|
|
|
|
|
|
LIST OF FILES AND FOLDERS
TARGETED BY THE smitRem
TOOL |
|
|
by noahdfear |
|
|
|
|
|
|
|
|
|
Program Files / Archivos de
programa |
%systemroot%\system32
/ system |
%systemroot%
(Windows folder) |
|
|
|
|
|
AlfaCleaner |
182469.dll |
aapfr.exe |
|
|
AntiVermins |
2DBFD.dll |
about_spyware_bg.gif |
|
|
AntiVirusGold |
a.exe |
about_spyware_bottom.gif |
|
|
BraveSentry |
ace16win.dll |
accesss.exe |
|
|
Crystalys media |
acvgxw.dll |
ads.js |
|
|
EliteCodec |
adobepnl.dll |
adw.htm |
|
|
eMedia Codec |
alxres.dll |
adware-sheriff-box.gif |
|
|
FreeVideo |
amcompat.tlb |
adware-sheriff-header.gif |
|
|
HQvideo |
amzyfwuw.exe |
alexaie.dll |
|
|
HQVideoCodec |
anti_troj.exe |
alxie328.dll |
|
|
iMediaCodec |
appmagr.dll |
alxtb1.dll |
|
|
IntCodec |
asgp32.dll |
antispylab-logo.gif |
|
|
iVideoCodec |
asxbbx.dll |
as.gif |
|
|
MediaCodec |
atmclk.exe |
as_header.gif |
|
|
Media-Codec |
atmtd.dll |
astctl32.ocx |
|
|
MMediaCodec |
atmtd.dll._ |
avpcc.dll |
|
|
MPVIDEOCODEC |
autodisc32.dll |
bg_bg.gif |
|
|
PCODEC |
bolnyz.dll |
big_red_x.gif |
|
|
P.S.Guard |
bpvcou.dll |
blue-bg.gif |
|
|
PornMag Pass |
bridge.dll |
box_1.gif |
|
|
PornPass Manager |
cfltygd.dll |
box_2.gif |
|
|
PowerCodec |
cmd32.exe |
box_3.gif |
|
|
PSGuard |
CWS_iestart.exe |
BTGrab.dll |
|
|
QualityCodec |
dailytoolbar.dll |
button_buynow.gif |
|
|
Safety Bar |
dcom_15.dll |
button_freescan.gif |
|
|
Search Maid |
dcom_16.dll |
buy_now.gif |
|
|
Security IGuard |
dcom_21.dll |
buy-now-btn.gif |
|
|
Security Toolbar |
dcomcfg.exe |
click_for_free_scan.gif |
|
|
SoftCodec |
Defpia32.dll |
close_ico.gif |
|
|
SpyAxe |
dfrgsrv.exe |
close-bar.gif |
|
|
SpyFalcon |
dial23.exe |
clrssn.exe |
|
|
SpyHeal |
dload.exe |
corner-left.gif |
|
|
SpyQuake2.com |
dnefhw.dll |
corner-right.gif |
|
|
SpySheriff |
dpfwu.dll |
cpan.dll |
|
|
SpyTrooper |
duxzj.dll |
desktop.html |
|
|
SpywareQuake |
dvdcap.dll |
dialup.exe |
|
|
SpywareSheriff |
dxmpp.dll |
dlmax.dll |
|
|
SpywareStrike |
dxole32.exe |
download.gif |
|
|
strCodec |
eooyt.exe |
download_box.gif |
|
|
TrueCodec |
eowygj.dll |
download_product.gif |
|
|
Trust Cleaner |
ert.dll |
facts.gif |
|
|
TrustIn Bar |
erxbx.dll |
features.gif |
|
|
TrustIn Contextual |
exuc32.tmp |
footer.gif |
|
|
TrustIn Popups |
F016C.dll |
footer_back.gif |
|
|
VidCodecs |
F8E35.dll |
footer_back.jpg |
|
|
VideoCompressionCodec |
FC527B.dll |
free_scan_red_btn.gif |
|
|
Video iCodec |
ff.tmp |
free-scan-btn.gif |
|
|
VideoKeyCodec |
fhmfes.dll |
header_1.gif |
|
|
VideosCodec |
fhpd.dll |
header_2.gif |
|
|
Virtual Maid |
ficqv.dll |
header_3.gif |
|
|
VirusBurst |
fjdcy.dll |
header_4.gif |
|
|
VirusBursters |
fxmngr.exe |
header-bg.gif |
|
Winhound |
fyhhxw.dll |
h-line-gradient.gif |
|
X Password Generator |
gqagksr.dll |
icon_warning_big.gif |
|
X Password Manager |
gtpbx.dll |
inetdctr.dll |
|
ZipCodec |
gunist.exe |
inetloader.dll |
|
|
guxxa.dll |
infected.gif |
|
%systemdrive% |
gvfsc.dll |
infected_top_bg.gif |
|
(Local Disk C: or system partition) |
helper.exe |
info.gif |
|
|
hhk.dll |
local.html |
|
boot.inx |
hhk.dll.tcf |
logo.gif |
|
bsw.bmp |
higjxe.dll |
main_back.gif |
|
bsw.exe |
hookdump.exe |
mtwirl32.dll |
|
secure32.html |
hp***.tmp |
navibar_bg.gif |
|
winstall.exe |
htey.dll |
navibar_corner_left.gif |
|
wp.bmp |
httge.dll |
navibar_corner_right.gif |
|
wp.exe |
hvcycg.dll |
no-icon.gif |
|
|
hvnwm.dll |
notepad32.exe |
|
Desktop shortcuts / icons |
hzclqhc.dll |
olehelp.exe |
|
%Userprofile%\Desktop / Bureaublad |
icima.dll |
onlineshopping.ico |
|
|
iewd.exe |
osaupd.exe |
|
asfds |
image.gif.exe |
popuper.exe |
|
cdegfr |
imfdfcj.dll |
processes.txt |
|
fdsf |
impgsje.dll |
product_box.gif |
|
|
sdfdsf |
intel32.exe |
Pynix.dll |
|
|
sdfff |
intell32.exe |
red_warning_ico.gif |
|
wdcsadsad |
intell321.exe |
reg-freeze-box.gif |
|
zxczxc |
interf.tlb |
reg-freeze-header.gif |
|
Air Tickets.url |
intmon.exe |
remove_spyware_header.gif |
|
AntivirusGold.lnk |
intmonp.exe |
removeadware.ico |
|
Big Tits.url |
intxt.exe |
remove-spyware-btn.gif |
|
Blackjack.url |
ioctrl.dll |
rf.gif |
|
Britney Spears.url |
ipztub.dll |
rf_header.gif |
|
Car Insurance.url |
iqzv.dl |
runwin32.exe |
|
Cheap Cigarettes.url |
ishost.exe |
safe_and_trusted.gif |
|
Credit Card.url |
ismini.exe |
scan_btn.gif |
|
Cruises.url |
ismon.exe |
screen.html |
|
Currency Trading.url |
isnotify.exe |
se_spoof.dll |
|
Lesbian Sex.url |
issearch.exe |
secure32.html |
|
MP3.url |
ixt*.dll |
security_center_caption.gif |
|
Online Betting.url |
jao.dll |
security-center-bg.gif |
|
Online Gambling.url |
jbtazy.dll |
security-center-logo.gif |
|
Online Security Center.url |
jevtxpg.dll |
sep_hor.gif |
|
Online Shopping.url |
jpqet.dll |
sep_vert.gif |
|
Oral Sex.url |
Kdfdlh32.dll |
sexpersonals.ico |
|
Party Poker.url |
kernels32.exe |
sites.ini |
|
Pharmacy.url |
kernels64.exe |
spacer.gif' |
|
Phentermine.url |
kernels8.exe |
spp3.dll |
|
Pornstars.url |
kfhrvq.dll |
spyware_detected.gif |
|
|
Remove Adware.url |
kkqfb.dll |
spyware-detected.gif |
|
Remove Spyware.url |
klja.dll |
spyware-sheriff-box.gif |
|
Security Troubleshooting.url |
lcch.dat |
spyware-sheriff-header.gif |
|
Sex Personals.url |
ld****.tmp |
star.gif |
|
SpySheriff.lnk |
lfd.dat |
star_gray.gif |
|
SpyTrooper.lnk |
ll.exe |
star_gray_small.gif |
|
Trust Cleaner.lnk |
lut.dat |
star_small.gif |
|
viagra.url |
lwpfwjb.dll |
star-grey.gif |
|
Video Slots.url |
main.exe |
susp.exe |
|
X Password Generator.lnk |
Mhpcja32.dll |
systeem.exe |
|
x password manager.lnk |
mirarsearch_toolbar.exe |
System32fab.exe |
|
|
mpsegment.exe |
systemcritical.exe |
|
paths for 9X |
mscdaux.dll |
time.exe |
|
%windir%\Desktop |
mscornet.exe |
tool1.exe |
|
|
%windir%\Bureaublad |
mshtml32.tdb |
tool2.exe |
|
|
msmapi32.exe |
tool3.exe |
|
%allusersprofile%\Desktop |
msmapi32.exe.MANIFEST |
tool4.exe |
|
|
msmsgs.exe |
tool5.exe |
|
Online Dating.url |
msmsn.exe |
tpopup.exe |
|
Online Pharmacy.url |
msole32.exe |
true-stories.gif |
|
Online Security Center.lnk |
mssearchnet.exe |
ts.gif |
|
Online Security Center.url |
msvcrt64.dll |
ts_header.gif |
|
Online Security Guide.url |
msvol.tlb |
uninstDsk.exe |
|
PSGuard spyware remover.lnk |
mswinb32.dll |
uninstIU.exe |
|
PSGuard.lnk |
mswinb32.exe |
users32.exe |
|
Security Troubleshooting.lnk |
mswinf32.dll |
v.gif |
|
Security Troubleshooting.url |
mswinf32.exe |
videoslots.ico |
|
Spyware Removal.url |
mswinup32.dll |
waol.exe |
|
WinHound spyware remover.lnk |
mswinxml.dll |
warnhp.html |
|
|
mzoeut.dll |
warning_icon.gif |
|
paths for 9X |
Nbfgemln.exe |
warning-bar-ico.gif |
|
%windir%\all users\Desktop |
ncompat.tlb |
win_logo.gif |
|
%windir%\all users\Bureaublad |
netstat2.exe |
win32e.exe |
|
|
netwrap.dll |
win64.exe |
|
system32 / system icons |
nscompat.tlb |
winajbm.dll |
|
|
nvctrl.exe |
window.exe |
|
Air Tickets.ico |
oerucu.dll |
windows-compatible.gif |
|
|
Big Tits.ico |
ofcukiz.dll |
wininet32.exe |
|
Blackjack.ico |
office_pnl.dll |
winmgnt.exe |
|
Britney Spears.ico |
officescan.exe |
win-sec-center-logo.gif |
|
Car Insurance.ico |
oiso.bin |
wp.bmp |
|
Cheap Cigarettes.ico |
okkmtv.dll |
wupdmgr.exe |
|
Credit Card.ico |
ole32vbs.exe |
x.exe |
|
Cruises.ico |
oleadm.dll |
x.gif |
|
Currency Trading.ico |
oleadm32.dll |
xplugin.dll |
|
Lesbian Sex.ico |
oleext.dll |
xxxvideo.hta |
|
MP3.ico |
oleext32.dll |
y.exe |
|
Online Betting.ico |
ongi.dll |
yellow_warning_ico.gif |
|
Online Gambling.ico |
onofub.dll |
yes-icon.gif |
|
Oral Sex.ico |
oqabf.dll |
yod.htm |
|
ot.ico |
oqipt.dll |
zloader3.exe |
|
Party Poker.ico |
ornzq.dll |
ZServ.dll |
|
Pharmacy.ico |
oybgrql.dll |
RGF2ZQ
>>> folder |
|
Phentermine.ico |
page.htm |
|
|
Pornstars.ico |
param32.dll |
Favorites |
|
ptainfo1.ico |
pcf.pdf |
%userprofile%\Favorites |
|
ptainfo2.ico |
perfcii.ini |
|
|
Remove Spyware.ico |
perflibs__ |
Adipex.url |
|
ts.ico |
perfont.exe |
Alprazolam.url |
|
viagra.ico |
performent202.dll |
Anti
Spam.url |
|
|
phqghume.exe |
Antivirus Test
Online.url |
|
|
pmnqguh.dll |
Black Jack
Online.url |
|
|
pop_up.dll |
Carisoprodol.url |
|
|
POPCORN72.EXE |
Diazepam.url |
|
|
posem.dll |
Free XXX Sites
List.url |
|
|
processes.txt |
Home Loan.url |
|
|
proqlaim.exe |
Hydrocodone.url |
|
|
qjrkvy.exe |
Job Search.url |
|
|
qnusjji.dll |
Lortab.url |
|
|
qrucmr.dll |
Need Money.url |
|
|
questmod.dll |
Network
Security.url |
|
|
qxfgcg.dll |
Online
Dating.url |
|
|
reger.exe |
Online
Gambling.url |
|
|
|
reglogs.dll |
Online
Pharmacy.url |
|
|
regperf.exe |
Online
Pharmacy\Adipex.url |
|
|
repigsp.exe |
Poker.url |
|
|
replmap.dll |
PornPass
Manager.lnk |
|
|
|
rjxdexau.exe |
Prozac.url |
|
|
rmzdzx.dll |
Remove
Spyware.url |
|
|
rrtcany.dll |
Spam
Filters.url |
|
|
rtwwf.exe |
Spyware
Removal.url |
|
|
runsrv32.dll |
Take It Here - Daily Updated Porn Links.url |
|
|
runsrv32.exe |
Take It Here -
Free * TGP.url |
|
|
sacskza.dll |
Valium.url |
|
|
sbnudh.dll |
Vicodin.url |
|
|
searchdll.dll |
Web
Detective.url |
|
|
shdochop.dll |
Xanax.url |
|
|
shell386.exe |
Adult >> folder |
|
|
shellgui32.dll |
Cars >> folder |
|
|
shnlog.exe |
Sexual life >> folder |
|
|
simpole.tlb |
Shopping >> folder |
|
|
sivudro.dll |
Online Gambling
>> folder |
|
|
|
smaexp32.dll |
Online Pharmacy
>> folder |
|
|
smartdrv.exe |
|
|
spibohst.exe |
%AllUsersProfile%\Favorites |
|
|
start2.exe |
|
|
start32.exe |
Buy Viagra
Online.url |
|
|
start323072.exe |
Cheap
Viagra.url |
|
|
stdole3.tlb |
Download Free Spyware
Remover.url |
|
|
|
stickrep.dll |
|
|
suchost.exe |
%userprofile%\Start
Menu |
|
|
sumsw32.exe |
|
|
suprox.dll |
Spywaresheriff.lnk |
|
|
susp.exe |
SpywareStrike
2.5.lnk |
|
|
svchop.exe |
Programs\Crystalys
Media >> folder |
|
|
svchostp.exe |
Programs\FreeVideo >> folder |
|
|
|
svchosts.dll |
Programs\HQvideo >> folder |
|
|
|
svchosts.exe |
Programs\PornPass
Manager >> folder |
|
|
svchostx.exe |
Programs\SpySheriff >> folder |
|
|
|
svcnt.exe |
Programs\SpywareStrike >> folder |
|
|
|
svcp.csv |
Programs\SpyTrooper >> folder |
|
|
sywsvcs.exe |
Programs\Trust
Cleaner >> folder |
|
|
syycum.dll |
X Password Generator >> folder |
|
|
taskdir.dll |
Programs\Startup\rAggge.exe |
|
|
|
taskdir.exe |
Programs\Startup\processes.txt |
|
|
taskdir~.exe |
|
|
tazth.dll |
%AllUsersProfile%\Start
Menu |
|
|
|
tconini.dat |
|
|
|
|
tcpservice2.exe |
Anti SPAM.url |
|
|
tctool.exe |
Online
Casino.url |
|
|
thlwin32.dll |
Online
Security Center.url |
|
|
|
thn.dll |
Computer
Security.url |
|
|
ticads.exe |
Online
Security Guide.url |
|
|
ticont.dll |
Security
Troubleshooting.url |
|
|
tisa.cnf |
Programs\PSGuard spyware remover >>
folder |
|
|
tisa.dll |
Programs\WinHound spyware remover >>
folder |
|
|
titiau.dll |
Programs\Startup\qwwyyu.exe |
|
|
|
tload.ocx |
Programs\Startup\processes.txt |
|
|
tnvocyn.dll |
|
|
|
tpopup.ex |
|
|
|
ttu.exe |
%userprofile% Quick Launch |
|
|
tu.exe |
|
|
|
twain32.dll |
PSGuard.lnk |
|
|
twshmkfy.exe |
SpywareStrike 2.5.lnk |
|
|
txfdb32.dll |
PSGuard
spyware remover.lnk |
|
|
ucbrrt.dll |
WinHound
spyware remover.lnk |
|
|
udpmod.dll |
|
|
|
|
ulztc.dll |
Locations looked in for
a wininet.dll replacement |
|
|
uqzurtxt.exe |
listed in order of priority |
|
|
urroxtl.dll |
|
|
|
users32.exe |
%systemroot%\system32\dllcache |
|
|
veklo.dll |
%systemroot%\$hf_mig$\KB890923\SP2QFE |
|
|
vhywj.dll |
%systemroot%\$hf_mig$\KB867282\SP2QFE |
|
|
viagra.ico |
%systemroot%\$hf_mig$\KB883939\SP2QFE |
|
|
viruxz.dll |
%systemroot%\ServicePackFiles\i386 |
|
|
viwpzla.dll |
|
|
voblaizdupla.exe |
Other File(s) / Folder(s) |
|
|
voi271.exe |
|
|
|
|
voi640.exe |
%Systemroot%\Downloaded
Program Files\MediaCodec.ocx |
|
|
vpxnk.dll |
%userprofile%\asfds |
|
|
vwlummc.dll |
%userprofile%\xxfep.exe |
|
|
vxgamet1.exe |
%userprofile%\local~1\Application
Data\SpywareSheriff >> folder |
|
VXH8JKDQ2.EXE |
%userprofile%\Application Data\Install.dat |
|
|
VXH8JKDQ6.EXE |
%userprofile%\application data\shudder global limited |
|
|
wbeconm.dll |
%userprofile%\Application Data\PSGuard.com
>> folder |
|
|
wfkduei.dll |
|
|
|
wiatwain.dll |
path for 9X |
|
|
win32hp.dll |
|
|
winapi32.dll |
%windir%\application data\ |
|
|
winbl32.dll |
|
|
winblsrv.dll |
|
|
windesktop.dll |
|
|
windesktop.exe |
|
|
winflash.dll |
|
|
winftx32.dll |
|
|
winlfl32.dll |
|
|
winmuse.exe |
|
|
winnook.exe |
|
|
wins32.dll |
|
|
winselect.exe |
|
|
winsrv32.exe |
|
|
winsub.xml |
|
|
wldr.dll |
|
|
wp.bmp |
|
|
wppp.html |
|
|
wstart.dll |
|
|
wuwbxp.dll |
|
|
xenadot.dll |
|
|
xtgwjrm.dll |
|
|
xuefh.dll |
|
|
ybnqslvs.exel |
|
|
yephk.dll |
|
|
yfysupa.dll |
|
|
yhbdupd.dll |
|
|
yosdjh.dll |
|
|
yvvdj.dll |
|
|
ywbicim.dll |
|
|
z11.exe |
|
|
z12.exe |
|
|
z13.exe |
|
|
z14.exe |
|
|
z15.exe |
|
|
z16.exe |
|
|
zlara.dll |
|
|
zlbw.dll |
|
|
zphnok.dll |
|
|
__delete_on_reboot__intel32.exe |
|
|
__delete_on_reboot__intmon.exe |
|
|
__delete_on_reboot__OLEADM.dll |
|
|
_plastilin_ |
|
|
1024 >> folder |
|
|
Log Files >> folder **Note - removes |
|
|
only *.so files from folder in 2003 |
|
|
logfiles >> folder **Note - removes |
|
|
only *.so files
from folder in 2003 |
|
|
|
|
|
|