Friday, November 14, 2008

Marawi Trojan

Removing Marawi
Categories: Trojan,Backdoor,Downloader,DoS
This category includes a variety of Trojans that damage victim machines or
threaten data integrity, or impair the functioning of the victim machine.
Backdoors are used by virus writers to detect and download confidential information,
execute malicious code, destroy data, include the machine in bot networks and so forth.

Trojans-downloaders downloads and installs new malware or adware on the computer.

DoS programs attack web servers by sending numerous requests to the specified server,
often causing it to crash under an excessive volume of requests.


Marawi Also known as:

[Panda]Philippines.2897
Visible Symptoms:
Files in system folders:
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\ads.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\business_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\icons2.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\progress.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\t2_bg.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\tsd_bg.xip
[%APPDATA%]\HbTools_Icons\games2.ico
[%APPDATA%]\HbTools_Icons\Registryrepair.ico
[%APPDATA%]\HbTools_Icons\wallpapere1.ico
[%APPDATA%]\ShopperReports\cs\report\ag_ShopperReports.xml
[%APPDATA%]\ShopperReports\cs\report\send_ShopperReports.xml.db
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\icons2.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\progress.xip
[%DESKTOP%]\Find And Fix Errors.lnk
[%DESKTOP%]\free pc wallpapers.lnk
[%PROFILE_TEMP%]\cdE6.tmp.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SbOEAddOn.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBInst.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBOLExp.dll
[%PROGRAM_FILES%]\ZangoToolbar\Bin\4.8.2.0\dBenderC.dll
[%SYSTEM%]\dwqvukbf.exe
[%SYSTEM%]\ubsopymh.exe
[%SYSTEM%]\yrztrupg.exe
[%WINDOWS%]\downloaded program files\hbtools.inf
[%WINDOWS%]\downloaded program files\hotbar.inf
[%WINDOWS%]\Downloaded Program Files\SpamBlockerUtility.inf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\ads.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\business_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\icons2.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\progress.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\t2_bg.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\tsd_bg.xip
[%APPDATA%]\HbTools_Icons\games2.ico
[%APPDATA%]\HbTools_Icons\Registryrepair.ico
[%APPDATA%]\HbTools_Icons\wallpapere1.ico
[%APPDATA%]\ShopperReports\cs\report\ag_ShopperReports.xml
[%APPDATA%]\ShopperReports\cs\report\send_ShopperReports.xml.db
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\icons2.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\progress.xip
[%DESKTOP%]\Find And Fix Errors.lnk
[%DESKTOP%]\free pc wallpapers.lnk
[%PROFILE_TEMP%]\cdE6.tmp.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SbOEAddOn.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBInst.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBOLExp.dll
[%PROGRAM_FILES%]\ZangoToolbar\Bin\4.8.2.0\dBenderC.dll
[%SYSTEM%]\dwqvukbf.exe
[%SYSTEM%]\ubsopymh.exe
[%SYSTEM%]\yrztrupg.exe
[%WINDOWS%]\downloaded program files\hbtools.inf
[%WINDOWS%]\downloaded program files\hotbar.inf
[%WINDOWS%]\Downloaded Program Files\SpamBlockerUtility.inf

How to detect Marawi:

Files:
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\ads.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\business_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\icons2.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\progress.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\t2_bg.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\tsd_bg.xip
[%APPDATA%]\HbTools_Icons\games2.ico
[%APPDATA%]\HbTools_Icons\Registryrepair.ico
[%APPDATA%]\HbTools_Icons\wallpapere1.ico
[%APPDATA%]\ShopperReports\cs\report\ag_ShopperReports.xml
[%APPDATA%]\ShopperReports\cs\report\send_ShopperReports.xml.db
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\icons2.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\progress.xip
[%DESKTOP%]\Find And Fix Errors.lnk
[%DESKTOP%]\free pc wallpapers.lnk
[%PROFILE_TEMP%]\cdE6.tmp.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SbOEAddOn.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBInst.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBOLExp.dll
[%PROGRAM_FILES%]\ZangoToolbar\Bin\4.8.2.0\dBenderC.dll
[%SYSTEM%]\dwqvukbf.exe
[%SYSTEM%]\ubsopymh.exe
[%SYSTEM%]\yrztrupg.exe
[%WINDOWS%]\downloaded program files\hbtools.inf
[%WINDOWS%]\downloaded program files\hotbar.inf
[%WINDOWS%]\Downloaded Program Files\SpamBlockerUtility.inf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\1\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\ads.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans.idx
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\btntrans1.dat
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\business_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_hotbarcom.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\Default_Mails.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_1000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_2000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_3000.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bar.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_logos.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_buttons_other.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\d_icons_weather.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-548964.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\email-def-511724-9595.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar-premium.cdf
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\hotbar_promo.htm
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\icons2.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\linkpathlegal.txt
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\progress.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\s_icons_buttons.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\t2_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\2\tsd_bg.res
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\ads.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\business_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\hotbar_promo.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\icons2.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\progress.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\t2_bg.xip
[%APPDATA%]\HbTools\v3.0\HbTools\static\DownLoad\tsd_bg.xip
[%APPDATA%]\HbTools_Icons\games2.ico
[%APPDATA%]\HbTools_Icons\Registryrepair.ico
[%APPDATA%]\HbTools_Icons\wallpapere1.ico
[%APPDATA%]\ShopperReports\cs\report\ag_ShopperReports.xml
[%APPDATA%]\ShopperReports\cs\report\send_ShopperReports.xml.db
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\email-premium-email-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\HostOI\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\1\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\ads.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans.idx
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\btntrans1.dat
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\business_promo.htm
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\Default_Mails.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_1000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_2000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_3000.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bar.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_logos.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_buttons_other.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\d_icons_weather.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\email-def-511724-9595.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium-hotbar-premium.mnu
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\hotbar-premium.cdf
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\linkpathlegal.txt
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\progress.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\2\tsd_bg.res
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\ads.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\business_promo.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\d_icons_weather.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\hotbar-premium.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\progress.xip
[%APPDATA%]\SpamBlockerUtility\v3.0\SpamBlockerUtility\static\DownLoad\tsd_bg.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\1\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans.idx
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\btntrans1.dat
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_hotbarcom.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\Default_Mails.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_1000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_2000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_3000.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bar.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_bbar1.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_logos.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\d_icons_buttons_other.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-548964.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\email-def-511724-9595.mnu
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\icons2.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\linkpathlegal.txt
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\2\progress.res
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\BtnTrans1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_1000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_2000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_3000.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bar.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_bbar1.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_logos.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\d_icons_buttons_other.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\icons2.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\linkpathlegal.xip
[%APPDATA%]\ZangoToolbar\v3.0\ZangoToolbar\static\DownLoad\progress.xip
[%DESKTOP%]\Find And Fix Errors.lnk
[%DESKTOP%]\free pc wallpapers.lnk
[%PROFILE_TEMP%]\cdE6.tmp.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SbOEAddOn.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.7.5.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\dBenderC.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\Redemption.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBClientSinkPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBInst.exe
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExp.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBOLExt.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBSrvPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBTrayAppPS.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUIRes.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SBUISkin.dll
[%PROGRAM_FILES%]\SpamBlockerUtility\bin\4.8.0.0\SpamBlocker.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBInst.exe
[%PROGRAM_FILES%]\SPAMBL~1\Bin\480~1.0\SBOLExp.dll
[%PROGRAM_FILES%]\ZangoToolbar\Bin\4.8.2.0\dBenderC.dll
[%SYSTEM%]\dwqvukbf.exe
[%SYSTEM%]\ubsopymh.exe
[%SYSTEM%]\yrztrupg.exe
[%WINDOWS%]\downloaded program files\hbtools.inf
[%WINDOWS%]\downloaded program files\hotbar.inf
[%WINDOWS%]\Downloaded Program Files\SpamBlockerUtility.inf

Folders:
[%APPDATA%]\SpamBlocker
[%APPDATA%]\SpamBlockerUtility
[%PROGRAM_FILES%]\hbtools
[%PROGRAM_FILES%]\hbtools_icons
[%PROGRAM_FILES%]\hotbar
[%PROGRAM_FILES%]\SpamBlockerUtility

Registry Keys:
HKEY_CLASSES_ROOT\appid\weatherontray.exe
HKEY_CLASSES_ROOT\appid\{0507fdde-f3b7-49f5-9e8f-c557e991f39b}
HKEY_CLASSES_ROOT\clsid\{0ab71193-ec19-4d70-85c2-e46e2ff02755}
HKEY_CLASSES_ROOT\clsid\{175652e8-8bcc-47c4-b591-0d630f469c19}
HKEY_CLASSES_ROOT\clsid\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94}
HKEY_CLASSES_ROOT\clsid\{1e24f8a0-5965-4902-90d4-08534e9adf3b}
HKEY_CLASSES_ROOT\clsid\{31a59636-0fa3-4a56-954d-db7ad02840d8}
HKEY_CLASSES_ROOT\clsid\{3fa917b9-df69-477f-9e4f-b60d929de79f}
HKEY_CLASSES_ROOT\clsid\{40d8240a-e3a0-4d59-ac55-0443120188d1}
HKEY_CLASSES_ROOT\clsid\{420c35c9-e4f2-49f9-bf67-2be1ecf86989}
HKEY_CLASSES_ROOT\clsid\{460ac4db-b0de-4626-a0f0-175dd84dcb9b}
HKEY_CLASSES_ROOT\clsid\{66b90adb-0be3-40ae-8680-84a6f0577ca0}
HKEY_CLASSES_ROOT\CLSID\{74CC49F7-EB32-4A08-B204-948962A6E3DB}
HKEY_CLASSES_ROOT\clsid\{7e66936c-fea0-4984-ad26-7b6661ac5b2e}
HKEY_CLASSES_ROOT\clsid\{8c875948-9c60-4381-9248-0df180542d53}
HKEY_CLASSES_ROOT\clsid\{a14c0d8d-e753-4e73-9e2b-4070791d8940}
HKEY_CLASSES_ROOT\clsid\{c2baa4c9-ae1e-4605-ae2f-a1c49a30d881}
HKEY_CLASSES_ROOT\clsid\{d9882035-7745-47c7-8d5e-c11178f9c553}
HKEY_CLASSES_ROOT\clsid\{ed8525ea-2bfc-4440-bd8a-20efb9d5e541}
HKEY_CLASSES_ROOT\clsid\{fa16bce1-5e36-472a-8466-e0cdd5ce00e6}
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop
HKEY_CLASSES_ROOT\hbcoresrv.dynamicprop.1
HKEY_CLASSES_ROOT\hbhostol.hbcmndbaresink
HKEY_CLASSES_ROOT\hbhostol.hbcmndbaresink.1
HKEY_CLASSES_ROOT\hbtcoresrv.hbtcoreservices
HKEY_CLASSES_ROOT\hbtcoresrv.hbtcoreservices.1
HKEY_CLASSES_ROOT\hbtcoresrv.lfgax
HKEY_CLASSES_ROOT\hbtcoresrv.lfgax.1
HKEY_CLASSES_ROOT\hbthostie.bho
HKEY_CLASSES_ROOT\hbthostie.bho.1
HKEY_CLASSES_ROOT\hbthostol.hbtmailanim
HKEY_CLASSES_ROOT\hbthostol.hbtmailanim.1
HKEY_CLASSES_ROOT\hbthostol.hbtwebmailsend
HKEY_CLASSES_ROOT\hbthostol.hbtwebmailsend.1
HKEY_CLASSES_ROOT\hbtinstie.hbinstobj
HKEY_CLASSES_ROOT\hbtinstie.hbinstobj.1
HKEY_CLASSES_ROOT\hbtools.hbtcommband
HKEY_CLASSES_ROOT\hbtools.hbtcommband.1
HKEY_CLASSES_ROOT\hbtsrv.hbtcoreservices
HKEY_CLASSES_ROOT\hbtsrv.hbtcoreservices.1
HKEY_CLASSES_ROOT\hbttoolbar.hbthtmlmenuui
HKEY_CLASSES_ROOT\hbttoolbar.hbthtmlmenuui.1
HKEY_CLASSES_ROOT\hbttoolbar.hbttoolbarctl
HKEY_CLASSES_ROOT\hbttoolbar.hbttoolbarctl.1
HKEY_CLASSES_ROOT\hbttools.hbmain
HKEY_CLASSES_ROOT\hbttools.hbmain.1
HKEY_CLASSES_ROOT\interface\{175816a5-219e-4079-b2f9-53c501c409ba}
HKEY_CLASSES_ROOT\interface\{1c1793e0-1034-4cac-837d-aa545f6961bf}
HKEY_CLASSES_ROOT\interface\{20d21e02-8c1c-41fe-9826-dab4c223436c}
HKEY_CLASSES_ROOT\interface\{27c4569f-8728-4958-a920-a607cae8153c}
HKEY_CLASSES_ROOT\interface\{38370864-346f-4afa-8c4b-4fbff518c0bb}
HKEY_CLASSES_ROOT\interface\{397a208b-3d09-4b3e-93e8-ca171886612e}
HKEY_CLASSES_ROOT\interface\{421745e9-16df-4ee4-a758-d51f939c49cb}
HKEY_CLASSES_ROOT\interface\{4331ec56-0aab-499e-8757-dd2ee44ad671}
HKEY_CLASSES_ROOT\interface\{4921db9c-64ea-430a-abd2-d016db5a0ac4}
HKEY_CLASSES_ROOT\interface\{54286c3a-e044-4e65-bd44-528d6ae28a18}
HKEY_CLASSES_ROOT\interface\{5d16197a-1eaa-45af-b29a-69f1aa055e87}
HKEY_CLASSES_ROOT\interface\{5d9c84e7-fa45-49e2-a0b8-b6b5e9a4f6be}
HKEY_CLASSES_ROOT\interface\{5f2b9de7-f878-4762-8cfe-e9c58f082f0e}
HKEY_CLASSES_ROOT\interface\{601a9784-1114-4089-9b3e-cbd70dafc6ad}
HKEY_CLASSES_ROOT\interface\{66291bef-c867-43c0-a7b4-d13393814bcd}
HKEY_CLASSES_ROOT\interface\{8654592e-952a-4e7c-a960-304763b35fa6}
HKEY_CLASSES_ROOT\interface\{8a61a950-c325-4f44-ba64-273180ff3464}
HKEY_CLASSES_ROOT\interface\{8d5c4ec6-af8e-4b85-ba27-64babe410510}
HKEY_CLASSES_ROOT\interface\{8e98faf8-794f-47f9-af90-15305564ed81}
HKEY_CLASSES_ROOT\interface\{af15975b-1498-4740-8e6c-90af78e4198c}
HKEY_CLASSES_ROOT\interface\{b53d4cd4-406d-43cc-8244-7893d72236dd}
HKEY_CLASSES_ROOT\interface\{b671426c-5c1a-48ac-9652-bc9402b1c404}
HKEY_CLASSES_ROOT\interface\{b9bb3219-f84c-4060-966b-4a1e73e24226}
HKEY_CLASSES_ROOT\interface\{bc8c2e5f-d8b4-4997-bce3-8775c3707956}
HKEY_CLASSES_ROOT\interface\{d082721f-4bd4-4b8b-bb82-06753ee6174f}
HKEY_CLASSES_ROOT\interface\{d24f9d3c-5d4c-47f8-9ab7-632b44ad6a0d}
HKEY_CLASSES_ROOT\interface\{ea232a0a-46f8-4d44-a30b-50321518a828}
HKEY_CLASSES_ROOT\interface\{f43ec88b-b6c8-4969-a763-e2bf55602cce}
HKEY_CLASSES_ROOT\interface\{f786cb18-3809-4e49-bc99-9a66da47db8b}
HKEY_CLASSES_ROOT\sbcoresrv.coreservices
HKEY_CLASSES_ROOT\sbcoresrv.lfgax
HKEY_CLASSES_ROOT\sbhostie.bho
HKEY_CLASSES_ROOT\sbhostol.mailanim
HKEY_CLASSES_ROOT\sbhostol.webmailsend
HKEY_CLASSES_ROOT\sbinstie.sbinstobj
HKEY_CLASSES_ROOT\sbsrv.coreservices
HKEY_CLASSES_ROOT\sbtoolbar.htmlmenuui
HKEY_CLASSES_ROOT\sbtoolbar.toolbarctl
HKEY_CLASSES_ROOT\sbwallpaper.wallpapermanager
HKEY_CLASSES_ROOT\spamblockerconfig.application
HKEY_CLASSES_ROOT\spamblockerutility.commband
HKEY_CLASSES_ROOT\spamblockerutility.sbmain
HKEY_CLASSES_ROOT\spamblockerutility.travelcomparebar
HKEY_CLASSES_ROOT\typelib\{45397063-d7d0-47c2-9508-26487608a298}
HKEY_CLASSES_ROOT\typelib\{4cf5a3c1-07a2-4336-9b54-6870452ebde1}
HKEY_CLASSES_ROOT\typelib\{71e9cf40-af72-4b55-bd3f-1fea2a0eaea6}
HKEY_CLASSES_ROOT\typelib\{71efe583-62fe-4419-9918-ca3b683f7b36}
HKEY_CLASSES_ROOT\typelib\{793af621-5cd0-4b92-b765-6712f6aaf48e}
HKEY_CLASSES_ROOT\typelib\{842d315a-7e1e-448b-96e8-9e76d1820be2}
HKEY_CLASSES_ROOT\typelib\{9967a873-40f3-4c7e-9239-6c8760f19f61}
HKEY_CLASSES_ROOT\typelib\{b5901229-25cc-43c9-b604-3bb6ac2b48a5}
HKEY_CLASSES_ROOT\typelib\{b9f51d42-cca0-4408-bb02-d433d1865a3a}
HKEY_CLASSES_ROOT\typelib\{c83daed4-0611-4f7a-978e-7feafcb2f91b}
HKEY_CLASSES_ROOT\typelib\{f8ee014f-b34c-4544-8e45-95a7971d323b}
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager
HKEY_CLASSES_ROOT\wallpaper.wallpapermanager.1
HKEY_CURRENT_USER\software\hbtools
HKEY_CURRENT_USER\software\hotbar
HKEY_CURRENT_USER\software\microsoft\installer\features\10b0642b36134f8f914ea8e11ee5b503
HKEY_CURRENT_USER\software\microsoft\installer\products\d493500bd4a54ea6bc805fc9cda952c5
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{66b90adb-0be3-40ae-8680-84a6f0577ca0}
HKEY_CURRENT_USER\software\microsoft\internet explorer\explorer bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e}
HKEY_CURRENT_USER\software\spam blocker
HKEY_CURRENT_USER\software\spamblockerutility
HKEY_LOCAL_MACHINE\software\classes\appid\{0507fdde-f3b7-49f5-9e8f-c557e991f39b}
HKEY_LOCAL_MACHINE\software\classes\clsid\{175652e8-8bcc-47c4-b591-0d630f469c19}
HKEY_LOCAL_MACHINE\software\classes\clsid\{1e24f8a0-5965-4902-90d4-08534e9adf3b}
HKEY_LOCAL_MACHINE\software\classes\contact.contacts
HKEY_LOCAL_MACHINE\software\classes\contact.contacts.1
HKEY_LOCAL_MACHINE\software\classes\interface\{20d21e02-8c1c-41fe-9826-dab4c223436c}
HKEY_LOCAL_MACHINE\software\classes\interface\{66291bef-c867-43c0-a7b4-d13393814bcd}
HKEY_LOCAL_MACHINE\software\classes\typelib\{5ba32d9e-f1bd-476c-ad42-97c9379a57a4}
HKEY_LOCAL_MACHINE\software\classes\wallpaper.wallpapermanager
HKEY_LOCAL_MACHINE\software\classes\wallpaper.wallpapermanager.1
HKEY_LOCAL_MACHINE\software\hbtools
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8C875948-9C60-4381-9248-0DF180542D53}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\explorer bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e}
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}
HKEY_LOCAL_MACHINE\software\microsoft\office\outlook\addins\hbthostol.hbtmailanim
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74CC49F7-EB32-4A08-B204-948962A6E3DB}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hbtoolsoutlooktools
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\hbtoolswebtools
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spamblockeroutlooktools
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\spamblockerwebtools
HKEY_LOCAL_MACHINE\software\spamblockerutility\hotbar
HKEY_LOCAL_MACHINE\software\spamblockerutility\spamblockerutility

Registry Values:
HKEY_CLASSES_ROOT\interface\{3a6691ea-c844-46f2-9237-1386a85ce119}\typelib
HKEY_CLASSES_ROOT\interface\{3d2e7662-85fb-4cc1-875c-a624b1aa5d96}\typelib
HKEY_CLASSES_ROOT\interface\{72feeb09-bb27-46d3-a06d-930d4d544227}\typelib
HKEY_CLASSES_ROOT\interface\{736918fe-2349-4230-ba9a-1f23649e32ad}\typelib
HKEY_CLASSES_ROOT\interface\{89d36231-6bd9-4e20-bba0-fd28c3a83c40}\typelib
HKEY_CLASSES_ROOT\interface\{972bc913-312c-44b7-aa91-4ae3ec2e264b}\typelib
HKEY_CLASSES_ROOT\interface\{a53762b6-30f7-469f-ba92-13d63cf09a93}\typelib
HKEY_CLASSES_ROOT\interface\{bd31df26-7178-41f4-88dd-f16b82d827ca}\typelib
HKEY_CLASSES_ROOT\interface\{e4662b0a-da6b-4408-a73b-5a2bbb2b0cc8}\typelib
HKEY_CLASSES_ROOT\interface\{e977de7c-34ea-4876-b333-207c4504589e}\typelib
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_LOCAL_MACHINE\software\classes\appid\weatherontray.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Removing Marawi:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Pigeon.AVDS Trojan Symptoms
Skyper DoS Cleaner
Bolahone Downloader Removal
SillyDl.CDV Trojan Symptoms
Pokier Trojan Symptoms

Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)