SpyTool.Win32.Ardamax_db02a0833b – Adaware

Gen:Variant.FAkeAlert.105 (BitDefender), MonitoringTool:Win32/Ardamax (Microsoft), HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Win32.Ardamax.nbq (v) (VIPRE), Trojan.KeyLogger.20652 (DrWeb), Gen:Variant.FAkeAlert.105 (B) (Emsisoft), Keylog-FAQ!DB02A0833B2B (McAfee), Win32.SuspectCrc (Ikarus), Ardamax.BZV (AVG), Win32:Malware-gen (Avast), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, EmailWorm, Monitor, SpyTool

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: db02a0833b2b611ffc0509c82d4a7b37

SHA1: de1ec79632560344b8994e5e3ee3b8c43521da65

SHA256: 6f064daa370566507779620069bbdb08f04bb9767b1f7f26c22fa971ebe26cb1

SSDeep: 49152:KO0wcuC68EKlCXEE L6xpko4gzRDdR2zLM/jwNAFa7eFnGqJAgFDq:KO0wjC6jXEOpkwdUuP

Size: 2056192 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: UPolyXv05_v6

Company: no certificate found

Created at: 2013-08-12 18:48:48

Summary: SpyTool. A program used to apply passive protection methods to spyware, such as obfuscation, encryption or polymorphism. The original malicious program is usually encrypted/compressed and stored inside the wrapper.

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The SpyTool creates the following process(es):

%original file name%.exe:1268
HelpSvc.exe:1520

The SpyTool injects its code into the following process(es):

IAY.exe:1808

File activity

The process %original file name%.exe:1268 makes changes in the file system.

The SpyTool creates and/or writes to the following file(s):

%WinDir%\TLPEXV\IAY.exe (15021 bytes)
%WinDir%\TLPEXV\IAY.02 (56 bytes)
%WinDir%\TLPEXV\IAY.00 (1 bytes)
%WinDir%\TLPEXV\IAY.01 (81 bytes)

The process HelpSvc.exe:1520 makes changes in the file system.

The SpyTool creates and/or writes to the following file(s):

%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a8.query.new (256 bytes)
%WinDir%\Temp\MPC1B.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Options.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000db.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000114.query.new (374 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\tools.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\panels (4 bytes)
%WinDir%\pchealth\helpctr\Indices\merged.hhk (48376 bytes)
%WinDir%\Temp\MPCC1.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000170.query.new (298 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021b.query.new (306 bytes)
%WinDir%\Temp\MPC18.tmp (322 bytes)
%WinDir%\pchealth\helpctr\System\errors\badurl.htm (1 bytes)
%WinDir%\Temp\MPC2A.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004c.query.new (188 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c2.query.new (500 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cc.query.new (200 bytes)
%WinDir%\pchealth\helpctr\System\images (4 bytes)
%WinDir%\Temp\MPC51.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000098.query.new (154 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif (107 bytes)
%WinDir%\Temp\MPC26.tmp (14 bytes)
%WinDir%\Temp\MPC9B.tmp (1 bytes)
%WinDir%\Temp\MPC7C.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\info.gif (99 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e4.query.new (244 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp (3 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels (4 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000187.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018b.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif (454 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000223.query.new (25 bytes)
%WinDir%\Temp\MPC7.tmp (1830 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000130.query.new (484 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017d.query.new (356 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015e.query.new (764 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018c.query.new (230 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfomain.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a2.query.new (145 bytes)
%WinDir%\Temp\MPCAC.tmp (262 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16 (4 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48 (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a0.query.new (180 bytes)
%WinDir%\Temp\MPC47.tmp (19 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028a.query.new (998 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a4.query.new (164 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif (782 bytes)
%WinDir%\Temp\MPC70.tmp (762 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000282.query.new (145 bytes)
%WinDir%\Temp\MPC9C.tmp (139 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001dc.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000093.query.new (769 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif (129 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023c.query.new (202 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml (666 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (9 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif (232 bytes)
%WinDir%\Temp\MPCE.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000142.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a9.query.new (25 bytes)
%WinDir%\Temp\MPC6C.tmp (782 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000047.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\expanded.gif (135 bytes)
%WinDir%\Temp\MPC1A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (704 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\chip.gif (102 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d0.query.new (198 bytes)
%WinDir%\Temp\MPC13.tmp (2416 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b2.query.new (145 bytes)
%WinDir%\Temp\MPCE0.tmp (442 bytes)
%WinDir%\pchealth\helpctr\System\panels\Context.htm (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b3.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm (13 bytes)
%WinDir%\Temp\MPCBD.tmp (1289 bytes)
%WinDir%\pchealth\helpctr\System\css\Layout.css (492 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.xml (371 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\windows.gif (569 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ba.query.new (961 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif (114 bytes)
%WinDir%\Temp\MPC3E.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015c.query.new (332 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js (426 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014d.query.new (850 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfohss.css (582 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\tools.bmp (1 bytes)
%WinDir%\Temp\MPC3B.tmp (967 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000225.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017e.query.new (356 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif (114 bytes)
%WinDir%\pchealth\helpctr\System\errors\redirect.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018f.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000152.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000031.query.new (564 bytes)
%WinDir%\pchealth\helpctr\System (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000210.query.new (158 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003c.query.new (298 bytes)
%WinDir%\Temp\MPC68.tmp (784 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000134.query.new (298 bytes)
%WinDir%\Temp\MPC88.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000224.query.new (82 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp (3 bytes)
%WinDir%\Temp\MPCD9.tmp (1821 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007f.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000052.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e2.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b0.query.new (128 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000198.query.new (354 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm (10 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js (3 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr (4 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm (10 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b2.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013c.query.new (338 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (3 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm (1 bytes)
%WinDir%\Temp\MPCC0.tmp (609 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000060.query.new (180 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fe.query.new (145 bytes)
%WinDir%\Temp\MPC8F.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\images\error.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000207.query.new (73 bytes)
%WinDir%\Temp\MPC69.tmp (778 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000240.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000151.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ca.query.new (961 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif (734 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js (5 bytes)
%WinDir%\Temp\MPC91.tmp (682 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014c.query.new (396 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000279.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c2.query.new (145 bytes)
%WinDir%\Temp\MPCBE.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000293.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bd.query.new (608 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAURA.xml (569 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm (912 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e4.query.new (230 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp (2 bytes)
%WinDir%\Temp\MPCB.tmp (1568 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchblurb.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif (773 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cb.query.new (961 bytes)
%WinDir%\Temp\MPC54.tmp (843 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif (468 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif (43 bytes)
%WinDir%\Temp\MPC9E.tmp (159 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000054.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000110.query.new (190 bytes)
%WinDir%\Temp\MPC46.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000292.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000226.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011c.query.new (420 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000071.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000be.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a0.query.new (216 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000024.query.new (438 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (4412 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif (311 bytes)
%WinDir%\pchealth\helpctr\System\panels\HHWrapper.htm (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001af.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000082.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a4.query.new (130 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm (801 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\error.gif (107 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif (1 bytes)
%WinDir%\Temp\MPCCC.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif (777 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cb.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\common.js (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000040.query.new (212 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm (2002 bytes)
%WinDir%\pchealth\helpctr\System\panels\ShareHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_blank_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000249.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d4.query.new (190 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif (682 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025f.query.new (145 bytes)
%WinDir%\Temp\MPC33.tmp (449 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000137.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000288.query.new (214 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif (682 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ea.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002be.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif (608 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif (690 bytes)
%WinDir%\Temp\MPC3F.tmp (880 bytes)
%WinDir%\Temp\MPC6F.tmp (785 bytes)
%WinDir%\Temp\MPCD1.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007e.query.new (961 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ff.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000213.query.new (337 bytes)
%WinDir%\Temp\MPCC.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000180.query.new (282 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000051.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029c.query.new (188 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000123.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm (1163 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.xml (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029a.query.new (308 bytes)
%WinDir%\Temp\MPCE1.tmp (596 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008d.query.new (25 bytes)
%WinDir%\Temp\MPC3D.tmp (850 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SERVER.js (8 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfosum.htm (16 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000273.query.new (145 bytes)
%WinDir%\Temp\MPC65.tmp (1077 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c4.query.new (242 bytes)
%WinDir%\Temp\MPC25.tmp (16 bytes)
%WinDir%\Temp\MPCA2.tmp (129 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rc.css (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b4.query.new (218 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e9.query.new (962 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000286.query.new (858 bytes)
%WinDir%\Temp\MPC6B.tmp (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif (75 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000057.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\HelpCtr.mmf (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000008.query.new (500 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e2.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif (640 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000194.query.new (310 bytes)
%WinDir%\Temp\MPC79.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000080.query.new (216 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm (1312 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif (784 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000083.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c4.query.new (246 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchtips.htm (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000283.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif (139 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif (741 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028b.query.new (998 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000115.query.new (520 bytes)
%WinDir%\Temp\MPCD2.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000026.query.new (25 bytes)
%WinDir%\Temp\MPC4A.tmp (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000143.query.new (457 bytes)
%WinDir%\Temp\MPC8C.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm (5 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif (694 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (10 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000038.query.new (302 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f2.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c8.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024d.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\printer.gif (136 bytes)
%WinDir%\Temp\MPC39.tmp (1780 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007c.query.new (304 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f4.query.new (206 bytes)
%WinDir%\Temp\MPC3A.tmp (275 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Logs\hcupdate.log (1213037 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005c.query.new (360 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js (61 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif (674 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019e.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm (6 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\DFS\privacy.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif (438 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000006.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000138.query.new (314 bytes)
%WinDir%\Temp\MPCA9.tmp (43 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000159.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\DFS\uplddrvinfo.htm (32 bytes)
%WinDir%\pchealth\helpctr\System\DFS (4 bytes)
%WinDir%\Temp\MPCA1.tmp (99 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000217.query.new (306 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000016.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\learnWU.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c8.query.new (250 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008b.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000214.query.new (160 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Uabrand.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ba.query.new (337 bytes)
%WinDir%\Temp\MPC4B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f2.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000032.query.new (564 bytes)
%WinDir%\Temp\MPC73.tmp (789 bytes)
%WinDir%\Temp\MPC89.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Index.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif (159 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c5.query.new (568 bytes)
%WinDir%\Temp\MPCA8.tmp (107 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp (9 bytes)
%WinDir%\Temp\MPC53.tmp (714 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ee.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a6.query.new (25 bytes)
%WinDir%\Temp\MPCBB.tmp (2 bytes)
%WinDir%\Temp\MPCD6.tmp (76 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000113.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000025.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif (762 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.htm (56 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000262.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\index.dat.new (87621 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (24 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000070.query.new (454 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000299.query.new (308 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000231.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000247.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000028.query.new (446 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b4.query.new (216 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000aa.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bb.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000208.query.new (490 bytes)
%WinDir%\Temp\MPC1C.tmp (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000239.query.new (300 bytes)
%WinDir%\Temp\MPCD0.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ea.query.new (962 bytes)
%WinDir%\Temp\MPC99.tmp (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d2.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000df.query.new (73 bytes)
%WinDir%\Temp\MPCD7.tmp (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif (1 bytes)
%WinDir%\Temp\MPCAE.tmp (9161 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000042.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\History.htm (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020e.query.new (448 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000155.query.new (940 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d3.query.new (73 bytes)
%WinDir%\Temp\MPC78.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\ftshelp.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001eb.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif (808 bytes)
%WinDir%\Temp\MPC44.tmp (775 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ca.query.new (25 bytes)
%WinDir%\Temp\MPC29.tmp (1 bytes)
%WinDir%\Temp\MPCA7.tmp (106 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm (5 bytes)
%WinDir%\Temp\MPC8B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c0.query.new (276 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000298.query.new (246 bytes)
%WinDir%\Temp\MPC30.tmp (10 bytes)
%WinDir%\Temp\MPC15.tmp (32 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif (793 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000022.query.new (786 bytes)
%WinDir%\pchealth\helpctr\PackageStore\package_5.cab (601 bytes)
%WinDir%\Temp\MPC38.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000067.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000186.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000122.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000228.query.new (222 bytes)
%WinDir%\Temp\MPC2F.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000251.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml (587 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000296.query.new (966 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\errmsg.bmp (1 bytes)
%WinDir%\Temp\MPCCA.tmp (895 bytes)
%WinDir%\Temp\MPC52.tmp (608 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm (627 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000156.query.new (940 bytes)
%WinDir%\Temp\MPCDE.tmp (24 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c0.query.new (214 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Subsite.htm (6 bytes)
%WinDir%\Temp\MPC48.tmp (110 bytes)
%WinDir%\Temp\MPCA0.tmp (677 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000100.query.new (266 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000136.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d9.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm (880 bytes)
%WinDir%\Temp\MPCD.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000030.query.new (378 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm (3 bytes)
%WinDir%\Temp\MPC1F.tmp (1385 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\alert.gif (118 bytes)
%WinDir%\Temp\MPC31.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000204.query.new (208 bytes)
%WinDir%\Temp\MPC28.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010e.query.new (145 bytes)
%WinDir%\Temp\MPCD8.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002c.query.new (268 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000056.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000084.query.new (386 bytes)
%WinDir%\Temp\MPC7E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\check.gif (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013d.query.new (512 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000002.query.new (752 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm (353 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp (3 bytes)
%WinDir%\Temp\MPCCB.tmp (70 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000140.query.new (310 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ac.query.new (132 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png (1161 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Index.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000276.query.new (25 bytes)
%WinDir%\Temp\MPCDD.tmp (657 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000131.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif (379 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif (789 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000148.query.new (336 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\commonFunc.js (32 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bb.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000076.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif (106 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000120.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000119.query.new (324 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005f.query.new (457 bytes)
%WinDir%\Temp\MPCA3.tmp (181 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000236.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000178.query.new (222 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000241.query.new (73 bytes)
%WinDir%\Temp\MPC2C.tmp (3 bytes)
%WinDir%\Temp\MPC6A.tmp (775 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ee.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e7.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fa.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.js (27 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif (254 bytes)
%WinDir%\Temp\MPCCE.tmp (630 bytes)
%WinDir%\Temp\MPC98.tmp (257 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000147.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\up.bmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a8.query.new (316 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ac.query.new (200 bytes)
%WinDir%\Temp\MPCE3.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000274.query.new (258 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm (829 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000124.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a2.query.new (242 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000058.query.new (240 bytes)
%WinDir%\pchealth\helpctr\Indices (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000294.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b2.query.new (25 bytes)
%WinDir%\Temp\MPC7B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000010.query.new (232 bytes)
%WinDir%\Temp\MPC85.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000012.query.new (306 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000193.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000248.query.new (258 bytes)
%WinDir%\Temp\MPC7F.tmp (1 bytes)
%WinDir%\Temp\MPCB7.tmp (600 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026e.query.new (618 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a2.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016f.query.new (145 bytes)
%WinDir%\Temp\MPC45.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000164.query.new (146 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000287.query.new (858 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000095.query.new (25 bytes)
%WinDir%\Temp\MPC3C.tmp (439 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000e.query.new (337 bytes)
%WinDir%\Temp\MPCA6.tmp (107 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Favorites.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bf.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023d.query.new (25 bytes)
%WinDir%\Temp\MPCDF.tmp (390 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000116.query.new (520 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Search.htm (37 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000050.query.new (398 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif (692 bytes)
%WinDir%\Temp\MPCD5.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatMode.htm (601 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.xml (2 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\watermark_300x.bmp (2105 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001a.query.new (145 bytes)
%WinDir%\Temp\MPC37.tmp (492 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d7.query.new (1177 bytes)
%WinDir%\Temp\MPCCD.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\blue_arrow.gif (674 bytes)
%WinDir%\Temp\MPC59.tmp (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fb.query.new (25 bytes)
%WinDir%\Temp\MPC7D.tmp (1 bytes)
%WinDir%\Temp\MPC86.tmp (1 bytes)
%WinDir%\Temp\MPC7A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019a.query.new (73 bytes)
%WinDir%\Temp\MPC4F.tmp (395 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021a.query.new (306 bytes)
%WinDir%\pchealth\helpctr\PackageStore\CRC_Disk.new (60 bytes)
%WinDir%\pchealth\helpctr\System\images\progbar.gif (2 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\support.bmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d3.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002e.query.new (500 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000075.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000029.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409 (1225 bytes)
%WinDir%\Temp\MPC4D.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002af.query.new (25 bytes)
%WinDir%\Temp\MPC9F.tmp (135 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d8.query.new (206 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000190.query.new (266 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f8.query.new (194 bytes)
%WinDir%\Temp\MPCD4.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025c.query.new (192 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif (180 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006c.query.new (194 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm (321 bytes)
%WinDir%\Temp\MPCA5.tmp (114 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif (382 bytes)
%WinDir%\Temp\MPCB4.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c8.query.new (192 bytes)
%WinDir%\Temp\MPC1.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000150.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020c.query.new (82 bytes)
%WinDir%\Temp\MPC50.tmp (4 bytes)
%WinDir%\Temp\MPCDA.tmp (2 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018a.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c2.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000107.query.new (769 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bc.query.new (234 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000062.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000072.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002cb.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000237.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\images\wrapperhelp.gif (76 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000176.query.new (337 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_7.hhk (2712 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif (67 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif (454 bytes)
%WinDir%\Temp\MPCA4.tmp (136 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000272.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000206.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e8.query.new (250 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b3.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif (775 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_4.hhk (1568 bytes)
%WinDir%\Temp\MPC49.tmp (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000218.query.new (164 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml (3 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b4.query.new (472 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000dc.query.new (240 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_3.hhk (16 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000254.query.new (214 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f8.query.new (256 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001aa.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000063.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000090.query.new (228 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\ding.wav (2579 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000104.query.new (246 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif (384 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm (7 bytes)
%WinDir%\Temp\MPCE2.tmp (379 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000184.query.new (270 bytes)
%WinDir%\Temp\MPC62.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000275.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml (540 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b5.query.new (73 bytes)
%WinDir%\Temp\MPCB3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023b.query.new (145 bytes)
%WinDir%\Temp\MPCDB.tmp (239598 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000088.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_9.hhk (1568 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c4.query.new (214 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\collapsed.gif (139 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025b.query.new (25 bytes)
%WinDir%\pchealth\helpctr\PackageStore\package_6.cab (1425 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e0.query.new (248 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c1.query.new (500 bytes)
%WinDir%\Temp\MPCD3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif (750 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e3.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif (838 bytes)
%WinDir%\pchealth\helpctr\System\errors\connection.htm (18 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000048.query.new (204 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bf.query.new (998 bytes)
%WinDir%\Temp\MPC2.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000108.query.new (206 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm (346 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\warning.gif (600 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000096.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017b.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.js (20 bytes)
%WinDir%\pchealth\helpctr\System\css\Behaviors.css (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000020.query.new (264 bytes)
%WinDir%\pchealth\helpctr\PackageStore\SkuStore.bin.new (1095 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_articles_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ab.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b0.query.new (326 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f0.query.new (182 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif (137 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fa.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000046.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000230.query.new (292 bytes)
%WinDir%\pchealth\helpctr\System\panels\firstpage.htm (714 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm (356 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d2.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026f.query.new (618 bytes)
%WinDir%\Temp\MPC32.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000005.query.new (25 bytes)
%WinDir%\Temp\MPCB0.tmp (287 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000013.query.new (306 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif (1 bytes)
%WinDir%\Temp\MPC67.tmp (741 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Channels.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ec.query.new (226 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif (159 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\drive.gif (139 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif (785 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000009.query.new (25 bytes)
%WinDir%\Temp\MPC4C.tmp (20 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif (51 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\cd.gif (257 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\gears.gif (135 bytes)
%WinDir%\Temp\MPC1E.tmp (20 bytes)
%WinDir%\Temp\MPC5.tmp (12 bytes)
%WinDir%\Temp\MPC2D.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d6.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif (8 bytes)
%WinDir%\Temp\MPCCF.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bf.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\feedback.gif (895 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ab.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Config\sereg.xml.new (828 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogshelp.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm (356 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\Print.dlg (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000264.query.new (248 bytes)
%WinDir%\Temp\MPCB6.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000250.query.new (140 bytes)
%WinDir%\Temp\MPC1D.tmp (1128 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\loc_strings.xml (26 bytes)
%WinDir%\Temp\MPC9D.tmp (107 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldisplay.xsl (11 bytes)
%WinDir%\Temp\MPC19.tmp (1765 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif (994 bytes)
%WinDir%\Temp\MPC8A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000158.query.new (264 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (2635 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000074.query.new (398 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000146.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000000.query.new (62 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\images\get_conn.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\System\errors\notfound.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000064.query.new (204 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000202.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\panels\blank.htm (608 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000172.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001be.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000039.query.new (25 bytes)
%WinDir%\Temp\MPCC7.tmp (135 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f4.query.new (260 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f3.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\panels\AdvSearch.htm (19 bytes)
%WinDir%\Temp\MPC6.tmp (5 bytes)
%WinDir%\Temp\MPC5C.tmp (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001c.query.new (384 bytes)
%WinDir%\Temp\MPC5D.tmp (4 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SHARED.js (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d8.query.new (348 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001da.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Config\CheckPoint\tmp.edb (4104 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c0.query.new (254 bytes)
%WinDir%\Temp\MPC82.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000017.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif (410 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000162.query.new (337 bytes)
%WinDir%\Temp\MPC2B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000094.query.new (294 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ad.query.new (186 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\helpdoc.gif (207 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif (380 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp (2 bytes)
%WinDir%\Temp\MPCB8.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000280.query.new (178 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000192.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000284.query.new (130 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000004.query.new (194 bytes)
%WinDir%\Temp\MPC84.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b8.query.new (270 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000001.query.new (752 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ed.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml (10 bytes)
%WinDir%\Temp\MPC83.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000086.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif (789 bytes)
%WinDir%\Temp\MPC11.tmp (1890 bytes)
%WinDir%\Temp\MPC2E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a4.query.new (258 bytes)
%WinDir%\pchealth\helpctr\System\images\flyout_arrow.gif (70 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif (59 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fc.query.new (218 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002aa.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000014.query.new (314 bytes)
%WinDir%\Temp\MPC74.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common (4 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24 (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004a.query.new (73 bytes)
%WinDir%\Temp\MPC21.tmp (10 bytes)
%WinDir%\Temp\MPC40.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fe.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000183.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000023.query.new (786 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000079.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm (2 bytes)
%WinDir%\Temp\MPCC9.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000263.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\errors\indexfirstlevel.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif (1 bytes)
%WinDir%\Temp\MPCAD.tmp (569 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021c.query.new (208 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm (14 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif (845 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000188.query.new (202 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000de.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000266.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c7.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025a.query.new (25 bytes)
%WinDir%\Temp\MPC63.tmp (371 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a8.query.new (124 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ff.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022c.query.new (178 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a7.query.new (145 bytes)
%WinDir%\Temp\MPC14.tmp (2413 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.js (56 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d4.query.new (206 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.htm (20 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000197.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\rcmoreinfo.htm (15 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\History.htm (1 bytes)
%WinDir%\Temp\MPC10.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000182.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif (778 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000160.query.new (222 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg (677 bytes)
%WinDir%\Temp\MPC55.tmp (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cf.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif (106 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027f.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000044.query.new (208 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__SERVER.htm (7 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_2.hhk (13 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029e.query.new (926 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010c.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bc.query.new (196 bytes)
%WinDir%\Temp\MPC4E.tmp (839 bytes)
%WinDir%\pchealth\helpctr\System\images\warning.gif (1 bytes)
%WinDir%\Temp\MPC77.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000246.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000216.query.new (306 bytes)
%WinDir%\Temp\MPC41.tmp (18 bytes)
%WinDir%\pchealth\helpctr\System\panels\Topics.htm (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ec.query.new (486 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014e.query.new (850 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000085.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000106.query.new (769 bytes)
%WinDir%\Temp\MPCAB.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogs.htm (55 bytes)
%WinDir%\Temp\MPC5B.tmp (208 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012c.query.new (368 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fb.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cf.query.new (337 bytes)
%WinDir%\Temp\MPC97.tmp (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000167.query.new (260 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020d.query.new (448 bytes)
%WinDir%\Temp\MPCC8.tmp (207 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\update.bmp (1 bytes)
%WinDir%\Temp\MPC90.tmp (674 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000168.query.new (428 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000118.query.new (230 bytes)
%WinDir%\Temp\MPC24.tmp (1964 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000112.query.new (73 bytes)
%WinDir%\Temp\MPC12.tmp (2 bytes)
%System%\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A (256 bytes)
%WinDir%\Temp\MPC87.tmp (1 bytes)
%WinDir%\Temp\MPC17.tmp (582 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\usb.gif (262 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bb.query.new (337 bytes)
%WinDir%\Temp\MPC72.tmp (773 bytes)
%WinDir%\Temp\MPC5F.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bc.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b8.query.new (248 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000200.query.new (260 bytes)
%WinDir%\Temp\MPC60.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000211.query.new (316 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000163.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ac.query.new (302 bytes)
%WinDir%\Temp\MPC34.tmp (980 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\card.gif (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a7.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000270.query.new (206 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000092.query.new (769 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000036.query.new (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a6.query.new (337 bytes)
%WinDir%\Temp\MPCAA.tmp (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e3.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Config\Cache\Professional_32_1033.dat (29254 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009c.query.new (168 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif (213 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c3.query.new (601 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000199.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f7.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017c.query.new (316 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm (1111 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000220.query.new (98 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000242.query.new (73 bytes)
%WinDir%\Temp\MPCB2.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000103.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm (13 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Favorites.htm (8 bytes)
%WinDir%\Temp\MPC20.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif (67 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000265.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif (102 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\endnode.gif (136 bytes)
%WinDir%\Temp\MPC5A.tmp (6 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (15 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004f.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ce.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000196.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000234.query.new (182 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b8.query.new (262 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp (9 bytes)
%WinDir%\pchealth\helpctr\System\scripts\Common.js (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a3.query.new (242 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a0.query.new (128 bytes)
%WinDir%\Temp\MPC71.tmp (777 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000035.query.new (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000078.query.new (282 bytes)
%WinDir%\pchealth\helpctr\System\scripts\wrapperparam.js (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000043.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000238.query.new (222 bytes)
%WinDir%\Temp\MPCB5.tmp (1 bytes)
%WinDir%\Temp\MPC35.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tours_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026c.query.new (194 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif (438 bytes)
%WinDir%\Temp\MPCC3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\DFS\viewmode.xml (275 bytes)
%WinDir%\pchealth\helpctr\Config\SAFStore.xml.new (28 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\System\errors\unreachable.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000244.query.new (200 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000132.query.new (73 bytes)
%WinDir%\Temp\MPC76.tmp (1 bytes)
%WinDir%\Temp\MPC80.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cc.query.new (198 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000257.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006b.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000068.query.new (202 bytes)
%WinDir%\Temp\MPCC5.tmp (139 bytes)
%WinDir%\pchealth\helpctr\System\errors\offline.htm (775 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo (100 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif (834 bytes)
%WinDir%\Temp\MPC66.tmp (734 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e8.query.new (194 bytes)
%WinDir%\Temp\MPCC2.tmp (1 bytes)
%WinDir%\Temp\MPC58.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000018.query.new (254 bytes)
%WinDir%\Temp\MPC16.tmp (544 bytes)
%WinDir%\Temp\MPCA.tmp (48457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019c.query.new (240 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000252.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016c.query.new (226 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\down.bmp (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\RemoteHelp.htm (43 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000268.query.new (166 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\options.htm (1 bytes)
%WinDir%\Temp\MPC4.tmp (5 bytes)
%WinDir%\Temp\MPC9A.tmp (102 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_5.hhk (20 bytes)
%WinDir%\Temp\MPCBA.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015d.query.new (764 bytes)
%WinDir%\Temp\MPC61.tmp (1 bytes)
%WinDir%\Temp\MPC27.tmp (374 bytes)
%WinDir%\Temp\MPC94.tmp (67 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif (43 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002d.query.new (500 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\DlgLib.js (850 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif (468 bytes)
%System%\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A (528 bytes)
%WinDir%\Temp\MPCDC.tmp (13 bytes)
%WinDir%\pchealth\helpctr\System\scripts (4 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\Learn.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000066.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\IULogo.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000290.query.new (214 bytes)
%WinDir%\Temp\MPC6E.tmp (789 bytes)
%WinDir%\Temp\MPC8D.tmp (1 bytes)
%WinDir%\Temp\MPC3.tmp (6 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm (837 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001df.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005e.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\constants.js (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000da.query.new (73 bytes)
%WinDir%\Temp\MPC96.tmp (118 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f6.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000166.query.new (260 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000144.query.new (250 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__DESKTOP.htm (7 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\compat.bmp (1 bytes)
%WinDir%\Temp\MPC43.tmp (24 bytes)
%WinDir%\Temp\MPC56.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000260.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif (387 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027c.query.new (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000203.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ce.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\wmi_data.js (14 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000232.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000258.query.new (204 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css (2 bytes)
%WinDir%\Temp\MPC92.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000154.query.new (432 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\keywordhelp.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001de.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm (2 bytes)
%WinDir%\Temp\MPCF.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000278.query.new (186 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000169.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm (8 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif (321 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif (181 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000f.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\images\32x32\logo.bmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000128.query.new (242 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm (516 bytes)
%WinDir%\Temp\MPC57.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000126.query.new (601 bytes)
%WinDir%\Temp\MPC42.tmp (1 bytes)
%WinDir%\Temp\MPC36.tmp (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004e.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000034.query.new (504 bytes)
%WinDir%\Temp\MPC93.tmp (67 bytes)
%WinDir%\Temp\MPC95.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\system.gif (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000c.query.new (186 bytes)
%WinDir%\Temp\MPC81.tmp (1428 bytes)
%WinDir%\Temp\MPC64.tmp (9 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldialog.htm (967 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Headlines.htm (6 bytes)
%WinDir%\pchealth\helpctr\System\panels\Options.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000295.query.new (966 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c7.query.new (300 bytes)
%WinDir%\Temp\MPC8E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ef.query.new (337 bytes)
%WinDir%\Temp\MPCBF.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019f.query.new (457 bytes)
%WinDir%\Temp\MPC23.tmp (9 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm (3 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif (373 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (267 bytes)
%WinDir%\Temp\MPCC6.tmp (136 bytes)
%WinDir%\Temp\MPC9.tmp (1488 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d0.query.new (192 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif (14 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c6.query.new (860 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\blurbs (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000127.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000229.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\images\info.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000222.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ca.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008c.query.new (516 bytes)
%WinDir%\Temp\MPCAF.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024c.query.new (418 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000174.query.new (234 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ba.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\errors (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email (4 bytes)
%WinDir%\Temp\MPCC4.tmp (674 bytes)
%WinDir%\pchealth\helpctr\System\rc\rcRequest.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm (341 bytes)
%WinDir%\Temp\MPCB1.tmp (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif (910 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_6.hhk (15 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\isupport.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000256.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000af.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fc.query.new (236 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_8.hhk (4232 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\about_support.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029d.query.new (926 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000212.query.new (457 bytes)
%WinDir%\Temp\MPC8.tmp (19 bytes)
%WinDir%\Temp\MPCB9.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000177.query.new (337 bytes)
%WinDir%\pchealth\helpctr\Database\HCdata.edb (112152 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif (111 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000173.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f6.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Connect.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000102.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003e.query.new (25 bytes)
%WinDir%\Temp\MPC6D.tmp (793 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif (1 bytes)
%WinDir%\Temp\MPCBC.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008e.query.new (25 bytes)
%WinDir%\Temp\MPC22.tmp (7 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml (278 bytes)
%WinDir%\Temp\MPC5E.tmp (2 bytes)
%WinDir%\Temp\MPC75.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b6.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028c.query.new (284 bytes)

The SpyTool deletes the following file(s):

%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d9.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_blank_12x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f8.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000166.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Options.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d8.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000284.query (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\tools.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\panels (0 bytes)
%WinDir%\pchealth\helpctr\Indices\merged.hhk (0 bytes)
%WinDir%\Temp\MPCC1.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000136.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000096.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d0.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000251.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027a.query (0 bytes)
%WinDir%\Temp\MPC18.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\css (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\badurl.htm (0 bytes)
%WinDir%\Temp\MPC1B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f7.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images (0 bytes)
%WinDir%\Temp\MPC51.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011b.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif (0 bytes)
%WinDir%\Temp\MPC26.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common (0 bytes)
%WinDir%\Temp\MPC7C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c4.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\info.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp (0 bytes)
%WinDir%\Temp\MPC76.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance (0 bytes)
%WinDir%\pchealth\helpctr\Config\SAFStore.xml.orig (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001be.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000231.query (0 bytes)
%WinDir%\Temp\MPC7.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c0.query (0 bytes)
%WinDir%\Temp\MPC84.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008d.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance (0 bytes)
%WinDir%\pchealth\helpctr\System\HelpCtr.mmf (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a8.query (0 bytes)
%WinDir%\Temp\MPCAC.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16 (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b0.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48 (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021b.query (0 bytes)
%WinDir%\Temp\MPC47.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif (0 bytes)
%WinDir%\Temp\MPC70.tmp (0 bytes)
%WinDir%\Temp\MPC9C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000257.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000af.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000071.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028a.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif (0 bytes)
%WinDir%\Temp\MPCE.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000095.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000278.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000107.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a0.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000226.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000078.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014c.query (0 bytes)
%WinDir%\Temp\MPC1A.tmp (0 bytes)
%WinDir%\Temp\MPC83.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\chip.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US (0 bytes)
%WinDir%\Temp\MPCE0.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\Context.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011d.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000252.query (0 bytes)
%WinDir%\Temp\MPCBD.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000170.query (0 bytes)
%WinDir%\pchealth\helpctr\System\css\Layout.css (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000274.query (0 bytes)
%WinDir%\Temp\MPCCA.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif (0 bytes)
%WinDir%\Temp\MPC3E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ed.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d6.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfohss.css (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\tools.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000180.query (0 bytes)
%WinDir%\Temp\MPC3B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\redirect.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000128.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b6.query (0 bytes)
%WinDir%\pchealth\helpctr\System (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ab.query (0 bytes)
%WinDir%\Temp\MPC68.tmp (0 bytes)
%WinDir%\Temp\MPC2A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026b.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\flyout_arrow.gif (0 bytes)
%WinDir%\Temp\MPCD9.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000e.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000230.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c2.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js (0 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000280.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\info.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020d.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010f.query (0 bytes)
%WinDir%\Temp\MPC58.tmp (0 bytes)
%WinDir%\Temp\MPCC0.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000287.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bd.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024d.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005f.query (0 bytes)
%WinDir%\Temp\MPC8F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000130.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp (0 bytes)
%WinDir%\Temp\MPC69.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000188.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000264.query (0 bytes)
%WinDir%\pchealth\helpctr\BATCH\hscsp_w3.cab (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e6.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ae.query (0 bytes)
%WinDir%\Temp\MPC91.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000197.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm (0 bytes)
%WinDir%\Temp\MPCBE.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ae.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAURA.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c7.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm (0 bytes)
%WinDir%\Temp\MPC9B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b7.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp (0 bytes)
%WinDir%\Temp\MPCB.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchblurb.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b2.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000a.query (0 bytes)
%WinDir%\Temp\MPC54.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014d.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f6.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000263.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f0.query (0 bytes)
%WinDir%\Temp\MPC9E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000080.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000279.query (0 bytes)
%WinDir%\Temp\MPC46.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015d.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ba.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d2.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e2.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d0.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\HHWrapper.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001eb.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b6.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ac.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000182.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000086.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ce.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\common.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004c.query (0 bytes)
%WinDir%\Temp\MPC31.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\ShareHelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a0.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000012.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000147.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c2.query (0 bytes)
%WinDir%\Temp\MPC33.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000246.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cb.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d7.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024c.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000286.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif (0 bytes)
%WinDir%\Temp\MPC3F.tmp (0 bytes)
%WinDir%\Temp\MPC6F.tmp (0 bytes)
%WinDir%\Temp\MPCD1.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c1.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000172.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a2.query (0 bytes)
%WinDir%\Temp\MPCC.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fb.query (0 bytes)
%WinDir%\pchealth\helpctr\Config\sereg.xml.orig (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ce.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm (0 bytes)
%WinDir%\Temp\MPC7E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000174.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e0.query (0 bytes)
%WinDir%\Temp\MPCE1.tmp (0 bytes)
%WinDir%\Temp\MPC3D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011e.query (0 bytes)
%WinDir%\Temp\MPC13.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SERVER.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000270.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfosum.htm (0 bytes)
%WinDir%\Temp\MPC65.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000150.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000290.query (0 bytes)
%WinDir%\Temp\MPC25.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000aa.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rc.css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ae.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000093.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d8.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c2.query (0 bytes)
%WinDir%\Temp\MPC6B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000127.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfomain.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000250.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000273.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000167.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif (0 bytes)
%WinDir%\Temp\MPC79.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000282.query (0 bytes)
%WinDir%\pchealth\helpctr\Config\Cache\Professional_32_1033.dat.bak (0 bytes)
%WinDir%\pchealth\helpctr\System_OEM (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchtips.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000158.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000173.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif (0 bytes)
%WinDir%\Temp\MPC8C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c8.query (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm (0 bytes)
%WinDir%\Temp\MPCA2.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000119.query (0 bytes)
%WinDir%\pchealth\helpctr\System\ErrMsg (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000be.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000154.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\printer.gif (0 bytes)
%WinDir%\Temp\MPC39.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000164.query (0 bytes)
%WinDir%\Temp\MPC3A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000213.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000114.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000df.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000163.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000237.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000068.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000140.query (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS\privacy.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000034.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000112.query (0 bytes)
%WinDir%\Temp\MPCA9.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS\uplddrvinfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS (0 bytes)
%WinDir%\Temp\MPCA1.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000004.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f3.query (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\learnWU.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b2.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000072.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Uabrand.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000155.query (0 bytes)
%WinDir%\Temp\MPC4B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000042.query (0 bytes)
%WinDir%\Temp\MPC73.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001df.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f4.query (0 bytes)
%WinDir%\Temp\MPC89.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Index.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000106.query (0 bytes)
%WinDir%\Temp\MPCA8.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000118.query (0 bytes)
%WinDir%\Temp\MPC53.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000de.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007c.query (0 bytes)
%WinDir%\Temp\MPCA0.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000044.query (0 bytes)
%WinDir%\Temp\MPCBB.tmp (0 bytes)
%WinDir%\Temp\MPCD6.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000094.query (0 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e0.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e6.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ca.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001d.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ba.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ff.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000266.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013b.query (0 bytes)
%WinDir%\Temp\MPC1C.tmp (0 bytes)
%WinDir%\Temp\MPCD0.tmp (0 bytes)
%WinDir%\Temp\MPC99.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000115.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif (0 bytes)
%WinDir%\Temp\MPCAE.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\History.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000031.query (0 bytes)
%WinDir%\Temp\MPC78.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\ftshelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011a.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000216.query (0 bytes)
%WinDir%\Temp\MPC44.tmp (0 bytes)
%WinDir%\Temp\MPC29.tmp (0 bytes)
%WinDir%\Temp\MPCA7.tmp (0 bytes)
%WinDir%\Temp\MPCA3.tmp (0 bytes)
%WinDir%\Temp\MPC8B.tmp (0 bytes)
%WinDir%\Temp\MPC30.tmp (0 bytes)
%WinDir%\Temp\MPC15.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000054.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000076.query (0 bytes)
%WinDir%\Temp\MPC38.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts\Common.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000024.query (0 bytes)
%WinDir%\Temp\MPC6C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c6.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\errmsg.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\windows.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bb.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000043.query (0 bytes)
%WinDir%\Temp\MPC52.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c4.query (0 bytes)
%WinDir%\Temp\MPCDE.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Subsite.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bc.query (0 bytes)
%WinDir%\Temp\MPC6A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000022.query (0 bytes)
%WinDir%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm (0 bytes)
%WinDir%\Temp\MPCD.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\32x32 (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm (0 bytes)
%WinDir%\Temp\MPC1F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\alert.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012a.query (0 bytes)
%WinDir%\Temp\MPC28.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c3.query (0 bytes)
%WinDir%\Temp\MPCD8.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000051.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002d.query (0 bytes)
%WinDir%\Temp\MPC43.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\check.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ea.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000098.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000131.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cb.query (0 bytes)
%WinDir%\Temp\MPCCB.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000292.query (0 bytes)
%WinDir%\pchealth\helpctr\Database (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Index.htm (0 bytes)
%WinDir%\Temp\MPC90.tmp (0 bytes)
%WinDir%\Temp\MPCDD.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000272.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000036.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005b.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000247.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021a.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\commonFunc.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000242.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a4.query (0 bytes)
%WinDir%\Temp\MPC4A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028d.query (0 bytes)
%WinDir%\Temp\MPC2C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b3.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000005.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b2.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\expanded.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000236.query (0 bytes)
%WinDir%\Temp\MPC98.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000258.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ac.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000050.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\up.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000202.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cf.query (0 bytes)
%WinDir%\Temp\MPCE3.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018e.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000025.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000229.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004b.query (0 bytes)
%WinDir%\Temp\MPC7B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002af.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000008.query (0 bytes)
%WinDir%\Temp\MPC85.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000058.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000db.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000075.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ac.query (0 bytes)
%WinDir%\Temp\MPC7F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006e.query (0 bytes)
%WinDir%\Temp\MPCB7.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010a.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001aa.query (0 bytes)
%WinDir%\Temp\MPC45.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ee.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000296.query (0 bytes)
%WinDir%\Temp\MPC3C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016e.query (0 bytes)
%WinDir%\Temp\MPCA6.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Favorites.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000018.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b8.query (0 bytes)
%WinDir%\Temp\MPCDF.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000220.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000116.query (0 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000265.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000178.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000083.query (0 bytes)
%WinDir%\Temp\MPCD5.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000002.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ec.query (0 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatMode.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.xml (0 bytes)
%WinDir%\Temp\MPC32.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000217.query (0 bytes)
%WinDir%\Temp\MPC37.tmp (0 bytes)
%WinDir%\Temp\MPCCD.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013d.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\blue_arrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c7.query (0 bytes)
%WinDir%\Temp\MPC59.tmp (0 bytes)
%WinDir%\Temp\MPC7D.tmp (0 bytes)
%WinDir%\Temp\MPC86.tmp (0 bytes)
%WinDir%\Temp\MPC7A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013c.query (0 bytes)
%WinDir%\Temp\MPC4F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\support.bmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000143.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000070.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003d.query (0 bytes)
%WinDir%\Temp\MPC9F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000000.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a0.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bf.query (0 bytes)
%WinDir%\Temp\MPCD4.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022d.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000132.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000210.query (0 bytes)
%WinDir%\Temp\MPCF.tmp (0 bytes)
%WinDir%\Temp\MPCA5.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013f.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm (0 bytes)
%WinDir%\Temp\MPC1.tmp (0 bytes)
%WinDir%\Temp\MPCD2.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e3.query (0 bytes)
%WinDir%\Temp\MPC50.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\system.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000113.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\wrapperhelp.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019c.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_7.hhk (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif (0 bytes)
%WinDir%\Temp\MPCA4.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a6.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000159.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server (0 bytes)
%WinDir%\Temp\MPC2F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_4.hhk (0 bytes)
%WinDir%\Temp\MPC49.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000203.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000088.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000222.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_3.hhk (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015e.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f6.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000294.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cf.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023d.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\ding.wav (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000214.query (0 bytes)
%WinDir%\Temp\MPC41.tmp (0 bytes)
%WinDir%\Temp\MPCE2.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001de.query (0 bytes)
%WinDir%\Temp\MPC62.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000001.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml (0 bytes)
%WinDir%\Temp\MPCB3.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022a.query (0 bytes)
%WinDir%\Temp\MPCDB.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_9.hhk (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\collapsed.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c5.query (0 bytes)
%WinDir%\Temp\MPCD3.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000241.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000126.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\connection.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000238.query (0 bytes)
%WinDir%\Temp\MPC2.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001dc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d4.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm (0 bytes)
%WinDir%\Temp\MPC88.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001da.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\warning.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000232.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.js (0 bytes)
%WinDir%\pchealth\helpctr\System\css\Behaviors.css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000030.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a6.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000207.query (0 bytes)
%WinDir%\Temp\MPC48.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_articles_12x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bb.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000108.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000017.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\firstpage.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009b.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000028.query (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\watermark_300x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000052.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000066.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif (0 bytes)
%WinDir%\Temp\MPC67.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ee.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Channels.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000062.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\drive.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fa.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000100.query (0 bytes)
%WinDir%\Temp\MPC4C.tmp (0 bytes)
%WinDir%\Temp\MPC93.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\cd.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\gears.gif (0 bytes)
%WinDir%\Temp\MPC1E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000187.query (0 bytes)
%WinDir%\Temp\MPC5.tmp (0 bytes)
%WinDir%\Temp\MPC2D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f2.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif (0 bytes)
%WinDir%\Temp\MPCCF.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000085.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b6.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\feedback.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d7.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f0.query (0 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogshelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\Print.dlg (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007a.query (0 bytes)
%WinDir%\Temp\MPCB6.tmp (0 bytes)
%WinDir%\Temp\MPC1D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c0.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\loc_strings.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000275.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000122.query (0 bytes)
%WinDir%\Temp\MPC9D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldisplay.xsl (0 bytes)
%WinDir%\Temp\MPC19.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common (0 bytes)
%WinDir%\pchealth\helpctr\PackageStore\CRC_Disk.orig (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008a.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b5.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000156.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\notfound.htm (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f7.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000248.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000234.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\blank.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\Options.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002cb.query (0 bytes)
%WinDir%\Temp\MPCC7.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006d.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000013.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\AdvSearch.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000144.query (0 bytes)
%WinDir%\Temp\MPC6.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000176.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a7.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000168.query (0 bytes)
%WinDir%\Temp\MPC5D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SHARED.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000009.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000023.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\wmi_data.js (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag (0 bytes)
%WinDir%\Temp\MPC82.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002be.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif (0 bytes)
%WinDir%\Temp\MPCCE.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001af.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\32x32\logo.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000288.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000038.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000223.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\helpdoc.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp (0 bytes)
%WinDir%\Temp\MPCB8.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000183.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000162.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fe.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000103.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b8.query (0 bytes)
%WinDir%\Temp\MPCB0.tmp (0 bytes)
%WinDir%\Temp\MPCD7.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000039.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif (0 bytes)
%WinDir%\Temp\MPC5C.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp (0 bytes)
%WinDir%\Temp\MPC11.tmp (0 bytes)
%WinDir%\Temp\MPC2E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000200.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000190.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000193.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000dc.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000057.query (0 bytes)
%WinDir%\Temp\MPC74.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common (0 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24 (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029d.query (0 bytes)
%WinDir%\Temp\MPC21.tmp (0 bytes)
%WinDir%\Temp\MPC40.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000293.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000079.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000074.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006b.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000268.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000110.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000060.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fb.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e8.query (0 bytes)
%WinDir%\Temp\MPCC9.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\indexfirstlevel.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif (0 bytes)
%WinDir%\Temp\MPCAD.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm (0 bytes)
%WinDir%\Temp\MPC8A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000194.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001b.query (0 bytes)
%WinDir%\Temp\MPC34.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000212.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000298.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000196.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f8.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022e.query (0 bytes)
%WinDir%\pchealth\helpctr\BATCH\hscmui.cab (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000224.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024a.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000016.query (0 bytes)
%WinDir%\Temp\MPC14.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000006.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000228.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000067.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000151.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ff.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\rcmoreinfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000046.query (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\History.htm (0 bytes)
%WinDir%\Temp\MPC10.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009a.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg (0 bytes)
%WinDir%\Temp\MPC55.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000104.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c8.query (0 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__SERVER.htm (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_2.hhk (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000064.query (0 bytes)
%WinDir%\Temp\MPC16.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002aa.query (0 bytes)
%WinDir%\Temp\MPC4E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\warning.gif (0 bytes)
%WinDir%\Temp\MPC77.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b0.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\Topics.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000169.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000090.query (0 bytes)
%WinDir%\pchealth\helpctr\System\dialogs (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000134.query (0 bytes)
%WinDir%\Temp\MPCAB.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogs.htm (0 bytes)
%WinDir%\Temp\MPC5B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e2.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ad.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (0 bytes)
%WinDir%\Temp\MPC97.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e9.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp (0 bytes)
%WinDir%\Temp\MPCAF.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\update.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\images\get_conn.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000146.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003c.query (0 bytes)
%WinDir%\Temp\MPC24.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000c.query (0 bytes)
%WinDir%\Temp\MPC12.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000063.query (0 bytes)
%WinDir%\Temp\MPC87.tmp (0 bytes)
%WinDir%\Temp\MPC17.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\usb.gif (0 bytes)
%WinDir%\Temp\MPC72.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002a.query (0 bytes)
%WinDir%\Temp\MPC5F.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000276.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a7.query (0 bytes)
%WinDir%\Temp\MPC60.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a2.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000020.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\card.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000177.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000240.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018f.query (0 bytes)
%WinDir%\Temp\MPCAA.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000084.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d3.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000283.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000120.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000262.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif (0 bytes)
%WinDir%\Temp\MPCB2.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000260.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a2.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Favorites.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tours_12x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bf.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000244.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\endnode.gif (0 bytes)
%WinDir%\Temp\MPC5A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a9.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000040.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d4.query (0 bytes)
%WinDir%\Temp\MPC71.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000199.query (0 bytes)
%WinDir%\Temp\MPC63.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000211.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000da.query (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts\wrapperparam.js (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d6.query (0 bytes)
%WinDir%\Temp\MPCB5.tmp (0 bytes)
%WinDir%\Temp\MPC35.tmp (0 bytes)
%WinDir%\Temp\MPC20.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000256.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c0.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif (0 bytes)
%WinDir%\Temp\MPCC3.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS\viewmode.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c6.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e4.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008b.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016f.query (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\unreachable.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Search.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000192.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000082.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels (0 bytes)
%WinDir%\Temp\MPC80.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ec.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ca.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c6.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000160.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ef.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017a.query (0 bytes)
%WinDir%\Temp\MPCC5.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\errors\offline.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000056.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fe.query (0 bytes)
%WinDir%\Temp\MPC66.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e7.query (0 bytes)
%WinDir%\Temp\MPCC2.tmp (0 bytes)
%WinDir%\Temp\MPCC8.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e3.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\error.gif (0 bytes)
%WinDir%\Temp\MPCA.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\down.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b3.query (0 bytes)
%WinDir%\pchealth\helpctr\System\panels\RemoteHelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a8.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a3.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000204.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\options.htm (0 bytes)
%WinDir%\Temp\MPC4.tmp (0 bytes)
%WinDir%\Temp\MPC9A.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000206.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_5.hhk (0 bytes)
%WinDir%\Temp\MPCBA.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\index.dat.orig (0 bytes)
%WinDir%\Temp\MPC61.tmp (0 bytes)
%WinDir%\Temp\MPC27.tmp (0 bytes)
%WinDir%\Temp\MPC94.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b8.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000299.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ca.query (0 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\DlgLib.js (0 bytes)
%WinDir%\Temp\MPC8.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000186.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000026.query (0 bytes)
%WinDir%\Temp\MPCDC.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\scripts (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\Learn.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f2.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000047.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\IULogo.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000254.query (0 bytes)
%WinDir%\Temp\MPC6E.tmp (0 bytes)
%WinDir%\Temp\MPC8D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b0.query (0 bytes)
%WinDir%\Temp\MPC3.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\constants.js (0 bytes)
%WinDir%\Temp\MPC96.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__DESKTOP.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000010.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029e.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000124.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\compat.bmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015c.query (0 bytes)
%WinDir%\pchealth\helpctr\System\images\progbar.gif (0 bytes)
%WinDir%\Temp\MPC56.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000142.query (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000295.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a7.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a8.query (0 bytes)
%WinDir%\Temp\MPC4D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fc.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css (0 bytes)
%WinDir%\Temp\MPC92.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d2.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\keywordhelp.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000102.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021c.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000032.query (0 bytes)
%WinDir%\Temp\MPCB4.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ba.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000048.query (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bb.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000198.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm (0 bytes)
%WinDir%\Temp\MPC57.tmp (0 bytes)
%WinDir%\Temp\MPC42.tmp (0 bytes)
%WinDir%\Temp\MPC36.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000208.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif (0 bytes)
%WinDir%\Temp\MPC95.tmp (0 bytes)
%WinDir%\Temp\MPCDA.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000014.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a6.query (0 bytes)
%WinDir%\Temp\MPC81.tmp (0 bytes)
%WinDir%\Temp\MPC64.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldialog.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\Headlines.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ab.query (0 bytes)
%WinDir%\Temp\MPC8E.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000138.query (0 bytes)
%WinDir%\Temp\MPCBF.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000218.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c7.query (0 bytes)
%WinDir%\Temp\MPC23.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\error.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019a.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (0 bytes)
%WinDir%\Temp\MPCC6.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c4.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fa.query (0 bytes)
%WinDir%\Temp\MPC9.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006a.query (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000029.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017d.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000123.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c8.query (0 bytes)
%WinDir%\pchealth\helpctr\PackageStore\SkuStore.bin.orig (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000225.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000249.query (0 bytes)
%WinDir%\Temp\MPC2B.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\errors (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b7.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email (0 bytes)
%WinDir%\Temp\MPCC4.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\rc\rcRequest.htm (0 bytes)
%WinDir%\Temp\MPCCC.tmp (0 bytes)
%WinDir%\pchealth\helpctr\System\rc (0 bytes)
%WinDir%\Temp\MPCB1.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000137.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_6.hhk (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\isupport.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000148.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025f.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029a.query (0 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_8.hhk (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm (0 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\about_support.htm (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000239.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e7.query (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif (0 bytes)
%WinDir%\Temp\MPCB9.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Database\HCdata.edb (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000035.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Connect.gif (0 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000184.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000152.query (0 bytes)
%WinDir%\Temp\MPC6D.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e8.query (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif (0 bytes)
%WinDir%\Temp\MPCBC.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ea.query (0 bytes)
%WinDir%\Temp\MPC22.tmp (0 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml (0 bytes)
%WinDir%\Temp\MPC5E.tmp (0 bytes)
%WinDir%\Temp\MPC75.tmp (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bf.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000092.query (0 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018a.query (0 bytes)

Registry activity

The process %original file name%.exe:1268 makes changes in the system registry.

The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AE 85 BB 33 EA 21 7C F1 24 14 22 09 8A D3 F7 C0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%WinDir%\TLPEXV]
"IAY.exe" = "IAY"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The SpyTool modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The SpyTool modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The SpyTool modifies IE settings for security zones to map all web-nodes that bypassing proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process HelpSvc.exe:1520 makes changes in the system registry.

The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F3 39 B2 43 D8 6F 49 BD EC FE 65 ED 8E EA 6D 4D"

[HKLM\SOFTWARE\Microsoft\PCHealth\HelpSvc\Backup]
"PackageStore" = "51 43 31 03 01 00 00 00 0F 00 00 00 50 00 72 00"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKLM\SOFTWARE\Microsoft\PCHealth\HelpSvc\Backup]
"CRC_Registry" = "562997035"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"
"EventMessageFile" = "%System%\ESENT.dll"
"CategoryCount" = "16"

[HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ParseAutoexec" = "1"

The process IAY.exe:1808 makes changes in the system registry.

The SpyTool creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C5 90 80 69 E2 77 AF F3 28 42 DC 46 5F EC A5 E4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

To automatically run itself each time Windows is booted, the SpyTool adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAY Start" = "%WinDir%\TLPEXV\IAY.exe"

Network activity (URLs)

URL	IP
hxxp://a1363.g.akamai.net/pki/crl/products/WinIntPCA.crl
crl.microsoft.com	165.254.94.105

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:1268
HelpSvc.exe:1520
Delete the original SpyTool file.
Delete or disinfect the following files created/modified by the SpyTool:
%WinDir%\TLPEXV\IAY.exe (15021 bytes)
%WinDir%\TLPEXV\IAY.02 (56 bytes)
%WinDir%\TLPEXV\IAY.00 (1 bytes)
%WinDir%\TLPEXV\IAY.01 (81 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a8.query.new (256 bytes)
%WinDir%\Temp\MPC1B.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Options.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000db.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000114.query.new (374 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\tools.htm (1 bytes)
%WinDir%\pchealth\helpctr\Indices\merged.hhk (48376 bytes)
%WinDir%\Temp\MPCC1.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000170.query.new (298 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021b.query.new (306 bytes)
%WinDir%\Temp\MPC18.tmp (322 bytes)
%WinDir%\pchealth\helpctr\System\errors\badurl.htm (1 bytes)
%WinDir%\Temp\MPC2A.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004c.query.new (188 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c2.query.new (500 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cc.query.new (200 bytes)
%WinDir%\pchealth\helpctr\System\images (4 bytes)
%WinDir%\Temp\MPC51.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000098.query.new (154 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif (107 bytes)
%WinDir%\Temp\MPC26.tmp (14 bytes)
%WinDir%\Temp\MPC9B.tmp (1 bytes)
%WinDir%\Temp\MPC7C.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\info.gif (99 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e4.query.new (244 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000187.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018b.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif (454 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000223.query.new (25 bytes)
%WinDir%\Temp\MPC7.tmp (1830 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000130.query.new (484 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017d.query.new (356 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015e.query.new (764 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018c.query.new (230 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfomain.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a2.query.new (145 bytes)
%WinDir%\Temp\MPCAC.tmp (262 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16 (4 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48 (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a0.query.new (180 bytes)
%WinDir%\Temp\MPC47.tmp (19 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028a.query.new (998 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a4.query.new (164 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif (782 bytes)
%WinDir%\Temp\MPC70.tmp (762 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000282.query.new (145 bytes)
%WinDir%\Temp\MPC9C.tmp (139 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001dc.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000093.query.new (769 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif (129 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023c.query.new (202 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAHelpeeAcceptLayout.xml (666 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (9 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif (232 bytes)
%WinDir%\Temp\MPCE.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000142.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a9.query.new (25 bytes)
%WinDir%\Temp\MPC6C.tmp (782 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000047.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\expanded.gif (135 bytes)
%WinDir%\Temp\MPC1A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (704 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\chip.gif (102 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d0.query.new (198 bytes)
%WinDir%\Temp\MPC13.tmp (2416 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b2.query.new (145 bytes)
%WinDir%\Temp\MPCE0.tmp (442 bytes)
%WinDir%\pchealth\helpctr\System\panels\Context.htm (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b3.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm (13 bytes)
%WinDir%\Temp\MPCBD.tmp (1289 bytes)
%WinDir%\pchealth\helpctr\System\css\Layout.css (492 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.xml (371 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\windows.gif (569 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ba.query.new (961 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif (114 bytes)
%WinDir%\Temp\MPC3E.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015c.query.new (332 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js (426 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014d.query.new (850 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfohss.css (582 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\tools.bmp (1 bytes)
%WinDir%\Temp\MPC3B.tmp (967 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000225.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017e.query.new (356 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif (114 bytes)
%WinDir%\pchealth\helpctr\System\errors\redirect.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018f.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000152.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000031.query.new (564 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000210.query.new (158 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003c.query.new (298 bytes)
%WinDir%\Temp\MPC68.tmp (784 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000134.query.new (298 bytes)
%WinDir%\Temp\MPC88.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000224.query.new (82 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp (3 bytes)
%WinDir%\Temp\MPCD9.tmp (1821 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007f.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000052.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-less.xml (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e2.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b0.query.new (128 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000198.query.new (354 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm (10 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js (3 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr (4 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b2.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013c.query.new (338 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm (3 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm (1 bytes)
%WinDir%\Temp\MPCC0.tmp (609 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000060.query.new (180 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fe.query.new (145 bytes)
%WinDir%\Temp\MPC8F.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\images\error.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000207.query.new (73 bytes)
%WinDir%\Temp\MPC69.tmp (778 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000240.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000151.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ca.query.new (961 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif (734 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js (5 bytes)
%WinDir%\Temp\MPC91.tmp (682 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014c.query.new (396 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000279.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c2.query.new (145 bytes)
%WinDir%\Temp\MPCBE.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000293.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bd.query.new (608 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAURA.xml (569 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm (912 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e4.query.new (230 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp (2 bytes)
%WinDir%\Temp\MPCB.tmp (1568 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchblurb.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif (773 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cb.query.new (961 bytes)
%WinDir%\Temp\MPC54.tmp (843 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif (468 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif (43 bytes)
%WinDir%\Temp\MPC9E.tmp (159 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000054.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000110.query.new (190 bytes)
%WinDir%\Temp\MPC46.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000292.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000226.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011c.query.new (420 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000071.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000be.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a0.query.new (216 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000024.query.new (438 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (4412 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif (311 bytes)
%WinDir%\pchealth\helpctr\System\panels\HHWrapper.htm (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001af.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000082.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a4.query.new (130 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm (801 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\error.gif (107 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif (1 bytes)
%WinDir%\Temp\MPCCC.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif (777 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cb.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\common.js (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000040.query.new (212 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm (2002 bytes)
%WinDir%\pchealth\helpctr\System\panels\ShareHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_blank_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000249.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d4.query.new (190 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif (682 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025f.query.new (145 bytes)
%WinDir%\Temp\MPC33.tmp (449 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000137.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000288.query.new (214 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif (682 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ea.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002be.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif (608 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif (690 bytes)
%WinDir%\Temp\MPC3F.tmp (880 bytes)
%WinDir%\Temp\MPC6F.tmp (785 bytes)
%WinDir%\Temp\MPCD1.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007e.query.new (961 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ff.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000213.query.new (337 bytes)
%WinDir%\Temp\MPCC.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000180.query.new (282 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000051.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029c.query.new (188 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000123.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm (1163 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.xml (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029a.query.new (308 bytes)
%WinDir%\Temp\MPCE1.tmp (596 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008d.query.new (25 bytes)
%WinDir%\Temp\MPC3D.tmp (850 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SERVER.js (8 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysinfosum.htm (16 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000273.query.new (145 bytes)
%WinDir%\Temp\MPC65.tmp (1077 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c4.query.new (242 bytes)
%WinDir%\Temp\MPC25.tmp (16 bytes)
%WinDir%\Temp\MPCA2.tmp (129 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\rc.css (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b4.query.new (218 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e9.query.new (962 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000286.query.new (858 bytes)
%WinDir%\Temp\MPC6B.tmp (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif (75 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000057.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\HelpCtr.mmf (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000008.query.new (500 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e2.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif (640 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000194.query.new (310 bytes)
%WinDir%\Temp\MPC79.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000080.query.new (216 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm (1312 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif (784 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000083.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c4.query.new (246 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\searchtips.htm (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000283.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif (139 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif (741 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028b.query.new (998 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000115.query.new (520 bytes)
%WinDir%\Temp\MPCD2.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000026.query.new (25 bytes)
%WinDir%\Temp\MPC4A.tmp (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000143.query.new (457 bytes)
%WinDir%\Temp\MPC8C.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm (5 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif (694 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (10 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000038.query.new (302 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f2.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c8.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024d.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\printer.gif (136 bytes)
%WinDir%\Temp\MPC39.tmp (1780 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007c.query.new (304 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f4.query.new (206 bytes)
%WinDir%\Temp\MPC3A.tmp (275 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Logs\hcupdate.log (1213037 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005c.query.new (360 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js (61 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif (674 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019e.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm (6 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\DFS\privacy.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif (438 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000006.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000138.query.new (314 bytes)
%WinDir%\Temp\MPCA9.tmp (43 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000159.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\DFS\uplddrvinfo.htm (32 bytes)
%WinDir%\Temp\MPCA1.tmp (99 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000217.query.new (306 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000016.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\learnWU.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c8.query.new (250 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008b.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000214.query.new (160 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Uabrand.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ba.query.new (337 bytes)
%WinDir%\Temp\MPC4B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f2.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000032.query.new (564 bytes)
%WinDir%\Temp\MPC73.tmp (789 bytes)
%WinDir%\Temp\MPC89.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Index.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif (159 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c5.query.new (568 bytes)
%WinDir%\Temp\MPCA8.tmp (107 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp (9 bytes)
%WinDir%\Temp\MPC53.tmp (714 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ee.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a6.query.new (25 bytes)
%WinDir%\Temp\MPCBB.tmp (2 bytes)
%WinDir%\Temp\MPCD6.tmp (76 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000113.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000025.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif (762 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.htm (56 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000262.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\index.dat.new (87621 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm (24 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000070.query.new (454 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000299.query.new (308 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000231.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000247.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000028.query.new (446 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b4.query.new (216 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000aa.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bb.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000208.query.new (490 bytes)
%WinDir%\Temp\MPC1C.tmp (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000239.query.new (300 bytes)
%WinDir%\Temp\MPCD0.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ea.query.new (962 bytes)
%WinDir%\Temp\MPC99.tmp (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d2.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000df.query.new (73 bytes)
%WinDir%\Temp\MPCD7.tmp (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif (1 bytes)
%WinDir%\Temp\MPCAE.tmp (9161 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000042.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\History.htm (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020e.query.new (448 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000155.query.new (940 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d3.query.new (73 bytes)
%WinDir%\Temp\MPC78.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\ftshelp.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001eb.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif (808 bytes)
%WinDir%\Temp\MPC44.tmp (775 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ca.query.new (25 bytes)
%WinDir%\Temp\MPC29.tmp (1 bytes)
%WinDir%\Temp\MPCA7.tmp (106 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm (5 bytes)
%WinDir%\Temp\MPC8B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c0.query.new (276 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000298.query.new (246 bytes)
%WinDir%\Temp\MPC30.tmp (10 bytes)
%WinDir%\Temp\MPC15.tmp (32 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif (793 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000022.query.new (786 bytes)
%WinDir%\pchealth\helpctr\PackageStore\package_5.cab (601 bytes)
%WinDir%\Temp\MPC38.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000067.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000186.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000122.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000228.query.new (222 bytes)
%WinDir%\Temp\MPC2F.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000251.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAIMLayout.xml (587 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000296.query.new (966 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\errmsg.bmp (1 bytes)
%WinDir%\Temp\MPCCA.tmp (895 bytes)
%WinDir%\Temp\MPC52.tmp (608 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm (627 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000156.query.new (940 bytes)
%WinDir%\Temp\MPCDE.tmp (24 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c0.query.new (214 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Subsite.htm (6 bytes)
%WinDir%\Temp\MPC48.tmp (110 bytes)
%WinDir%\Temp\MPCA0.tmp (677 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000100.query.new (266 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000136.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d9.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm (880 bytes)
%WinDir%\Temp\MPCD.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000030.query.new (378 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm (3 bytes)
%WinDir%\Temp\MPC1F.tmp (1385 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\alert.gif (118 bytes)
%WinDir%\Temp\MPC31.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000204.query.new (208 bytes)
%WinDir%\Temp\MPC28.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010e.query.new (145 bytes)
%WinDir%\Temp\MPCD8.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002c.query.new (268 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000056.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000084.query.new (386 bytes)
%WinDir%\Temp\MPC7E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\check.gif (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013d.query.new (512 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000002.query.new (752 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm (353 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp (3 bytes)
%WinDir%\Temp\MPCCB.tmp (70 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000140.query.new (310 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ac.query.new (132 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png (1161 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Index.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000276.query.new (25 bytes)
%WinDir%\Temp\MPCDD.tmp (657 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000131.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif (379 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif (789 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000148.query.new (336 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\commonFunc.js (32 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bb.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000076.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif (106 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000120.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000119.query.new (324 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005f.query.new (457 bytes)
%WinDir%\Temp\MPCA3.tmp (181 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000236.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000178.query.new (222 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000241.query.new (73 bytes)
%WinDir%\Temp\MPC2C.tmp (3 bytes)
%WinDir%\Temp\MPC6A.tmp (775 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ee.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e7.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fa.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysComponentInfo.js (27 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif (254 bytes)
%WinDir%\Temp\MPCCE.tmp (630 bytes)
%WinDir%\Temp\MPC98.tmp (257 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000147.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\up.bmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000007a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a8.query.new (316 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ac.query.new (200 bytes)
%WinDir%\Temp\MPCE3.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000274.query.new (258 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm (829 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000124.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a2.query.new (242 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000058.query.new (240 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000294.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b2.query.new (25 bytes)
%WinDir%\Temp\MPC7B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016e.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000010.query.new (232 bytes)
%WinDir%\Temp\MPC85.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000012.query.new (306 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000193.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000248.query.new (258 bytes)
%WinDir%\Temp\MPC7F.tmp (1 bytes)
%WinDir%\Temp\MPCB7.tmp (600 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026e.query.new (618 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a2.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016f.query.new (145 bytes)
%WinDir%\Temp\MPC45.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000164.query.new (146 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000287.query.new (858 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000095.query.new (25 bytes)
%WinDir%\Temp\MPC3C.tmp (439 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024e.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000e.query.new (337 bytes)
%WinDir%\Temp\MPCA6.tmp (107 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\Favorites.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bf.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023d.query.new (25 bytes)
%WinDir%\Temp\MPCDF.tmp (390 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000116.query.new (520 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Search.htm (37 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000050.query.new (398 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif (692 bytes)
%WinDir%\Temp\MPCD5.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatMode.htm (601 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.xml (2 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\watermark_300x.bmp (2105 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001a.query.new (145 bytes)
%WinDir%\Temp\MPC37.tmp (492 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d7.query.new (1177 bytes)
%WinDir%\Temp\MPCCD.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001b.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\blue_arrow.gif (674 bytes)
%WinDir%\Temp\MPC59.tmp (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fb.query.new (25 bytes)
%WinDir%\Temp\MPC7D.tmp (1 bytes)
%WinDir%\Temp\MPC86.tmp (1 bytes)
%WinDir%\Temp\MPC7A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019a.query.new (73 bytes)
%WinDir%\Temp\MPC4F.tmp (395 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021a.query.new (306 bytes)
%WinDir%\pchealth\helpctr\PackageStore\CRC_Disk.new (60 bytes)
%WinDir%\pchealth\helpctr\System\images\progbar.gif (2 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\support.bmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d3.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002e.query.new (500 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000075.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000029.query.new (25 bytes)
%WinDir%\Temp\MPC4D.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002af.query.new (25 bytes)
%WinDir%\Temp\MPC9F.tmp (135 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d8.query.new (206 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000190.query.new (266 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f8.query.new (194 bytes)
%WinDir%\Temp\MPCD4.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025c.query.new (192 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif (180 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006c.query.new (194 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm (321 bytes)
%WinDir%\Temp\MPCA5.tmp (114 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif (382 bytes)
%WinDir%\Temp\MPCB4.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c8.query.new (192 bytes)
%WinDir%\Temp\MPC1.tmp (6 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000150.query.new (194 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020c.query.new (82 bytes)
%WinDir%\Temp\MPC50.tmp (4 bytes)
%WinDir%\Temp\MPCDA.tmp (2 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000018a.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c2.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000107.query.new (769 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bc.query.new (234 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000062.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000072.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002cb.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000237.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\images\wrapperhelp.gif (76 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000176.query.new (337 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_7.hhk (2712 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif (67 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif (454 bytes)
%WinDir%\Temp\MPCA4.tmp (136 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000272.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000206.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e8.query.new (250 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b3.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif (775 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_4.hhk (1568 bytes)
%WinDir%\Temp\MPC49.tmp (713 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000218.query.new (164 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.xml (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b4.query.new (472 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000dc.query.new (240 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_3.hhk (16 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000254.query.new (214 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f8.query.new (256 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001aa.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000063.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000090.query.new (228 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\ding.wav (2579 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000104.query.new (246 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif (384 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm (7 bytes)
%WinDir%\Temp\MPCE2.tmp (379 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000184.query.new (270 bytes)
%WinDir%\Temp\MPC62.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000275.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\RAClientLayout.xml (540 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b5.query.new (73 bytes)
%WinDir%\Temp\MPCB3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023b.query.new (145 bytes)
%WinDir%\Temp\MPCDB.tmp (239598 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000088.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_9.hhk (1568 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c4.query.new (214 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\collapsed.gif (139 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025b.query.new (25 bytes)
%WinDir%\pchealth\helpctr\PackageStore\package_6.cab (1425 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e0.query.new (248 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c1.query.new (500 bytes)
%WinDir%\Temp\MPCD3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif (750 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e3.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif (838 bytes)
%WinDir%\pchealth\helpctr\System\errors\connection.htm (18 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000048.query.new (204 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002bf.query.new (998 bytes)
%WinDir%\Temp\MPC2.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000108.query.new (206 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm (346 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\warning.gif (600 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000096.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017b.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysHealthInfo.js (20 bytes)
%WinDir%\pchealth\helpctr\System\css\Behaviors.css (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\MiniNavBar.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000020.query.new (264 bytes)
%WinDir%\pchealth\helpctr\PackageStore\SkuStore.bin.new (1095 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_articles_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ab.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000023a.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b0.query.new (326 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f0.query.new (182 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif (137 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fa.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000046.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js (4 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000230.query.new (292 bytes)
%WinDir%\pchealth\helpctr\System\panels\firstpage.htm (714 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm (356 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d2.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026f.query.new (618 bytes)
%WinDir%\Temp\MPC32.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000005.query.new (25 bytes)
%WinDir%\Temp\MPCB0.tmp (287 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000013.query.new (306 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif (1 bytes)
%WinDir%\Temp\MPC67.tmp (741 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Channels.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ec.query.new (226 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif (159 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\drive.gif (139 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif (785 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000009.query.new (25 bytes)
%WinDir%\Temp\MPC4C.tmp (20 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif (51 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\cd.gif (257 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\gears.gif (135 bytes)
%WinDir%\Temp\MPC1E.tmp (20 bytes)
%WinDir%\Temp\MPC5.tmp (12 bytes)
%WinDir%\Temp\MPC2D.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d6.query.new (1177 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif (8 bytes)
%WinDir%\Temp\MPCCF.tmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bf.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\images\feedback.gif (895 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ab.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Config\sereg.xml.new (828 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogshelp.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm (356 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\Print.dlg (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000264.query.new (248 bytes)
%WinDir%\Temp\MPCB6.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000250.query.new (140 bytes)
%WinDir%\Temp\MPC1D.tmp (1128 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\loc_strings.xml (26 bytes)
%WinDir%\Temp\MPC9D.tmp (107 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldisplay.xsl (11 bytes)
%WinDir%\Temp\MPC19.tmp (1765 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif (994 bytes)
%WinDir%\Temp\MPC8A.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000158.query.new (264 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm (2635 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000074.query.new (398 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000146.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000000.query.new (62 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\msinfo.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp (2 bytes)
%WinDir%\pchealth\helpctr\System\images\get_conn.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\System\errors\notfound.htm (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000064.query.new (204 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000202.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\panels\blank.htm (608 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000172.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001be.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm (10 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000039.query.new (25 bytes)
%WinDir%\Temp\MPCC7.tmp (135 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f4.query.new (260 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f3.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\panels\AdvSearch.htm (19 bytes)
%WinDir%\Temp\MPC6.tmp (5 bytes)
%WinDir%\Temp\MPC5C.tmp (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000001c.query.new (384 bytes)
%WinDir%\Temp\MPC5D.tmp (4 bytes)
%WinDir%\pchealth\helpctr\System\scripts\HomePage__SHARED.js (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d8.query.new (348 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001da.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Config\CheckPoint\tmp.edb (4104 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c0.query.new (254 bytes)
%WinDir%\Temp\MPC82.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000017.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif (410 bytes)
%WinDir%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f0.query.new (184 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000162.query.new (337 bytes)
%WinDir%\Temp\MPC2B.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000094.query.new (294 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ad.query.new (186 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\helpdoc.gif (207 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif (380 bytes)
%WinDir%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp (2 bytes)
%WinDir%\Temp\MPCB8.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000280.query.new (178 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000192.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000284.query.new (130 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000004.query.new (194 bytes)
%WinDir%\Temp\MPC84.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000b8.query.new (270 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001e6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000001.query.new (752 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ed.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot-wo-com.xml (10 bytes)
%WinDir%\Temp\MPC83.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000086.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif (789 bytes)
%WinDir%\Temp\MPC11.tmp (1890 bytes)
%WinDir%\Temp\MPC2E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000a4.query.new (258 bytes)
%WinDir%\pchealth\helpctr\System\images\flyout_arrow.gif (70 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif (59 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fc.query.new (218 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002aa.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000014.query.new (314 bytes)
%WinDir%\Temp\MPC74.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004a.query.new (73 bytes)
%WinDir%\Temp\MPC21.tmp (10 bytes)
%WinDir%\Temp\MPC40.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000fe.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000183.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000023.query.new (786 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000079.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm (2 bytes)
%WinDir%\Temp\MPCC9.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000263.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\errors\indexfirstlevel.htm (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif (1 bytes)
%WinDir%\Temp\MPCAD.tmp (569 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000021c.query.new (208 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm (14 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif (845 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000013b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000188.query.new (202 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000de.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000266.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c7.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000025a.query.new (25 bytes)
%WinDir%\Temp\MPC63.tmp (371 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a8.query.new (124 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ff.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022c.query.new (178 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001a7.query.new (145 bytes)
%WinDir%\Temp\MPC14.tmp (2413 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\RSoP.js (56 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000d4.query.new (206 bytes)
%WinDir%\pchealth\helpctr\System\panels\NavBar.htm (20 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000197.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002c6.query.new (145 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\rcmoreinfo.htm (15 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\History.htm (1 bytes)
%WinDir%\Temp\MPC10.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000182.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif (778 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000160.query.new (222 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg (677 bytes)
%WinDir%\Temp\MPC55.tmp (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cf.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif (106 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027f.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000044.query.new (208 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__SERVER.htm (7 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_2.hhk (13 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029e.query.new (926 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010c.query.new (202 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bc.query.new (196 bytes)
%WinDir%\Temp\MPC4E.tmp (839 bytes)
%WinDir%\pchealth\helpctr\System\images\warning.gif (1 bytes)
%WinDir%\Temp\MPC77.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000246.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000216.query.new (306 bytes)
%WinDir%\Temp\MPC41.tmp (18 bytes)
%WinDir%\pchealth\helpctr\System\panels\Topics.htm (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ec.query.new (486 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000014e.query.new (850 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000085.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000106.query.new (769 bytes)
%WinDir%\Temp\MPCAB.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\NetDiag\dglogs.htm (55 bytes)
%WinDir%\Temp\MPC5B.tmp (208 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012c.query.new (368 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fb.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001cf.query.new (337 bytes)
%WinDir%\Temp\MPC97.tmp (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000167.query.new (260 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000020d.query.new (448 bytes)
%WinDir%\Temp\MPCC8.tmp (207 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\update.bmp (1 bytes)
%WinDir%\Temp\MPC90.tmp (674 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif (781 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000168.query.new (428 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000118.query.new (230 bytes)
%WinDir%\Temp\MPC24.tmp (1964 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000112.query.new (73 bytes)
%WinDir%\Temp\MPC12.tmp (2 bytes)
%System%\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\E04822AD18D472EA5B582E6E6F8C6B9A (256 bytes)
%WinDir%\Temp\MPC87.tmp (1 bytes)
%WinDir%\Temp\MPC17.tmp (582 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\usb.gif (262 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001bb.query.new (337 bytes)
%WinDir%\Temp\MPC72.tmp (773 bytes)
%WinDir%\Temp\MPC5F.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000bc.query.new (246 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b8.query.new (248 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000200.query.new (260 bytes)
%WinDir%\Temp\MPC60.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000211.query.new (316 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000163.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ac.query.new (302 bytes)
%WinDir%\Temp\MPC34.tmp (980 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\card.gif (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a7.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000270.query.new (206 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000092.query.new (769 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001b3.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000036.query.new (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a6.query.new (337 bytes)
%WinDir%\Temp\MPCAA.tmp (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e3.query.new (457 bytes)
%WinDir%\pchealth\helpctr\Config\Cache\Professional_32_1033.dat (29254 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000009c.query.new (168 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif (213 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c3.query.new (601 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000199.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c7.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f7.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000017c.query.new (316 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm (1111 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000220.query.new (98 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000242.query.new (73 bytes)
%WinDir%\Temp\MPCB2.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000103.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm (13 bytes)
%WinDir%\pchealth\helpctr\System\panels\subpanels\Favorites.htm (8 bytes)
%WinDir%\Temp\MPC20.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif (67 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000265.query.new (73 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif (102 bytes)
%WinDir%\pchealth\helpctr\System\images\Expando\endnode.gif (136 bytes)
%WinDir%\Temp\MPC5A.tmp (6 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Windows Component Publisher,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm (15 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004f.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ce.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000196.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000234.query.new (182 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004b.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b8.query.new (262 bytes)
%WinDir%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp (9 bytes)
%WinDir%\pchealth\helpctr\System\scripts\Common.js (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a3.query.new (242 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002a0.query.new (128 bytes)
%WinDir%\Temp\MPC71.tmp (777 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028d.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000035.query.new (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000078.query.new (282 bytes)
%WinDir%\pchealth\helpctr\System\scripts\wrapperparam.js (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000043.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000238.query.new (222 bytes)
%WinDir%\Temp\MPCB5.tmp (1 bytes)
%WinDir%\Temp\MPC35.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_tours_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000026c.query.new (194 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif (438 bytes)
%WinDir%\Temp\MPCC3.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\DFS\viewmode.xml (275 bytes)
%WinDir%\pchealth\helpctr\Config\SAFStore.xml.new (28 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif (107 bytes)
%WinDir%\pchealth\helpctr\System\errors\unreachable.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000244.query.new (200 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000132.query.new (73 bytes)
%WinDir%\Temp\MPC76.tmp (1 bytes)
%WinDir%\Temp\MPC80.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000cc.query.new (198 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000257.query.new (25 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000006b.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000068.query.new (202 bytes)
%WinDir%\Temp\MPCC5.tmp (139 bytes)
%WinDir%\pchealth\helpctr\System\errors\offline.htm (775 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif (834 bytes)
%WinDir%\Temp\MPC66.tmp (734 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000e8.query.new (194 bytes)
%WinDir%\Temp\MPCC2.tmp (1 bytes)
%WinDir%\Temp\MPC58.tmp (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000018.query.new (254 bytes)
%WinDir%\Temp\MPC16.tmp (544 bytes)
%WinDir%\Temp\MPCA.tmp (48457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019c.query.new (240 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000252.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016c.query.new (226 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\down.bmp (1 bytes)
%WinDir%\pchealth\helpctr\System\panels\RemoteHelp.htm (43 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011e.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000012a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif (861 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000268.query.new (166 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\options.htm (1 bytes)
%WinDir%\Temp\MPC4.tmp (5 bytes)
%WinDir%\Temp\MPC9A.tmp (102 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_5.hhk (20 bytes)
%WinDir%\Temp\MPCBA.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000015d.query.new (764 bytes)
%WinDir%\Temp\MPC61.tmp (1 bytes)
%WinDir%\Temp\MPC27.tmp (374 bytes)
%WinDir%\Temp\MPC94.tmp (67 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif (43 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000002d.query.new (500 bytes)
%WinDir%\pchealth\helpctr\System\dialogs\DlgLib.js (850 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif (468 bytes)
%System%\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\E04822AD18D472EA5B582E6E6F8C6B9A (528 bytes)
%WinDir%\Temp\MPCDC.tmp (13 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\Learn.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000066.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\IULogo.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000290.query.new (214 bytes)
%WinDir%\Temp\MPC6E.tmp (789 bytes)
%WinDir%\Temp\MPC8D.tmp (1 bytes)
%WinDir%\Temp\MPC3.tmp (6 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm (837 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001df.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005e.query.new (457 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Common\constants.js (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000da.query.new (73 bytes)
%WinDir%\Temp\MPC96.tmp (118 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001f6.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000166.query.new (260 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000144.query.new (250 bytes)
%WinDir%\pchealth\helpctr\System\HomePage__DESKTOP.htm (7 bytes)
%WinDir%\pchealth\helpctr\System\images\16x16\compat.bmp (1 bytes)
%WinDir%\Temp\MPC43.tmp (24 bytes)
%WinDir%\Temp\MPC56.tmp (5 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000260.query.new (262 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif (387 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000016a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000027c.query.new (162 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000203.query.new (457 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ce.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\wmi_data.js (14 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000232.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000258.query.new (204 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css (2 bytes)
%WinDir%\Temp\MPC92.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm (8 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000154.query.new (432 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\keywordhelp.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001de.query.new (961 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000011a.query.new (145 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm (2 bytes)
%WinDir%\Temp\MPCF.tmp (7 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000ae.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp (630 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000278.query.new (186 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000169.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm (8 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif (321 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif (181 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000f.query.new (337 bytes)
%WinDir%\pchealth\helpctr\System\images\32x32\logo.bmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000128.query.new (242 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm (516 bytes)
%WinDir%\Temp\MPC57.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000126.query.new (601 bytes)
%WinDir%\Temp\MPC42.tmp (1 bytes)
%WinDir%\Temp\MPC36.tmp (2 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000004e.query.new (337 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000034.query.new (504 bytes)
%WinDir%\Temp\MPC93.tmp (67 bytes)
%WinDir%\Temp\MPC95.tmp (1 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\system.gif (404 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000000c.query.new (186 bytes)
%WinDir%\Temp\MPC81.tmp (1428 bytes)
%WinDir%\Temp\MPC64.tmp (9 bytes)
%WinDir%\pchealth\helpctr\System\DFS\xmldialog.htm (967 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000c6.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\Headlines.htm (6 bytes)
%WinDir%\pchealth\helpctr\System\panels\Options.htm (4 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000295.query.new (966 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c7.query.new (300 bytes)
%WinDir%\Temp\MPC8E.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001ef.query.new (337 bytes)
%WinDir%\Temp\MPCBF.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000019f.query.new (457 bytes)
%WinDir%\Temp\MPC23.tmp (9 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm (3 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif (373 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm (267 bytes)
%WinDir%\Temp\MPCC6.tmp (136 bytes)
%WinDir%\Temp\MPC9.tmp (1488 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001d0.query.new (192 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif (14 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001c6.query.new (860 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000010f.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000127.query.new (601 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000229.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000005a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\System\images\info.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000222.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ca.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000022a.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008c.query.new (516 bytes)
%WinDir%\Temp\MPCAF.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000024c.query.new (418 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000174.query.new (234 bytes)
%WinDir%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002ba.query.new (73 bytes)
%WinDir%\Temp\MPCC4.tmp (674 bytes)
%WinDir%\pchealth\helpctr\System\rc\rcRequest.htm (2 bytes)
%WinDir%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm (341 bytes)
%WinDir%\Temp\MPCB1.tmp (2 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif (910 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_6.hhk (15 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\isupport.htm (3 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000256.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000af.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000001fc.query.new (236 bytes)
%WinDir%\pchealth\helpctr\Indices\scoped_8.hhk (4232 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm (3 bytes)
%WinDir%\pchealth\helpctr\System\blurbs\about_support.htm (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000029d.query.new (926 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000212.query.new (457 bytes)
%WinDir%\Temp\MPC8.tmp (19 bytes)
%WinDir%\Temp\MPCB9.tmp (2 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000177.query.new (337 bytes)
%WinDir%\pchealth\helpctr\Database\HCdata.edb (112152 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif (111 bytes)
%WinDir%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000173.query.new (145 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f6.query.new (25 bytes)
%WinDir%\pchealth\helpctr\System\images\Centers\Connect.gif (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000000f7.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\00000102.query.new (73 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003a.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000003e.query.new (25 bytes)
%WinDir%\Temp\MPC6D.tmp (793 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif (1 bytes)
%WinDir%\Temp\MPCBC.tmp (9 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000008e.query.new (25 bytes)
%WinDir%\Temp\MPC22.tmp (7 bytes)
%WinDir%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pssmachinesnapshot.xml (278 bytes)
%WinDir%\Temp\MPC5E.tmp (2 bytes)
%WinDir%\Temp\MPC75.tmp (1 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\000002b6.query.new (25 bytes)
%WinDir%\pchealth\helpctr\OfflineCache\Professional_32#0409\0000028c.query.new (284 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAY Start" = "%WinDir%\TLPEXV\IAY.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

Network Activity

Map

Strings from Dumps