx6F21.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.ENU

GLU32.dll

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsxAE9B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsv7607.tmp\SimpleSC.dll

c:\windows\system32\rpcrt4.dll

C:\Users\win7\AppData\Local\Temp\nsh4855.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\SimpleSC.EN

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\shell32.dll

C:\Windows\SysWOW64\USER32.DLL

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdrv.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr7990.tmp\NSISdl.dll

MLANG.dll

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\System.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\63e9d5c341d64a753cde97f5a3d65c71\System.Core.ni.dll

C:\Users\win7\AppData\Local\Temp\nsp1CFE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsl2B70.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsg11A0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\21f876e85bfaa433a999a410eda373bc\System.Web.ni.dll

C:\Users\win7\AppData\Local\Temp\nsh8C2A.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsj1BF5.tmp\SimpleSC.dll

c:\windows\syswow64\msacm32.drv

C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18834_none_72d38c5186679d48\gdiplus.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\SimpleSC.EN

C:\Windows\system32\spool\DRIVERS\x64\3\STDDTYPE.GDL

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll

C:\Users\win7\AppData\Local\Temp\nsy4046.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nss1926.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq1DA6.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx2FEB.tmp\SimpleSC.EN

C:\Windows\system32\spool\DRIVERS\x64\3\mxdwdui.gpd

MAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nsw20D2.tmp\SimpleSC.dll

C:\Windows\explorer.exe

C:\Users\win7\AppData\Local\Temp\000a3528.a

msacm32.drv

C:\Users\win7\AppData\Local\Temp\nsz32B5.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nspA63F.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nshF05B.tmp\2c373164-efdd-4a23-bcae-d359c2f35578.dll

C:\Users\win7\AppData\Local\Temp\nsw7C2E.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsc30F4.tmp\SimpleSC.ENU

C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll

C:\Users\win7\AppData\Local\Temp\nsfEA73.tmp\NSISdl.dll

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\en\mscorrc.dll

C:\Users\win7\AppData\Local\Temp\nst703B.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsw892E.tmp\System.dll

advapi32

Shell32.dll

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsj350B.tmp\4f6ea680-bfc5-40ae-80ef-f992aa74653f.dll

API-MS-WIN-DOWNLEVEL-SHLWAPI-L1-1-0.DLL

dwrite.dll

C:\PROGRA~2\WMACON~1\wma.cnt

C:\Users\win7\AppData\Local\Temp\nsyB022.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nszE55B.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsy8921.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsh2EF1.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsr2E93.tmp\StdUtils.dll

C:\Users\win7\AppData\Local\Temp\nsg7C6C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsc8C0C.tmp\nsisdl.dll

C:\Users\win7\AppData\Local\Temp\nsi5697.tmp\nsJSON.dll

c:\windows\system32\qdv.dll

C:\Users\win7\AppData\Local\Temp\nsj726D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nst2675.tmp\NSISdl.dll

WSOCK32

C:\Windows\syswow64\MSCTF.dll

OLEACCRC.DLL

C:\Users\win7\AppData\Local\Temp\is-A86TG.tmp\sample.ENU

c:\windows\syswow64\gdi32.dll

C:\Users\win7\AppData\Local\Temp\nsu96A9.tmp\NSISdl.dll

C:\Windows\system32\RICHED20.DLL

User32.DLL

C:\Users\win7\AppData\Local\Temp\nsw4FAE.tmp\nsArray.dll

C:\Windows\SysWOW64\TSAPPCMP.DLL

c:\windows\system32\shell32.dll

C:\Users\win7\AppData\Local\Temp\nss1752.tmp\NSISdl.dll

NETAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nsw2164.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsy8713.tmp\nsArray.dll

c:\windows\system32\rdpclip.exe

C:\Users\win7\AppData\Local\Temp\nsd1917.tmp\north.exe

C:\Users\win7\AppData\Local\Temp\nsg206A.tmp\InstallOptions.dll

rsaenh.dll

uSeR32

API-MS-WIN-Service-Management-L1-1-0.dll

C:\Users\win7\AppData\Local\Temp\nsu717E.tmp\System.dll

c:\windows\syswow64\advapi32.dll

C:\Users\win7\AppData\Local\Temp\nsg201B.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsj1BA7.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\UserInfo.dll

nss3.dll

C:\Users\win7\AppData\Local\Temp\nsa1F60.tmp\nsArray.dll

C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

C:\Windows\System32\VBoxTray.exe

c:\windows\system32\msgsm32.acm

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.dll

C:\Windows\System32\ntlanman.dll

C:\Users\win7\AppData\Local\Temp\nsv2B09.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\GLC744F.tmp

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\SimpleSC.EN

C:\Windows\system32\VBoxMRXNP.dll

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHMX.GDL

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsf1D5C.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsr2EE1.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsi1A20.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsu83FE.tmp\NSISdl.dll

cscapi.dll

C:\Users\win7\AppData\Local\Temp\nse724E.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nss22D5.tmp\NSISdl.dll

c:\windows\system32\schannel.dll

C:\Users\win7\AppData\Local\Temp\nsv2C41.tmp\nsArray.dll

Comctl32.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\PTG\ChipsetPTG.dll

C:\Users\win7\AppData\Local\Temp\nsfC49.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsn31CF.tmp\SimpleSC.ENU

divxdec.ax

C:\Users\win7\AppData\Local\Temp\nsc6EA4.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsd3015.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsw9592.tmp\System.dll

C:\Windows\system32\DUser.dll

C:\Users\win7\AppData\Local\Temp\nsl2C03.tmp\StdUtils.dll

oleaut32

sxs.dll

C:\Users\win7\AppData\Local\Temp\nstF103.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsd8D93.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\is-UILRL.tmp\Ksicfg.ENU

C:\PROGRA~2\WMACON~1\WMA-SH~1.EXE

C:\Users\win7\AppData\Local\Temp\nsf79FB.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsz7EE1.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsu25A0.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nss3104.tmp\NSISdl.dll

/":

C:\Users\win7\AppData\Local\Temp\nsh2027.tmp\System.dll

RichEd20.dll

C:\Users\win7\AppData\Local\Temp\nsz18BE.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskB7C0.tmp\nsArray.dll

DNSAPI.dll

C:\Windows\SysWOW64\KERNEL32.DLL

C:\Users\win7\AppData\Local\Temp\nsuB3F9.tmp\nsJSON.dll

C:\Users\win7\AppData\Local\Temp\is-1M7DH.tmp\sample.ENU

C:\Users\win7\AppData\Local\Temp\nsx250D.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsc3058.tmp\nsArray.dll

c:\windows\system32\msyuv.dll

C:\Users\win7\AppData\Local\Temp\nsb8410.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nswAEF6.tmp\NSISdl.dll

C:\Windows\GeoOCX\WebCam\20090916\RPB_8300.ocx

C:\Users\win7\AppData\Local\Temp\nsk1DCA.tmp\DXGIDebug.dll

C:\Users\win7\AppData\Local\Temp\nsl4DF3.tmp\SimpleSC.EN

commonlib.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\SimpleSC.ENU

HID.DLL

C:\Windows\GeoOCX\WebCam\20090916\GeoDDrawV2LOC.dll

C:\Users\win7\AppData\Local\Temp\nsz417F.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\nsh54C2.tmp\NSISdl.dll

inetmib1.dll

C:\Users\win7\AppData\Local\Temp\nsa753C.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\is-BKLMT.tmp\ithttp.dll

C:\Users\win7\AppData\Local\Temp\nskA7A6.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp81FD.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nse8250.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsq829A.tmp\System.dll

SspiCli.dll

C:\Users\win7\AppData\Local\Temp\nsv1D77.tmp\nsWeb.dll

C:\Users\win7\AppData\Local\Temp\is-280BG.tmp\_isetup\_shfoldr.dll

c:\windows\syswow64\msgsm32.acm

C:\Windows\system32\spool\DRIVERS\x64\3\STDSCHEM.GDL

C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

C:\ProgramData\Barowasse2saave\515f05cb47a1c.dll

C:\Windows\system32\security.dll

C:\Windows\GeoOCX\WebCam\20090916\GvCryptoLOC.dll

C:\Windows\system32\syncui.dll

WINTRUST.DLL

C:\Users\win7\AppData\Local\Temp\nsm225E.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsaE650.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss4B52.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsy247C.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nsjF08F.tmp\NSISdl.dll

aida_icons7.dll

C:\Users\win7\AppData\Local\Temp\nsm6D0E.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nskB80E.tmp\nsArray.dll

c:\windows\syswow64\oleaut32.dll

C:\Users\win7\AppData\Local\Temp\nsh6CEF.tmp\NSISdl.dll

Kernel32

C:\Users\win7\AppData\Local\Temp\nss17EE.tmp\SimpleSC.ENU

C:\Users\win7\AppData\Local\Temp\nsq4F84.tmp\nsExec.dll

IMM32.dll

C:\ekrnLang.dll

RICHED32.DLL

C:\Windows\system32\gdi32.dll

C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\comctl32.dll

c:\windows\system32\drprov.dll

C:\Users\win7\AppData\Local\Temp\nsi324C.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nseB5CC.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsnBEC5.tmp\nsWeb.dll

c:\windows\system32\biocredprov.dll

C:\Users\win7\AppData\Local\Temp\nsk9246.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsr2F2F.tmp\nsArray.dll

VmX.dll

c:\windows\system32\nsi.dll

C:\Users\win7\AppData\Local\Temp\nsp799D.tmp\NSISdl.dll

propsys

C:\Users\win7\AppData\Local\Temp\nsv3915.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nsnB3E7.tmp\nsArray.dll

C:\Users\win7\AppData\Local\Temp\nse1C72.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsk3479.tmp\NSISdl.dll

quartz.dll

C:\Users\win7\AppData\Local\Temp\nssAD44.tmp\NSISdl.dll

C:\Users\win7\AppData\Local\Temp\nsx255B.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nss31EE.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsf7422.tmp\UserInfo.dll

C:\ProgramData\BBroowsee2save\515f52b8125e4.dll

C:\Windows\system32\ntdll.dll

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll

CABINET.DLL

C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll

C:\Users\win7\AppData\Local\Temp\nsp2883.tmp\SimpleSC.EN

C:\Users\win7\AppData\Local\Temp\nshC833.tmp\SimpleSC.dll

C:\Users\win7\AppData\Local\Temp\nsb1CB7.tmp\NSISdl.dll

OPENGL32.dll

C:\Users\win7\AppData\Local\Temp\IPMx2\Lang\CHIP\ARA\ChipsetARA.dll

c:\windows\system32\wdigest.dll

RichEd20

C:\Windows\GeoOCX\WebCam\20090916\ImageGUIENU.dll

C:\Windows\SysWOW64\ADVAPI32.DLL

C:\Users\win7\AppData\Local\Temp\nso34DC.tmp\System.dll

C:\Users\win7\AppData\Local\Temp\nsp8601.tmp\SimpleSC.dll

C:\Windows\system32\ws2_32

C:\Users\win7\AppData\Local\Temp\nsbC511.tmp\nsArray.dll

Gdiplus.dll

Precise Detectors Analysis Results

No Detector Result Received

Advance Heuristics

No Advanced Heuristic Analysis Result Received

Property	Value
compilation time stamp	0x560574C7 [Fri Sep 25 16:22:31 2015 UTC]
entry point	0x414d61 (.text)
file size	185658
machine type	Intel 386 or later - 32Bit
mime type	application/x-dosexec
number of sections	4
sha256	d69e70071d631ecc5269f064db0a4fe091e31d5f32f75f339175177bd2b411c0

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	MD5
.text	0x1000	0x1e9fa	0x1ea00	6.748426	-
.data	0x20000	0x2460	0x1400	4.649987	-
.rsrc	0x23000	0x1c8	0x200	2.692508	-
.reloc	0x24000	0x3ad8	0x3c00	6.181328	-

Loading...

Valkyrie Final Verdict

File Name: 6df071963b8025beeb1bbac9b57ef0d7c7f7bf2a

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: 6df071963b8025beeb1bbac9b57ef0d7c7f7bf2a

MD5: 4996fe396abf69522dba0efad2d622a6

First Seen Date: 2015-09-28 19:10:17 ( 9 year(s) 9 month(s) 12 day(s) ago )

Number of Clients Seen: 12

Last Analysis Date: 2016-04-13 12:45:04 ( 9 year(s) 2 month(s) 25 day(s) ago )

Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.

Verdict Source: Signature Based Detection

Analysis Summary

Static Analysis

Anti-debug calls

Dynamic Analysis

6df071963b8025beeb1bbac9b57ef0d7c7f7bf2a tried to connect to some addresses pinned on the map below (click pins for more details):

Behavioral Information

QueryProcessAddress

QueryFilePath

LoadLibrary

Precise Detectors Analysis Results

No Detector Result Received

Advance Heuristics

No Advanced Heuristic Analysis Result Received

Additional File Information

Vendor Validation - Vendor Validation is not Applicable

Certificate Validation - Certificate Validation is not Applicable

PE Headers

PE Sections