HWin4Z) 00 c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllh shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllO c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll c:\windows\system32\imageres.dll\ c:\windows\system32\imageres.dll] c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll c:\windows\system32\imageres.dll shell32.dllw shell32.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll c:\windows\system32\imageres.dllc c:\windows\system32\imageres.dll<c:\program files (x86)\microsoft\edge\application\msedge.exe%windir%\explorer.exe"%systemroot%\system32\svrmgrnc.dll#%windir%\system32\servermanager.exe%%windir%\system32\inetsrv\inetmgr.exe imageres.dll= imageres.dllA shell32.dll imageres.dll shell32.dll shell32.dll"%systemroot%\system32\imageres.dll shell32.dll shell32.dll shell32.dll imageres.dllJ imageres.dllK imageres.dllI imageres.dllH imageres.dllE imageres.dll$ imageres.dllF imageres.dllD imageres.dllC imageres.dllB shell32.dllL7 c:\windows\system32\imageres.dllI c:\windows\system32\imageres.dllH c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll: c:\windows\system32\imageres.dll c:\windows\system32\imageres.dllC c:\windows\system32\imageres.dll%windir%\system32\imageres.dll c:\windows\system32\rundll32.exec:\windows\explorer.exe%windir%\system32\cmd.exe shell32.dll shell32.dllR imageres.dll imageres.dll@ shell32.dll imageres.dll? imageres.dll imageres.dll> shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll shell32.dll c:\windows\system32\imageres.dll^ c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll%%windir%\system32\inetsrv\inetmgr.exe%windir%\system32\msinfo32.exe%windir%\system32\taskmgr.exeELc:\windows\temp\{1a592b28-ae82-4933-8ec5-7627b336fe41}\.cr\vc_redist.x64.exeA!c:\apache24\bin\apachemonitor.exe#%windir%\system32\servermanager.exe%windir%\system32\imageres.dll%windir%\system32\mycomput.dll%windir%\system32\filemgmt.dll shell32.dll%windir%\system32\notepad.exeVc:\users\administrator\appdata\local\microsoft\edge\user data\default\edge profile.icoLc:\users\administrator\downloads\filezilla_3.66.4_win64_sponsored2-setup.exe%windir%\system32\filemgmt.dll#%windir%\system32\miguiresource.dllA3c:\program files\filezilla ftp client\filezilla.exec:\windows\system32\notepad.exe"%systemroot%\system32\authfwgp.dll#%windir%\system32\miguiresource.dllc:\windows\system32\zipfldr.dllc:\windows\system32\msiexec.exeAGc:\program files (x86)\common files\mariadbshared\heidisql\heidisql.exeAQc:\program files (x86)\apache software foundation\apache2.2\bin\apachemonitor.exec:\windows\system32\display.dll c:\windows\system32\themecpl.dll shell32.dllI shell32.dll3c:\program files\windows nt\accessories\wordpad.exe c:\windows\system32\imageres.dll5c:\users\administrator\appdata\local\temp\glb7bf2.tmp/c:\program files\internet explorer\iexplore.exe/c:\program files\internet explorer\iexplore.exe'c:\progra~2\mailen~1\bin\mailenable.ico%windir%\system32\mspaint.exe'c:\progra~2\mailen~1\bin\mailenable.ico#%windir%\system32\miguiresource.dllQc:\program files (x86)\apache software foundation\apache2.2\bin\apachemonitor.exeLc:\users\administrator\downloads\certbot-beta-installer-win_amd64_signed.exe<c:\program files (x86)\microsoft\edge\application\msedge.exe c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll%windir%\regedit.exec:\windows\system32\msxml3.dll c:\windows\system32\shutdown.exec:\windows\system32\fsquirt.exe c:\windows\system32\imageres.dll c:\windows\system32\sendmail.dll/#%windir%\system32\miguiresource.dll)c:\windows\system32\musnotificationux.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.63\msedge.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.70\msedge.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.86\msedge.exeKc:\program files (x86)\microsoft\edge\application\132.0.2957.115\msedge.exe imageres.dll imageres.dll imageres.dll imageres.dllJc:\program files (x86)\microsoft\edge\application\133.0.3065.92\msedge.exeJc:\program files (x86)\microsoft\edge\application\134.0.3124.66\msedge.exeJc:\program files (x86)\microsoft\edge\application\134.0.3124.72\msedge.exeJc:\program files (x86)\microsoft\edge\application\134.0.3124.85\msedge.exeJc:\program files (x86)\microsoft\edge\application\136.0.3240.50\msedge.exeJc:\program files (x86)\microsoft\edge\application\136.0.3240.64\msedge.exe c:\windows\system32\openwith.exeJc:\program files (x86)\microsoft\edge\application\138.0.3351.55\msedge.exe1%programfiles%\windows nt\accessories\wordpad.exeJc:\program files (x86)\microsoft\edge\application\147.0.3912.72\msedge.exec:\windows\system32\wscript.exe c:\windows\system32\imageres.dll=c:\windows\system32\windowspowershell\v1.0\powershell_ise.exec:\nginx\nginx.exe c:\windows\system32\imageres.dll=vc:\users\administrator\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\microsoft edge.lnk^izuc:\users\administrator\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\file explorer.lnkp4\c:\programdata\microsoft\windows\start menu\programs\administrative tools\server manager.lnkqGc:\programdata\microsoft\windows\start menu\programs\server manager.lnkqYc:\programdata\microsoft\windows\start menu\programs\administrative tools\iis manager.lnkn\qkc:\users\administrator\appdata\roaming\microsoft\windows\start menu\programs\system tools\control panel.lnkplc:\users\administrator\appdata\roaming\microsoft\windows\start menu\programs\system tools\command prompt.lnkv shell32.dll '? shell32.dll'@ shell32.dll'A imageres.dllJ'B imageres.dllK'C imageres.dllI'D imageres.dllH'E imageres.dllE'F imageres.dll$'G imageres.dllF'H imageres.dllD'I imageres.dllC'J imageres.dllB'K shell32.dllL7'L c:\windows\system32\imageres.dllI'M c:\windows\system32\imageres.dllH'N c:\windows\system32\imageres.dll'O c:\windows\system32\imageres.dll'P c:\windows\system32\imageres.dll:'Q c:\windows\system32\imageres.dll'R c:\windows\system32\imageres.dllC'S c:\windows\system32\imageres.dll'T%windir%\system32\imageres.dll'U c:\windows\system32\rundll32.exe'Vc:\windows\explorer.exe'W%windir%\system32\cmd.exe'X shell32.dll%Y shell32.dllR%Z imageres.dll%[ imageres.dll@%\ shell32.dll%] imageres.dll?%^ imageres.dll %_ imageres.dll>%` shell32.dll%a shell32.dll %b shell32.dll %c shell32.dll %d shell32.dll %e shell32.dll %f shell32.dll %g shell32.dll %h shell32.dll %i c:\windows\system32\imageres.dll^%j c:\windows\system32\imageres.dll%k c:\windows\system32\imageres.dll%l c:\windows\system32\imageres.dll%m c:\windows\system32\imageres.dll%n%%windir%\system32\inetsrv\inetmgr.exe$o%windir%\system32\msinfo32.exe$p%windir%\system32\taskmgr.exeE$qLc:\windows\temp\{1a592b28-ae82-4933-8ec5-7627b336fe41}\.cr\vc_redist.x64.exe$r!c:\apache24\bin\apachemonitor.exe3 !s#%windir%\system32\servermanager.exe$t%windir%\system32\imageres.dll$u%windir%\system32\mycomput.dll$v%windir%\system32\filemgmt.dll$w shell32.dll$x%windir%\system32\notepad.exe#yVc:\users\administrator\appdata\local\microsoft\edge\user data\default\edge profile.ico#zLc:\users\administrator\downloads\filezilla_3.66.4_win64_sponsored2-setup.exe#{%windir%\system32\filemgmt.dll#|#%windir%\system32\miguiresource.dll#}3c:\program files\filezilla ftp client\filezilla.exeH%~c:\windows\system32\notepad.exe#"%systemroot%\system32\authfwgp.dll##%windir%\system32\miguiresource.dll#c:\windows\system32\zipfldr.dll"c:\windows\system32\msiexec.exe"Gc:\program files (x86)\common files\mariadbshared\heidisql\heidisql.exe Qc:\program files (x86)\apache software foundation\apache2.2\bin\apachemonitor.exe[,c:\windows\system32\display.dll c:\windows\system32\themecpl.dll shell32.dllI shell32.dll 3c:\program files\windows nt\accessories\wordpad.exe c:\windows\system32\imageres.dll 5c:\users\administrator\appdata\local\temp\glb7bf2.tmp/c:\program files\internet explorer\iexplore.exet/c:\program files\internet explorer\iexplore.exe'c:\progra~2\mailen~1\bin\mailenable.ico%windir%\system32\mspaint.exe'c:\progra~2\mailen~1\bin\mailenable.ico#%windir%\system32\miguiresource.dllQc:\program files (x86)\apache software foundation\apache2.2\bin\apachemonitor.exe[,Lc:\users\administrator\downloads\certbot-beta-installer-win_amd64_signed.exe<c:\program files (x86)\microsoft\edge\application\msedge.exe c:\windows\system32\imageres.dll c:\windows\system32\imageres.dll%windir%\regedit.exec:\windows\system32\msxml3.dll c:\windows\system32\shutdown.exec:\windows\system32\fsquirt.exeq c:\windows\system32\imageres.dll c:\windows\system32\sendmail.dll/#%windir%\system32\miguiresource.dll)c:\windows\system32\musnotificationux.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.63\msedge.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.70\msedge.exeJc:\program files (x86)\microsoft\edge\application\131.0.2903.86\msedge.exeKc:\program files (x86)\microsoft\edge\application\132.0.2957.115\msedge.exe imageres.dll imageres.dll imageres.dll imageres.dll Jc:\program files (x86)\microsoft\edge\application\133.0.3065.92\msedge.exe Jc:\program files (x86)\microsoft\edge\application\134.0.3124.66\msedge.exe Jc:\program files (x86)\microsoft\edge\application\134.0.3124.72\msedge.exe Jc:\program files (x86)\microsoft\edge\application\134.0.3124.85\msedge.exeJc:\program files (x86)\microsoft\edge\application\136.0.3240.50\msedge.exeJc:\program files (x86)\microsoft\edge\application\136.0.3240.64\msedge.exe c:\windows\system32\openwith.exeJc:\program files (x86)\microsoft\edge\application\138.0.3351.55\msedge.exe1%programfiles%\windows nt\accessories\wordpad.exeJc:\program files (x86)\microsoft\edge\application\147.0.3912.72\msedge.exec:\windows\system32\wscript.exe c:\windows\system32\imageres.dll=c:\windows\system32\windowspowershell\v1.0\powershell_ise.exec:\nginx\nginx.exeT c:\windows\system32\imageres.dll