Virusscaner zeigt infizierte Objekte, PC sehr langsam

#0
11.08.2011, 23:13
...neu hier

Beiträge: 2
#1 Guten Abend zusammen,
seit ein paar Tagen ist mein Computer erheblich langsamer geworden.
Als dies auftrat hatte ich mir einen Virusscanner runter geladen, um genau zu sein den Malwarebytes Anti Maleware. Dieser hatte mir beim 1. Vollständigen Durchlauf 14 infizierte Objekte angezeigt & diese auch erfolgreich gelöscht. Nach einem Neustart hatte ich den Scanner dann nocheinmal durchlaufen lassen mit der Option "Quick Scan" nun zeigte er mir wieder 3 infizierte Objekte an als diese auch beseitigt waren versuchte ich mein Glück mit einem Online Viren Scanner vom dem ich auch die Logs habe. Was noch sehr auffälig ist, beim Taskmanager ist ein Prozzes dieser nennt sich als Abbildname win32.exe, als Beschreibung steht lediglich "WTF" da. Dieser Prozess wird auch versucht zu unterdrücken von Malwarebytes. Wenn ich den Prozess manuel beende erscheint er sofort wieder oftmals 2-3 mal.

Hier die Logs von einem Online Viren Scanner:



C:\Windows\bfsvc.exe is infected with W32.Xpiro.B
C:\Windows\fveupdate.exe is infected with W32.Xpiro.B
C:\Windows\HelpPane.exe is infected with W32.Xpiro.B
C:\Windows\hh.exe is infected with W32.Xpiro.B
C:\Windows\notepad.exe is infected with W32.Xpiro.B
C:\Windows\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winhlp32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.7601.17610_none_755d8d6179bb210c\SearchFilterHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.7601.17610_none_755d8d6179bb210c\SearchProtocolHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_59c41ab5b67131d0\MpCmdRun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_59c41ab5b67131d0\MSASCui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpCmdRun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MSASCui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-xwizard-host-process_31bf3856ad364e35_6.1.7600.16385_none_58ca66f699d77ff1\xwizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-xcopy_31bf3856ad364e35_6.1.7600.16385_none_62cc00cc559fd4ec\xcopy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7601.17514_none_f59e20ddece8f922\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.20520_none_f43289dd08ebec20\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.16418_none_f3bbbf4defbefb1d\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.16385_none_f36d0d15effa7588\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wusa_31bf3856ad364e35_6.1.7601.17514_none_af07fb6876def437\wusa.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.1.7600.16385_none_2b1523604c99c736\sfc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-write_31bf3856ad364e35_6.1.7600.16385_none_5f5928533e6b72c0\write.exe is infected with Bloodhound.MalPE
C:\Windows\winsxs\x86_microsoft-windows-writewin_31bf3856ad364e35_6.1.7600.16385_none_db699b3f5190c6d8\write.exe is infected with Bloodhound.MalPE
C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.17514_none_13305696250bcb70\WPDShextAutoplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7600.16385_none_10ff42ce281d47d6\WPDShextAutoplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wordpad_31bf3856ad364e35_6.1.7601.17514_none_2fc1e31ecb279dcc\wordpad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmpnss-ux_31bf3856ad364e35_6.1.7600.16385_none_b79b19341aca35eb\wmpnscfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-tools_31bf3856ad364e35_6.1.7600.16385_none_d7d1c004e4f2fbd4\wbemtest.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\mofcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\unsecapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\WMIADAP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\WmiApSrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\mofcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\unsecapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\WMIADAP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\WmiApSrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_a2ba25bb55333799\WinMgmt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7600.16385_none_a08911f35844b3ff\WinMgmt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_126a2876e9a722d2\WmiPrvSE.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wlan-extension_31bf3856ad364e35_6.1.7600.16385_none_f9b9855184ad1e6d\wlanext.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winver_31bf3856ad364e35_6.1.7600.16385_none_b627d45ffdcc6f00\winver.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_160ccc8a92fae520\winrs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_160ccc8a92fae520\winrshost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winre-recoverytools_31bf3856ad364e35_6.1.7601.17514_none_d7553e5fcf6b6373\ReAgentc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_9449cff8ee4f6cca\mpnotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_9449cff8ee4f6cca\wlrmdr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winhstb_31bf3856ad364e35_6.1.7600.16385_none_28dc647c6aba6742\winhlp32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wimgapi_31bf3856ad364e35_6.1.7601.17514_none_8b030c557320a2c1\wimserv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-whoami_31bf3856ad364e35_6.1.7600.16385_none_ce52d479e329be32\whoami.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-where_31bf3856ad364e35_6.1.7600.16385_none_5da98f433f7e2878\where.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-waitfor_31bf3856ad364e35_6.1.7600.16385_none_b63c0c04dc872e59\waitfor.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_44b0c76c35d4b76d\wab.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_44b0c76c35d4b76d\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.20814_none_4354073151cbeb4b\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.16684_none_427eb90c38e711f1\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.16385_none_427fb3a438e633d3\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ystemassessmenttool_31bf3856ad364e35_6.1.7601.17514_none_7d9c61c4159c1205\WinSAT.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_c315782c0def9f8f\wuauclt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7601.17514_none_d0fbe940e38daf1f\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7600.16385_none_cecad578e69f2b85\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.5.7601.17514_none_533172b8c7672a8e\wuapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ommand-line-utility_31bf3856ad364e35_6.1.7600.16385_none_a1802b822e2a878c\WMIC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.1.7601.17514_none_8b399e33ba72bed9\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.1.7600.16385_none_89088a6bbd843b3f\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7601.17514_none_cc6cdf4b0b49e560\WSManHTTPConfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7601.17514_none_cc6cdf4b0b49e560\wsmprovhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7600.16385_none_ca3bcb830e5b61c6\WSManHTTPConfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7600.16385_none_ca3bcb830e5b61c6\wsmprovhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..etwork-setup-wizard_31bf3856ad364e35_6.1.7600.16385_none_94b38187a5bad85e\setupSNK.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-vssservice_31bf3856ad364e35_6.1.7601.17514_none_5cd4386276198cd2\VSSVC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-vssadmin_31bf3856ad364e35_6.1.7600.16385_none_c453ab9392f73dca\vssadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7601.17514_none_6cf23c8b58f0b544\vds.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7601.17514_none_6cf23c8b58f0b544\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_6ac128c35c0231aa\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-verclsid_31bf3856ad364e35_6.1.7600.16385_none_bbbd275974c7e191\verclsid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-utilman_31bf3856ad364e35_6.1.7600.16385_none_028006129290e443\Utilman.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.1.7600.16385_none_c1be8a9895d79340\upnpcont.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-unattendedjoin_31bf3856ad364e35_6.1.7601.17514_none_b51c4e8acb16b737\djoin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-u..ountcontrolsettings_31bf3856ad364e35_6.1.7601.17514_none_85ac7bd736dda285\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-u..ountcontrolsettings_31bf3856ad364e35_6.1.7600.16385_none_837b680f39ef1eeb\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tzutil_31bf3856ad364e35_6.1.7601.17514_none_364b3ec461692953\tzutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-timeout_31bf3856ad364e35_6.1.7600.16385_none_8c3ac2e4279846be\timeout.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-time-tool_31bf3856ad364e35_6.1.7601.17514_none_ef1085419a309311\w32tm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.1.7600.16385_none_d5bc65ffdc22ec35\TSTheme.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.1.7601.17514_none_638cffc7ed9bc3c3\netiougc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\finger.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\finger.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-taskmgr_31bf3856ad364e35_6.1.7601.17514_none_16699919077609d2\taskmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tapisetup_31bf3856ad364e35_6.1.7600.16385_none_69c980e6fc7d9b52\TapiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.1.7600.16385_none_e4102eada7ea2fc8\dialer.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-takeown_31bf3856ad364e35_6.1.7601.17514_none_fbf2cfb573e03306\takeown.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.1.7601.17514_none_13967fb1d5c46629\TabTip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.1.7600.16385_none_11656be9d8d5e28f\TabTip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_e17adc13b9335c8e\MultiDigiMon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_e17adc13b9335c8e\tabcal.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.1.7600.16385_none_3f82691927a7cab9\ConvertInkStore.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.1.7600.16385_none_3f82691927a7cab9\InputPersonalization.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.1.7601.17514_none_4fe3b7807f59a909\mstsc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lishing-wmiprovider_31bf3856ad364e35_6.1.7601.17514_none_373fc283f1cb38ca\rdpsign.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lipboardredirection_31bf3856ad364e35_6.1.7601.17514_none_03dd7a8e696443c0\rdpclip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lications-clientsku_31bf3856ad364e35_6.1.7601.17514_none_20e28a44a465abf4\rdpinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lications-clientsku_31bf3856ad364e35_6.1.7601.17514_none_20e28a44a465abf4\rdpshell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-workspaceruntime_31bf3856ad364e35_6.1.7601.17514_none_286ca4a83b84527b\wksprt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\change.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chglogon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chgport.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chgusr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\logoff.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\qappsrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\qprocess.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\query.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\reset.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\rwinsta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\shadow.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tscon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tsdiscon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tskill.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\msg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\quser.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\qwinsta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_6.1.7600.16385_none_9d06e2f6f1e51f98\ctfmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7600.16385_none_423b458dae59129d\PDIALOG.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_6.1.7600.16385_none_314e00fcb9a31524\TSWbPrxy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.1.7600.16385_none_41c821eeeae8dea2\pipanel.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..-coreinkrecognition_31bf3856ad364e35_6.1.7600.16385_none_ed6e97c85c464885\hwrcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..-coreinkrecognition_31bf3856ad364e35_6.1.7600.16385_none_ed6e97c85c464885\hwrreg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systray_31bf3856ad364e35_6.1.7600.16385_none_f327d2f6575da8ce\systray.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.17514_none_48e739d311811734\rstrui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_94ab98ac6d213009\SystemPropertiesRemote.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sysprep_31bf3856ad364e35_6.1.7601.17514_none_f1860ab056bcfa69\sysprep.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sysinfo_31bf3856ad364e35_6.1.7600.16385_none_ef2b073e59e262f6\systeminfo.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-synchost_31bf3856ad364e35_6.1.7600.16385_none_6957633c5de5fc54\SyncHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sxs_31bf3856ad364e35_6.1.7601.17514_none_b0540607b5e5d445\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sxs_31bf3856ad364e35_6.1.7600.16385_none_ae22f23fb8f750ab\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-soundrecorder_31bf3856ad364e35_6.1.7601.17514_none_a110af8e912572ca\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-soundrecorder_31bf3856ad364e35_6.1.7600.16385_none_9edf9bc69436ef30\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sort_31bf3856ad364e35_6.1.7600.16385_none_ab9479767ad67fd7\sort.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-snmp-trap-service_31bf3856ad364e35_6.1.7600.16385_none_cf615500a0bb6ff9\snmptrap.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sigverif_31bf3856ad364e35_6.1.7600.16385_none_bb6fda805cb2381c\sigverif.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7601.17514_none_d0e415a884ea33e1\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7601.17514_none_d0e415a884ea33e1\sidebar.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7600.16385_none_ceb301e087fbb047\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-shutdown-event-tracker_31bf3856ad364e35_6.1.7600.16385_none_02aa6dd4294b8d5f\shutdown.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.17562_none_450cbede5f4b17f1\prevhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_b7f38afb92de484f\shrpubw.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_04a3b4c9aa9fddd8\icsunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setx_31bf3856ad364e35_6.1.7600.16385_none_ac4d2bf27a63f85f\setx.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\audit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\oobeldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\Setup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\setupsqm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\windeploy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sethc_31bf3856ad364e35_6.1.7601.17514_none_64c7a8e4d35d675c\sethc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_e1bd3e25a80193e3\UI0Detect.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-servicepackcoordinator_31bf3856ad364e35_6.1.7601.17514_none_36c88c0085d30ce5\spreview.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7601.17514_none_f3707aa2994b285c\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7601.17514_none_f3707aa2994b285c\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7600.16385_none_f13f66da9c5ca4c2\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7600.16385_none_f13f66da9c5ca4c2\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-setspn_31bf3856ad364e35_6.1.7600.16385_none_7fdbf78d3f7767ef\setspn.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-nltest_31bf3856ad364e35_6.1.7601.17514_none_9c668f785a9add58\nltest.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-ksetup_31bf3856ad364e35_6.1.7600.16385_none_1c431cb1af7bf5b0\ksetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-klist_31bf3856ad364e35_6.1.7600.16385_none_410af5d427df6ed9\klist.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-syskey_31bf3856ad364e35_6.1.7600.16385_none_1838ef0586d5af46\syskey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_1c68c1637f350bf1\sppsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7601.17514_none_5dc908a6fd144a83\slui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-tool-exe_31bf3856ad364e35_6.1.7601.17514_none_fc2227a315986b73\manage-bde.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-service_31bf3856ad364e35_6.1.7600.16385_none_647c0a30066b1ab5\BdeUISrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-prompt_31bf3856ad364e35_6.1.7600.16385_none_efe5c3454547bbfe\fveprompt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-notify_31bf3856ad364e35_6.1.7600.16385_none_1cc8c1810953573d\fvenotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7601.17514_none_598dc13fe95a78b9\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7601.17514_none_598dc13fe95a78b9\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7600.16385_none_575cad77ec6bf51f\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7600.16385_none_575cad77ec6bf51f\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-secinit_31bf3856ad364e35_6.1.7600.16385_none_878e469b2e51ce80\secinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_8c46e17f1398738b\schtasks.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7600.16385_none_483ea93961ad86ec\cscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7600.16385_none_483ea93961ad86ec\wscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.1.7601.17514_none_27112637c50aacd7\sdclt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..up-drivepreparation_31bf3856ad364e35_6.1.7601.17514_none_a2f8f146c73f92b5\BdeHdCfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..sor-native-whitebox_31bf3856ad364e35_6.1.7601.17514_none_a2fcd94e8fba36f5\RMActivate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..ropertiesprotection_31bf3856ad364e35_6.1.7600.16385_none_6388acf17dd74912\SystemPropertiesProtection.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..restartup-repairbde_31bf3856ad364e35_6.1.7601.17514_none_d3fbab436e475c90\repair-bde.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..restartup-baaupdate_31bf3856ad364e35_6.1.7600.16385_none_36251cb0347ba7a9\baaupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..pertiescomputername_31bf3856ad364e35_6.1.7600.16385_none_304988749d91936f\SystemPropertiesComputerName.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.1.7600.16385_none_0601d49e5fc57a03\PurblePlace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-minesweeper_31bf3856ad364e35_6.1.7600.16385_none_a237737f9a82de12\MineSweeper.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..otservicing-utility_31bf3856ad364e35_6.1.7600.16385_none_751b074aed0a5d09\fveupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..or-native-serverbox_31bf3856ad364e35_6.1.7601.17514_none_71c62979c253e895\RMActivate_ssp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..opertiesperformance_31bf3856ad364e35_6.1.7600.16385_none_5aad0353642dd29f\SystemPropertiesPerformance.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..nboxgames-solitaire_31bf3856ad364e35_6.1.7600.16385_none_74f3b07c5d008bde\Solitaire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..native-whitebox-isv_31bf3856ad364e35_6.1.7601.17514_none_eb5947ea4debcf36\RMActivate_isv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mpropertieshardware_31bf3856ad364e35_6.1.7600.16385_none_40d0db63344deff9\SystemPropertiesHardware.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mpropertiesadvanced_31bf3856ad364e35_6.1.7600.16385_none_f71eddfb459a0155\SystemPropertiesAdvanced.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mes-spidersolitaire_31bf3856ad364e35_6.1.7600.16385_none_828e8a89d6a2ba3d\SpiderSolitaire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..llercommandlinetool_31bf3856ad364e35_6.1.7600.16385_none_7444913c36004801\sc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..line-user-interface_31bf3856ad364e35_6.1.7600.16385_none_dcbdc8e83e2b98be\cmdkey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..l-inboxgames-hearts_31bf3856ad364e35_6.1.7600.16385_none_f3e05452c52c6325\Hearts.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.1.7600.16385_none_74aaf7f0dfbacf9f\Chess.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-shanghai_31bf3856ad364e35_6.1.7600.16385_none_c07a51d9507d9398\Mahjong.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-freecell_31bf3856ad364e35_6.1.7600.16385_none_58481bbdfe2e6164\FreeCell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-checkers_31bf3856ad364e35_6.1.7601.17514_none_784925b5137099ee\chkrzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-checkers_31bf3856ad364e35_6.1.7600.16385_none_761811ed16821654\chkrzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..executionprevention_31bf3856ad364e35_6.1.7600.16385_none_c9b9bfc685ed05d3\SystemPropertiesDataExecutionPrevention.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..estartup-fverecover_31bf3856ad364e35_6.1.7600.16385_none_4ee6b739366ce92b\BdeUnlockWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..erinboxgames-spades_31bf3856ad364e35_6.1.7600.16385_none_13883bb2626e33de\shvlzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.1.7600.16385_none_19fc3ad2bde50aa3\sdiagnhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..boxgames-backgammon_31bf3856ad364e35_6.1.7600.16385_none_0a6e67948d2aa502\bckgzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..ative-serverbox-isv_31bf3856ad364e35_6.1.7601.17514_none_f71e39745cb0f950\RMActivate_ssp_isv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runonce_31bf3856ad364e35_6.1.7601.17514_none_17c23e881d4a0b0b\runonce.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runlegacycplelevated_31bf3856ad364e35_6.1.7600.16385_none_10e2654156a06b06\RunLegacyCPLElevated.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7600.16385_none_d7dba7b30c3e2855\rundll32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_5fbe9f67bec0f818\runas.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rpc-ping_31bf3856ad364e35_6.1.7600.16385_none_9d906433a20c1949\RpcPing.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-robocopy_31bf3856ad364e35_6.1.7601.17514_none_c90e996c4aa655c4\Robocopy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-restartmanager_31bf3856ad364e35_6.1.7600.16385_none_800bbdee85723191\RmClient.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.1.7600.16385_none_372e6d4f633963b8\msra.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.1.7600.16385_none_372e6d4f633963b8\sdchange.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-reliability-postboot_31bf3856ad364e35_6.1.7601.17514_none_4fc83a1d6394f318\RelPost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-regsvr32_31bf3856ad364e35_6.1.7600.16385_none_782d737490d72da3\regsvr32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_f4050b883d2c3c08\regedt32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-regini_31bf3856ad364e35_6.1.7600.16385_none_0c2c92921b2478ef\regini.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-recover_31bf3856ad364e35_6.1.7600.16385_none_85e9a3f215ee94e3\recover.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-recdisc-main_31bf3856ad364e35_6.1.7601.17514_none_8683645d11e35ebc\recdisc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmstp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_5ef69594c1d92260\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_5ef69594c1d92260\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.1.7600.16385_none_6f1d25ec0a04d811\rasdial.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.1.7600.16385_none_6f1d25ec0a04d811\rasphone.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_0fb054d9c6a6b4d4\rasautou.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..sistance-dcomserver_31bf3856ad364e35_6.1.7600.16385_none_2fc9f616d6e642c0\raserver.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.17514_none_fc9579ad5e640a0b\RDVGHelper.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.17514_none_21d2afd5583776b6\TsUsbRedirectionGroupPolicyControl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..eak-diagnostic-core_31bf3856ad364e35_6.1.7600.16385_none_5ae7f926deb5de01\rdrleakdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.1.7600.16385_none_316a8a208c030e56\reg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-powershell-exe_31bf3856ad364e35_6.1.7600.16385_none_68ec54d7638638f5\powershell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnputil_31bf3856ad364e35_6.1.7600.16385_none_fd3a18b51ddb1bdf\PnPutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnpui_31bf3856ad364e35_6.1.7600.16385_none_5eade77d8c9d065b\dinotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.1.7600.16385_none_e8b787acac120444\DeviceEject.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\PATHPING.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\PING.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\TRACERT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7601.17514_none_9e112816ff36091b\perfmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7601.17514_none_9e112816ff36091b\resmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7600.16385_none_9be0144f02478581\resmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-peertopeercollab_31bf3856ad364e35_6.1.7600.16385_none_970ba4a68e7620bd\p2phost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pcwdiagnostic_31bf3856ad364e35_6.1.7600.16385_none_f502240760fba9c4\pcwrun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-packagemanager_31bf3856ad364e35_6.1.7601.17514_none_eedf2e0751865eb2\PkgMgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7601.17514_none_738d67435d28e27c\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7601.17514_none_738d67435d28e27c\unlodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7600.16385_none_715c537b603a5ee2\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..tomizationsnonwinpe_31bf3856ad364e35_6.1.7601.17514_none_cdd6534eed78daef\PnPUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ting-tools-printbrm_31bf3856ad364e35_6.1.7601.17514_none_83c1925fa396acd5\PrintBrm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ting-tools-printbrm_31bf3856ad364e35_6.1.7601.17514_none_83c1925fa396acd5\PrintBrmUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.1.7601.17514_none_8cd9cf9926a5534d\wpnpinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.1.7600.16385_none_8aa8bbd129b6cfb3\wpnpinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.1.7601.17514_none_b5e3f88a8eb425e8\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.1.7600.16385_none_b3b2e4c291c5a24e\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.1.7601.17514_none_f20ae427dbae4faf\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.1.7600.16385_none_efd9d05fdebfcc15\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.1.7600.16385_none_2b83efad3cba72d8\printfilterpipelinesvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ng-server-isolation_31bf3856ad364e35_6.1.7600.16385_none_9c856911bff5c373\PrintIsolationHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..nfiguration-cmdline_31bf3856ad364e35_6.1.7600.16385_none_09320e5ae212b9d9\powercfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\logman.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\relog.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_d85ba98b542e63f7\printui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7600.16385_none_d62a95c3573fe05d\printui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_6.1.7601.17514_none_0d6fabd7def3be93\PushPrinterConnections.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-optionaltsps_31bf3856ad364e35_6.1.7600.16385_none_e1d294682a365d27\tcmsetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-optionalfeatures_31bf3856ad364e35_6.1.7600.16385_none_663d506d4f028574\OptionalFeatures.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-oobe-machine_31bf3856ad364e35_6.1.7601.17514_none_0f85b4206173c24c\msoobe.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.1.7601.17514_none_e5849be1bd89e07e\ocsetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7601.17514_none_0014e305d0cff0a7\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7601.17514_none_0014e305d0cff0a7\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7600.16385_none_fde3cf3dd3e16d0d\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7600.16385_none_fde3cf3dd3e16d0d\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_cd87dddbc4b4a790\nslookup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-notepad_31bf3856ad364e35_6.1.7600.16385_none_6ef0e39ed15350e4\notepad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-notepadwin_31bf3856ad364e35_6.1.7600.16385_none_42a023025c60a33a\notepad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_114ca177b1fcad24\ndadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_114ca177b1fcad24\newdev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.1.7600.16385_none_e39dd9555210c2c2\NetProj.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_07c046fe67692e98\bridgeunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netsh_31bf3856ad364e35_6.1.7600.16385_none_5f774c61592c67c3\netsh.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netplwiz-exe_31bf3856ad364e35_6.1.7600.16385_none_ed2d0ae971b57e8d\Netplwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.1.7601.17514_none_123645a3afbba020\netcfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_626c324d55864070\netbtugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-net1-command-line-tool_31bf3856ad364e35_6.1.7601.17514_none_88e35d5cb2d54359\net1.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.1.7600.16385_none_5208a7a3d3caa54c\net.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-nbtstat_31bf3856ad364e35_6.1.7600.16385_none_9de6da957fb287cb\nbtstat.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-n..protection-statusui_31bf3856ad364e35_6.1.7600.16385_none_3d715a438950ce7b\NAPSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-muicachebuilder_31bf3856ad364e35_6.1.7601.17514_none_1c140627131a6df3\mcbuilder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msinfo32-exe_31bf3856ad364e35_6.1.7601.17514_none_ade3d0c257f06243\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msinfo32-exe-common_31bf3856ad364e35_6.1.7601.17514_none_884c69064922f75b\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msdt_31bf3856ad364e35_6.1.7600.16385_none_a558b8167eda0eef\msdt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msconfig-exe_31bf3856ad364e35_6.1.7601.17514_none_dc81a86efc02299c\msconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7600.16385_none_c718d071d9c10a2d\auditpol.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mountvol_31bf3856ad364e35_6.1.7600.16385_none_b22fcf90b2c6e173\mountvol.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mobsyncexe_31bf3856ad364e35_6.1.7601.17514_none_f1584379b2973708\mobsync.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.1.7601.17514_none_5aaf419e398215df\mighost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.1.7600.16385_none_587e2dd63c939245\mighost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmpenc_31bf3856ad364e35_6.1.7600.16385_none_a3fa8a7d892f3cc9\wmpenc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7601.17514_none_affb336d34ccf2f8\setup_wm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7601.17514_none_affb336d34ccf2f8\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7600.16385_none_adca1fa537de6f5e\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-logagent_31bf3856ad364e35_6.1.7601.17514_none_ed47f623204af12a\logagent.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmpconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmplayer.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmpshare.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-autoplay_31bf3856ad364e35_6.1.7601.17514_none_1d021a899e3cd8e8\wmlaunch.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.17514_none_9e6699276b03c38e\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.17514_none_9e6699276b03c38e\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.20717_none_9d0cd7e486f8464a\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.20717_none_9d0cd7e486f8464a\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16597_none_9c2cb9d36e1b88e1\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16597_none_9c2cb9d36e1b88e1\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16385_none_9c35855f6e153ff4\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16385_none_9c35855f6e153ff4\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mapi_31bf3856ad364e35_6.1.7601.17514_none_ad54ab3a7801c830\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mapi_31bf3856ad364e35_6.1.7600.16385_none_ab2397727b134496\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-makecab_31bf3856ad364e35_6.1.7600.16385_none_f0a5d809ca926e4f\makecab.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..yer-sideshow-gadget_31bf3856ad364e35_6.1.7600.16385_none_27fff9111045b65e\WMPSideShowGadget.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..s-mdac-odbcconf-exe_31bf3856ad364e35_6.1.7600.16385_none_0d4d30a05370cb73\odbcconf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..player-shellpreview_31bf3856ad364e35_6.1.7600.16385_none_c0742954d48af621\wmprph.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.1.7601.17514_none_bc8280d4f2975f56\migwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.1.7600.16385_none_ba516d0cf5a8dbbc\migwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\doskey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\find.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\print.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\replace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\subst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..odeupdate-servicing_31bf3856ad364e35_6.1.7600.16385_none_a35e5b130757d4ea\ucsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..lepc-mobilitycenter_31bf3856ad364e35_6.1.7601.17514_none_5ca15ec5698532ff\mblctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..diagnostic-schedule_31bf3856ad364e35_6.1.7601.17514_none_95de0627d7f99d54\MdSched.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..cationnotifications_31bf3856ad364e35_6.1.7600.16385_none_175ab6276b721d6a\LocationNotifications.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ac-sql-cliconfg-exe_31bf3856ad364e35_6.1.7600.16385_none_6ff39cfbb8057a05\cliconfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-odbc-administrator_31bf3856ad364e35_6.1.7600.16385_none_44263d819f0aa19e\odbcad32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-mctadmin-component_31bf3856ad364e35_6.1.7600.16385_none_0b10b724fca75a88\mctadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-management-console_31bf3856ad364e35_6.1.7600.16385_none_0f49a133d6f5d42b\mmc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-diagnostic-results_31bf3856ad364e35_6.1.7600.16385_none_28bc88ef47fee095\MdRes.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_2360caf4caba9027\lpksetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_2360caf4caba9027\lpremove.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-legacyhwui_31bf3856ad364e35_6.1.7600.16385_none_e24a7886a9947ebf\hdwwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-label_31bf3856ad364e35_6.1.7600.16385_none_570561eb2b9c151d\label.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ktmutil_31bf3856ad364e35_6.1.7600.16385_none_88604e41627c6de1\ktmutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-isoburn_31bf3856ad364e35_6.1.7601.17514_none_e83a110af77d5aa7\isoburn.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-iscsi_initiator_ui_31bf3856ad364e35_6.1.7600.16385_none_d7c180d4bd657495\iscsicpl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-irftp_31bf3856ad364e35_6.1.7600.16385_none_5690970fdf952e2a\irftp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ipconfig_31bf3856ad364e35_6.1.7600.16385_none_4c104723794237c2\ipconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-international-core_31bf3856ad364e35_6.1.7601.17514_none_ebb1ce7438031941\MuiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.17514_none_4b88deb7e45bfbb0\msiexec.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-infdefaultinstall_31bf3856ad364e35_6.1.7600.16385_none_6c6ad9e2fd62ff6a\InfDefaultInstall.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_d8216ed3d8746200\IMCCPHR.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.17514_none_055d8a4166e66f09\ieinstal.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.7601.17514_none_e292664733bd5af6\ie4uinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.7601.17514_none_4c23b12bef429251\ieUnatt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-impexp-extexport_31bf3856ad364e35_8.0.7601.17514_none_4abf71c398c9a7d6\ExtExport.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_7f0c7a3c17077fce\iexpress.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_7f0c7a3c17077fce\wextract.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7600.16385_none_2106a98149904819\ielowutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.7600.16385_none_73ea8c9be1b31cce\mshta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_8.0.7601.17514_none_44aa873ff9136c27\RegisterIEPKEYs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7601.17514_none_190fa02cb006154d\msfeedssync.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icm-ui_31bf3856ad364e35_6.1.7600.16385_none_3a2f0d8e0222fc0f\colorcpl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icm-dccw_31bf3856ad364e35_6.1.7600.16385_none_1ac50203efd6e328\dccw.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icacls_31bf3856ad364e35_6.1.7600.16385_none_328af534074dc6cc\icacls.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..tional-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_5b8b67785f3a2616\IMTCPROP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_1a18c7cca6359715\IMSCPROP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_6.1.7601.17514_none_dc7b1529735a0950\iscsicli.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.7600.16385_none_23079f05995ee912\SetIEInstalledDate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-htmlhelp_31bf3856ad364e35_6.1.7600.16385_none_c82c4cd5e6101085\hh.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-help-client_31bf3856ad364e35_6.1.7600.16385_none_6beee6458f6a465e\HelpPane.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-grpconv_31bf3856ad364e35_6.1.7600.16385_none_a25e7b019f016e70\grpconv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.1.7600.16385_none_64ed8ea5d0ffd85e\gpscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-gettingstarted_31bf3856ad364e35_6.1.7600.16385_none_8053bb69558ffadc\GettingStarted.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_6.1.7600.16385_none_3b3f55233d47d4f2\gpupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ftp_31bf3856ad364e35_6.1.7601.17514_none_aef2c7dbb6cc16c1\ftp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fsutil_31bf3856ad364e35_6.1.7601.17577_none_ce2d9fba4e5ca8e7\fsutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-forfiles_31bf3856ad364e35_6.1.7600.16385_none_54f9c5c33edc5fbb\forfiles.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fontview_31bf3856ad364e35_6.1.7600.16385_none_443a636317ca9b75\fontview.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-findstr_31bf3856ad364e35_6.1.7601.17514_none_2936f54db7f6c08f\findstr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-filtermanager-utils_31bf3856ad364e35_6.1.7600.16385_none_1964092586ab4352\fltMC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fdddo_31bf3856ad364e35_6.1.7600.16385_none_54bf8f7a944a30ac\DeviceDisplayObjectProvider.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7601.17514_none_af2b03a8de8b857c\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7600.16385_none_acf9efe0e19d01e2\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_009cfaa696afe78b\comp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_009cfaa696afe78b\fc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_7adad81486c46c63\FXSCOVER.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_7adad81486c46c63\WFS.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-extrac32_31bf3856ad364e35_6.1.7600.16385_none_dafff0c26538f91f\extrac32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventlog-commandline_31bf3856ad364e35_6.1.7600.16385_none_c0aa8bc2de239cf9\wevtutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventcreate_31bf3856ad364e35_6.1.7600.16385_none_d53926c7a0e7716d\eventcreate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventcollector_31bf3856ad364e35_6.1.7600.16385_none_fae3f90ad6068afa\wecutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eudcedit_31bf3856ad364e35_6.1.7601.17514_none_5b9fee911dc04044\eudcedit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_720e868d9b0b6a44\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_720e868d9b0b6a44\WerFaultSecure.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7600.16385_none_6fdd72c59e1ce6aa\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7601.17514_none_227e1c01642654f4\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7600.16385_none_204d08396737d15a\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-wtvconverter_31bf3856ad364e35_6.1.7600.16385_none_4c27af48fd4bae23\WTVConverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-services-ehsched_31bf3856ad364e35_6.1.7600.16385_none_a54954fd9d61ab4b\ehsched.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-services-ehrecvr_31bf3856ad364e35_6.1.7601.17514_none_bf70e7ef7fe07334\ehrecvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-mcspad_31bf3856ad364e35_6.1.7600.16385_none_616d9707cc8c9e84\mcspad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-mcglidhost_31bf3856ad364e35_6.1.7600.16385_none_a9841ba05f8eab34\mcGlidHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.1.7601.17514_none_4d702836b2fdcd1e\ehvid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtray_31bf3856ad364e35_6.1.7601.17514_none_2ce077aacb4b313f\ehtray.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehshell_31bf3856ad364e35_6.1.7600.16385_none_3976c0515b3306e5\ehshell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehrec_31bf3856ad364e35_6.1.7601.17514_none_4cfafb00b349fcb7\ehrec.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehprivjob_31bf3856ad364e35_6.1.7601.17514_none_f71a9aa3900d7245\ehprivjob.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehmsas_31bf3856ad364e35_6.1.7600.16385_none_2ae92a9cce326e3f\ehmsas.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcxtask_31bf3856ad364e35_6.1.7600.16385_none_5a9d7f2ae4a9228f\McxTask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcx2prov_31bf3856ad364e35_6.1.7601.17514_none_da949bbf7752ed63\Mcx2Prov.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.1.7600.16385_none_34003e8d3b4dc79c\McrMgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-efs-ui_31bf3856ad364e35_6.1.7600.16385_none_f64b1e25e8ea1172\efsui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.1.7600.16385_none_8a203e045f71a57b\Eap3Host.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..ortingcompatibility_31bf3856ad364e35_6.1.7600.16385_none_fe75fb7856d846d5\DWWIN.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..ageengine-utilities_31bf3856ad364e35_6.1.7600.16385_none_d96243212694b69e\esentutl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-driververifier_31bf3856ad364e35_6.1.7600.16385_none_ba42313afe0efbbb\verifier.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dpiscaling_31bf3856ad364e35_6.1.7600.16385_none_7a1e2959bc43abd5\DpiScaling.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dpapi-keys_31bf3856ad364e35_6.1.7600.16385_none_7da9291f2ec46948\dpapimig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_e3a50618e0cfbec0\dnscacheugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-displayswitch_31bf3856ad364e35_6.1.7600.16385_none_ec98071c85cf09eb\DisplaySwitch.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dispdiag_31bf3856ad364e35_6.1.7600.16385_none_44babf78916ac280\dispdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diskraid_31bf3856ad364e35_6.1.7601.17514_none_67910dfbf63c4aae\diskraid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diskpart_31bf3856ad364e35_6.1.7601.17514_none_6adfcf45f42effcf\diskpart.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7601.17514_none_7addf2001d014646\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7600.16385_none_78acde382012c2ac\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay4_31bf3856ad364e35_6.1.7600.16385_none_76e6c1802136b090\dplaysvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdupgrd_31bf3856ad364e35_6.1.7600.16385_none_7d9cbcec3df8da86\dvdupgrd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdplay_31bf3856ad364e35_6.1.7600.16385_none_0184794e7b5db540\dvdplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diantz_31bf3856ad364e35_6.1.7600.16385_none_a69c6a8f23f521f3\diantz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.1.7600.16385_none_ea20b9269b3c9a2c\DeviceProperties.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-devicepairingapp_31bf3856ad364e35_6.1.7600.16385_none_6f74b7d163601da2\DevicePairingWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-deployment_31bf3856ad364e35_6.1.7601.17514_none_fdf660b64b901b2e\setupugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-defrag-cmdline_31bf3856ad364e35_6.1.7600.16385_none_c75225df27a90f8d\Defrag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-defrag-adminui_31bf3856ad364e35_6.1.7601.17514_none_9b1d78a9ee870c74\dfrgui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ddodiag_31bf3856ad364e35_6.1.7600.16385_none_362ce835fe42421b\ddodiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7601.17514_none_25cb021dbc0611db\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7600.16385_none_2399ee55bf178e41\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_6f41b396eefb7580\IMJPDSVR.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_6f41b396eefb7580\IMJPMGR.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ostic-user-resolver_31bf3856ad364e35_6.1.7600.16385_none_c50b5b3967029178\DFDWiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ing-management-core_31bf3856ad364e35_6.1.7601.17514_none_2d3b8ff08901343f\DismHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\IMEPADSV.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ervicing-management_31bf3856ad364e35_6.1.7600.16385_none_5e7ff93b6f0000b7\Dism.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.17514_none_0d44b8d3df1c79a9\imjpuexc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPDADM.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPDCT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPUEX.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7600.16385_none_ed079508d36e3f2d\IMJPDADM.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7600.16385_none_ed079508d36e3f2d\IMJPUEX.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.1.7600.16385_none_0e3c9ce5e73a7257\imjppdmg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cttune_31bf3856ad364e35_6.1.7600.16385_none_b35ae2951fd8adbc\cttune.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cttunesvr_31bf3856ad364e35_6.1.7600.16385_none_efd12d677fabca7b\cttunesvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-credwiz_31bf3856ad364e35_6.1.7600.16385_none_9fb106cecd28b3f9\credwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-corruptedfilerecovery_31bf3856ad364e35_6.1.7600.16385_none_87900e038a1ae3d6\cofire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_9edcb4a706944d0a\convert.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7600.16385_none_9caba0df09a5c970\convert.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-control_31bf3856ad364e35_6.1.7600.16385_none_99424f610bd169de\control.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17625_none_765963806063112d\conhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-computerdefaults_31bf3856ad364e35_6.1.7600.16385_none_064cf7cf249d0026\ComputerDefaults.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-compact_31bf3856ad364e35_6.1.7600.16385_none_f9cb90ee16e61ec6\compact.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-commandprompt_31bf3856ad364e35_6.1.7601.17514_none_8d1430a8789ea27a\cmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-commandlinehelp_31bf3856ad364e35_6.1.7600.16385_none_d4018bc76a8b37d9\help.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_43fa44d954d596e7\dllhst3g.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_19295908c15690f3\msdtc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.1.7600.16385_none_b07e19d8a98c26cf\dcomcnfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-complus-setup_31bf3856ad364e35_6.1.7600.16385_none_e97e2f6c50a1c3c0\mtstocom.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-clip_31bf3856ad364e35_6.1.7600.16385_none_a7b238407d550501\clip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_6d1a8c84bedf66a4\cleanmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cipher_31bf3856ad364e35_6.1.7600.16385_none_acecd57e066c38ac\cipher.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-choice_31bf3856ad364e35_6.1.7600.16385_none_c33d412fed16819c\choice.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-chkdsk_31bf3856ad364e35_6.1.7600.16385_none_c1bcb003ee041301\chkdsk.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-charmap_31bf3856ad364e35_6.1.7600.16385_none_f230138205aebc59\charmap.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-certutil_31bf3856ad364e35_6.1.7600.16385_none_b55b5e1094b0283d\certutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..utermanagerlauncher_31bf3856ad364e35_6.1.7600.16385_none_8debc8b755a5bae3\CompMgmtLauncher.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..plus-setup-migregdb_31bf3856ad364e35_6.1.7600.16385_none_2d26f786c50448ba\MigRegDB.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..mplus-admin-comrepl_31bf3856ad364e35_6.1.7600.16385_none_e9dfd464f0c2ad1f\comrepl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7601.17514_none_6720a9d733702c85\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7600.16385_none_64ef960f3681a8eb\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.1.7600.16526_none_62283b15ce321cd0\browserchoice.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bootconfig_31bf3856ad364e35_6.1.7600.16385_none_0becd32d7b9ba9e5\bootcfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-blb-cli-main_31bf3856ad364e35_6.1.7600.16385_none_4b2b3343f0594dd2\wbadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7601.17514_none_4f18faed6aae2509\bitsadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bcdboot-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_635d4e809c667f99\bcdboot.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8\expand.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-b..vironment-servicing_31bf3856ad364e35_6.1.7601.17514_none_281beb1e03d68b9b\bfsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-b..iondata-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_8a3266b1036db956\bcdedit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7601.17514_none_d90cb8d0cf2f6362\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7600.16385_none_d6dba508d240dfc8\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-autochkconfigurator_31bf3856ad364e35_6.1.7600.16385_none_1898d1bbe9180b39\chkntfs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-authentication-logonui_31bf3856ad364e35_6.1.7601.17514_none_679a7c79d17ac3bd\LogonUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-atbroker_31bf3856ad364e35_6.1.7600.16385_none_cf7705f47fa8cd65\AtBroker.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_59537a3710696511\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_59537a3710696511\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_5722666f137ae177\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_5722666f137ae177\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-alg_31bf3856ad364e35_6.1.7600.16385_none_a8bfa843bc721ead\alg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_d1d79dd7e49a786f\AdapterTroubleshooter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_58257acb668f62bc\cacls.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_d473bbc8c4e38fd5\aitagent.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_c5bfe28f89b5e534\WindowsAnytimeUpgradeResults.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_d7186da9aafbefce\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.20591_none_d562277ec736bfba\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.16481_none_d4e35a9fae1103ff\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.16385_none_d4e759e1ae0d6c34\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_339cdc37847a979b\pcalua.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_339cdc37847a979b\pcawrk.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_81d82fe9c216eb89\pcaui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_mcupdate_31bf3856ad364e35_6.1.7601.17514_none_caa43bab0a1077a3\mcupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_eventviewersettings_31bf3856ad364e35_6.1.7600.16385_none_f4ce2e2a6506b973\eventvwr.exe is infected with W32.Xpiro.B
C:\Windows\System32\AdapterTroubleshooter.exe is infected with W32.Xpiro.B
C:\Windows\System32\aitagent.exe is infected with W32.Xpiro.B
C:\Windows\System32\alg.exe is infected with W32.Xpiro.B
C:\Windows\System32\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\System32\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\System32\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\System32\at.exe is infected with W32.Xpiro.B
C:\Windows\System32\AtBroker.exe is infected with W32.Xpiro.B
C:\Windows\System32\atiapfxx.exe is infected with W32.Xpiro.B
C:\Windows\System32\atibtmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\ATIODCLI.exe is infected with W32.Xpiro.B
C:\Windows\System32\ATIODE.exe is infected with W32.Xpiro.B
C:\Windows\System32\attrib.exe is infected with W32.Xpiro.B
C:\Windows\System32\auditpol.exe is infected with W32.Xpiro.B
C:\Windows\System32\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\System32\baaupdate.exe is infected with W32.Xpiro.B
C:\Windows\System32\bcdboot.exe is infected with W32.Xpiro.B
C:\Windows\System32\bcdedit.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeHdCfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeUISrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeUnlockWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\System32\bitsadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\bootcfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\bridgeunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\browserchoice.exe is infected with W32.Xpiro.B
C:\Windows\System32\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\System32\cacls.exe is infected with W32.Xpiro.B
C:\Windows\System32\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\System32\certutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\change.exe is infected with W32.Xpiro.B
C:\Windows\System32\charmap.exe is infected with W32.Xpiro.B
C:\Windows\System32\chglogon.exe is infected with W32.Xpiro.B
C:\Windows\System32\chgport.exe is infected with W32.Xpiro.B
C:\Windows\System32\chgusr.exe is infected with W32.Xpiro.B
C:\Windows\System32\chkdsk.exe is infected with W32.Xpiro.B
C:\Windows\System32\chkntfs.exe is infected with W32.Xpiro.B
C:\Windows\System32\choice.exe is infected with W32.Xpiro.B
C:\Windows\System32\cipher.exe is infected with W32.Xpiro.B
C:\Windows\System32\cleanmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\cliconfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\clip.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmd.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmdkey.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmstp.exe is infected with W32.Xpiro.B
C:\Windows\System32\cofire.exe is infected with W32.Xpiro.B
C:\Windows\System32\colorcpl.exe is infected with W32.Xpiro.B
C:\Windows\System32\comp.exe is infected with W32.Xpiro.B
C:\Windows\System32\compact.exe is infected with W32.Xpiro.B
C:\Windows\System32\CompMgmtLauncher.exe is infected with W32.Xpiro.B
C:\Windows\System32\ComputerDefaults.exe is infected with W32.Xpiro.B
C:\Windows\System32\control.exe is infected with W32.Xpiro.B
C:\Windows\System32\convert.exe is infected with W32.Xpiro.B
C:\Windows\System32\credwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\cscript.exe is infected with W32.Xpiro.B
C:\Windows\System32\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\System32\ctfmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\cttune.exe is infected with W32.Xpiro.B
C:\Windows\System32\cttunesvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dccw.exe is infected with W32.Xpiro.B
C:\Windows\System32\dcomcnfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\ddodiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\Defrag.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceDisplayObjectProvider.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceEject.exe is infected with W32.Xpiro.B
C:\Windows\System32\DevicePairingWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceProperties.exe is infected with W32.Xpiro.B
C:\Windows\System32\DFDWiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\dfrgui.exe is infected with W32.Xpiro.B
C:\Windows\System32\dialer.exe is infected with W32.Xpiro.B
C:\Windows\System32\diantz.exe is infected with W32.Xpiro.B
C:\Windows\System32\dinotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskpart.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskraid.exe is infected with W32.Xpiro.B
C:\Windows\System32\Dism.exe is infected with W32.Xpiro.B
C:\Windows\System32\dispdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\DisplaySwitch.exe is infected with W32.Xpiro.B
C:\Windows\System32\djoin.exe is infected with W32.Xpiro.B
C:\Windows\System32\dllhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\dllhst3g.exe is infected with W32.Xpiro.B
C:\Windows\System32\dnscacheugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\doskey.exe is infected with W32.Xpiro.B
C:\Windows\System32\dpapimig.exe is infected with W32.Xpiro.B
C:\Windows\System32\DpiScaling.exe is infected with W32.Xpiro.B
C:\Windows\System32\dplaysvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dvdplay.exe is infected with W32.Xpiro.B
C:\Windows\System32\dvdupgrd.exe is infected with W32.Xpiro.B
C:\Windows\System32\DWWIN.EXE is infected with W32.Xpiro.B
C:\Windows\System32\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\Eap3Host.exe is infected with W32.Xpiro.B
C:\Windows\System32\efsui.exe is infected with W32.Xpiro.B
C:\Windows\System32\esentutl.exe is infected with W32.Xpiro.B
C:\Windows\System32\eudcedit.exe is infected with W32.Xpiro.B
C:\Windows\System32\eventcreate.exe is infected with W32.Xpiro.B
C:\Windows\System32\eventvwr.exe is infected with W32.Xpiro.B
C:\Windows\System32\expand.exe is infected with W32.Xpiro.B
C:\Windows\System32\extrac32.exe is infected with W32.Xpiro.B
C:\Windows\System32\fc.exe is infected with W32.Xpiro.B
C:\Windows\System32\find.exe is infected with W32.Xpiro.B
C:\Windows\System32\findstr.exe is infected with W32.Xpiro.B
C:\Windows\System32\finger.exe is infected with W32.Xpiro.B
C:\Windows\System32\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\System32\fltMC.exe is infected with W32.Xpiro.B
C:\Windows\System32\fontview.exe is infected with W32.Xpiro.B
C:\Windows\System32\forfiles.exe is infected with W32.Xpiro.B
C:\Windows\System32\fsutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\ftp.exe is infected with W32.Xpiro.B
C:\Windows\System32\fvenotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\fveprompt.exe is infected with W32.Xpiro.B
C:\Windows\System32\FXSCOVER.exe is infected with W32.Xpiro.B
C:\Windows\System32\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\System32\GettingStarted.exe is infected with W32.Xpiro.B
C:\Windows\System32\gpscript.exe is infected with W32.Xpiro.B
C:\Windows\System32\gpupdate.exe is infected with W32.Xpiro.B
C:\Windows\System32\grpconv.exe is infected with W32.Xpiro.B
C:\Windows\System32\hdwwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\help.exe is infected with W32.Xpiro.B
C:\Windows\System32\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\System32\hwrcomp.exe is infected with W32.Xpiro.B
C:\Windows\System32\hwrreg.exe is infected with W32.Xpiro.B
C:\Windows\System32\icacls.exe is infected with W32.Xpiro.B
C:\Windows\System32\icsunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\ie4uinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\ieUnatt.exe is infected with W32.Xpiro.B
C:\Windows\System32\iexpress.exe is infected with W32.Xpiro.B
C:\Windows\System32\InfDefaultInstall.exe is infected with W32.Xpiro.B
C:\Windows\System32\ipconfig.exe is infected with W32.Xpiro.B
C:\Windows\System32\irftp.exe is infected with W32.Xpiro.B
C:\Windows\System32\iscsicli.exe is infected with W32.Xpiro.B
C:\Windows\System32\iscsicpl.exe is infected with W32.Xpiro.B
C:\Windows\System32\isoburn.exe is infected with W32.Xpiro.B
C:\Windows\System32\klist.exe is infected with W32.Xpiro.B
C:\Windows\System32\ksetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\ktmutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\label.exe is infected with W32.Xpiro.B
C:\Windows\System32\LocationNotifications.exe is infected with W32.Xpiro.B
C:\Windows\System32\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\logagent.exe is infected with W32.Xpiro.B
C:\Windows\System32\logman.exe is infected with W32.Xpiro.B
C:\Windows\System32\logoff.exe is infected with W32.Xpiro.B
C:\Windows\System32\LogonUI.exe is infected with W32.Xpiro.B
C:\Windows\System32\lpksetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\lpremove.exe is infected with W32.Xpiro.B
C:\Windows\System32\makecab.exe is infected with W32.Xpiro.B
C:\Windows\System32\manage-bde.exe is infected with W32.Xpiro.B
C:\Windows\System32\mblctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\mcbuilder.exe is infected with W32.Xpiro.B
C:\Windows\System32\mctadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\MdRes.exe is infected with W32.Xpiro.B
C:\Windows\System32\MdSched.exe is infected with W32.Xpiro.B
C:\Windows\System32\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\System32\mmc.exe is infected with W32.Xpiro.B
C:\Windows\System32\mobsync.exe is infected with W32.Xpiro.B
C:\Windows\System32\mountvol.exe is infected with W32.Xpiro.B
C:\Windows\System32\mpnotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\System32\msconfig.exe is infected with W32.Xpiro.B
C:\Windows\System32\msdt.exe is infected with W32.Xpiro.B
C:\Windows\System32\msdtc.exe is infected with W32.Xpiro.B
C:\Windows\System32\msfeedssync.exe is infected with W32.Xpiro.B
C:\Windows\System32\msg.exe is infected with W32.Xpiro.B
C:\Windows\System32\mshta.exe is infected with W32.Xpiro.B
C:\Windows\System32\msiexec.exe is infected with W32.Xpiro.B
C:\Windows\System32\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\System32\msra.exe is infected with W32.Xpiro.B
C:\Windows\System32\mstsc.exe is infected with W32.Xpiro.B
C:\Windows\System32\mtstocom.exe is infected with W32.Xpiro.B
C:\Windows\System32\MuiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\MultiDigiMon.exe is infected with W32.Xpiro.B
C:\Windows\System32\NAPSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\nbtstat.exe is infected with W32.Xpiro.B
C:\Windows\System32\ndadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\net.exe is infected with W32.Xpiro.B
C:\Windows\System32\net1.exe is infected with W32.Xpiro.B
C:\Windows\System32\netbtugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\netcfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\netiougc.exe is infected with W32.Xpiro.B
C:\Windows\System32\Netplwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\NetProj.exe is infected with W32.Xpiro.B
C:\Windows\System32\netsh.exe is infected with W32.Xpiro.B
C:\Windows\System32\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\newdev.exe is infected with W32.Xpiro.B
C:\Windows\System32\nltest.exe is infected with W32.Xpiro.B
C:\Windows\System32\notepad.exe is infected with W32.Xpiro.B
C:\Windows\System32\nslookup.exe is infected with W32.Xpiro.B
C:\Windows\System32\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\System32\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\System32\ocsetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\odbcad32.exe is infected with W32.Xpiro.B
C:\Windows\System32\odbcconf.exe is infected with W32.Xpiro.B
C:\Windows\System32\OptionalFeatures.exe is infected with W32.Xpiro.B
C:\Windows\System32\p2phost.exe is infected with W32.Xpiro.B
C:\Windows\System32\PATHPING.EXE is infected with W32.Xpiro.B
C:\Windows\System32\pcalua.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcaui.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcawrk.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcwrun.exe is infected with W32.Xpiro.B
C:\Windows\System32\perfmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\PING.EXE is infected with W32.Xpiro.B
C:\Windows\System32\PkgMgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\PnPUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\PnPutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\powercfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\prevhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\print.exe is infected with W32.Xpiro.B
C:\Windows\System32\PrintBrmUi.exe is infected with W32.Xpiro.B
C:\Windows\System32\printfilterpipelinesvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\PrintIsolationHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\printui.exe is infected with W32.Xpiro.B
C:\Windows\System32\proquota.exe is infected with W32.Xpiro.B
C:\Windows\System32\PushPrinterConnections.exe is infected with W32.Xpiro.B
C:\Windows\System32\qappsrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\qprocess.exe is infected with W32.Xpiro.B
C:\Windows\System32\query.exe is infected with W32.Xpiro.B
C:\Windows\System32\quser.exe is infected with W32.Xpiro.B
C:\Windows\System32\qwinsta.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasautou.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasdial.exe is infected with W32.Xpiro.B
C:\Windows\System32\raserver.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasphone.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpclip.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpshell.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpsign.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdrleakdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\RDVGHelper.exe is infected with W32.Xpiro.B
C:\Windows\System32\ReAgentc.exe is infected with W32.Xpiro.B
C:\Windows\System32\recdisc.exe is infected with W32.Xpiro.B
C:\Windows\System32\recover.exe is infected with W32.Xpiro.B
C:\Windows\System32\reg.exe is infected with W32.Xpiro.B
C:\Windows\System32\regedt32.exe is infected with W32.Xpiro.B
C:\Windows\System32\regini.exe is infected with W32.Xpiro.B
C:\Windows\System32\RegisterIEPKEYs.exe is infected with W32.Xpiro.B
C:\Windows\System32\regsvr32.exe is infected with W32.Xpiro.B
C:\Windows\System32\relog.exe is infected with W32.Xpiro.B
C:\Windows\System32\RelPost.exe is infected with W32.Xpiro.B
C:\Windows\System32\repair-bde.exe is infected with W32.Xpiro.B
C:\Windows\System32\replace.exe is infected with W32.Xpiro.B
C:\Windows\System32\reset.exe is infected with W32.Xpiro.B
C:\Windows\System32\resmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_isv.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_ssp.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_ssp_isv.exe is infected with W32.Xpiro.B
C:\Windows\System32\RmClient.exe is infected with W32.Xpiro.B
C:\Windows\System32\Robocopy.exe is infected with W32.Xpiro.B
C:\Windows\System32\ROUTE.EXE is infected with W32.Xpiro.B
C:\Windows\System32\RpcPing.exe is infected with W32.Xpiro.B
C:\Windows\System32\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\System32\rstrui.exe is infected with W32.Xpiro.B
C:\Windows\System32\runas.exe is infected with W32.Xpiro.B
C:\Windows\System32\rundll32.exe is infected with W32.Xpiro.B
C:\Windows\System32\RunLegacyCPLElevated.exe is infected with W32.Xpiro.B
C:\Windows\System32\runonce.exe is infected with W32.Xpiro.B
C:\Windows\System32\rwinsta.exe is infected with W32.Xpiro.B
C:\Windows\System32\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\sc.exe is infected with W32.Xpiro.B
C:\Windows\System32\schtasks.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdchange.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdclt.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdiagnhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SearchFilterHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SearchProtocolHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SecEdit.exe is infected with W32.Xpiro.B
C:\Windows\System32\secinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\sethc.exe is infected with W32.Xpiro.B
C:\Windows\System32\SetIEInstalledDate.exe is infected with W32.Xpiro.B
C:\Windows\System32\setspn.exe is infected with W32.Xpiro.B
C:\Windows\System32\setupSNK.exe is infected with W32.Xpiro.B
C:\Windows\System32\setupugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\setx.exe is infected with W32.Xpiro.B
C:\Windows\System32\sfc.exe is infected with W32.Xpiro.B
C:\Windows\System32\shadow.exe is infected with W32.Xpiro.B
C:\Windows\System32\shrpubw.exe is infected with W32.Xpiro.B
C:\Windows\System32\shutdown.exe is infected with W32.Xpiro.B
C:\Windows\System32\sigverif.exe is infected with W32.Xpiro.B
C:\Windows\System32\slui.exe is infected with W32.Xpiro.B
C:\Windows\System32\snmptrap.exe is infected with W32.Xpiro.B
C:\Windows\System32\sort.exe is infected with W32.Xpiro.B
C:\Windows\System32\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\System32\sppsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\spreview.exe is infected with W32.Xpiro.B
C:\Windows\System32\subst.exe is infected with W32.Xpiro.B
C:\Windows\System32\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\System32\SyncHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\syskey.exe is infected with W32.Xpiro.B
C:\Windows\System32\systeminfo.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesAdvanced.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesComputerName.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesHardware.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesPerformance.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesProtection.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesRemote.exe is infected with W32.Xpiro.B
C:\Windows\System32\systray.exe is infected with W32.Xpiro.B
C:\Windows\System32\tabcal.exe is infected with W32.Xpiro.B
C:\Windows\System32\takeown.exe is infected with W32.Xpiro.B
C:\Windows\System32\TapiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\taskmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\tcmsetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\System32\timeout.exe is infected with W32.Xpiro.B
C:\Windows\System32\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\System32\TRACERT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\tscon.exe is infected with W32.Xpiro.B
C:\Windows\System32\tsdiscon.exe is infected with W32.Xpiro.B
C:\Windows\System32\tskill.exe is infected with W32.Xpiro.B
C:\Windows\System32\TSTheme.exe is infected with W32.Xpiro.B
C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe is infected with W32.Xpiro.B
C:\Windows\System32\TSWbPrxy.exe is infected with W32.Xpiro.B
C:\Windows\System32\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\System32\tzutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\ucsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\UI0Detect.exe is infected with W32.Xpiro.B
C:\Windows\System32\unlodctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\System32\upnpcont.exe is infected with W32.Xpiro.B
C:\Windows\System32\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\System32\userinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\Utilman.exe is infected with W32.Xpiro.B
C:\Windows\System32\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\System32\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\System32\vds.exe is infected with W32.Xpiro.B
C:\Windows\System32\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\System32\verclsid.exe is infected with W32.Xpiro.B
C:\Windows\System32\verifier.exe is infected with W32.Xpiro.B
C:\Windows\System32\vmicsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\vssadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\VSSVC.exe is infected with W32.Xpiro.B
C:\Windows\System32\w32tm.exe is infected with W32.Xpiro.B
C:\Windows\System32\waitfor.exe is infected with W32.Xpiro.B
C:\Windows\System32\wbadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\wecutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\System32\WerFaultSecure.exe is infected with W32.Xpiro.B
C:\Windows\System32\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\wevtutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\wextract.exe is infected with W32.Xpiro.B
C:\Windows\System32\WFS.exe is infected with W32.Xpiro.B
C:\Windows\System32\where.exe is infected with W32.Xpiro.B
C:\Windows\System32\whoami.exe is infected with W32.Xpiro.B
C:\Windows\System32\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\wimserv.exe is infected with
Seitenanfang Seitenende
12.08.2011, 08:01
Moderator

Beiträge: 7796
#2 Dich hat Datei infizierende Malware erwischt. Da hilft nur neu aufsetzen des System. Wobei peniebelst darauf zu achten ist, keine der auf dem Rechner befindlichen ausfuiehrbaren Dateien weiter zu nutzen. Ein Backup von nicht ausfuehrbaren Dateien(DOK, PDF usw.) sollte man anfertigen, aber vor dem gebrauch erst von dem obigen (online)Scanner geprueft werden...
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
12.08.2011, 14:56
...neu hier

Themenstarter

Beiträge: 2
#3 Ok. Danke
Ich werde mich ans neu aufsetzen machen.
Danke sehr.

Mfg
Seitenanfang Seitenende
12.08.2011, 15:08
Moderator

Beiträge: 7796
#4 Der Beitrag ist zwar schon etwas aelter, aber lies ihn dir mal durch, dummer wird man davon nicht: ;)
http://board.protecus.de/t13020.htm
__________
MfG Ralf
SEO-Spam Hunter
Seitenanfang Seitenende
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!

Folgende Themen könnten Dich auch interessieren: