@Win4% 00 c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllh shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllO c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll c:\windows\system32\imageres.dll\ c:\windows\system32\imageres.dll] c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll c:\windows\system32\imageres.dll shell32.dllw shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll c:\windows\system32\imageres.dllc c:\windows\system32\imageres.dll"%systemroot%\system32\svrmgrnc.dll;%systemroot%\system32\windowspowershell\v1.0\powershell.exe%windir%\explorer.exeA*c:\program files\pdfcreator\pdfcreator.exeA9c:\program files (x86)\filezilla ftp client\filezilla.exeA>c:\program files (x86)\str\crystalwebviewerurl\crurlconfig.exeIc:\windows\installer\{ac76ba86-7ad7-1036-7b44-ac0f074e4100}\sc_reader.ico imageres.dll= imageres.dllA shell32.dll imageres.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll imageres.dllJ imageres.dllK imageres.dllI imageres.dllH imageres.dllE imageres.dll$ imageres.dllF imageres.dllD imageres.dllC imageres.dllB imageres.dll& shell32.dllP shell32.dllu shell32.dll shell32.dllv imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllH c:\windows\system32\imageres.dllC c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllIc:\windows\explorer.exe c:\windows\system32\imageres.dllAc:\m.exec:\windows\system32\zipfldr.dll c:\windows\system32\imageres.dllc:\windows\system32\notepad.exe c:\windows\system32\sendmail.dll/ c:\windows\system32\imageres.dll%windir%\system32\notepad.exe c:\windows\system32\imageres.dllc:\windows\system32\msxml3.dll/c:\program files\internet explorer\iexplore.exe/c:\program files\internet explorer\iexplore.exe3c:\program files\windows nt\accessories\wordpad.exe.c:\program files (x86)\notepad++\notepad++.exe1%programfiles%\windows nt\accessories\wordpad.exe%windir%\system32\cmd.exeAc:\windows\system32\cmd.exe%windir%\system32\cmd.exec:\windows\system32\mstsc.exe imageres.dll shell32.dllr imageres.dll<'c:\windows\system32\networkexplorer.dllmc:\windows\installer\{f9e3b527-3354-4cbc-aff6-d4b2decdcf44}\newshortcut1_ab848e76dc4d40b3a975abcad568ad66.exe shell32.dll shell32.dll shell32.dllZ imageres.dll, imageres.dll+ imageres.dll* imageres.dll) imageres.dll( shell32.dll shell32.dll imageres.dll% imageres.dll'c:\windows\system32\display.dll c:\windows\system32\themecpl.dll%%systemroot%\system32\tsworkspace.dll(c:\program files\java\jre7\bin\javaw.exe%windir%\system32\mstsc.exe%windir%\system32\mstsc.exe%windir%\system32\msinfo32.exeq%windir%\system32\msinfo32.exeqAc:\program files\internet explorer\images\smalllogo.scale-100.png)%systemroot%\system32\actioncentercpl.dll"%systemroot%\system32\imageres.dllk!%systemroot%\system32\usercpl.dll twinui.dll% c:\windows\system32\imageres.dllPc:\program files (x86)\sap businessobjects\/crystal reports common\crstartup.exe/c:\program files\internet explorer\iexplore.exe imageres.dll imageres.dll imageres.dll imageres.dllc:\windows\system32\dllhost.exe imageres.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dllR imageres.dll imageres.dll@ shell32.dll imageres.dll? imageres.dll imageres.dll> shell32.dllA$c:\galaxie\deploy\tomcat6\tomcat.icotc:\users\exploitfil1\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\server manager.lnkj 3xc:\users\exploitfil1\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\windows powershell.lnk 4sc:\users\exploitfil1\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\file explorer.lnkׯ 5&c:\users\public\desktop\pdfcreator.lnkP?-  6,c:\users\public\desktop\filezilla client.lnkc 78c:\users\exploitfil1\desktop\crurlconfig - raccourci.lnkL 8-c:\users\public\desktop\acrobat reader dc.lnk냉&c:\users\exploitfil1\links\desktop.lnkǡ)&c:\users\exploitfil1\links\desktop.lnkǡ)+c:\users\exploitfil1\links\recentplaces.lnk)+c:\users\exploitfil1\links\recentplaces.lnk)(c:\users\exploitfil1\links\downloads.lnk)(c:\users\exploitfil1\links\downloads.lnk)bc:\users\exploitfil1\appdata\roaming\microsoft\windows\start menu\programs\accessories\notepad.lnke`c:\users\exploitfil1\appdata\roaming\microsoft\windows\start menu\programs\internet explorer.lnk;.iLc:\programdata\microsoft\windows\start menu\programs\notepad++\notepad++.lnkXkLc:\programdata\microsoft\windows\start menu\programs\accessories\wordpad.lnk*ljc:\users\exploitfil1\appdata\roaming\microsoft\windows\start menu\programs\system tools\command prompt.lnkvo-c:\users\public\desktop\acrobat reader dc.lnk 9&c:\users\exploitfil1\links\desktop.lnk^A"&c:\users\exploitfil1\links\desktop.lnk^A"+c:\users\exploitfil1\links\recentplaces.lnk^AT+c:\users\exploitfil1\links\recentplaces.lnk^AT(c:\users\exploitfil1\links\downloads.lnk`AU(c:\users\exploitfil1\links\downloads.lnk`AU&c:\users\exploitfil1\links\desktop.lnk/ "&c:\users\exploitfil1\links\desktop.lnk/ "+c:\users\exploitfil1\links\recentplaces.lnk/ T+c:\users\exploitfil1\links\recentplaces.lnk/ T(c:\users\exploitfil1\links\downloads.lnk/ U(c:\users\exploitfil1\links\downloads.lnk/ Uy c:\windows\system32\imageres.dllc1 c:\windows\system32\imageres.dll2"%systemroot%\system32\svrmgrnc.dll3;%systemroot%\system32\windowspowershell\v1.0\powershell.exe4%windir%\explorer.exe5*c:\program files\pdfcreator\pdfcreator.exe(C B69c:\program files (x86)\filezilla ftp client\filezilla.exe B7>c:\program files (x86)\str\crystalwebviewerurl\crurlconfig.exeB8Ic:\windows\installer\{ac76ba86-7ad7-1036-7b44-ac0f074e4100}\sc_reader.ico9 imageres.dll=: imageres.dllA; shell32.dll< imageres.dll = shell32.dll> shell32.dll? shell32.dll @ shell32.dllA shell32.dllB imageres.dllJC imageres.dllKD imageres.dllIE imageres.dllHF imageres.dllEG imageres.dll$H imageres.dllFI imageres.dllDJ imageres.dllCK imageres.dllBL imageres.dll&M shell32.dllPN shell32.dlluO shell32.dllP shell32.dllvQ imageres.dllR c:\windows\system32\imageres.dllS c:\windows\system32\imageres.dllT c:\windows\system32\imageres.dllHU c:\windows\system32\imageres.dllCV c:\windows\system32\imageres.dllW c:\windows\system32\imageres.dllX c:\windows\system32\imageres.dllY c:\windows\system32\imageres.dllZ c:\windows\system32\imageres.dll[ c:\windows\system32\imageres.dllI\c:\windows\explorer.exe] c:\windows\system32\imageres.dll^c:\m.exe_c:\windows\system32\zipfldr.dll` c:\windows\system32\imageres.dllac:\windows\system32\notepad.exeb c:\windows\system32\sendmail.dll/c c:\windows\system32\imageres.dlld%windir%\system32\notepad.exee c:\windows\system32\imageres.dllfc:\windows\system32\msxml3.dllg/c:\program files\internet explorer\iexplore.exeh/c:\program files\internet explorer\iexplore.exez 6i3c:\program files\windows nt\accessories\wordpad.exej.c:\program files (x86)\notepad++\notepad++.exeˆ k1%programfiles%\windows nt\accessories\wordpad.exel%windir%\system32\cmd.exemc:\windows\system32\cmd.exegn%windir%\system32\cmd.exeoc:\windows\system32\mstsc.exep imageres.dll q shell32.dllrr imageres.dll<s'c:\windows\system32\networkexplorer.dlltmc:\windows\installer\{f9e3b527-3354-4cbc-aff6-d4b2decdcf44}\newshortcut1_ab848e76dc4d40b3a975abcad568ad66.exe`u shell32.dllLv shell32.dllLw shell32.dllZLx imageres.dll,Ly imageres.dll+Lz imageres.dll*L{ imageres.dll)L| imageres.dll(L} shell32.dllL~ shell32.dllL imageres.dll%L imageres.dll'Lc:\windows\system32\display.dllD c:\windows\system32\themecpl.dllD%%systemroot%\system32\tsworkspace.dllD(c:\program files\java\jre7\bin\javaw.exe'%windir%\system32\mstsc.exe %windir%\system32\mstsc.exe %windir%\system32\msinfo32.exeq %windir%\system32\msinfo32.exeq Ac:\program files\internet explorer\images\smalllogo.scale-100.png )%systemroot%\system32\actioncentercpl.dll "%systemroot%\system32\imageres.dllk !%systemroot%\system32\usercpl.dll  twinui.dll% c:\windows\system32\imageres.dllPc:\program files (x86)\sap businessobjects\/crystal reports common\crstartup.exe/c:\program files\internet explorer\iexplore.exe imageres.dll imageres.dll imageres.dll imageres.dllc:\windows\system32\dllhost.exe imageres.dll shell32.dll z shell32.dll z shell32.dll z shell32.dll z shell32.dll z shell32.dll z shell32.dll z shell32.dll z shell32.dllz shell32.dllRz imageres.dllz imageres.dll@z shell32.dllz imageres.dll?z imageres.dll z imageres.dll>z shell32.dllz$c:\galaxie\deploy\tomcat6\tomcat.ico~WC