| LIST OF FILES AND FOLDERS TARGETED BY THE smitRem TOOL | ||||
| by noahdfear | ||||
| Program Files / Archivos de programa | %systemroot%\system32 / system | %systemroot% (Windows folder) | ||
| AlfaCleaner | 182469.dll | aapfr.exe | ||
| AntiVermins | 2DBFD.dll | about_spyware_bg.gif | ||
| AntiVirusGold | a.exe | about_spyware_bottom.gif | ||
| BraveSentry | ace16win.dll | accesss.exe | ||
| Crystalys media | acvgxw.dll | ads.js | ||
| EliteCodec | adobepnl.dll | adw.htm | ||
| eMedia Codec | alxres.dll | adware-sheriff-box.gif | ||
| FreeVideo | amcompat.tlb | adware-sheriff-header.gif | ||
| HQvideo | amzyfwuw.exe | alexaie.dll | ||
| HQVideoCodec | anti_troj.exe | alxie328.dll | ||
| iMediaCodec | appmagr.dll | alxtb1.dll | ||
| IntCodec | asgp32.dll | antispylab-logo.gif | ||
| iVideoCodec | asxbbx.dll | as.gif | ||
| MediaCodec | atmclk.exe | as_header.gif | ||
| Media-Codec | atmtd.dll | astctl32.ocx | ||
| MMediaCodec | atmtd.dll._ | avpcc.dll | ||
| MPVIDEOCODEC | autodisc32.dll | bg_bg.gif | ||
| PCODEC | bolnyz.dll | big_red_x.gif | ||
| P.S.Guard | bpvcou.dll | blue-bg.gif | ||
| PornMag Pass | bridge.dll | box_1.gif | ||
| PornPass Manager | cfltygd.dll | box_2.gif | ||
| PowerCodec | cmd32.exe | box_3.gif | ||
| PSGuard | CWS_iestart.exe | BTGrab.dll | ||
| QualityCodec | dailytoolbar.dll | button_buynow.gif | ||
| Safety Bar | dcom_15.dll | button_freescan.gif | ||
| Search Maid | dcom_16.dll | buy_now.gif | ||
| Security IGuard | dcom_21.dll | buy-now-btn.gif | ||
| Security Toolbar | dcomcfg.exe | click_for_free_scan.gif | ||
| SoftCodec | Defpia32.dll | close_ico.gif | ||
| SpyAxe | dfrgsrv.exe | close-bar.gif | ||
| SpyFalcon | dial23.exe | clrssn.exe | ||
| SpyHeal | dload.exe | corner-left.gif | ||
| SpyQuake2.com | dnefhw.dll | corner-right.gif | ||
| SpySheriff | dpfwu.dll | cpan.dll | ||
| SpyTrooper | duxzj.dll | desktop.html | ||
| SpywareQuake | dvdcap.dll | dialup.exe | ||
| SpywareSheriff | dxmpp.dll | dlmax.dll | ||
| SpywareStrike | dxole32.exe | download.gif | ||
| strCodec | eooyt.exe | download_box.gif | ||
| TrueCodec | eowygj.dll | download_product.gif | ||
| Trust Cleaner | ert.dll | facts.gif | ||
| TrustIn Bar | erxbx.dll | features.gif | ||
| TrustIn Contextual | exuc32.tmp | footer.gif | ||
| TrustIn Popups | F016C.dll | footer_back.gif | ||
| VidCodecs | F8E35.dll | footer_back.jpg | ||
| VideoCompressionCodec | FC527B.dll | free_scan_red_btn.gif | ||
| Video iCodec | ff.tmp | free-scan-btn.gif | ||
| VideoKeyCodec | fhmfes.dll | header_1.gif | ||
| VideosCodec | fhpd.dll | header_2.gif | ||
| Virtual Maid | ficqv.dll | header_3.gif | ||
| VirusBurst | fjdcy.dll | header_4.gif | ||
| VirusBursters | fxmngr.exe | header-bg.gif | ||
| Winhound | fyhhxw.dll | h-line-gradient.gif | ||
| X Password Generator | gqagksr.dll | icon_warning_big.gif | ||
| X Password Manager | gtpbx.dll | inetdctr.dll | ||
| ZipCodec | gunist.exe | inetloader.dll | ||
| guxxa.dll | infected.gif | |||
| %systemdrive% | gvfsc.dll | infected_top_bg.gif | ||
| (Local Disk C: or system partition) | helper.exe | info.gif | ||
| hhk.dll | local.html | |||
| boot.inx | hhk.dll.tcf | logo.gif | ||
| bsw.bmp | higjxe.dll | main_back.gif | ||
| bsw.exe | hookdump.exe | mtwirl32.dll | ||
| secure32.html | hp***.tmp | navibar_bg.gif | ||
| winstall.exe | htey.dll | navibar_corner_left.gif | ||
| wp.bmp | httge.dll | navibar_corner_right.gif | ||
| wp.exe | hvcycg.dll | no-icon.gif | ||
| hvnwm.dll | notepad32.exe | |||
| Desktop shortcuts / icons | hzclqhc.dll | olehelp.exe | ||
| %Userprofile%\Desktop / Bureaublad | icima.dll | onlineshopping.ico | ||
| iewd.exe | osaupd.exe | |||
| asfds | image.gif.exe | popuper.exe | ||
| cdegfr | imfdfcj.dll | processes.txt | ||
| fdsf | impgsje.dll | product_box.gif | ||
| sdfdsf | intel32.exe | Pynix.dll | ||
| sdfff | intell32.exe | red_warning_ico.gif | ||
| wdcsadsad | intell321.exe | reg-freeze-box.gif | ||
| zxczxc | interf.tlb | reg-freeze-header.gif | ||
| Air Tickets.url | intmon.exe | remove_spyware_header.gif | ||
| AntivirusGold.lnk | intmonp.exe | removeadware.ico | ||
| Big Tits.url | intxt.exe | remove-spyware-btn.gif | ||
| Blackjack.url | ioctrl.dll | rf.gif | ||
| Britney Spears.url | ipztub.dll | rf_header.gif | ||
| Car Insurance.url | iqzv.dl | runwin32.exe | ||
| Cheap Cigarettes.url | ishost.exe | safe_and_trusted.gif | ||
| Credit Card.url | ismini.exe | scan_btn.gif | ||
| Cruises.url | ismon.exe | screen.html | ||
| Currency Trading.url | isnotify.exe | se_spoof.dll | ||
| Lesbian Sex.url | issearch.exe | secure32.html | ||
| MP3.url | ixt*.dll | security_center_caption.gif | ||
| Online Betting.url | jao.dll | security-center-bg.gif | ||
| Online Gambling.url | jbtazy.dll | security-center-logo.gif | ||
| Online Security Center.url | jevtxpg.dll | sep_hor.gif | ||
| Online Shopping.url | jpqet.dll | sep_vert.gif | ||
| Oral Sex.url | Kdfdlh32.dll | sexpersonals.ico | ||
| Party Poker.url | kernels32.exe | sites.ini | ||
| Pharmacy.url | kernels64.exe | spacer.gif' | ||
| Phentermine.url | kernels8.exe | spp3.dll | ||
| Pornstars.url | kfhrvq.dll | spyware_detected.gif | ||
| Remove Adware.url | kkqfb.dll | spyware-detected.gif | ||
| Remove Spyware.url | klja.dll | spyware-sheriff-box.gif | ||
| Security Troubleshooting.url | lcch.dat | spyware-sheriff-header.gif | ||
| Sex Personals.url | ld****.tmp | star.gif | ||
| SpySheriff.lnk | lfd.dat | star_gray.gif | ||
| SpyTrooper.lnk | ll.exe | star_gray_small.gif | ||
| Trust Cleaner.lnk | lut.dat | star_small.gif | ||
| viagra.url | lwpfwjb.dll | star-grey.gif | ||
| Video Slots.url | main.exe | susp.exe | ||
| X Password Generator.lnk | Mhpcja32.dll | systeem.exe | ||
| x password manager.lnk | mirarsearch_toolbar.exe | System32fab.exe | ||
| mpsegment.exe | systemcritical.exe | |||
| paths for 9X | mscdaux.dll | time.exe | ||
| %windir%\Desktop | mscornet.exe | tool1.exe | ||
| %windir%\Bureaublad | mshtml32.tdb | tool2.exe | ||
| msmapi32.exe | tool3.exe | |||
| %allusersprofile%\Desktop | msmapi32.exe.MANIFEST | tool4.exe | ||
| msmsgs.exe | tool5.exe | |||
| Online Dating.url | msmsn.exe | tpopup.exe | ||
| Online Pharmacy.url | msole32.exe | true-stories.gif | ||
| Online Security Center.lnk | mssearchnet.exe | ts.gif | ||
| Online Security Center.url | msvcrt64.dll | ts_header.gif | ||
| Online Security Guide.url | msvol.tlb | uninstDsk.exe | ||
| PSGuard spyware remover.lnk | mswinb32.dll | uninstIU.exe | ||
| PSGuard.lnk | mswinb32.exe | users32.exe | ||
| Security Troubleshooting.lnk | mswinf32.dll | v.gif | ||
| Security Troubleshooting.url | mswinf32.exe | videoslots.ico | ||
| Spyware Removal.url | mswinup32.dll | waol.exe | ||
| WinHound spyware remover.lnk | mswinxml.dll | warnhp.html | ||
| mzoeut.dll | warning_icon.gif | |||
| paths for 9X | Nbfgemln.exe | warning-bar-ico.gif | ||
| %windir%\all users\Desktop | ncompat.tlb | win_logo.gif | ||
| %windir%\all users\Bureaublad | netstat2.exe | win32e.exe | ||
| netwrap.dll | win64.exe | |||
| system32 / system icons | nscompat.tlb | winajbm.dll | ||
| nvctrl.exe | window.exe | |||
| Air Tickets.ico | oerucu.dll | windows-compatible.gif | ||
| Big Tits.ico | ofcukiz.dll | wininet32.exe | ||
| Blackjack.ico | office_pnl.dll | winmgnt.exe | ||
| Britney Spears.ico | officescan.exe | win-sec-center-logo.gif | ||
| Car Insurance.ico | oiso.bin | wp.bmp | ||
| Cheap Cigarettes.ico | okkmtv.dll | wupdmgr.exe | ||
| Credit Card.ico | ole32vbs.exe | x.exe | ||
| Cruises.ico | oleadm.dll | x.gif | ||
| Currency Trading.ico | oleadm32.dll | xplugin.dll | ||
| Lesbian Sex.ico | oleext.dll | xxxvideo.hta | ||
| MP3.ico | oleext32.dll | y.exe | ||
| Online Betting.ico | ongi.dll | yellow_warning_ico.gif | ||
| Online Gambling.ico | onofub.dll | yes-icon.gif | ||
| Oral Sex.ico | oqabf.dll | yod.htm | ||
| ot.ico | oqipt.dll | zloader3.exe | ||
| Party Poker.ico | ornzq.dll | ZServ.dll | ||
| Pharmacy.ico | oybgrql.dll | RGF2ZQ >>> folder | ||
| Phentermine.ico | page.htm | |||
| Pornstars.ico | param32.dll | Favorites | ||
| ptainfo1.ico | pcf.pdf | %userprofile%\Favorites | ||
| ptainfo2.ico | perfcii.ini | |||
| Remove Spyware.ico | perflibs__ | Adipex.url | ||
| ts.ico | perfont.exe | Alprazolam.url | ||
| viagra.ico | performent202.dll | Anti Spam.url | ||
| phqghume.exe | Antivirus Test Online.url | |||
| pmnqguh.dll | Black Jack Online.url | |||
| pop_up.dll | Carisoprodol.url | |||
| POPCORN72.EXE | Diazepam.url | |||
| posem.dll | Free XXX Sites List.url | |||
| processes.txt | Home Loan.url | |||
| proqlaim.exe | Hydrocodone.url | |||
| qjrkvy.exe | Job Search.url | |||
| qnusjji.dll | Lortab.url | |||
| qrucmr.dll | Need Money.url | |||
| questmod.dll | Network Security.url | |||
| qxfgcg.dll | Online Dating.url | |||
| reger.exe | Online Gambling.url | |||
| reglogs.dll | Online Pharmacy.url | |||
| regperf.exe | Online Pharmacy\Adipex.url | |||
| repigsp.exe | Poker.url | |||
| replmap.dll | PornPass Manager.lnk | |||
| rjxdexau.exe | Prozac.url | |||
| rmzdzx.dll | Remove Spyware.url | |||
| rrtcany.dll | Spam Filters.url | |||
| rtwwf.exe | Spyware Removal.url | |||
| runsrv32.dll | Take It Here - Daily Updated Porn Links.url | |||
| runsrv32.exe | Take It Here - Free * TGP.url | |||
| sacskza.dll | Valium.url | |||
| sbnudh.dll | Vicodin.url | |||
| searchdll.dll | Web Detective.url | |||
| shdochop.dll | Xanax.url | |||
| shell386.exe | Adult >> folder | |||
| shellgui32.dll | Cars >> folder | |||
| shnlog.exe | Sexual life >> folder | |||
| simpole.tlb | Shopping >> folder | |||
| sivudro.dll | Online Gambling >> folder | |||
| smaexp32.dll | Online Pharmacy >> folder | |||
| smartdrv.exe | ||||
| spibohst.exe | %AllUsersProfile%\Favorites | |||
| start2.exe | ||||
| start32.exe | Buy Viagra Online.url | |||
| start323072.exe | Cheap Viagra.url | |||
| stdole3.tlb | Download Free Spyware Remover.url | |||
| stickrep.dll | ||||
| suchost.exe | %userprofile%\Start Menu | |||
| sumsw32.exe | ||||
| suprox.dll | Spywaresheriff.lnk | |||
| susp.exe | SpywareStrike 2.5.lnk | |||
| svchop.exe | Programs\Crystalys Media >> folder | |||
| svchostp.exe | Programs\FreeVideo >> folder | |||
| svchosts.dll | Programs\HQvideo >> folder | |||
| svchosts.exe | Programs\PornPass Manager >> folder | |||
| svchostx.exe | Programs\SpySheriff >> folder | |||
| svcnt.exe | Programs\SpywareStrike >> folder | |||
| svcp.csv | Programs\SpyTrooper >> folder | |||
| sywsvcs.exe | Programs\Trust Cleaner >> folder | |||
| syycum.dll | X Password Generator >> folder | |||
| taskdir.dll | Programs\Startup\rAggge.exe | |||
| taskdir.exe | Programs\Startup\processes.txt | |||
| taskdir~.exe | ||||
| tazth.dll | %AllUsersProfile%\Start Menu | |||
| tconini.dat | ||||
| tcpservice2.exe | Anti SPAM.url | |||
| tctool.exe | Online Casino.url | |||
| thlwin32.dll | Online Security Center.url | |||
| thn.dll | Computer Security.url | |||
| ticads.exe | Online Security Guide.url | |||
| ticont.dll | Security Troubleshooting.url | |||
| tisa.cnf | Programs\PSGuard spyware remover >> folder | |||
| tisa.dll | Programs\WinHound spyware remover >> folder | |||
| titiau.dll | Programs\Startup\qwwyyu.exe | |||
| tload.ocx | Programs\Startup\processes.txt | |||
| tnvocyn.dll | ||||
| tpopup.ex | ||||
| ttu.exe | %userprofile% Quick Launch | |||
| tu.exe | ||||
| twain32.dll | PSGuard.lnk | |||
| twshmkfy.exe | SpywareStrike 2.5.lnk | |||
| txfdb32.dll | PSGuard spyware remover.lnk | |||
| ucbrrt.dll | WinHound spyware remover.lnk | |||
| udpmod.dll | ||||
| ulztc.dll | Locations looked in for a wininet.dll replacement | |||
| uqzurtxt.exe | listed in order of priority | |||
| urroxtl.dll | ||||
| users32.exe | %systemroot%\system32\dllcache | |||
| veklo.dll | %systemroot%\$hf_mig$\KB890923\SP2QFE | |||
| vhywj.dll | %systemroot%\$hf_mig$\KB867282\SP2QFE | |||
| viagra.ico | %systemroot%\$hf_mig$\KB883939\SP2QFE | |||
| viruxz.dll | %systemroot%\ServicePackFiles\i386 | |||
| viwpzla.dll | ||||
| voblaizdupla.exe | Other File(s) / Folder(s) | |||
| voi271.exe | ||||
| voi640.exe | %Systemroot%\Downloaded Program Files\MediaCodec.ocx | |||
| vpxnk.dll | %userprofile%\asfds | |||
| vwlummc.dll | %userprofile%\xxfep.exe | |||
| vxgamet1.exe | %userprofile%\local~1\Application Data\SpywareSheriff >> folder | |||
| VXH8JKDQ2.EXE | %userprofile%\Application Data\Install.dat | |||
| VXH8JKDQ6.EXE | %userprofile%\application data\shudder global limited | |||
| wbeconm.dll | %userprofile%\Application Data\PSGuard.com >> folder | |||
| wfkduei.dll | ||||
| wiatwain.dll | path for 9X | |||
| win32hp.dll | ||||
| winapi32.dll | %windir%\application data\ | |||
| winbl32.dll | ||||
| winblsrv.dll | ||||
| windesktop.dll | ||||
| windesktop.exe | ||||
| winflash.dll | ||||
| winftx32.dll | ||||
| winlfl32.dll | ||||
| winmuse.exe | ||||
| winnook.exe | ||||
| wins32.dll | ||||
| winselect.exe | ||||
| winsrv32.exe | ||||
| winsub.xml | ||||
| wldr.dll | ||||
| wp.bmp | ||||
| wppp.html | ||||
| wstart.dll | ||||
| wuwbxp.dll | ||||
| xenadot.dll | ||||
| xtgwjrm.dll | ||||
| xuefh.dll | ||||
| ybnqslvs.exel | ||||
| yephk.dll | ||||
| yfysupa.dll | ||||
| yhbdupd.dll | ||||
| yosdjh.dll | ||||
| yvvdj.dll | ||||
| ywbicim.dll | ||||
| z11.exe | ||||
| z12.exe | ||||
| z13.exe | ||||
| z14.exe | ||||
| z15.exe | ||||
| z16.exe | ||||
| zlara.dll | ||||
| zlbw.dll | ||||
| zphnok.dll | ||||
| __delete_on_reboot__intel32.exe | ||||
| __delete_on_reboot__intmon.exe | ||||
| __delete_on_reboot__OLEADM.dll | ||||
| _plastilin_ | ||||
| 1024 >> folder | ||||
| Log Files >> folder **Note - removes | ||||
| only *.so files from folder in 2003 | ||||
| logfiles >> folder **Note - removes | ||||
| only *.so files from folder in 2003 | ||||