; Directories

Program Files\Internet Explorer\
Program Files\Reference Assemblies\
Program Files\Windows Photo Viewer\
ProgramData\Microsoft\Windows\DeviceMetadataStore\
Windows\Assembly\GAC_32\
Windows\Assembly\GAC_MSIL\
Windows\assembly\NativeImages_v4.0.30319_32\
Windows\Assembly\Temp\
Windows\Fonts\
Windows\L2Schemas\
Windows\Media\
Windows\Microsoft.NET\Assembly\GAC_32\
Windows\Microsoft.NET\Assembly\GAC_MSIL\
Windows\Microsoft.NET\authman\
Windows\Microsoft.NET\Framework\1043\
Windows\Microsoft.NET\Framework\v1.0.3705\
Windows\Microsoft.NET\Framework\v1.1.4322\
Windows\Microsoft.NET\Framework\v2.0.50727\
Windows\Microsoft.NET\Framework\v3.0\
Windows\Microsoft.NET\Framework\v3.5\
Windows\Microsoft.NET\Framework\v4.0.30319\
Windows\Resources\Ease of Access Themes\
Windows\Resources\Themes\
Windows\schemas\

Windows\System32\DriverStore\FileRepository\audioendpoint.inf_*\
Windows\System32\DriverStore\FileRepository\basicdisplay.inf_*\
Windows\System32\DriverStore\FileRepository\basicrender.inf_*\
Windows\System32\DriverStore\FileRepository\bda.inf_*\
Windows\System32\DriverStore\FileRepository\compositebus.inf_*\
Windows\System32\DriverStore\FileRepository\c_display.inf_*\
Windows\System32\DriverStore\FileRepository\c_media.inf_*\
Windows\System32\DriverStore\FileRepository\c_mediumchanger.inf_*\
Windows\System32\DriverStore\FileRepository\c_memory.inf_*\
Windows\System32\DriverStore\FileRepository\c_monitor.inf_*\
Windows\System32\DriverStore\FileRepository\c_multifunction.inf_*\
Windows\System32\DriverStore\FileRepository\c_volume.inf_*\
Windows\System32\DriverStore\FileRepository\display.inf_*\
Windows\System32\DriverStore\FileRepository\displayoverride.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudbus.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudio.inf_*\
Windows\System32\DriverStore\FileRepository\hdaudss.inf_*\
Windows\System32\DriverStore\FileRepository\ks.inf_*\
Windows\System32\DriverStore\FileRepository\kscaptur.inf_*\
Windows\System32\DriverStore\FileRepository\ksfilter.inf_*\
Windows\System32\DriverStore\FileRepository\memory.inf_*\
Windows\System32\DriverStore\FileRepository\mf.inf_*\
Windows\System32\DriverStore\FileRepository\monitor.inf_*\
Windows\System32\DriverStore\FileRepository\netnwifi.inf_*\
Windows\System32\DriverStore\FileRepository\netvwifibus.inf_*\
Windows\System32\DriverStore\FileRepository\netvwififlt.inf_*\
Windows\System32\DriverStore\FileRepository\netvwifimp.inf_*\
Windows\System32\DriverStore\FileRepository\ramdisk.inf_*\
Windows\System32\DriverStore\FileRepository\rdpbus.inf_*\
Windows\System32\DriverStore\FileRepository\usbvideo.inf_*\
Windows\System32\DriverStore\FileRepository\volmgr.inf_*\
Windows\System32\DriverStore\FileRepository\volume.inf_*\
Windows\System32\DriverStore\FileRepository\wave.inf_*\
Windows\System32\DriverStore\FileRepository\wdmaudio.inf_*\
Windows\System32\DriverStore\FileRepository\wdma_bt.inf_*\
Windows\System32\DriverStore\FileRepository\wdma_usb.inf_*\

Windows\System32\icsxml\
Windows\System32\migration\
Windows\System32\MUI\
Windows\System32\networklist\


Windows\WinSxS\*_microsoft-windows-a..skmanager.resources*\
Windows\WinSxS\*_microsoft-windows-p..al-securitytemplate*\
Windows\winsxs\*_microsoft.vc80.crt*\
Windows\winsxs\*_microsoft.vc90.crt*\

; ==== Files ====
Windows\WinSxS\manifests\*_microsoft-windows-a..skmanager.resources*
Windows\WinSxS\manifests\*_microsoft.vc80.crt*
Windows\WinSxS\manifests\*_microsoft.vc90.crt*

Windows\winsxs\manifests\*_policy.8.0.microsoft.vc80*
Windows\WinSxS\manifests\*_policy.8.0.microsoft.vc80.crt*
Windows\winsxs\manifests\*_policy.9.0.microsoft.vc90*
Windows\WinSxS\manifests\*_policy.9.0.microsoft.vc90.crt*

Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package-net~*.cat
Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-net~*.cat

Program Files\Common Files\microsoft shared\ink\tiptsf.dll
Program Files\Common Files\microsoft shared\VGX\VGX.dll
Program Files\Internet Explorer\ieproxy.dll
Program Files\Internet Explorer\IEShims.dll
Program Files\Internet Explorer\sqmapi.dll
Program Files\Windows NT\Accessories\??-??\wordpad.exe.mui
Program Files\Windows NT\Accessories\wordpad.exe
Program Files\Windows NT\Accessories\WordpadFilter.dll
ProgramData\Microsoft\User Account Pictures\guest.bmp
ProgramData\Microsoft\User Account Pictures\user.bmp
ProgramData\Microsoft\Windows\Caches\cversions.2.db
Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Compressed (zipped) Folder.ZFSendToTarget
Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Desktop (create shortcut).DeskLink
Users\Default\NTUSER.DAT

Windows\apppatch\acGenral.dll
Windows\apppatch\acLayers.dll
Windows\apppatch\acRes.dll
Windows\apppatch\acSpecfc.dll
Windows\apppatch\acxtrnal.dll
Windows\apppatch\drvmain.sdb
Windows\apppatch\msimain.sdb
Windows\apppatch\pcamain.sdb
Windows\AppPatch\sysmain.sdb
Windows\Branding\Basebrd\??-??\basebrd.dll.mui
Windows\Branding\Basebrd\basebrd.dll
Windows\Branding\ShellBrd\shellbrd.dll
Windows\diagnostics\system\AERO\DesktopWindowsMgmt.dll
Windows\explorer.exe

Windows\Globalization\ELS\HyphenationDictionaries\mshy7*.lex
Windows\Globalization\ELS\SpellDictionaries\mssp7*.acl
Windows\Globalization\ELS\SpellDictionaries\mssp7*.dub
Windows\Globalization\ELS\SpellDictionaries\mssp7*.lex

Windows\System32\config\BBI
Windows\System32\config\BCD-Template
Windows\System32\config\COMPONENTS
Windows\System32\config\DEFAULT
Windows\System32\config\DRIVERS
Windows\System32\config\ELAM
Windows\System32\config\FP
Windows\System32\config\SAM
Windows\System32\config\SECURITY
Windows\System32\config\SOFTWARE
Windows\System32\config\SYSTEM

Windows\inf\bda.inf
Windows\inf\ks.inf
Windows\inf\kscaptur.inf
Windows\inf\ksfilter.inf
Windows\inf\monitor.inf
Windows\inf\ndiscap.inf
Windows\inf\netnwifi.inf
Windows\inf\netvwifibus.inf
Windows\inf\netvwififlt.inf
Windows\inf\netvwifimp.inf
Windows\Microsoft.NET\Framework\NETFXSBS10.exe
Windows\Microsoft.NET\Framework\netfxsbs12.hkf
Windows\Microsoft.NET\Framework\SharedReg12.dll


Windows\System32\*.acm
Windows\System32\*.nls

Windows\System32\actxprxy.dll
Windows\System32\alttab.dll
Windows\System32\amstream.dll
Windows\System32\apphelp.dll
Windows\System32\apphlpdm.dll
Windows\System32\appinfo.dll
Windows\System32\apprepapi.dll
Windows\System32\appwiz.cpl
Windows\System32\audiodev.dll
Windows\System32\audiodg.exe
Windows\System32\audioendpointbuilder.dll
Windows\System32\audioeng.dll
Windows\System32\audiokse.dll
Windows\System32\audioses.dll
Windows\System32\audiosrv.dll
Windows\System32\authfwcfg.dll
Windows\System32\authfwgp.dll
Windows\System32\authfwwizfwk.dll
Windows\System32\avicap32.dll
Windows\System32\avifil32.dll
Windows\System32\avifile.dll
Windows\System32\avrt.dll

Windows\System32\basecsp.dll
Windows\System32\batmeter.dll
Windows\System32\bdaplgin.ax
Windows\System32\bi.dll
Windows\System32\bisrv.dll
Windows\System32\biwinrt.dll
Windows\System32\browser.dll
Windows\System32\bthprops.cpl
Windows\System32\cabview.dll
Windows\System32\cacls.exe
Windows\System32\calc.exe

Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package-drivers~31bf3856ad364e35~*.cat
Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package-base~31bf3856ad364e35~*.cat
Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package-termsrv~31bf3856ad364e35~*.cat
Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Drivers-Package-windows~31bf3856ad364e35~*.cat

Windows\System32\certenroll.dll
Windows\System32\cfgbkend.dll
Windows\System32\chartv.dll
Windows\System32\cipher.exe
Windows\System32\clbcatq.dll
Windows\System32\cleanmgr.exe

Windows\System32\cngcredui.dll
Windows\System32\cngprovider.dll
Windows\System32\colbact.dll
Windows\System32\colorcnv.dll
Windows\System32\colorcpl.exe
Windows\System32\colorui.dll
Windows\System32\comctl32.dll
Windows\System32\comp.exe
Windows\System32\compact.exe
Windows\System32\compmgmt.msc
Windows\System32\comsvcs.dll

Windows\System32\connect.dll
Windows\System32\control.exe

Windows\System32\cscapi.dll
Windows\System32\cscdll.dll
Windows\System32\cscui.dll
Windows\System32\cryptnet.dll
Windows\System32\cryptcatsvc.dll
Windows\System32\crtdll.dll
; Win8
Windows\System32\d2d1.dll

Windows\System32\d3d10.dll
Windows\System32\d3d10core.dll
Windows\System32\d3d10level9.dll
Windows\System32\d3d10warp.dll
Windows\System32\d3d10_1.dll
Windows\System32\d3d10_1core.dll
Windows\System32\d3d11.dll

Windows\System32\d3d8thk.dll
Windows\System32\d3d9.dll
Windows\System32\d3dcompiler_47.dll
Windows\System32\damm.dll
Windows\System32\dciman32.dll
Windows\System32\dcomp.dll
Windows\System32\ddraw.dll
Windows\System32\ddrawex.dll
Windows\System32\defrag.exe
Windows\System32\desk.cpl
Windows\System32\deskadp.dll
Windows\System32\deskmon.dll
Windows\System32\devenum.dll
Windows\System32\deviceaccess.dll
Windows\System32\deviceassociation.dll
Windows\System32\devicecenter.dll

Windows\System32\deviceproperties.exe
Windows\System32\devicesetupmanager.dll
Windows\System32\devmgmt.msc
Windows\System32\devmgr.dll
Windows\System32\dfrgui.exe
Windows\System32\dfshim.dll

Windows\System32\dhcpsapi.dll
Windows\System32\difxapi.dll
Windows\System32\dinput.dll
Windows\System32\dinput8.dll
Windows\System32\diskcomp.com
Windows\System32\diskcopy.com
Windows\System32\diskcopy.dll
Windows\System32\diskmgmt.msc
Windows\System32\display.dll

Windows\System32\dm*

Windows\System32\dot3*.dll
Windows\System32\dpnaddr.dll
Windows\System32\dpnathlp.dll
Windows\System32\dpnet.dll
Windows\System32\dpnhpast.dll
Windows\System32\dpnhupnp.dll
Windows\System32\dpnlobby.dll
Windows\System32\dpnsvr.exe
Windows\System32\dpx.dll


Windows\System32\drivers\beep.sys
Windows\System32\drivers\gm.dls
Windows\System32\drivers\http.sys
Windows\System32\drivers\ipnat.sys
Windows\System32\drivers\monitor.sys
Windows\System32\drivers\ndiscap.sys
Windows\System32\drivers\ndisimplatform.sys
Windows\System32\drivers\nwifi.sys
Windows\System32\drivers\tcpipreg.sys
Windows\System32\drivers\tunnel.sys
Windows\System32\drivers\vwifibus.sys
Windows\System32\drivers\vwififlt.sys
Windows\System32\drivers\vwifimp.sys
Windows\System32\drivers\wfplwfs.sys

Windows\System32\dsdmo.dll
Windows\System32\dskquoui.dll
Windows\System32\dsound.dll
Windows\System32\dswave.dll
Windows\System32\dtsh.dll
Windows\System32\dwm.exe
Windows\System32\dwmcore.dll
Windows\System32\dwmredir.dll
Windows\System32\DWrite.dll
Windows\System32\dxdiag.exe
Windows\System32\dxdiagn.dll
Windows\System32\dxgi.dll
Windows\System32\dxtmsft.dll
Windows\System32\dxtrans.dll
Windows\System32\dxva2.dll

Windows\System32\efsadu.dll
Windows\System32\ehstorshell.dll
Windows\System32\elshyph.dll

Windows\System32\encapi.dll
Windows\System32\encdump.dll
Windows\System32\es.dll
Windows\System32\explorerframe.dll
Windows\System32\fc.exe
Windows\System32\fdproxy.dll
Windows\System32\fdwcn.dll
Windows\System32\filemgmt.dll
Windows\System32\findstr.exe
Windows\System32\firewall.cpl
Windows\System32\firewallcontrolpanel.dll
Windows\System32\flashplayercplapp.cpl
Windows\System32\FntCache.dll
Windows\System32\fontext.dll
Windows\System32\fontview.exe
Windows\System32\fsmgmt.msc
Windows\System32\fsutil.exe
Windows\System32\fundisc.dll
Windows\System32\fveui.dll
Windows\System32\fwcfg.dll

Windows\System32\gcdef.dll
Windows\System32\glmf32.dll
Windows\System32\globcollationhost.dll
Windows\System32\globinputhost.dll
Windows\System32\glu32.dll
Windows\System32\gptext.dll
Windows\System32\grpconv.exe
Windows\System32\hdwwiz.cpl
Windows\System32\hdwwiz.exe
Windows\System32\help.exe
Windows\System32\hgcpl.dll

Windows\System32\hidphone.tsp
Windows\System32\hlink.dll
Windows\System32\hnetcfg.dll
Windows\System32\hnetmon.dll
Windows\System32\hotplug.dll
Windows\System32\html.iec

Windows\System32\icm32.dll
Windows\System32\IconCodecService.dll
Windows\System32\icrav03.rat
Windows\System32\icsigd.dll
Windows\System32\icsunattend.exe
Windows\System32\idstore.dll
Windows\System32\ie4uinit.exe
Windows\System32\ieadvpack.dll

Windows\System32\ieapfltr.dat
Windows\System32\ieapfltr.dll
Windows\System32\iedkcs32.dll
Windows\System32\ieetwcollector.exe
Windows\System32\ieetwcollectorres.dll
Windows\System32\ieetwproxystub.dll
Windows\System32\ieframe.dll
Windows\System32\iepeers.dll
Windows\System32\iernonce.dll
Windows\System32\iesetup.dll
Windows\System32\iesysprep.dll
Windows\System32\ieui.dll
Windows\System32\ieuinit.inf
Windows\System32\ieunatt.exe
Windows\System32\iexpress.exe


Windows\System32\imgutil.dll
Windows\System32\inetcomm.dll
Windows\System32\inetcpl.cpl

Windows\System32\inetres.dll
Windows\System32\infdefaultinstall.exe
Windows\System32\inseng.dll
Windows\System32\intl.cpl
Windows\System32\iologmsg.dll
Windows\System32\ipnathlp.dll
Windows\System32\iprtprio.dll
Windows\System32\iprtrmgr.dll
Windows\System32\ipsecsnp.dll
Windows\System32\irprops.cpl
Windows\System32\iscsicli.exe
Windows\System32\iscsicpl.dll
Windows\System32\iscsicpl.exe
Windows\System32\iscsidsc.dll
Windows\System32\iscsied.dll
Windows\System32\iscsiexe.dll

Windows\System32\iscsium.dll
Windows\System32\iscsiwmi.dll
Windows\System32\iyuv_32.dll
Windows\System32\javascriptcollectionagent.dll
Windows\System32\joy.cpl
Windows\System32\jscript9diag.dll

Windows\System32\keymgr.dll
Windows\System32\ksproxy.ax
Windows\System32\kstvtune.ax
Windows\System32\ksuser.dll
Windows\System32\kswdmcap.ax
Windows\System32\ksxbar.ax

Windows\System32\lanman.drv
Windows\System32\l2gpstore.dll
Windows\System32\l2nacp.dll
Windows\System32\l3codecp.acm
Windows\System32\label.exe
Windows\System32\licmgr10.dll

Windows\System32\logonui.exe
Windows\System32\main.cpl
Windows\System32\makecab.exe
Windows\System32\mcicda.dll
Windows\System32\mciqtz32.dll
Windows\System32\mciseq.dll
Windows\System32\mciwave.dll
Windows\System32\mfc40u.dll
Windows\System32\mfplat.dll
Windows\System32\midimap.dll
Windows\System32\mlang.dat
Windows\System32\mlang.dll
Windows\System32\mmc.exe
Windows\System32\mmcbase.dll
Windows\System32\mmci.dll


Windows\System32\mmcico.dll
Windows\System32\mmcndmgr.dll
Windows\System32\mmcshext.dll
Windows\System32\mmcss.dll
Windows\System32\mmdevapi.dll
Windows\System32\mmres.dll
Windows\System32\mmsys.cpl
Windows\System32\mmsystem.dll
Windows\System32\mmtask.tsk


Windows\System32\mprddm.dll
Windows\System32\mprdim.dll
Windows\System32\msacm.dll
Windows\System32\msacm32.dll
Windows\System32\msacm32.drv

Windows\System32\msclmd.dll
Windows\System32\mscms.dll
Windows\System32\mscoree.dll
Windows\System32\mscorier.dll
Windows\System32\mscories.dll
Windows\System32\msdmo.dll
Windows\System32\msdvbnp.ax
Windows\System32\msdxm.ocx
Windows\System32\msfeeds.dll
Windows\System32\msfeedsbs.dll
Windows\System32\msfeedssync.exe
Windows\System32\mshta.exe
Windows\System32\mshtml.dll
Windows\System32\mshtml.tlb
Windows\System32\mshtmldac.dll
Windows\System32\mshtmled.dll
Windows\System32\mshtmler.dll
Windows\System32\msi.dll
Windows\System32\msiexec.exe
Windows\System32\msihnd.dll
Windows\System32\msimsg.dll
Windows\System32\msimtf.dll
Windows\System32\msinfo32.exe
Windows\System32\msisip.dll
Windows\System32\msmpeg2vdec.dll
Windows\System32\msoert2.dll
Windows\System32\mspaint.exe
Windows\System32\msrating.dll
Windows\System32\msrle32.dll
Windows\System32\mssrch.dll
Windows\System32\mstsc.exe
Windows\System32\mstscax.dll
Windows\System32\msutb.dll
Windows\System32\msvbvm60.dll
Windows\System32\msvcp120_clr0400.dll
Windows\System32\msvcr100_clr0400.dll
Windows\System32\msvcr120_clr0400.dll
Windows\System32\msvcrt20.dll
Windows\System32\msvfw32.dll
Windows\System32\msvidc32.dll
Windows\System32\msvidctl.dll
Windows\System32\mswb7.dll
Windows\System32\msyuv.dll
Windows\System32\mtxex.dll
Windows\System32\mycomput.dll

Windows\System32\naturallanguage6.dll
Windows\System32\ncaapi.dll
Windows\System32\ncsi.dll
Windows\System32\ncryptprov.dll
Windows\System32\ncryptsslp.dll
Windows\System32\ndfapi.dll
Windows\System32\ndfetw.dll
Windows\System32\ndfeventview.xml
Windows\System32\ndfhcdiscovery.dll
Windows\System32\ndiscapcfg.dll
Windows\System32\ndishc.dll
Windows\System32\ndisimplatform.dll
Windows\System32\netcenter.dll
Windows\System32\netevent.dll
Windows\System32\netfxperf.dll
Windows\System32\netid.dll
Windows\System32\netplwiz.dll
Windows\System32\netplwiz.exe
Windows\System32\netprofm.dll
Windows\System32\netprofmsvc.dll
Windows\System32\networkexplorer.dll
Windows\System32\networkitemfactory.dll
Windows\System32\networkstatus.dll
Windows\System32\nlahc.dll
Windows\System32\nlmgp.dll
Windows\System32\nlmproxy.dll
Windows\System32\nlmsprep.dll
Windows\System32\noise.dat
Windows\System32\npmproxy.dll
Windows\System32\ntvdm.exe

Windows\System32\objsel.dll
Windows\System32\occache.dll

Windows\System32\olecli32.dll
Windows\System32\oledlg.dll
Windows\System32\olethk32.dll
Windows\System32\onex.dll
Windows\System32\onexui.dll
Windows\System32\opengl32.dll
Windows\System32\osbaseln.dll
Windows\System32\pdh.dll
Windows\System32\peerdist.dll
Windows\System32\photometadatahandler.dll

Windows\System32\pid.dll
Windows\System32\pngfilt.dll
Windows\System32\pnidui.dll
Windows\System32\pnpts.dll
Windows\System32\pnpunattend.exe
Windows\System32\pnputil.exe
Windows\System32\pnpxassoc.dll
Windows\System32\pnpxassocprx.dll
Windows\System32\pnrpnsp.dll

Windows\System32\powercfg.cpl
Windows\System32\powercfg.exe
Windows\System32\powercpl.dll
Windows\System32\PresentationHost.exe
Windows\System32\PresentationHostProxy.dll
Windows\System32\printfilterpipelineprxy.dll
Windows\System32\printfilterpipelinesvc.exe
Windows\System32\printui.exe
Windows\System32\profprov.dll
Windows\System32\profsvcext.dll
Windows\System32\provcore.dll
Windows\System32\provsvc.dll
Windows\System32\psisdecd.dll
Windows\System32\psisrndr.ax
Windows\System32\psmsrv.dll
Windows\System32\pstorec.dll
Windows\System32\puiapi.dll
Windows\System32\qagentrt.dll
Windows\System32\qasf.dll
Windows\System32\qcap.dll

Windows\System32\qdv.dll
Windows\System32\qdvd.dll
Windows\System32\qedit.dll
Windows\System32\qedwipes.dll
Windows\System32\quartz.dll
Windows\System32\query.dll
Windows\System32\query.exe

Windows\System32\rasmm.dll
Windows\System32\regini.exe
Windows\System32\rmapi.dll
Windows\System32\rshx32.dll
Windows\System32\rstrtmgr.dll
Windows\System32\rtm.dll
Windows\System32\runas.exe
Windows\System32\runonce.exe
Windows\System32\sbe.dll
Windows\System32\sbeio.dll
Windows\System32\sberes.dll
Windows\System32\sc.exe

Windows\System32\searchfolder.dll
Windows\System32\seclogon.dll
Windows\System32\sendmail.dll
Windows\System32\sens.dll
Windows\System32\services.msc
Windows\System32\setnetworklocation.dll
Windows\System32\settingsynccore.dll
Windows\System32\settingsyncpolicy.dll
Windows\System32\shacct.dll
Windows\System32\shdocvw.dll
Windows\System32\shellstyle.dll

Windows\System32\shfolder.dll
Windows\System32\shgina.dll
Windows\System32\shimgvw.dll
Windows\System32\shpafact.dll
Windows\System32\shrpubw.exe
Windows\System32\shsvcs.dll
Windows\System32\shutdown.exe
Windows\System32\shwebsvc.dll
Windows\System32\signdrv.dll
Windows\System32\simauth.dll


Windows\System32\simcfg.dll
Windows\System32\smbhelperclass.dll
Windows\System32\sndvol.exe
Windows\System32\sndvolsso.dll
Windows\System32\sort.exe
Windows\System32\soundrecorder.exe
Windows\System32\sound.drv

Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
Windows\System32\sscoreext.dll
Windows\System32\sti.dll
Windows\System32\sti_ci.dll
Windows\System32\stobject.dll

Windows\System32\storagecontexthandler.dll
Windows\System32\storagewmi_passthru.dll
Windows\System32\structuredquery.dll
Windows\System32\sud.dll
Windows\System32\swprv.dll
Windows\System32\sysdm.cpl
Windows\System32\sysmon.ocx

Windows\System32\systemcpl.dll
Windows\System32\systempropertiesadvanced.exe
Windows\System32\systempropertiescomputername.exe
Windows\System32\systempropertiesdataexecutionprevention.exe
Windows\System32\systempropertieshardware.exe
Windows\System32\systempropertiesperformance.exe
Windows\System32\systempropertiesprotection.exe
Windows\System32\systempropertiesremote.exe
Windows\System32\systray.exe
Windows\System32\tabletpc.cpl
Windows\System32\tabsvc.dll
Windows\System32\taskbarcpl.dll

Windows\System32\tdc.ocx
Windows\System32\telephon.cpl
Windows\System32\themecpl.dll
Windows\System32\themeservice.dll
Windows\System32\themeui.dll
Windows\System32\thumbcache.dll
Windows\System32\ticrf.rat
Windows\System32\timedate.cpl
Windows\System32\timer.drv
Windows\System32\tquery.dll
Windows\System32\tsbyuv.dll
Windows\System32\tsdiscon.exe
Windows\System32\ttlsauth.dll
Windows\System32\ttlscfg.dll
Windows\System32\twext.dll
Windows\System32\twinapi.appcore.dll
Windows\System32\twinapi.dll
Windows\System32\twinui.appcore.dll
Windows\System32\twinui.dll
Windows\system32\ubpm.dll
Windows\System32\udwm.dll
Windows\System32\uianimation.dll
Windows\System32\uiautomationcore.dll
Windows\System32\uiribbon.dll
Windows\System32\uiribbonres.dll

Windows\System32\umpoext.dll
Windows\System32\umpowmi.dll
Windows\System32\url.dll

Windows\System32\ustprov.dll
Windows\System32\van.dll
Windows\System32\vaultcli.dll
Windows\System32\vbisurf.ax
Windows\System32\vfwwdm32.dll
Windows\System32\vidcap.ax
Windows\System32\vmstorfltres.dll

Windows\System32\wavdest.dll
Windows\System32\wavemsp.dll
Windows\System32\wbem\*.*


Windows\System32\wbem\msi.mof
Windows\System32\wbem\msiprov.dll
Windows\System32\wbem\wbemcntl.dll
Windows\System32\wcmapi.dll
Windows\System32\wcmcsp.dll
Windows\System32\wcmsvc.dll
Windows\System32\wcnapi.dll

Windows\System32\wcncsvc.dll
Windows\System32\wcneapauthproxy.dll
Windows\System32\wcneappeerproxy.dll
Windows\System32\wcnnetsh.dll
Windows\System32\wcnwiz.dll
Windows\System32\wdi.dll


Windows\System32\wdi\perftrack\Wlansvc.ptxml
Windows\System32\wdmaud.drv
Windows\System32\webcheck.dll

Windows\System32\wevtfwd.dll
Windows\System32\wextract.exe

Windows\System32\wfhc.dll
Windows\System32\wiaservc.dll
Windows\System32\windows.globalization.dll
Windows\System32\windows.globalization.fontgroups.dll
Windows\System32\windows.graphics.dll
Windows\System32\windows.immersiveshell.serviceprovider.dll
Windows\System32\windows.networking.connectivity.dll
Windows\System32\windows.networking.dll
Windows\System32\windows.networking.hostname.dll
Windows\System32\windows.ui.dll
Windows\System32\windows.ui.immersive.dll
Windows\System32\WindowsCodecsExt.dll

Windows\System32\winlangdb.dll
Windows\System32\winrnr.dll

Windows\System32\winusb.dll
Windows\System32\wkspbrokerax.dll
Windows\System32\wksprtps.dll
Windows\System32\wlanapi.dll
Windows\System32\wlancfg.dll
Windows\System32\wlanconn.dll
Windows\System32\wlandlg.dll
Windows\System32\wlanext.exe

Windows\System32\wlangpui.dll
Windows\System32\wlanhc.dll
Windows\System32\wlanhlp.dll
Windows\System32\wlaninst.dll
Windows\System32\wlanmm.dll
Windows\System32\wlanmsm.dll
Windows\System32\wlanpref.dll
Windows\System32\wlanradiomanager.dll
Windows\System32\wlansec.dll
Windows\System32\wlansvc.dll
Windows\System32\wlansvcpal.dll
Windows\System32\wlanui.dll
Windows\System32\wlidprov.dll
Windows\System32\wmiclnt.dll
Windows\System32\wmphoto.dll
Windows\System32\wow32.dll

Windows\System32\wpd_ci.dll
Windows\System32\wpnapps.dll
Windows\System32\wpncore.dll
Windows\System32\wpninprc.dll
Windows\System32\wpnprv.dll
Windows\System32\wscui.cpl
Windows\System32\wsdapi.dll
Windows\System32\wshext.dll
Windows\System32\wshqos.dll
Windows\System32\wuapi.dll
Windows\System32\wudriver.dll
Windows\System32\wups.dll
Windows\System32\wusa.exe
Windows\System32\wwaninst.dll
Windows\System32\wwanmm.dll
Windows\System32\wwanradiomanager.dll

Windows\System32\xinput9_1_0.dll
Windows\System32\xolehlp.dll
Windows\System32\xwizard.dtd
Windows\System32\xwizard.exe
Windows\System32\xwizards.dll
Windows\System32\xwreg.dll
Windows\System32\xwtpdui.dll
Windows\System32\xwtpw32.dll
Windows\System32\zipfldr.dll

Windows\web\wallpaper\Windows\img0.jpg

; Search
Windows\System32\prm*.dll

; == Recuva VSS
Windows\Vss\
Windows\System32\vssadmin.exe

; == Adv IP Scanner
Windows\System32\mgmtapi.dll
Windows\System32\wsnmp32.dll

; Softmaker Office
Windows\System32\mf.dll
Windows\System32\mfreadwrite.dll
Windows\System32\opengl32.dll
Windows\System32\mfcore.dll
Windows\System32\mfnetcore.dll

; Ammy
Windows\System32\RESAMPLEDMO.DLL

;OSK
Windows\System32\osk.exe
Windows\System32\OskSupport.dll
Windows\System32\pcacli.dll
Program Files\Common Files\microsoft shared\ink\tabskb.dll
Program Files\Common Files\microsoft shared\ink\tipresx.dll
Program Files\Common Files\microsoft shared\ink\fsdefinitions\

