Sample_aa7e7a7b0d

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Malware creates the following process(es):

Rising.dat:1080

The Malware injects its code into the following process(es):

%original file name%.exe:1380

Mutexes

The following mutexes were created/opened:

ZonesLockedCacheCounterMutexZonesCounterMutexZonesCacheCounterMutexRasPbFileWininetProxyRegistryMutexWininetConnectionMutexWininetStartupMutexc:!documents and settings!adm!local settings!history!history.ie5!c:!documents and settings!adm!cookies!c:!documents and settings!adm!local settings!temporary internet files!content.ie5!_!MSFTHISTORY!_{DB37DF94-6157-42e3-8324-3FF035409B59}

File activity

The process %original file name%.exe:1380 makes changes in the file system.

The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\r[1].aspx (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RSB2.tmp.rs (215 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\GuideConfig5701[1].xml (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\mob[1].exe (1793723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\urg[1].htm (336 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RavDown\Rising.dat.rs (1798205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RavDown\Rising.info (136 bytes)

The Malware deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\r[1].aspx (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\urg[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\mob[1].exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\GuideConfig5701[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RSB2.tmp (0 bytes)

The process Rising.dat:1080 makes changes in the file system.

The Malware creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rnoauto.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mini.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\defmon.dll (2545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstore\rsstore.dll (1730 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tacco2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ExtOLE.dll (1506 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\css\style.css (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\navsel.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\mini.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\rscommx2.dll (1028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\rsindent.dll (3616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rstask.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSel.exe (8292 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\running.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tfiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tboot.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\rmvbtn1.png (431 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\s.gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RavLite.exe (1382 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\adware.gif (368 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagehelp.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\RegGuide.dll (946 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\Langcht.png (426 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\texproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanlogo.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\SetIco.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cappctl.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\scancfg.xml (896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\treboot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\uprslog.dat (261 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\uncheck.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\risview\risview.xml (417 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppremv.css (697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\run\runtip.png (807 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfoot.png (135 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scansrvp.dll (1503 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitlerc.png (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsLogVw.xml (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanobjb.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\rsbsmain.xml (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\keyarea.gif (234 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsg1.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\prohd.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\RsMain.dll (1024 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\texprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logC.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\SC.dll (345 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\filemon2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\chmpge.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\filemon.png (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanentb.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logb1.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\preview.png (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\hd.gif (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\ramdisk.gif (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\about.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfoot.png (135 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\Langchs.png (394 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaiprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\validate.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\syslay.dll (1749 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info0936.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\waiting.gif (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secchs.png (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tips.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110322_01.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoMin.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_17.gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tremprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\letters.cpf (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\ieprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\refs.dll (1922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\rootkit.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\frmright.png (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RKPColl.dll (2077 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backeng.png (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secchs.png (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-007.gif (283 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfootrc.png (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\bg2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur021.dat (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tpack.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\line.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monview\monview.xml (767 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitlelc.png (303 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\btnClose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\ravlang1.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\Rising.ico (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollV.png (388 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitle.png (172 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\toolview\rsuitool.dll (423 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\toolshov.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\run\runtip.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\chinese.cpf (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rsmgr.dll.dat (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\look.png (745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootlca.png (989 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmon\Mond.xml (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask2.png (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RavSetup.dll (8109 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\fb.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-40.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\msvcr71.dll (3235 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD1252\Eng.lag (52 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask4.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur022.dat (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstdown.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rexp.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\fbnof.png (188 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\regguide.xml (853 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\main.css (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\help2.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\ravlang2.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\RegGuide.exe (10730 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\rsuser.db1 (69 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Frmmsgb2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD932\Jpn.lag (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\validate.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skinbk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\RsTray.exe (2609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgt.png (490 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\ravtask.xml (786 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\treg2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\skin.ini (176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vtabsel.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-031.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\idiom.dat (7972 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mainplug\Scan.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask2.png (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\toolshov.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MeBarBtn.png (369 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgBk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\virlibbk\RavUsb.exe (1677 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppmaiprg.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\lics1252.txt (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootrc.png (206 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMask.png (381 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\CloudSys.exe (5994 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\localopt.dll (2873 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-024.gif (283 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\rsskin1.xml (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\whoa.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanprg.gif (658 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\editprt.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgbg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\closebtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\cloud.xml (607 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\fix2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\LogAc.bmp (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\passbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlog\ravlog.xml (501 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\main.css (29 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free0936.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\lics936.txt (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgBk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\Hooksys.dll (354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extcryp.dll (605 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\prcbtnr.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extsfx.dll (1783 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RavExt64.dll (1311 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\trojan.gif (580 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\ieprt.png (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\log2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsLogVw.xml (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scanevnt.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanSrv.dll (1369 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tflash.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_tr.gif (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\cfgbg1.png (652 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\spectool.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\filemon.png (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\moncfg.xml (887 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\rsmginfo.dll (3031 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\pptip.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\help.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\passwd.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\cnt09.dll (2799 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc0936.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfootrc.png (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail0950.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\ieprt.png (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgtotal.png (409 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\editprt.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfoot.png (135 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\accemon.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootlc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\taskplug.dll (1884 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tagent.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootlc.png (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgLf.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\aboutcfm.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\RsXML.dll (1384 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Lang.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rnoinf.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\security\security.xml (479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Editbk.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\unknown.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-005.gif (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\RAVUI.xml (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderb3.png (646 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppcb1.css (606 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ravext.dll (2769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\nt6\RavMonD.exe (1263 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\mondrvm.dll (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\buttoni2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\logquery.dll (4226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tflash2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CheckBox.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\traycfg.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logb2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tflash.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\filemon.xml (860 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoClose1.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\RsGather.dll (8558 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\resumbtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagebtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgtblhd.png (419 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsAbout.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\passwd.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayMgr.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSet.dll (1065 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ComboBox.png (413 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.lag (48 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\minirst.css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\texproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\delete.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\combase.dll (3292 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\popup\mail.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\title.png (240 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secchkbg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tbody.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitle.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\confbtn.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\mondrvd.dll (405 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\ravdefdb.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconf\rsconf.xml (862 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox2.gif (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\buttons.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tlinux.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extarch.dll (7495 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\RsVirIns.dll (1851 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vtabsel.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Spin.png (450 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bacore.dll (1037 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsdinfo.dll (1519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\exitbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\exit.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\bktotray.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\SetIco.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\passbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tbodyb.png (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\preview.png (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\css\jqtree.css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cview\Gcompt.dll (2499 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\rmvbtn1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\MonDef.dll (4261 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-452.gif (707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\treg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanExec.dll (2964 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\TreeIcon.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RavStore.xml (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\upbutton.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\closewnd.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cloud2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur011.dat (109 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\monbase.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\dc.dll (712 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\posttrt.dll (1691 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoClose2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\delete.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tkaka2.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\about.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgf.png (298 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagefix.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\rav1252.xml (488 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagesrv.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mobprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\probk.png (255 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr0950.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoClose2.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\CompsVer.inf (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconf\rsconf.dll (3945 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CloudMP.dll (4028 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\fix1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\pie.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ravbase.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\fastscan.png (17 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlsthd.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-019.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\scantray.dll (2430 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\defcfg.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logb1.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\config.xml (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\backdoor.gif (642 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\allscan.png (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlog\rslog.dll (6435 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\add.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanlogo.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\Setup.exe (3831 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootlca.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanobjb.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur015.dat (113 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\MC.xml (78 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgF.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-018.gif (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-023.gif (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\tips.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\chs.lag (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\loading.gif (771 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-453.gif (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backchs.png (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\help2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\slider.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\main.js (41 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPA.dll (2273 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extcomp.dll (5331 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\buttoni2.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox0.gif (168 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\boottip.xml (467 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaldefr.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\radiobox.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\Config.dll (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\rsbootbk.exe (2936 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tcndn.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mobprt.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-021.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\fix2.png (675 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\wbprotect.dll.dat (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitle.png (172 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\texprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RSTray.xml (714 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\button.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\scanobj.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\RsStub.dll (727 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfictnb.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-026.gif (147 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\rsstub.xml (895 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstup.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\check.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderb3.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\Upgrade.exe (7801 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tbody.png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\rstask.dll (1057 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\texprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tbodyb.png (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\behav2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmon.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secchkbg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\dobutton.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\seccht.png (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\ltnof.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rexp.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tcndn.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\rslogvw.dll (6309 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\seccht.png (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollC.png (243 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanfin.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagefix.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0213.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\behav.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail1252.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\rsmondef.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowemn.gif (898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\slider2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RsMain.ico (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\stview\stview.xml (474 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\rscmp.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfictn.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanSimT.dll (216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tspec.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\aboutcfm.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\isolview\Isol.dll (1338 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ListHead.png (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\secchk.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask1.png (390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\redi.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cappctl.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cfilprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\setup.dat (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rnoinf.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\dropyes.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\mini.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tbody.png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn0936.htm (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0212.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsAbout.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangCfg.dll (494 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\waiting.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.la0 (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\seceng.png (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\rsmon.db1 (23 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monstate\monstate.dll (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\ravguide.xml (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\secchk.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\footlc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\rslogdll.dll (1241 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK0936.HTM (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitlelc.png (297 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\rav936.xml (501 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\scanobj.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPB.dll (447 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\license\license.xml (366 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-43.gif (678 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vmnubg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\pearc.dll (422 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tupfail.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tiso.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\leaf.gif (952 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\RsStub.exe (162 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnrstbg.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\setup.dat (1026 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\spectool.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanprgb.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\ATip936.ini (508 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secclose.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowpn.gif (900 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\folderop.gif (958 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_nt.gif (52 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\main.htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur009.dat (151 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info1252.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur027.dat (1849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backcht.png (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mailmon2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\spanup.xml (484 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanprgb.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\secchk.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\minwnd.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnlion.png (895 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\RsGuiLib.dll (5950 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\rt.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\aboutbg.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\exitbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tacco.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0214.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppyel.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\button.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\mruleui.dll (3753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\bsmain.exe (267 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfictn.png (480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Rswizard.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\memory.gif (582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\chmpgs.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\prohd.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tacco.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowep.gif (907 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\_rav\_rav.xml (524 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tlinux.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\tips.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\label.dat (140 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\line.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\redi.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\ATip1252.ini (724 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\virus.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rspalvd.dll (1250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\hookbase.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\let_num.cpf (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\minirst.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\main.htm (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-012.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pageact.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tkaka2.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin2.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ScanTray.bmp (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanfin2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tfiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info0950.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logb2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-003.gif (537 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\virboot.bas (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\report.xml (256 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-035.gif (372 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\rsrp.exe (200 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfootrc.png (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\minirst.js (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\mini.js (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppred.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\cbs.gif (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootrc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Editbk.png (199 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110322_02.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\hlpmnubk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsBackup.exe (3601 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMask1.png (449 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rnoinf.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\exit.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\Auto.ini (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfictn.png (529 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\upcfgrav.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\chmpgs.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cusscan.png (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tpack2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tkaka.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\Filemon.rwl (269 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mobprt.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-433.gif (687 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\closebtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfootlc.png (208 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\rstray.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tips.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\waiting.gif (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tlinux2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\mail.gif (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\exit.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\icon.png (895 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\treg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgLf.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanfin.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur025.dat (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rspalmgr\rspalmgr.dll (1653 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-037.gif (373 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\scanobj.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mainplug\mainplug.xml (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollH.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\jqtree.js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\dhtmlfrm\dhtmlfrm.xml (793 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-006.gif (269 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\rmvbtn2.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Frmmsgb2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgL.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur029.dat (101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tbody.png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\ravscrch.dll (647 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scanfrm.sc (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfootlc.png (210 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\exit.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\eng.lag (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tupfail.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\footrc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollC.png (272 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur028.dat (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\stview\Tools.dll (215 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mncls.png (715 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\virusdb.cfg (354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\frmleft.png (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\Filemon.dll (1922 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowepn.gif (900 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgL.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tboot2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tediprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tcndn.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\license\12345678.000 (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\MailMon.dll (2495 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppcb1.css (646 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\logdb.xml (840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\rav950.xml (482 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanRavT.dll (1082 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RegGuide.xml (527 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfictn.png (471 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgpct.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\rsscomps.xml (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\langset.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvrinfo\rsvrinfo.xml (418 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\Scanner.dll (4341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanStub.dll (101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-41.gif (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\behav.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\GatFile.dll (710 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstchk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuLine.png (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\titleNof.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab3.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\accemon2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanMac.dll (1227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc0950.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\PageMgr.xml (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\rslogo.png (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\RsTray.dll (1857 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\_rav\Setup.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmaldef.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\passwd.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPCUsb.dll (69 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang\rslang.xml (805 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\pie.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmaldef.htm (269 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tacco2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tupfail.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\chmpgs.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extalgo.dll (64 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin2d.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\popup.js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur026.dat (138 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rnoauto.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderbr.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_tl.gif (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\LocalMD5.db (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\modeview\modeview.xml (766 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backcht.png (61 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur013.dat (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tclose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\passwd.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pc.dll (121 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0211.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\cfgbg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanAdd.dll (1498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\RsBootBk.dll (275 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\ui.ini (110 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cloud.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollV.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extup.dll (1528 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK0950.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-009.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\msvcp71.dll (2159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\aboutbg.png (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnrstbg.png (142 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\stopbtn.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bawhite.dat (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsg1.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\editprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\ATip950.ini (508 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pageact.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppblu.css (900 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\rmvbtn2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\menuico.gif (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rsundlg.dll (15354 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgf.png (298 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoClose1.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\monweb.xml (788 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\virlibbk\virlibbk.xml (861 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Comaxs.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backeng.png (62 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitlerc.png (299 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\navsel.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free1252.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\cfgbg1.png (716 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\texproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagesrv.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-028.gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\rslogo.png (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmon.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppred.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanentb.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\editprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Rswizard.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Langbk.png (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnps.png (545 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfoot.png (135 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\rsbootbk.xml (604 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitlerc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-004.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowmn.gif (898 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ListHead.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowe.gif (844 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\uprsmon.dat (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsSafe.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\popup.css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\exit.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\isolview\isolview.xml (809 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagebtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\foot.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\rsscan.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc0936.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\recomp.cfg (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\jquery.js (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cfilprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\scanobj.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanBT.dll (8034 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\mscrt.xml (697 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mncore.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\TrayShutdown.dll (1015 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\lt.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tsp.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\ravstore.dll (3896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask3.png (971 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitle.png (175 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mailmon.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK1252.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\BaseSkin.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\mc.dll (1646 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RsdSfxTmp\Rav.7z (91569 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cview\cview.xml (517 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnrsm.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoMin1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\SetIcoL.png (54 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur023.dat (101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\updater.exe (2332 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\ravstore.exe (367 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\rsrp.xml (644 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\url.ini (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr1252.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\folder.gif (952 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppblu.css (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\recomp.dll (1353 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgtotal.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMask.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\LogDc.bmp (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\rslogvw.bmp (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0112.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skinbk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tclose.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\maincfg\rsmain.ini (495 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-008.gif (283 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitlelc.png (318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\rtnof.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitlerc.png (294 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tspec.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnps.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\boot.gif (556 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tabbg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tbodyb.png (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\scanview.xml (664 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tiso2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tbody.png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\Proccom.dll (626 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsConfig.xml (77 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\seceng.png (42 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuBtn.png (661 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tbody.png (137 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanprg.gif (606 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgt.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaiprog.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\behav2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cloud.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tsp.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tremprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.lag (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tclose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\hlpmnubk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\ComServ.dll (3145 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mailmon2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\BaseSkin.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppconf.css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\update.xml (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\rsvirlib.xml (628 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur006.dat (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur016.dat (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ra1103948.dat (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnlion.png (895 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\MonBase.dll (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\rsmonweb.dll (794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl1252.htm (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Spin.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaldefr.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur012.dat (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn0950.htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaiprog.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\scroll.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\upbutton.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMaskL.png (327 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\prcbtnr.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravxp\ravxp.exe (1301 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\bktotray.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfoot.png (135 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppremv.css (660 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0091.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\filemon2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\PngDll.dll (1720 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\rsnetsvr.dll (2522 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppconf.css (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderbk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secclose.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\maincfg\maincfg.xml (748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoMin1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\hlpmnuhv.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmginfo.dll (4141 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mini.png (498 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tagent2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\upload.xml (666 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\ravlang3.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-033.gif (360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\ravmain.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RsScan.dll (1227 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\secchk.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tfiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\fix1.png (582 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\moncom08.dll (1435 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanSct.dll (1843 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab3.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rexp.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rspalmgr\rspalmgr.xml (537 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc1252.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\exit.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitle.png (175 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110321_01.gif (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\hlpmnuhv.png (997 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_lb.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\accemon2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\SysMail.dll (101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\dobutton.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanpe.dll (2198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\relibldr.dll (2323 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\RsConfig.exe (1146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\tips.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\whoa.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSSETUP.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\cfgbg.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\runcls.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ComboBox.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\rsxml3.dll (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cappctl.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RsTray.ico (68 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\cl.def (31 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaiprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-030.gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\about.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ui\snin.htm (527 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RAV.ico (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\stopbtn.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\LogVw.dll (1060 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\bg2.png (182 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\lnchr.dat (243 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\rscmp.dll (840 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110318_01.gif (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\computer.gif (576 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\rsusb.xml (969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-015.gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang.dll (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstore\rsstore.xml (565 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tlinux2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tkaka.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvrinfo\rsvrinfo.dll (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfoot.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox1.gif (174 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderbr.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\confbtn.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\common.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\wbshld.dll.dat (1705 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMask1.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\resumbtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\langset.xml (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsAppMgr.dll (64 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\log2.png (314 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin2d.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\langcfg.xml (829 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\popup.css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-44.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppmaiprg.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\about.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanMpe.dll (1991 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\rsskin2.xml (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfictnb.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\dhtmlfrm\dfwMain.dll (3443 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_rb.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\CheckOld.exe (758 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\lics950.txt (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\HookTdi.dll (55 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowp.gif (910 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mailmon.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Comaxs.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\alert.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\RsUsb.dll (658 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_eng.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfootrc.png (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\add.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-011.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\radiobox.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\menuico.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pausebtn.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD950\CHT.lag (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\scanobj.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\minirst.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\Gather.xml (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\secchk.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tagent.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-432.gif (707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\allscan.png (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravxp\ravxp.xml (420 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\worm.gif (588 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfoota.png (931 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-025.gif (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\minirst.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CheckBox.png (681 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\num.cpf (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\about.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur020.dat (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\look.png (745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\CfgDll.dll (707 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\pptip.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\chmpge.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tboot.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\arrows.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaiprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\chngskin.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MeBarBtn.png (369 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstup.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstchk.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgbg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\scanobj.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoMin.png (518 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\msgbtn.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\secchk.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\defcfg.dll (4097 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\Proccomm.dll (1583 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\css\style1.css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rnoauto.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-034.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\running.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\slider.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_br.gif (115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-45.gif (698 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\cht.lag (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\mini.css (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ffr.dll (2015 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\MonComm.dll (1138 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur004.dat (134 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\buttons.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\RavMonD.exe (144 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_bl.gif (116 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\msgbtn.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backchs.png (62 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayMenu.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RegGuide.xml (527 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_chs.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.lag (86 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\alert.wav (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMaskL.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl0950.htm (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free0950.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\MID.ico (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuBtn.png (447 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuIcon.png (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\libtool.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\setting.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_cht.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmon\ravmon.xml (750 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tpack2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsg.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagehelp.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfoota.png (931 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-010.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\OFF.ico (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootrca.png (988 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail0936.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-027.gif (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\dvd.gif (376 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsdk.dll (1501 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin1.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\main.htm (18 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur007.dat (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuLine.png (300 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\MakeUsb.dll (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\2K\ScanTray.bmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-013.gif (379 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\treboot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Lang.png (508 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\redi.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\dfw.dll (4139 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\chngskin.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tclose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\passwd.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tflash2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\PreScan.dll (296 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\footrc.png (410 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tiso.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RavStore.xml (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsStub.exe (64 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfootlc.png (208 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\treg2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-036.gif (372 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\slider2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgtt.png (330 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-032.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanfin2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuIcon.png (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-029.gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\closewnd.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monview\MonMgr.dll (596 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logC.png (822 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur019.dat (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cusscan.png (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.la0 (1931 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\nethd.gif (606 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Buttoni.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsConfig.xml (77 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\SC.xml (71 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowm.gif (908 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_fb.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgF.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\SetIcoL.png (57 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowl.gif (846 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfictnb.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr0936.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monstate\monstate.xml (511 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur024.dat (92 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\ravtray.xml (923 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootrca.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tfiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pubcfg.dll (6089 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-020.gif (158 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgtblhd.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pubcfg.xml (885 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-017.gif (301 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\security\Security.dll (1341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab1.png (713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tremprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\TreeIcon.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\MonTray.dll (8088 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\VirusLog.db (36 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\rbase.xml (875 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tfiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang\rslang.dll (1258 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\logvw.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlsthd.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-016.gif (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD936\CHS.lag (28 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\engext.dll (837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderbk.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.lac (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\PC.xml (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.lac (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tbodyb.png (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pausebtn.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\check.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\cnt08.dll (284 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\about.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Buttoni.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scandeep.dll (393 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsMgrSvc.exe (419 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin1.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\MonRule.dll (2089 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\Repair.url (155 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tediprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPA.exe (5131 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\rsmain.exe (1069 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin2.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\uprsuser.dat (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\UsbBoot.exe (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfootlc.png (210 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vtab.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanelf.dll (1115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\risview\logstat.dll (101 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\rsengine.xml (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask1.png (390 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfictnb.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur014.dat (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\RsSrv.dll (1792 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tabbg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\LangENG.png (341 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ExtMail.dll (2060 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.lac (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\chmpge.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-022.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl0936.htm (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-0050.gif (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\log.png (318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ON.ico (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\ieprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\waiting.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmiprotb.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mobprt2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\mailmon.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\storeexe.xml (986 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vtab.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RSTray.xml (714 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\rsconfig.xml (948 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfictn.png (471 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgtt.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\mini.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\os.xml (685 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\minirst.css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tfiproty.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc1252.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_01.gif (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\ReportT.xml (221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\button2.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\minwnd.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbow.gif (850 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitlelc.png (303 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanex.dll (8813 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSet.exe (64 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\keypoint.bin (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tiso2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\comx3.dll (1841 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn1252.htm (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mncls.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cfilprot.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tpack.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\rsmsg.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfictn.png (480 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitlelc.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tclose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scantj.dll (1896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-39.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstdown.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tclose.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_16.gif (507 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\accemon.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\rsguilib.xml (727 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask3.png (971 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\button2.png (585 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\fastscan.png (19 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitlerc.png (299 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tagent2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\movable.gif (355 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\uncheck.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmaldef.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsSafe.xml (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\comx3.dll (2859 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bawhite.dll (1590 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Langbk.png (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\probk.png (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\RsConfig.dll (4368 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmon.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\toolview\toolview.xml (479 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cloud2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgpct.png (361 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\reliverav.dat (1682 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\foot.png (331 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitle.png (184 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\rslogvw.exe (55 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-001.gif (609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\LogSign.db (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayIcon.xml (552 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\mini.css (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-038.gif (377 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\rsvirbas.xml (475 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\rscomm.xml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mncore.png (178 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanPrxy.dll (6343 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitlelc.png (297 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\treboot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-42.gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\runcls.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\button.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\footlc.png (410 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\skin.ini (176 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.la0 (130 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-014.gif (379 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\rslogvw.bmp (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\rsolscan.dll (816 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\passwd.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask4.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\nvfile.dll (1977 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollH.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\help.png (817 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaldefr.htm (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tediprot.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur010.dat (76 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\log.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\syslay.dll (1883 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tsp.htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\setting.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnrsm.png (638 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\DC.xml (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowem.gif (905 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\modeview\Misc.dll (278 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vmnubg.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaiprog.htm (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logbg.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppyel.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-002.gif (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\popwndexe.exe (858 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\MFC71.dll (9956 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110321_04.gif (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc0950.htm (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\RavBin.dll (1373 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tboot2.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitlerc.png (294 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\moncfg.dll (1886 bytes)

Registry activity

The process %original file name%.exe:1380 makes changes in the system registry.

The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 14 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9B 8E 77 1D B1 FD 46 24 9A 9B DB 6F F9 4F F4 E4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCR\CLSID\{CAA2D3B1-4BB5-4a45-A17A-122773379D99}]
"ProcID" = "{C04F6F76-2204-6648-3030-303030303030}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Malware modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Malware modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Malware modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Malware adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RavDown" = "c:\%original file name%.exe /session 698238F00B5F4BAA98B8C337B7017BBC /subkey RAV"

The Malware deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process Rising.dat:1080 makes changes in the system registry.

The Malware creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0E 43 2C AE D6 69 5E 6A 99 15 88 71 F5 FC E9 18"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):

   Rising.dat:1080

2. Delete the original Malware file.
   
3. Delete or disinfect the following files created/modified by the Malware:

   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\r[1].aspx (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RSB2.tmp.rs (215 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\GuideConfig5701[1].xml (211 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\mob[1].exe (1793723 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\urg[1].htm (336 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RavDown\Rising.dat.rs (1798205 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RavDown\Rising.info (136 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rnoauto.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mini.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\defmon.dll (2545 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstore\rsstore.dll (1730 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tacco2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ExtOLE.dll (1506 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\css\style.css (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\navsel.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\mini.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\rscommx2.dll (1028 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\rsindent.dll (3616 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rstask.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSel.exe (8292 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\running.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tfiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tboot.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\rmvbtn1.png (431 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\s.gif (43 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RavLite.exe (1382 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\adware.gif (368 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagehelp.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\RegGuide.dll (946 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\Langcht.png (426 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\texproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanlogo.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\SetIco.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cappctl.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\scancfg.xml (896 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\treboot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\uprslog.dat (261 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\uncheck.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\risview\risview.xml (417 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppremv.css (697 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\run\runtip.png (807 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfoot.png (135 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scansrvp.dll (1503 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitlerc.png (310 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsLogVw.xml (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanobjb.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\rsbsmain.xml (565 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\keyarea.gif (234 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsg1.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\prohd.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\RsMain.dll (1024 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\texprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logC.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\SC.dll (345 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\filemon2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\chmpge.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\filemon.png (10 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanentb.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logb1.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\preview.png (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\hd.gif (211 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\ramdisk.gif (211 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\about.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfoot.png (135 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\Langchs.png (394 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaiprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\validate.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\syslay.dll (1749 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info0936.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\waiting.gif (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsg.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secchs.png (44 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tips.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110322_01.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoMin.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_17.gif (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tremprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\letters.cpf (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\ieprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\refs.dll (1922 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\rootkit.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\frmright.png (180 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RKPColl.dll (2077 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backeng.png (89 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secchs.png (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-007.gif (283 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfootrc.png (203 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\bg2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur021.dat (133 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tpack.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\line.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monview\monview.xml (767 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitlelc.png (303 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\btnClose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\ravlang1.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\Rising.ico (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollV.png (388 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitle.png (172 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\toolview\rsuitool.dll (423 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\toolshov.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\run\runtip.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\chinese.cpf (7386 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rsmgr.dll.dat (67 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\look.png (745 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootlca.png (989 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmon\Mond.xml (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask2.png (822 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RavSetup.dll (8109 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\fb.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-40.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\msvcr71.dll (3235 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD1252\Eng.lag (52 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask4.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur022.dat (80 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstdown.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rexp.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\fbnof.png (188 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\regguide.xml (853 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\main.css (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\help2.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\ravlang2.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\regguide\RegGuide.exe (10730 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\rsuser.db1 (69 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Frmmsgb2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD932\Jpn.lag (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\validate.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skinbk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\RsTray.exe (2609 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgt.png (490 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\ravtask.xml (786 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\treg2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\skin.ini (176 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vtabsel.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-031.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\idiom.dat (7972 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mainplug\Scan.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask2.png (822 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\toolshov.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MeBarBtn.png (369 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgBk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\virlibbk\RavUsb.exe (1677 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppmaiprg.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\lics1252.txt (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootrc.png (206 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMask.png (381 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\CloudSys.exe (5994 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\localopt.dll (2873 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-024.gif (283 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\rsskin1.xml (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\whoa.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanprg.gif (658 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\editprt.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgbg.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\closebtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\cloud.xml (607 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\fix2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\LogAc.bmp (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\passbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlog\ravlog.xml (501 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\main.css (29 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free0936.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\lics936.txt (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgBk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\Hooksys.dll (354 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extcryp.dll (605 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\prcbtnr.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extsfx.dll (1783 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RavExt64.dll (1311 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\trojan.gif (580 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\ieprt.png (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\log2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsLogVw.xml (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scanevnt.dll (88 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanSrv.dll (1369 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tflash.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_tr.gif (89 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\cfgbg1.png (652 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\spectool.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\filemon.png (10 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\moncfg.xml (887 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\rsmginfo.dll (3031 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\pptip.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\help.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\passwd.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\cnt09.dll (2799 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc0936.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfootrc.png (202 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail0950.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\ieprt.png (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgtotal.png (409 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\editprt.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfoot.png (135 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\accemon.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootlc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\taskplug.dll (1884 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tagent.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootlc.png (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgLf.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\aboutcfm.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\RsXML.dll (1384 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Lang.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rnoinf.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\security\security.xml (479 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Editbk.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\unknown.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-005.gif (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\RAVUI.xml (102 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderb3.png (646 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppcb1.css (606 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ravext.dll (2769 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\nt6\RavMonD.exe (1263 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\mondrvm.dll (68 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\buttoni2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\logquery.dll (4226 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tflash2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CheckBox.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\traycfg.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logb2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tflash.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\filemon.xml (860 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoClose1.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\RsGather.dll (8558 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\resumbtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagebtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgtblhd.png (419 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsAbout.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\passwd.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayMgr.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSet.dll (1065 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ComboBox.png (413 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.lag (48 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\minirst.css (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\texproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\delete.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\combase.dll (3292 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\popup\mail.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\title.png (240 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secchkbg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tbody.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitle.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\confbtn.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\mondrvd.dll (405 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\ravdefdb.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconf\rsconf.xml (862 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox2.gif (181 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\buttons.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tlinux.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extarch.dll (7495 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\RsVirIns.dll (1851 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vtabsel.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Spin.png (450 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bacore.dll (1037 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsdinfo.dll (1519 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\exitbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\exit.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\bktotray.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\SetIco.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\passbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tbodyb.png (934 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\preview.png (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\css\jqtree.css (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cview\Gcompt.dll (2499 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\rmvbtn1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\MonDef.dll (4261 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-452.gif (707 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\treg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanExec.dll (2964 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\TreeIcon.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RavStore.xml (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\upbutton.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\closewnd.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cloud2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur011.dat (109 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\monbase.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\dc.dll (712 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\posttrt.dll (1691 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoClose2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\delete.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tkaka2.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\about.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgf.png (298 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagefix.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\rav1252.xml (488 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagesrv.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mobprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\probk.png (255 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr0950.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoClose2.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\CompsVer.inf (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconf\rsconf.dll (3945 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CloudMP.dll (4028 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\fix1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\pie.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ravbase.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\fastscan.png (17 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlsthd.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-019.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\scantray.dll (2430 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\defcfg.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logb1.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\config.xml (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\backdoor.gif (642 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\allscan.png (16 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlog\rslog.dll (6435 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\add.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanlogo.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\Setup.exe (3831 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootlca.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanobjb.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur015.dat (113 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\MC.xml (78 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgF.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-018.gif (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-023.gif (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\tips.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\chs.lag (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\loading.gif (771 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-453.gif (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backchs.png (89 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\help2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\slider.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\main.js (41 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPA.dll (2273 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extcomp.dll (5331 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\buttoni2.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox0.gif (168 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\boottip.xml (467 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaldefr.htm (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\radiobox.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\Config.dll (147 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\rsbootbk.exe (2936 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tcndn.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mobprt.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-021.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\fix2.png (675 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\wbprotect.dll.dat (266 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitle.png (172 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\texprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RSTray.xml (714 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\button.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\scanobj.js (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\RsStub.dll (727 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfictnb.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-026.gif (147 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\rsstub.xml (895 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstup.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\check.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderb3.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\Upgrade.exe (7801 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tbody.png (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtask\rstask.dll (1057 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\texprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tbodyb.png (934 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\behav2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmon.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secchkbg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\dobutton.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\seccht.png (44 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\ltnof.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rexp.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tcndn.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\rslogvw.dll (6309 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\seccht.png (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollC.png (243 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanfin.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pagefix.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0213.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\behav.png (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail1252.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\rsmondef.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowemn.gif (898 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\slider2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RsMain.ico (81 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\stview\stview.xml (474 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\rscmp.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfictn.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanSimT.dll (216 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tspec.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\aboutcfm.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\isolview\Isol.dll (1338 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ListHead.png (233 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\secchk.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask1.png (390 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\redi.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cappctl.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cfilprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\setup.dat (117 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rnoinf.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\dropyes.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\mini.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tbody.png (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn0936.htm (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0212.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsAbout.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangCfg.dll (494 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\waiting.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.la0 (130 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\seceng.png (34 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\rsmon.db1 (23 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monstate\monstate.dll (84 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\ravguide.xml (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\secchk.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\footlc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\rslogdll.dll (1241 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK0936.HTM (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitlelc.png (297 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav936\rav936.xml (501 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\scanobj.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPB.dll (447 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\license\license.xml (366 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-43.gif (678 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vmnubg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\pearc.dll (422 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tupfail.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tiso.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\leaf.gif (952 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstub\RsStub.exe (162 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnrstbg.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\setup.dat (1026 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\spectool.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanprgb.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\ATip936.ini (508 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\secclose.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowpn.gif (900 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\folderop.gif (958 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_nt.gif (52 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\main.htm (18 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur009.dat (151 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info1252.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur027.dat (1849 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\backcht.png (88 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mailmon2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\spanup.xml (484 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanprgb.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\secchk.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\minwnd.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnlion.png (895 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\RsGuiLib.dll (5950 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\rt.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\aboutbg.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\exitbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tacco.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0214.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppyel.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\button.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\mruleui.dll (3753 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\bsmain.exe (267 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfictn.png (480 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Rswizard.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\memory.gif (582 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\chmpgs.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\prohd.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tacco.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowep.gif (907 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\_rav\_rav.xml (524 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tlinux.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\tips.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\label.dat (140 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\line.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\redi.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\ATip1252.ini (724 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\virus.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rspalvd.dll (1250 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\hookbase\hookbase.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\let_num.cpf (15 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\minirst.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\main.htm (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-012.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pageact.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tkaka2.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin2.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ScanTray.bmp (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanfin2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tfiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Info0950.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logb2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-003.gif (537 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\virboot.bas (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\report.xml (256 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-035.gif (372 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\rsrp.exe (200 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfootrc.png (202 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\minirst.js (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\mini.js (11 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppred.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\cbs.gif (300 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootrc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Editbk.png (199 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110322_02.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\hlpmnubk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsBackup.exe (3601 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMask1.png (449 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rnoinf.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\exit.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\Auto.ini (36 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfictn.png (529 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\upcfgrav.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\chmpgs.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cusscan.png (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tpack2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tkaka.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\Filemon.rwl (269 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mobprt.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-433.gif (687 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\closebtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfootlc.png (208 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\rstray.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tips.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\waiting.gif (673 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tlinux2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\mail.gif (556 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\exit.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\icon.png (895 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\treg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgLf.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanfin.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur025.dat (84 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rspalmgr\rspalmgr.dll (1653 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-037.gif (373 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\scanobj.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mainplug\mainplug.xml (750 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\ScrollH.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\jqtree.js (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\dhtmlfrm\dhtmlfrm.xml (793 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-006.gif (269 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\rmvbtn2.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Frmmsgb2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMsgL.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur029.dat (101 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tbody.png (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\ravscrch.dll (647 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\scanfrm.sc (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfootlc.png (210 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\exit.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav1252\eng.lag (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tupfail.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\footrc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollC.png (272 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur028.dat (146 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\stview\Tools.dll (215 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mncls.png (715 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\virusdb.cfg (354 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\frmleft.png (180 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\filemon\Filemon.dll (1922 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowepn.gif (900 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgL.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tboot2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tediprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tcndn.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\license\12345678.000 (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\MailMon.dll (2495 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppcb1.css (646 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\logdb.xml (840 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\rav950.xml (482 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanRavT.dll (1082 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RegGuide.xml (527 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfictn.png (471 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgpct.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\rsscomps.xml (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\langset.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvrinfo\rsvrinfo.xml (418 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\Scanner.dll (4341 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanStub.dll (101 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-41.gif (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\behav.png (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\GatFile.dll (710 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstchk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuLine.png (300 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\titleNof.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab3.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\accemon2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanMac.dll (1227 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc0950.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\PageMgr.xml (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\rslogo.png (37 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\RsTray.dll (1857 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\_rav\Setup.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmaldef.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\passwd.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPCUsb.dll (69 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang\rslang.xml (805 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\pie.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmaldef.htm (269 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tacco2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tupfail.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\chmpgs.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extalgo.dll (64 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin2d.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\popup.js (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur026.dat (138 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\rnoauto.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderbr.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_tl.gif (89 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\LocalMD5.db (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\modeview\modeview.xml (766 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backcht.png (61 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur013.dat (84 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tclose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\passwd.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pc.dll (121 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0211.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\cfgbg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanAdd.dll (1498 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\RsBootBk.dll (275 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\ui.ini (110 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cloud.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollV.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\extup.dll (1528 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK0950.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-009.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\msvcp71.dll (2159 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\aboutbg.png (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnrstbg.png (142 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\stopbtn.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bawhite.dat (22 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsg1.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\editprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\ATip950.ini (508 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pageact.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppblu.css (900 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\rmvbtn2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\menuico.gif (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\rsundlg.dll (15354 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgf.png (298 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoClose1.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\monweb.xml (788 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\virlibbk\virlibbk.xml (861 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Comaxs.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backeng.png (62 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitlerc.png (299 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\navsel.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free1252.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\cfgbg1.png (716 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\texproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagesrv.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-028.gif (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\rslogo.png (36 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmon.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppred.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanentb.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\editprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Rswizard.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Langbk.png (43 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnps.png (545 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfoot.png (135 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbootbk\rsbootbk.xml (604 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitlerc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-004.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowmn.gif (898 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ListHead.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowe.gif (844 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\uprsmon.dat (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsSafe.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\popup.css (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\exit.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\isolview\isolview.xml (809 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagebtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\foot.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\rsscan.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc0936.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\recomp.cfg (10 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\jquery.js (70 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cfilprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\scanobj.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanBT.dll (8034 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\mscrt.xml (697 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mncore.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\TrayShutdown.dll (1015 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\lt.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tsp.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\ravstore.dll (3896 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask3.png (971 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\ttitle.png (175 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mailmon.png (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\CaOK1252.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\BaseSkin.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\mc.dll (1646 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RsdSfxTmp\Rav.7z (91569 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cview\cview.xml (517 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnrsm.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoMin1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\SetIcoL.png (54 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur023.dat (101 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\updater.exe (2332 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\ravstore.exe (367 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\boottip\rsrp.xml (644 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\url.ini (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr1252.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\folder.gif (952 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppblu.css (889 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\recomp.dll (1353 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgtotal.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMask.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\LogDc.bmp (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\rslogvw.bmp (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0112.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skinbk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tclose.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\maincfg\rsmain.ini (495 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-008.gif (283 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitlelc.png (318 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\rtnof.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\ttitlerc.png (294 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tspec.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnps.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\boot.gif (556 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tabbg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tbodyb.png (934 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\scanview.xml (664 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tiso2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tbody.png (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\Proccom.dll (626 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsConfig.xml (77 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\seceng.png (42 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuBtn.png (661 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tbody.png (137 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\scanprg.gif (606 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgt.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaiprog.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\behav2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cloud.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tsp.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tremprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.lag (47 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tclose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\hlpmnubk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rstray\ComServ.dll (3145 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mailmon2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\BaseSkin.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppconf.css (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\update.xml (164 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirlib\rsvirlib.xml (628 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur006.dat (105 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur016.dat (80 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ra1103948.dat (150 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mnlion.png (895 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\MonBase.dll (117 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monweb\rsmonweb.dll (794 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl1252.htm (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Spin.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaldefr.htm (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur012.dat (76 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn0950.htm (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\cmaiprog.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\scroll.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\upbutton.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\FrmMaskL.png (327 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\prcbtnr.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravxp\ravxp.exe (1301 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\bktotray.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfoot.png (135 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\ppremv.css (660 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-0091.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\filemon2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\PngDll.dll (1720 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\cloud\rsnetsvr.dll (2522 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppconf.css (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\sliderbk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\secclose.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\maincfg\maincfg.xml (748 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\CoMin1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\hlpmnuhv.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmginfo.dll (4141 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mini.png (498 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tagent2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upload\upload.xml (666 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\ravlang3.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-033.gif (360 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\ravmain.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\RsScan.dll (1227 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\secchk.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tfiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\fix1.png (582 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\moncom08.dll (1435 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ScanSct.dll (1843 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\tab3.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\rexp.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rspalmgr\rspalmgr.xml (537 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\IfPc1252.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\exit.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitle.png (175 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110321_01.gif (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\hlpmnuhv.png (997 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_lb.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\accemon2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\SysMail.dll (101 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\dobutton.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanpe.dll (2198 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\relibldr.dll (2323 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\RsConfig.exe (1146 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\tips.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\whoa.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSSETUP.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\cfgbg.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\runcls.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ComboBox.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\rsxml3.dll (564 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cappctl.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RsTray.ico (68 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\cl.def (31 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaiprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-030.gif (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\about.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ui\snin.htm (527 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\RAV.ico (81 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\stopbtn.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\LogVw.dll (1060 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\bg2.png (182 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\lnchr.dat (243 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\rscmp.dll (840 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110318_01.gif (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\computer.gif (576 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\rsusb.xml (969 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-015.gif (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang.dll (889 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsstore\rsstore.xml (565 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tlinux2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tkaka.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvrinfo\rsvrinfo.dll (80 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfoot.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\chkbox1.gif (174 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderbr.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\confbtn.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\common.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\wbshld.dll.dat (1705 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMask1.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\resumbtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\langset.xml (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsAppMgr.dll (64 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\log2.png (314 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin2d.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\langcfg.xml (829 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\popup.css (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-44.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppmaiprg.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\about.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanMpe.dll (1991 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\rsskin2.xml (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfictnb.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\dhtmlfrm\dfwMain.dll (3443 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_rb.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\spanup\CheckOld.exe (758 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\lics950.txt (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\HookTdi.dll (55 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowp.gif (910 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mailmon.png (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Comaxs.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\alert.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\RsUsb.dll (658 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_eng.js (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfootrc.png (203 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\add.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-011.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\radiobox.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\menuico.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\pausebtn.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD950\CHT.lag (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\scanobj.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\minirst.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\Gather.xml (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\secchk.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tagent.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-432.gif (707 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\allscan.png (15 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravxp\ravxp.xml (420 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\virus\worm.gif (588 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfoota.png (931 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-025.gif (300 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\minirst.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CheckBox.png (681 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\num.cpf (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\about.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur020.dat (88 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\look.png (745 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\CfgDll.dll (707 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\pptip.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\chmpge.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tboot.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\arrows.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaiprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\chngskin.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MeBarBtn.png (369 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlstup.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstchk.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgbg.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tmiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\scanobj.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\CoMin.png (518 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\msgbtn.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\secchk.js (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\defcfg.dll (4097 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\Proccomm.dll (1583 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\css\style1.css (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\rnoauto.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-034.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\running.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\slider.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_br.gif (115 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-45.gif (698 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rav950\cht.lag (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\mini.css (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ffr.dll (2015 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\MonComm.dll (1138 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur004.dat (134 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\buttons.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\RavMonD.exe (144 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\rb_bl.gif (116 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\msgbtn.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\backchs.png (62 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayMenu.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RegGuide.xml (527 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_chs.js (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.lag (86 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\alert.wav (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMaskL.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl0950.htm (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Free0950.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\MID.ico (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuBtn.png (447 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuIcon.png (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\libtool\libtool.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\setting.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\res_cht.js (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmon\ravmon.xml (750 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tpack2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsg.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pagehelp.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfoota.png (931 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-010.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\OFF.ico (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\tfootrca.png (988 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Fail0936.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-027.gif (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\dvd.gif (376 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsdk.dll (1501 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin1.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\main.htm (18 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur007.dat (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\MenuLine.png (300 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\MakeUsb.dll (96 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\2K\ScanTray.bmp (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-013.gif (379 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\treboot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Lang.png (508 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\redi.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scanview\dfw.dll (4139 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\chngskin.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tclose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\scripts\passwd.js (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tflash2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsbsmain\PreScan.dll (296 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\footrc.png (410 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tiso.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RavStore.xml (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsStub.exe (64 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfootlc.png (208 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\treg2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-036.gif (372 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\slider2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mndlgtt.png (330 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-032.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\scanfin2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\MenuIcon.png (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-029.gif (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\closewnd.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monview\MonMgr.dll (596 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\logC.png (822 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur019.dat (92 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\cusscan.png (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.la0 (1931 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\nethd.gif (606 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Buttoni.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RsConfig.xml (77 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\SC.xml (71 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowm.gif (908 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\Skin\PopSkin\msg_fb.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\FrmMsgF.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\SetIcoL.png (57 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowl.gif (846 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfictnb.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\Expr0936.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monstate\monstate.xml (511 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur024.dat (92 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\ravtray.xml (923 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tfootrca.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tfiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pubcfg.dll (6089 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-020.gif (158 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\mgtblhd.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\pubcfg.xml (885 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-017.gif (301 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\security\Security.dll (1341 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tab1.png (713 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tremprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\TreeIcon.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravtray\MonTray.dll (8088 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logdb\VirusLog.db (36 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rbase\rbase.xml (875 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tfiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rslang\rslang.dll (1258 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\logvw.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vlsthd.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-016.gif (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RSD936\CHS.lag (28 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\engext.dll (837 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\sliderbk.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\Eng.lac (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\pubcfg\PC.xml (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang1\language\chs.lac (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tbodyb.png (934 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\pausebtn.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\check.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\cnt08.dll (284 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\about.htm (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\Buttoni.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scandeep.dll (393 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RsMgrSvc.exe (419 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\skin1.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\MonRule.dll (2089 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\Repair.url (155 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\tediprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscmp\CMPA.exe (5131 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravmain\rsmain.exe (1069 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\skin2.png (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravdefdb\uprsuser.dat (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsusb\UsbBoot.exe (157 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\tfootlc.png (210 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vtab.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanelf.dll (1115 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\risview\logstat.dll (101 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\rsengine.xml (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask1.png (390 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\tfictnb.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur014.dat (76 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\monbase\RsSrv.dll (1792 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\tabbg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang3\language\LangENG.png (341 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ExtMail.dll (2060 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.lac (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\chmpge.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-022.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnCl0936.htm (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-0050.gif (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\log.png (318 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\ON.ico (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\ieprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\waiting.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmiprotb.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mobprt2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\mailmon.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\storeexe.xml (986 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vtab.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\RSTray.xml (714 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsconfig\rsconfig.xml (948 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tfictn.png (471 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mndlgtt.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\mini.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\os.xml (685 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\minirst.css (9 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tfiproty.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc1252.htm (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_01.gif (14 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\ReportT.xml (221 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\button2.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\minwnd.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbow.gif (850 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitlelc.png (303 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scanex.dll (8813 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\langcfg\LangSet.exe (64 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\keypoint.bin (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tiso2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\comx3.dll (1841 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnIn1252.htm (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mncls.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cfilprot.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\tpack.png (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmsg\rsmsg.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\red\tfictn.png (480 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\green\ttitlelc.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\yellow\tclose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\scantj.dll (1896 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-39.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\vlstdown.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\tclose.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\091015_16.gif (507 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\accemon.png (6 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsguilib\rsguilib.xml (727 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\mini\mask3.png (971 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\button2.png (585 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\fastscan.png (19 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\popup\yellow\ttitlerc.png (299 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tagent2.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\movable.gif (355 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\uncheck.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\tmaldef.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\RsSafe.xml (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\comx3.dll (2859 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsmondef\bawhite.dll (1590 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\Langbk.png (24 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\probk.png (212 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\scancfg\RsConfig.dll (4368 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tmon.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\toolview\toolview.xml (479 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\cloud2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\mgpct.png (361 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravbase\reliverav.dat (1682 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\foot.png (331 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\blue\ttitle.png (184 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\logvw\rslogvw.exe (55 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-001.gif (609 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\upcfgrav\LogSign.db (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\traycfg\TrayIcon.xml (552 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\mini.css (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-038.gif (377 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsvirbas\rsvirbas.xml (475 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\rscomm.xml (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mncore.png (178 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsscan\ScanPrxy.dll (6343 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitlelc.png (297 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\950\treboot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-42.gif (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\runcls.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\button.gif (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\footlc.png (410 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\skin.ini (176 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravlang2\language\cht.la0 (130 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bt-014.gif (379 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\rslogvw.bmp (12 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mailmon\rsolscan.dll (816 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\css\passwd.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mask4.png (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\nvfile.dll (1977 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\ScrollH.png (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\help.png (817 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\cmaldefr.htm (5 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tediprot.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsengine\ur010.dat (76 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\log.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rscomm\syslay.dll (1883 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\1252\tsp.htm (2 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin1\Skin\Skin1\setting.png (8 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\mini\mnrsm.png (638 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\defcfg\DC.xml (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\common\images\tree\elbowem.gif (905 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\modeview\Misc.dll (278 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\vmnubg.png (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\pages\936\cmaiprog.htm (3 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\rsskin2\Skin\skin2\logbg.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\css\ppyel.css (1 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\imags\bg-002.gif (7 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\popwndexe.exe (858 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\mscrt\MFC71.dll (9956 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\images\110321_04.gif (13 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\ravguide\Regguide\SnPc0950.htm (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\storeexe\RavBin.dll (1373 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin2\images\tboot2.png (4 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\RAVUI\UI\skins\skin1\images\popup\red\ttitlerc.png (294 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\RAVTmp\moncfg\moncfg.dll (1886 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):

   [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "RavDown" = "c:\%original file name%.exe /session 698238F00B5F4BAA98B8C337B7017BBC /subkey RAV"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
UPX0	4096	172032	0	0	d41d8cd98f00b204e9800998ecf8427e
UPX1	176128	126976	123392	5.52709	2bd0d5e862a95e2792ef116ecbab8de1
.rsrc	303104	12288	11776	3.7431	c7aa1fe901ab8de73e2579386923a103

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 3
cb9d0079259d3ddf0d49d7586e3d9c63
c8f0ea7648e2dcd97beb8dbf758630ce
d7cdfda1c9e366d3a171e54cc2aaf2b3

Network Activity

URLs

URL	IP
hxxp://211.103.159.75/urg.asp?v=12
hxxp://z.rising.com.cn/register/minicenter/e/r.aspx
hxxp://1st.ecoma.glb0.lxdns.com/cloudconfig/GuideConfig5701.xml
hxxp://z.rising.com.cn/urg.asp?v=12
hxxp://z.rising.com.cn/Register/OnlineHelper/D/DLNew.aspx?info=u2ABZZZYF0MRPkhNVkFHDW45Tk1HKUodTltFfR1fXVBHcw0ODxUMMEEGCENffw1bWVBWZhhNQEMGMEIfDQ8cfRVPTkNJfV0KHxQJKw1VTENUfQNNCxQMOw1VTEMmbxspWidSaR1dXFVTaRtXX1FWbxxfX1FWbxxfX1FWbw0SsA==
hxxp://1st.dl.glb0.lxdns.com/for_down/rsfree2011/mob.exe
hxxp://rsup10.rising.com.cn/Register/OnlineHelper/D/DLNew.aspx?info=u2ABZZZYF0MRPkhNVkFHDW45Tk1HKUodTltFfR1fXVBHcw0ODxUMMEEGCENffw1bWVBWZhhNQEMGMEIfDQ8cfRVPTkNJfV0KHxQJKw1VTENUfQNNCxQMOw1VTEMmbxspWidSaR1dXFVTaRtXX1FWbxxfX1FWbxxfX1FWbw0SsA==	1.122.192.19
hxxp://center.rising.com.cn/urg.asp?v=12
hxxp://rsup10.rising.com.cn/register/minicenter/e/r.aspx	1.122.192.19
hxxp://down.rising.net.cn/for_down/rsfree2011/mob.exe	218.77.3.71
hxxp://cloudinfo.rising.com.cn/cloudconfig/GuideConfig5701.xml	183.136.217.14

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Map

The Malware connects to the servers at the folowing location(s):

Strings from Dumps