Home » Viren, Trojaner & Malware Forum » Virusscaner zeigt infizierte Objekte, PC sehr langsam » Themenansicht
Virusscaner zeigt infizierte Objekte, PC sehr langsam |
||
|---|---|---|
| #0
| ||
|
11.08.2011, 23:13
...neu hier
Beiträge: 2 |
||
 
|
|
|
|
12.08.2011, 08:01
Moderator
Beiträge: 7805 |
#2
Dich hat Datei infizierende Malware erwischt. Da hilft nur neu aufsetzen des System. Wobei peniebelst darauf zu achten ist, keine der auf dem Rechner befindlichen ausfuiehrbaren Dateien weiter zu nutzen. Ein Backup von nicht ausfuehrbaren Dateien(DOK, PDF usw.) sollte man anfertigen, aber vor dem gebrauch erst von dem obigen (online)Scanner geprueft werden...
__________ MfG Ralf SEO-Spam Hunter |
|
|
|
|
|
|
12.08.2011, 14:56
...neu hier
Themenstarter Beiträge: 2 |
||
|
|
|
|
|
12.08.2011, 15:08
Moderator
Beiträge: 7805 |
#4
Der Beitrag ist zwar schon etwas aelter, aber lies ihn dir mal durch, dummer wird man davon nicht:
 http://board.protecus.de/t13020.htm __________ MfG Ralf SEO-Spam Hunter |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
seit ein paar Tagen ist mein Computer erheblich langsamer geworden.
Als dies auftrat hatte ich mir einen Virusscanner runter geladen, um genau zu sein den Malwarebytes Anti Maleware. Dieser hatte mir beim 1. Vollständigen Durchlauf 14 infizierte Objekte angezeigt & diese auch erfolgreich gelöscht. Nach einem Neustart hatte ich den Scanner dann nocheinmal durchlaufen lassen mit der Option "Quick Scan" nun zeigte er mir wieder 3 infizierte Objekte an als diese auch beseitigt waren versuchte ich mein Glück mit einem Online Viren Scanner vom dem ich auch die Logs habe. Was noch sehr auffälig ist, beim Taskmanager ist ein Prozzes dieser nennt sich als Abbildname win32.exe, als Beschreibung steht lediglich "WTF" da. Dieser Prozess wird auch versucht zu unterdrücken von Malwarebytes. Wenn ich den Prozess manuel beende erscheint er sofort wieder oftmals 2-3 mal.
Hier die Logs von einem Online Viren Scanner:
C:\Windows\bfsvc.exe is infected with W32.Xpiro.B
C:\Windows\fveupdate.exe is infected with W32.Xpiro.B
C:\Windows\HelpPane.exe is infected with W32.Xpiro.B
C:\Windows\hh.exe is infected with W32.Xpiro.B
C:\Windows\notepad.exe is infected with W32.Xpiro.B
C:\Windows\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winhlp32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.7601.17610_none_755d8d6179bb210c\SearchFilterHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.7601.17610_none_755d8d6179bb210c\SearchProtocolHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_59c41ab5b67131d0\MpCmdRun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7601.17514_none_59c41ab5b67131d0\MSASCui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MpCmdRun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.1.7600.16385_none_579306edb982ae36\MSASCui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-xwizard-host-process_31bf3856ad364e35_6.1.7600.16385_none_58ca66f699d77ff1\xwizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-xcopy_31bf3856ad364e35_6.1.7600.16385_none_62cc00cc559fd4ec\xcopy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7601.17514_none_f59e20ddece8f922\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.20520_none_f43289dd08ebec20\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.16418_none_f3bbbf4defbefb1d\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-x..rtificateenrollment_31bf3856ad364e35_6.1.7600.16385_none_f36d0d15effa7588\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wusa_31bf3856ad364e35_6.1.7601.17514_none_af07fb6876def437\wusa.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.1.7600.16385_none_2b1523604c99c736\sfc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-write_31bf3856ad364e35_6.1.7600.16385_none_5f5928533e6b72c0\write.exe is infected with Bloodhound.MalPE
C:\Windows\winsxs\x86_microsoft-windows-writewin_31bf3856ad364e35_6.1.7600.16385_none_db699b3f5190c6d8\write.exe is infected with Bloodhound.MalPE
C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7601.17514_none_13305696250bcb70\WPDShextAutoplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wpd-shellextension_31bf3856ad364e35_6.1.7600.16385_none_10ff42ce281d47d6\WPDShextAutoplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wordpad_31bf3856ad364e35_6.1.7601.17514_none_2fc1e31ecb279dcc\wordpad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmpnss-ux_31bf3856ad364e35_6.1.7600.16385_none_b79b19341aca35eb\wmpnscfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-tools_31bf3856ad364e35_6.1.7600.16385_none_d7d1c004e4f2fbd4\wbemtest.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\mofcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\unsecapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\WMIADAP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7601.17514_none_bb5b6d007ddab8fe\WmiApSrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\mofcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\unsecapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\WMIADAP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.1.7600.16385_none_b92a593880ec3564\WmiApSrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7601.17514_none_a2ba25bb55333799\WinMgmt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.1.7600.16385_none_a08911f35844b3ff\WinMgmt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wmi-core-providerhost_31bf3856ad364e35_6.1.7601.17514_none_126a2876e9a722d2\WmiPrvSE.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wlan-extension_31bf3856ad364e35_6.1.7600.16385_none_f9b9855184ad1e6d\wlanext.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winver_31bf3856ad364e35_6.1.7600.16385_none_b627d45ffdcc6f00\winver.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_160ccc8a92fae520\winrs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_6.1.7600.16385_none_160ccc8a92fae520\winrshost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winre-recoverytools_31bf3856ad364e35_6.1.7601.17514_none_d7553e5fcf6b6373\ReAgentc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_9449cff8ee4f6cca\mpnotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winlogon-tools_31bf3856ad364e35_6.1.7600.16385_none_9449cff8ee4f6cca\wlrmdr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-winhstb_31bf3856ad364e35_6.1.7600.16385_none_28dc647c6aba6742\winhlp32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wimgapi_31bf3856ad364e35_6.1.7601.17514_none_8b030c557320a2c1\wimserv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-whoami_31bf3856ad364e35_6.1.7600.16385_none_ce52d479e329be32\whoami.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-where_31bf3856ad364e35_6.1.7600.16385_none_5da98f433f7e2878\where.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-waitfor_31bf3856ad364e35_6.1.7600.16385_none_b63c0c04dc872e59\waitfor.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_44b0c76c35d4b76d\wab.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7601.17514_none_44b0c76c35d4b76d\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.20814_none_4354073151cbeb4b\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.16684_none_427eb90c38e711f1\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.1.7600.16385_none_427fb3a438e633d3\wabmig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ystemassessmenttool_31bf3856ad364e35_6.1.7601.17514_none_7d9c61c4159c1205\WinSAT.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.5.7601.17514_none_c315782c0def9f8f\wuauclt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7601.17514_none_d0fbe940e38daf1f\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..sition-uicomponents_31bf3856ad364e35_6.1.7600.16385_none_cecad578e69f2b85\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.5.7601.17514_none_533172b8c7672a8e\wuapp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ommand-line-utility_31bf3856ad364e35_6.1.7600.16385_none_a1802b822e2a878c\WMIC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.1.7601.17514_none_8b399e33ba72bed9\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..ion-twaincomponents_31bf3856ad364e35_6.1.7600.16385_none_89088a6bbd843b3f\twunk_32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7601.17514_none_cc6cdf4b0b49e560\WSManHTTPConfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7601.17514_none_cc6cdf4b0b49e560\wsmprovhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7600.16385_none_ca3bcb830e5b61c6\WSManHTTPConfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.1.7600.16385_none_ca3bcb830e5b61c6\wsmprovhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-w..etwork-setup-wizard_31bf3856ad364e35_6.1.7600.16385_none_94b38187a5bad85e\setupSNK.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-vssservice_31bf3856ad364e35_6.1.7601.17514_none_5cd4386276198cd2\VSSVC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-vssadmin_31bf3856ad364e35_6.1.7600.16385_none_c453ab9392f73dca\vssadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7601.17514_none_6cf23c8b58f0b544\vds.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7601.17514_none_6cf23c8b58f0b544\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.1.7600.16385_none_6ac128c35c0231aa\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-verclsid_31bf3856ad364e35_6.1.7600.16385_none_bbbd275974c7e191\verclsid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-utilman_31bf3856ad364e35_6.1.7600.16385_none_028006129290e443\Utilman.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.1.7600.16385_none_c1be8a9895d79340\upnpcont.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-unattendedjoin_31bf3856ad364e35_6.1.7601.17514_none_b51c4e8acb16b737\djoin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-u..ountcontrolsettings_31bf3856ad364e35_6.1.7601.17514_none_85ac7bd736dda285\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-u..ountcontrolsettings_31bf3856ad364e35_6.1.7600.16385_none_837b680f39ef1eeb\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tzutil_31bf3856ad364e35_6.1.7601.17514_none_364b3ec461692953\tzutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-timeout_31bf3856ad364e35_6.1.7600.16385_none_8c3ac2e4279846be\timeout.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-time-tool_31bf3856ad364e35_6.1.7601.17514_none_ef1085419a309311\w32tm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.1.7600.16385_none_d5bc65ffdc22ec35\TSTheme.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.1.7601.17514_none_638cffc7ed9bc3c3\netiougc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\finger.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7601.17514_none_34ce5d95ad203bbe\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\finger.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.1.7600.16385_none_329d49cdb031b824\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-taskmgr_31bf3856ad364e35_6.1.7601.17514_none_16699919077609d2\taskmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tapisetup_31bf3856ad364e35_6.1.7600.16385_none_69c980e6fc7d9b52\TapiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tapicore_31bf3856ad364e35_6.1.7600.16385_none_e4102eada7ea2fc8\dialer.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-takeown_31bf3856ad364e35_6.1.7601.17514_none_fbf2cfb573e03306\takeown.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.1.7601.17514_none_13967fb1d5c46629\TabTip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.1.7600.16385_none_11656be9d8d5e28f\TabTip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_e17adc13b9335c8e\MultiDigiMon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-tabletpc-controlpanel_31bf3856ad364e35_6.1.7601.17514_none_e17adc13b9335c8e\tabcal.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.1.7600.16385_none_3f82691927a7cab9\ConvertInkStore.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.1.7600.16385_none_3f82691927a7cab9\InputPersonalization.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.1.7601.17514_none_4fe3b7807f59a909\mstsc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lishing-wmiprovider_31bf3856ad364e35_6.1.7601.17514_none_373fc283f1cb38ca\rdpsign.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lipboardredirection_31bf3856ad364e35_6.1.7601.17514_none_03dd7a8e696443c0\rdpclip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lications-clientsku_31bf3856ad364e35_6.1.7601.17514_none_20e28a44a465abf4\rdpinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..lications-clientsku_31bf3856ad364e35_6.1.7601.17514_none_20e28a44a465abf4\rdpshell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-workspaceruntime_31bf3856ad364e35_6.1.7601.17514_none_286ca4a83b84527b\wksprt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\change.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chglogon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chgport.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\chgusr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\logoff.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\qappsrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\qprocess.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\query.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\reset.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\rwinsta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\shadow.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tscon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tsdiscon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..es-commandlinetools_31bf3856ad364e35_6.1.7601.17514_none_e6b7c3515746554c\tskill.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\msg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\quser.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..commandlinetoolsmqq_31bf3856ad364e35_6.1.7601.17514_none_2b30db4d0a47378d\qwinsta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_6.1.7600.16385_none_9d06e2f6f1e51f98\ctfmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.1.7600.16385_none_423b458dae59129d\PDIALOG.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..alservices-webproxy_31bf3856ad364e35_6.1.7600.16385_none_314e00fcb9a31524\TSWbPrxy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.1.7600.16385_none_41c821eeeae8dea2\pipanel.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..-coreinkrecognition_31bf3856ad364e35_6.1.7600.16385_none_ed6e97c85c464885\hwrcomp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-t..-coreinkrecognition_31bf3856ad364e35_6.1.7600.16385_none_ed6e97c85c464885\hwrreg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systray_31bf3856ad364e35_6.1.7600.16385_none_f327d2f6575da8ce\systray.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.1.7601.17514_none_48e739d311811734\rstrui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_94ab98ac6d213009\SystemPropertiesRemote.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sysprep_31bf3856ad364e35_6.1.7601.17514_none_f1860ab056bcfa69\sysprep.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sysinfo_31bf3856ad364e35_6.1.7600.16385_none_ef2b073e59e262f6\systeminfo.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-synchost_31bf3856ad364e35_6.1.7600.16385_none_6957633c5de5fc54\SyncHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sxs_31bf3856ad364e35_6.1.7601.17514_none_b0540607b5e5d445\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sxs_31bf3856ad364e35_6.1.7600.16385_none_ae22f23fb8f750ab\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-soundrecorder_31bf3856ad364e35_6.1.7601.17514_none_a110af8e912572ca\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-soundrecorder_31bf3856ad364e35_6.1.7600.16385_none_9edf9bc69436ef30\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sort_31bf3856ad364e35_6.1.7600.16385_none_ab9479767ad67fd7\sort.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-snmp-trap-service_31bf3856ad364e35_6.1.7600.16385_none_cf615500a0bb6ff9\snmptrap.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sigverif_31bf3856ad364e35_6.1.7600.16385_none_bb6fda805cb2381c\sigverif.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7601.17514_none_d0e415a884ea33e1\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7601.17514_none_d0e415a884ea33e1\sidebar.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.1.7600.16385_none_ceb301e087fbb047\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-shutdown-event-tracker_31bf3856ad364e35_6.1.7600.16385_none_02aa6dd4294b8d5f\shutdown.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-shell-previewhost_31bf3856ad364e35_6.1.7601.17562_none_450cbede5f4b17f1\prevhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_b7f38afb92de484f\shrpubw.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_04a3b4c9aa9fddd8\icsunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setx_31bf3856ad364e35_6.1.7600.16385_none_ac4d2bf27a63f85f\setx.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\audit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\oobeldr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\Setup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\setupsqm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.1.7601.17514_none_3433e83a0b8461a2\windeploy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sethc_31bf3856ad364e35_6.1.7601.17514_none_64c7a8e4d35d675c\sethc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-session0viewer_31bf3856ad364e35_6.1.7600.16385_none_e1bd3e25a80193e3\UI0Detect.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-servicepackcoordinator_31bf3856ad364e35_6.1.7601.17514_none_36c88c0085d30ce5\spreview.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7601.17514_none_f3707aa2994b285c\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7601.17514_none_f3707aa2994b285c\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7600.16385_none_f13f66da9c5ca4c2\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-vault_31bf3856ad364e35_6.1.7600.16385_none_f13f66da9c5ca4c2\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-setspn_31bf3856ad364e35_6.1.7600.16385_none_7fdbf78d3f7767ef\setspn.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-nltest_31bf3856ad364e35_6.1.7601.17514_none_9c668f785a9add58\nltest.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-ksetup_31bf3856ad364e35_6.1.7600.16385_none_1c431cb1af7bf5b0\ksetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-tools-klist_31bf3856ad364e35_6.1.7600.16385_none_410af5d427df6ed9\klist.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-syskey_31bf3856ad364e35_6.1.7600.16385_none_1838ef0586d5af46\syskey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-spp_31bf3856ad364e35_6.1.7601.17514_none_1c68c1637f350bf1\sppsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-security-spp-ux_31bf3856ad364e35_6.1.7601.17514_none_5dc908a6fd144a83\slui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-tool-exe_31bf3856ad364e35_6.1.7601.17514_none_fc2227a315986b73\manage-bde.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-service_31bf3856ad364e35_6.1.7600.16385_none_647c0a30066b1ab5\BdeUISrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-prompt_31bf3856ad364e35_6.1.7600.16385_none_efe5c3454547bbfe\fveprompt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-notify_31bf3856ad364e35_6.1.7600.16385_none_1cc8c1810953573d\fvenotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7601.17514_none_598dc13fe95a78b9\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7601.17514_none_598dc13fe95a78b9\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7600.16385_none_575cad77ec6bf51f\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.1.7600.16385_none_575cad77ec6bf51f\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-secinit_31bf3856ad364e35_6.1.7600.16385_none_878e469b2e51ce80\secinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_8c46e17f1398738b\schtasks.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7600.16385_none_483ea93961ad86ec\cscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.1.7600.16385_none_483ea93961ad86ec\wscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.1.7601.17514_none_27112637c50aacd7\sdclt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..up-drivepreparation_31bf3856ad364e35_6.1.7601.17514_none_a2f8f146c73f92b5\BdeHdCfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..sor-native-whitebox_31bf3856ad364e35_6.1.7601.17514_none_a2fcd94e8fba36f5\RMActivate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..ropertiesprotection_31bf3856ad364e35_6.1.7600.16385_none_6388acf17dd74912\SystemPropertiesProtection.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..restartup-repairbde_31bf3856ad364e35_6.1.7601.17514_none_d3fbab436e475c90\repair-bde.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..restartup-baaupdate_31bf3856ad364e35_6.1.7600.16385_none_36251cb0347ba7a9\baaupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..pertiescomputername_31bf3856ad364e35_6.1.7600.16385_none_304988749d91936f\SystemPropertiesComputerName.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.1.7600.16385_none_0601d49e5fc57a03\PurblePlace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-minesweeper_31bf3856ad364e35_6.1.7600.16385_none_a237737f9a82de12\MineSweeper.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..otservicing-utility_31bf3856ad364e35_6.1.7600.16385_none_751b074aed0a5d09\fveupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..or-native-serverbox_31bf3856ad364e35_6.1.7601.17514_none_71c62979c253e895\RMActivate_ssp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..opertiesperformance_31bf3856ad364e35_6.1.7600.16385_none_5aad0353642dd29f\SystemPropertiesPerformance.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..nboxgames-solitaire_31bf3856ad364e35_6.1.7600.16385_none_74f3b07c5d008bde\Solitaire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..native-whitebox-isv_31bf3856ad364e35_6.1.7601.17514_none_eb5947ea4debcf36\RMActivate_isv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mpropertieshardware_31bf3856ad364e35_6.1.7600.16385_none_40d0db63344deff9\SystemPropertiesHardware.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mpropertiesadvanced_31bf3856ad364e35_6.1.7600.16385_none_f71eddfb459a0155\SystemPropertiesAdvanced.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..mes-spidersolitaire_31bf3856ad364e35_6.1.7600.16385_none_828e8a89d6a2ba3d\SpiderSolitaire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..llercommandlinetool_31bf3856ad364e35_6.1.7600.16385_none_7444913c36004801\sc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..line-user-interface_31bf3856ad364e35_6.1.7600.16385_none_dcbdc8e83e2b98be\cmdkey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..l-inboxgames-hearts_31bf3856ad364e35_6.1.7600.16385_none_f3e05452c52c6325\Hearts.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.1.7600.16385_none_74aaf7f0dfbacf9f\Chess.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-shanghai_31bf3856ad364e35_6.1.7600.16385_none_c07a51d9507d9398\Mahjong.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-freecell_31bf3856ad364e35_6.1.7600.16385_none_58481bbdfe2e6164\FreeCell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-checkers_31bf3856ad364e35_6.1.7601.17514_none_784925b5137099ee\chkrzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-checkers_31bf3856ad364e35_6.1.7600.16385_none_761811ed16821654\chkrzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..executionprevention_31bf3856ad364e35_6.1.7600.16385_none_c9b9bfc685ed05d3\SystemPropertiesDataExecutionPrevention.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..estartup-fverecover_31bf3856ad364e35_6.1.7600.16385_none_4ee6b739366ce92b\BdeUnlockWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..erinboxgames-spades_31bf3856ad364e35_6.1.7600.16385_none_13883bb2626e33de\shvlzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..csengine-nativehost_31bf3856ad364e35_6.1.7600.16385_none_19fc3ad2bde50aa3\sdiagnhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..boxgames-backgammon_31bf3856ad364e35_6.1.7600.16385_none_0a6e67948d2aa502\bckgzm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-s..ative-serverbox-isv_31bf3856ad364e35_6.1.7601.17514_none_f71e39745cb0f950\RMActivate_ssp_isv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runonce_31bf3856ad364e35_6.1.7601.17514_none_17c23e881d4a0b0b\runonce.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runlegacycplelevated_31bf3856ad364e35_6.1.7600.16385_none_10e2654156a06b06\RunLegacyCPLElevated.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7600.16385_none_d7dba7b30c3e2855\rundll32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_5fbe9f67bec0f818\runas.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rpc-ping_31bf3856ad364e35_6.1.7600.16385_none_9d906433a20c1949\RpcPing.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-robocopy_31bf3856ad364e35_6.1.7601.17514_none_c90e996c4aa655c4\Robocopy.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-restartmanager_31bf3856ad364e35_6.1.7600.16385_none_800bbdee85723191\RmClient.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.1.7600.16385_none_372e6d4f633963b8\msra.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.1.7600.16385_none_372e6d4f633963b8\sdchange.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-reliability-postboot_31bf3856ad364e35_6.1.7601.17514_none_4fc83a1d6394f318\RelPost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-regsvr32_31bf3856ad364e35_6.1.7600.16385_none_782d737490d72da3\regsvr32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_f4050b883d2c3c08\regedt32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-regini_31bf3856ad364e35_6.1.7600.16385_none_0c2c92921b2478ef\regini.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-recover_31bf3856ad364e35_6.1.7600.16385_none_85e9a3f215ee94e3\recover.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-recdisc-main_31bf3856ad364e35_6.1.7601.17514_none_8683645d11e35ebc\recdisc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_6127a95cbec7a5fa\cmstp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_5ef69594c1d92260\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_5ef69594c1d92260\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.1.7600.16385_none_6f1d25ec0a04d811\rasdial.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.1.7600.16385_none_6f1d25ec0a04d811\rasphone.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.1.7600.16385_none_0fb054d9c6a6b4d4\rasautou.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..sistance-dcomserver_31bf3856ad364e35_6.1.7600.16385_none_2fc9f616d6e642c0\raserver.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.17514_none_fc9579ad5e640a0b\RDVGHelper.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..s-regkeys-component_31bf3856ad364e35_6.1.7601.17514_none_21d2afd5583776b6\TsUsbRedirectionGroupPolicyControl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..eak-diagnostic-core_31bf3856ad364e35_6.1.7600.16385_none_5ae7f926deb5de01\rdrleakdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.1.7600.16385_none_316a8a208c030e56\reg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-powershell-exe_31bf3856ad364e35_6.1.7600.16385_none_68ec54d7638638f5\powershell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnputil_31bf3856ad364e35_6.1.7600.16385_none_fd3a18b51ddb1bdf\PnPutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnpui_31bf3856ad364e35_6.1.7600.16385_none_5eade77d8c9d065b\dinotify.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.1.7600.16385_none_e8b787acac120444\DeviceEject.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\PATHPING.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\PING.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.1.7600.16385_none_a907fb2af12e5dc6\TRACERT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7601.17514_none_9e112816ff36091b\perfmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7601.17514_none_9e112816ff36091b\resmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.1.7600.16385_none_9be0144f02478581\resmon.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-peertopeercollab_31bf3856ad364e35_6.1.7600.16385_none_970ba4a68e7620bd\p2phost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-pcwdiagnostic_31bf3856ad364e35_6.1.7600.16385_none_f502240760fba9c4\pcwrun.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-packagemanager_31bf3856ad364e35_6.1.7601.17514_none_eedf2e0751865eb2\PkgMgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7601.17514_none_738d67435d28e27c\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7601.17514_none_738d67435d28e27c\unlodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.1.7600.16385_none_715c537b603a5ee2\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..tomizationsnonwinpe_31bf3856ad364e35_6.1.7601.17514_none_cdd6534eed78daef\PnPUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ting-tools-printbrm_31bf3856ad364e35_6.1.7601.17514_none_83c1925fa396acd5\PrintBrm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ting-tools-printbrm_31bf3856ad364e35_6.1.7601.17514_none_83c1925fa396acd5\PrintBrmUi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.1.7601.17514_none_8cd9cf9926a5534d\wpnpinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.1.7600.16385_none_8aa8bbd129b6cfb3\wpnpinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.1.7601.17514_none_b5e3f88a8eb425e8\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.1.7600.16385_none_b3b2e4c291c5a24e\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.1.7601.17514_none_f20ae427dbae4faf\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.1.7600.16385_none_efd9d05fdebfcc15\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.1.7600.16385_none_2b83efad3cba72d8\printfilterpipelinesvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ng-server-isolation_31bf3856ad364e35_6.1.7600.16385_none_9c856911bff5c373\PrintIsolationHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..nfiguration-cmdline_31bf3856ad364e35_6.1.7600.16385_none_09320e5ae212b9d9\powercfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\logman.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\relog.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7601.17514_none_632ae4bc5d173763\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.1.7600.16385_none_60f9d0f46028b3c9\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7601.17514_none_d85ba98b542e63f7\printui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.1.7600.16385_none_d62a95c3573fe05d\printui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-p..erandprintui-pmcppc_31bf3856ad364e35_6.1.7601.17514_none_0d6fabd7def3be93\PushPrinterConnections.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-optionaltsps_31bf3856ad364e35_6.1.7600.16385_none_e1d294682a365d27\tcmsetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-optionalfeatures_31bf3856ad364e35_6.1.7600.16385_none_663d506d4f028574\OptionalFeatures.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-oobe-machine_31bf3856ad364e35_6.1.7601.17514_none_0f85b4206173c24c\msoobe.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.1.7601.17514_none_e5849be1bd89e07e\ocsetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7601.17514_none_0014e305d0cff0a7\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7601.17514_none_0014e305d0cff0a7\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7600.16385_none_fde3cf3dd3e16d0d\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.1.7600.16385_none_fde3cf3dd3e16d0d\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-nslookup_31bf3856ad364e35_6.1.7601.17514_none_cd87dddbc4b4a790\nslookup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-notepad_31bf3856ad364e35_6.1.7600.16385_none_6ef0e39ed15350e4\notepad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-notepadwin_31bf3856ad364e35_6.1.7600.16385_none_42a023025c60a33a\notepad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_114ca177b1fcad24\ndadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_114ca177b1fcad24\newdev.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.1.7600.16385_none_e39dd9555210c2c2\NetProj.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.1.7600.16385_none_07c046fe67692e98\bridgeunattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netsh_31bf3856ad364e35_6.1.7600.16385_none_5f774c61592c67c3\netsh.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netplwiz-exe_31bf3856ad364e35_6.1.7600.16385_none_ed2d0ae971b57e8d\Netplwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.1.7601.17514_none_123645a3afbba020\netcfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_626c324d55864070\netbtugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-net1-command-line-tool_31bf3856ad364e35_6.1.7601.17514_none_88e35d5cb2d54359\net1.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.1.7600.16385_none_5208a7a3d3caa54c\net.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-nbtstat_31bf3856ad364e35_6.1.7600.16385_none_9de6da957fb287cb\nbtstat.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-n..protection-statusui_31bf3856ad364e35_6.1.7600.16385_none_3d715a438950ce7b\NAPSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-muicachebuilder_31bf3856ad364e35_6.1.7601.17514_none_1c140627131a6df3\mcbuilder.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msinfo32-exe_31bf3856ad364e35_6.1.7601.17514_none_ade3d0c257f06243\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msinfo32-exe-common_31bf3856ad364e35_6.1.7601.17514_none_884c69064922f75b\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msdt_31bf3856ad364e35_6.1.7600.16385_none_a558b8167eda0eef\msdt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msconfig-exe_31bf3856ad364e35_6.1.7601.17514_none_dc81a86efc02299c\msconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.1.7600.16385_none_c718d071d9c10a2d\auditpol.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mountvol_31bf3856ad364e35_6.1.7600.16385_none_b22fcf90b2c6e173\mountvol.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mobsyncexe_31bf3856ad364e35_6.1.7601.17514_none_f1584379b2973708\mobsync.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.1.7601.17514_none_5aaf419e398215df\mighost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.1.7600.16385_none_587e2dd63c939245\mighost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmpenc_31bf3856ad364e35_6.1.7600.16385_none_a3fa8a7d892f3cc9\wmpenc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7601.17514_none_affb336d34ccf2f8\setup_wm.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7601.17514_none_affb336d34ccf2f8\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-setup_31bf3856ad364e35_6.1.7600.16385_none_adca1fa537de6f5e\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-logagent_31bf3856ad364e35_6.1.7601.17514_none_ed47f623204af12a\logagent.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmpconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmplayer.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.1.7601.17514_none_0d712d0aad5bd2a0\wmpshare.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-autoplay_31bf3856ad364e35_6.1.7601.17514_none_1d021a899e3cd8e8\wmlaunch.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.17514_none_9e6699276b03c38e\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7601.17514_none_9e6699276b03c38e\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.20717_none_9d0cd7e486f8464a\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.20717_none_9d0cd7e486f8464a\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16597_none_9c2cb9d36e1b88e1\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16597_none_9c2cb9d36e1b88e1\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16385_none_9c35855f6e153ff4\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.1.7600.16385_none_9c35855f6e153ff4\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mapi_31bf3856ad364e35_6.1.7601.17514_none_ad54ab3a7801c830\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-mapi_31bf3856ad364e35_6.1.7600.16385_none_ab2397727b134496\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-makecab_31bf3856ad364e35_6.1.7600.16385_none_f0a5d809ca926e4f\makecab.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..yer-sideshow-gadget_31bf3856ad364e35_6.1.7600.16385_none_27fff9111045b65e\WMPSideShowGadget.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..s-mdac-odbcconf-exe_31bf3856ad364e35_6.1.7600.16385_none_0d4d30a05370cb73\odbcconf.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..player-shellpreview_31bf3856ad364e35_6.1.7600.16385_none_c0742954d48af621\wmprph.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.1.7601.17514_none_bc8280d4f2975f56\migwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.1.7600.16385_none_ba516d0cf5a8dbbc\migwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\doskey.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\find.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\print.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\replace.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\subst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..odeupdate-servicing_31bf3856ad364e35_6.1.7600.16385_none_a35e5b130757d4ea\ucsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..lepc-mobilitycenter_31bf3856ad364e35_6.1.7601.17514_none_5ca15ec5698532ff\mblctr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..diagnostic-schedule_31bf3856ad364e35_6.1.7601.17514_none_95de0627d7f99d54\MdSched.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..cationnotifications_31bf3856ad364e35_6.1.7600.16385_none_175ab6276b721d6a\LocationNotifications.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..ac-sql-cliconfg-exe_31bf3856ad364e35_6.1.7600.16385_none_6ff39cfbb8057a05\cliconfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-odbc-administrator_31bf3856ad364e35_6.1.7600.16385_none_44263d819f0aa19e\odbcad32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-mctadmin-component_31bf3856ad364e35_6.1.7600.16385_none_0b10b724fca75a88\mctadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-management-console_31bf3856ad364e35_6.1.7600.16385_none_0f49a133d6f5d42b\mmc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-m..-diagnostic-results_31bf3856ad364e35_6.1.7600.16385_none_28bc88ef47fee095\MdRes.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_2360caf4caba9027\lpksetup.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-lpksetup_31bf3856ad364e35_6.1.7601.17514_none_2360caf4caba9027\lpremove.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-legacyhwui_31bf3856ad364e35_6.1.7600.16385_none_e24a7886a9947ebf\hdwwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-label_31bf3856ad364e35_6.1.7600.16385_none_570561eb2b9c151d\label.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ktmutil_31bf3856ad364e35_6.1.7600.16385_none_88604e41627c6de1\ktmutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-isoburn_31bf3856ad364e35_6.1.7601.17514_none_e83a110af77d5aa7\isoburn.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-iscsi_initiator_ui_31bf3856ad364e35_6.1.7600.16385_none_d7c180d4bd657495\iscsicpl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-irftp_31bf3856ad364e35_6.1.7600.16385_none_5690970fdf952e2a\irftp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ipconfig_31bf3856ad364e35_6.1.7600.16385_none_4c104723794237c2\ipconfig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-international-core_31bf3856ad364e35_6.1.7601.17514_none_ebb1ce7438031941\MuiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-installer-executable_31bf3856ad364e35_6.1.7601.17514_none_4b88deb7e45bfbb0\msiexec.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-infdefaultinstall_31bf3856ad364e35_6.1.7600.16385_none_6c6ad9e2fd62ff6a\InfDefaultInstall.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_d8216ed3d8746200\IMCCPHR.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.17514_none_055d8a4166e66f09\ieinstal.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.7601.17514_none_e292664733bd5af6\ie4uinit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.7601.17514_none_4c23b12bef429251\ieUnatt.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-impexp-extexport_31bf3856ad364e35_8.0.7601.17514_none_4abf71c398c9a7d6\ExtExport.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_7f0c7a3c17077fce\iexpress.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-iexpress_31bf3856ad364e35_8.0.7600.16385_none_7f0c7a3c17077fce\wextract.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7600.16385_none_2106a98149904819\ielowutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-htmlapplication_31bf3856ad364e35_8.0.7600.16385_none_73ea8c9be1b31cce\mshta.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-gc-registeriepkeys_31bf3856ad364e35_8.0.7601.17514_none_44aa873ff9136c27\RegisterIEPKEYs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.7601.17514_none_190fa02cb006154d\msfeedssync.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icm-ui_31bf3856ad364e35_6.1.7600.16385_none_3a2f0d8e0222fc0f\colorcpl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icm-dccw_31bf3856ad364e35_6.1.7600.16385_none_1ac50203efd6e328\dccw.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-icacls_31bf3856ad364e35_6.1.7600.16385_none_328af534074dc6cc\icacls.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..tional-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_5b8b67785f3a2616\IMTCPROP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..lified-chinese-core_31bf3856ad364e35_6.1.7601.17514_none_1a18c7cca6359715\IMSCPROP.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_6.1.7601.17514_none_dc7b1529735a0950\iscsicli.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-i..-setieinstalleddate_31bf3856ad364e35_8.0.7600.16385_none_23079f05995ee912\SetIEInstalledDate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-htmlhelp_31bf3856ad364e35_6.1.7600.16385_none_c82c4cd5e6101085\hh.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-help-client_31bf3856ad364e35_6.1.7600.16385_none_6beee6458f6a465e\HelpPane.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-grpconv_31bf3856ad364e35_6.1.7600.16385_none_a25e7b019f016e70\grpconv.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-grouppolicy-script_31bf3856ad364e35_6.1.7600.16385_none_64ed8ea5d0ffd85e\gpscript.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-gettingstarted_31bf3856ad364e35_6.1.7600.16385_none_8053bb69558ffadc\GettingStarted.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-g..policy-cmdlinetools_31bf3856ad364e35_6.1.7600.16385_none_3b3f55233d47d4f2\gpupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ftp_31bf3856ad364e35_6.1.7601.17514_none_aef2c7dbb6cc16c1\ftp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fsutil_31bf3856ad364e35_6.1.7601.17577_none_ce2d9fba4e5ca8e7\fsutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-forfiles_31bf3856ad364e35_6.1.7600.16385_none_54f9c5c33edc5fbb\forfiles.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fontview_31bf3856ad364e35_6.1.7600.16385_none_443a636317ca9b75\fontview.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-findstr_31bf3856ad364e35_6.1.7601.17514_none_2936f54db7f6c08f\findstr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-filtermanager-utils_31bf3856ad364e35_6.1.7600.16385_none_1964092586ab4352\fltMC.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fdddo_31bf3856ad364e35_6.1.7600.16385_none_54bf8f7a944a30ac\DeviceDisplayObjectProvider.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7601.17514_none_af2b03a8de8b857c\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-fax-service_31bf3856ad364e35_6.1.7600.16385_none_acf9efe0e19d01e2\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_009cfaa696afe78b\comp.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..temcompareutilities_31bf3856ad364e35_6.1.7600.16385_none_009cfaa696afe78b\fc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_7adad81486c46c63\FXSCOVER.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7601.17559_none_7adad81486c46c63\WFS.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-extrac32_31bf3856ad364e35_6.1.7600.16385_none_dafff0c26538f91f\extrac32.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventlog-commandline_31bf3856ad364e35_6.1.7600.16385_none_c0aa8bc2de239cf9\wevtutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventcreate_31bf3856ad364e35_6.1.7600.16385_none_d53926c7a0e7716d\eventcreate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eventcollector_31bf3856ad364e35_6.1.7600.16385_none_fae3f90ad6068afa\wecutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-eudcedit_31bf3856ad364e35_6.1.7601.17514_none_5b9fee911dc04044\eudcedit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_720e868d9b0b6a44\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7601.17514_none_720e868d9b0b6a44\WerFaultSecure.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.1.7600.16385_none_6fdd72c59e1ce6aa\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7601.17514_none_227e1c01642654f4\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.1.7600.16385_none_204d08396737d15a\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-wtvconverter_31bf3856ad364e35_6.1.7600.16385_none_4c27af48fd4bae23\WTVConverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-services-ehsched_31bf3856ad364e35_6.1.7600.16385_none_a54954fd9d61ab4b\ehsched.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-services-ehrecvr_31bf3856ad364e35_6.1.7601.17514_none_bf70e7ef7fe07334\ehrecvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-mcspad_31bf3856ad364e35_6.1.7600.16385_none_616d9707cc8c9e84\mcspad.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-mcglidhost_31bf3856ad364e35_6.1.7600.16385_none_a9841ba05f8eab34\mcGlidHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehvid_31bf3856ad364e35_6.1.7601.17514_none_4d702836b2fdcd1e\ehvid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtray_31bf3856ad364e35_6.1.7601.17514_none_2ce077aacb4b313f\ehtray.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehshell_31bf3856ad364e35_6.1.7600.16385_none_3976c0515b3306e5\ehshell.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehrec_31bf3856ad364e35_6.1.7601.17514_none_4cfafb00b349fcb7\ehrec.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehprivjob_31bf3856ad364e35_6.1.7601.17514_none_f71a9aa3900d7245\ehprivjob.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-ehmsas_31bf3856ad364e35_6.1.7600.16385_none_2ae92a9cce326e3f\ehmsas.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcxtask_31bf3856ad364e35_6.1.7600.16385_none_5a9d7f2ae4a9228f\McxTask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcx2prov_31bf3856ad364e35_6.1.7601.17514_none_da949bbf7752ed63\Mcx2Prov.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.1.7600.16385_none_34003e8d3b4dc79c\McrMgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-efs-ui_31bf3856ad364e35_6.1.7600.16385_none_f64b1e25e8ea1172\efsui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..otocol-host-service_31bf3856ad364e35_6.1.7600.16385_none_8a203e045f71a57b\Eap3Host.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..ortingcompatibility_31bf3856ad364e35_6.1.7600.16385_none_fe75fb7856d846d5\DWWIN.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-e..ageengine-utilities_31bf3856ad364e35_6.1.7600.16385_none_d96243212694b69e\esentutl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-driververifier_31bf3856ad364e35_6.1.7600.16385_none_ba42313afe0efbbb\verifier.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dpiscaling_31bf3856ad364e35_6.1.7600.16385_none_7a1e2959bc43abd5\DpiScaling.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dpapi-keys_31bf3856ad364e35_6.1.7600.16385_none_7da9291f2ec46948\dpapimig.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.1.7601.17570_none_e3a50618e0cfbec0\dnscacheugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-displayswitch_31bf3856ad364e35_6.1.7600.16385_none_ec98071c85cf09eb\DisplaySwitch.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-dispdiag_31bf3856ad364e35_6.1.7600.16385_none_44babf78916ac280\dispdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diskraid_31bf3856ad364e35_6.1.7601.17514_none_67910dfbf63c4aae\diskraid.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diskpart_31bf3856ad364e35_6.1.7601.17514_none_6adfcf45f42effcf\diskpart.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7601.17514_none_7addf2001d014646\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.1.7600.16385_none_78acde382012c2ac\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directx-directplay4_31bf3856ad364e35_6.1.7600.16385_none_76e6c1802136b090\dplaysvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdupgrd_31bf3856ad364e35_6.1.7600.16385_none_7d9cbcec3df8da86\dvdupgrd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-directshow-dvdplay_31bf3856ad364e35_6.1.7600.16385_none_0184794e7b5db540\dvdplay.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-diantz_31bf3856ad364e35_6.1.7600.16385_none_a69c6a8f23f521f3\diantz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-deviceproperties_31bf3856ad364e35_6.1.7600.16385_none_ea20b9269b3c9a2c\DeviceProperties.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-devicepairingapp_31bf3856ad364e35_6.1.7600.16385_none_6f74b7d163601da2\DevicePairingWizard.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-deployment_31bf3856ad364e35_6.1.7601.17514_none_fdf660b64b901b2e\setupugc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-defrag-cmdline_31bf3856ad364e35_6.1.7600.16385_none_c75225df27a90f8d\Defrag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-defrag-adminui_31bf3856ad364e35_6.1.7601.17514_none_9b1d78a9ee870c74\dfrgui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-ddodiag_31bf3856ad364e35_6.1.7600.16385_none_362ce835fe42421b\ddodiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7601.17514_none_25cb021dbc0611db\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..x-directxdiagnostic_31bf3856ad364e35_6.1.7600.16385_none_2399ee55bf178e41\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_6f41b396eefb7580\IMJPDSVR.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..s-ime-japanese-core_31bf3856ad364e35_6.1.7600.16385_none_6f41b396eefb7580\IMJPMGR.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ostic-user-resolver_31bf3856ad364e35_6.1.7600.16385_none_c50b5b3967029178\DFDWiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ing-management-core_31bf3856ad364e35_6.1.7601.17514_none_2d3b8ff08901343f\DismHost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\IMEPADSV.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..ervicing-management_31bf3856ad364e35_6.1.7600.16385_none_5e7ff93b6f0000b7\Dism.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..andlinepropertytool_31bf3856ad364e35_6.1.7601.17514_none_0d44b8d3df1c79a9\imjpuexc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPDADM.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPDCT.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7601.17514_none_ef38a8d0d05cc2c7\IMJPUEX.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7600.16385_none_ed079508d36e3f2d\IMJPDADM.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.1.7600.16385_none_ed079508d36e3f2d\IMJPUEX.EXE is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-migration_31bf3856ad364e35_6.1.7600.16385_none_0e3c9ce5e73a7257\imjppdmg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cttune_31bf3856ad364e35_6.1.7600.16385_none_b35ae2951fd8adbc\cttune.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cttunesvr_31bf3856ad364e35_6.1.7600.16385_none_efd12d677fabca7b\cttunesvr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-credwiz_31bf3856ad364e35_6.1.7600.16385_none_9fb106cecd28b3f9\credwiz.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-corruptedfilerecovery_31bf3856ad364e35_6.1.7600.16385_none_87900e038a1ae3d6\cofire.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7601.17514_none_9edcb4a706944d0a\convert.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.1.7600.16385_none_9caba0df09a5c970\convert.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-control_31bf3856ad364e35_6.1.7600.16385_none_99424f610bd169de\control.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-consolehost_31bf3856ad364e35_6.1.7601.17625_none_765963806063112d\conhost.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-computerdefaults_31bf3856ad364e35_6.1.7600.16385_none_064cf7cf249d0026\ComputerDefaults.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-compact_31bf3856ad364e35_6.1.7600.16385_none_f9cb90ee16e61ec6\compact.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-commandprompt_31bf3856ad364e35_6.1.7601.17514_none_8d1430a8789ea27a\cmd.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-commandlinehelp_31bf3856ad364e35_6.1.7600.16385_none_d4018bc76a8b37d9\help.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_43fa44d954d596e7\dllhst3g.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-dtc-runtime_31bf3856ad364e35_6.1.7600.16385_none_19295908c15690f3\msdtc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.1.7600.16385_none_b07e19d8a98c26cf\dcomcnfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-com-complus-setup_31bf3856ad364e35_6.1.7600.16385_none_e97e2f6c50a1c3c0\mtstocom.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-clip_31bf3856ad364e35_6.1.7600.16385_none_a7b238407d550501\clip.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cleanmgr_31bf3856ad364e35_6.1.7600.16385_none_6d1a8c84bedf66a4\cleanmgr.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-cipher_31bf3856ad364e35_6.1.7600.16385_none_acecd57e066c38ac\cipher.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-choice_31bf3856ad364e35_6.1.7600.16385_none_c33d412fed16819c\choice.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-chkdsk_31bf3856ad364e35_6.1.7600.16385_none_c1bcb003ee041301\chkdsk.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-charmap_31bf3856ad364e35_6.1.7600.16385_none_f230138205aebc59\charmap.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-certutil_31bf3856ad364e35_6.1.7600.16385_none_b55b5e1094b0283d\certutil.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..utermanagerlauncher_31bf3856ad364e35_6.1.7600.16385_none_8debc8b755a5bae3\CompMgmtLauncher.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..plus-setup-migregdb_31bf3856ad364e35_6.1.7600.16385_none_2d26f786c50448ba\MigRegDB.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-c..mplus-admin-comrepl_31bf3856ad364e35_6.1.7600.16385_none_e9dfd464f0c2ad1f\comrepl.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7601.17514_none_6720a9d733702c85\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.1.7600.16385_none_64ef960f3681a8eb\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-browserballot_31bf3856ad364e35_6.1.7600.16526_none_62283b15ce321cd0\browserchoice.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bootconfig_31bf3856ad364e35_6.1.7600.16385_none_0becd32d7b9ba9e5\bootcfg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-blb-cli-main_31bf3856ad364e35_6.1.7600.16385_none_4b2b3343f0594dd2\wbadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bits-bitsadmin_31bf3856ad364e35_6.1.7601.17514_none_4f18faed6aae2509\bitsadmin.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-bcdboot-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_635d4e809c667f99\bcdboot.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.1.7600.16385_none_17330d9420bf24e8\expand.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-b..vironment-servicing_31bf3856ad364e35_6.1.7601.17514_none_281beb1e03d68b9b\bfsvc.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-b..iondata-cmdlinetool_31bf3856ad364e35_6.1.7601.17514_none_8a3266b1036db956\bcdedit.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7601.17514_none_d90cb8d0cf2f6362\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-axinstallservice_31bf3856ad364e35_6.1.7600.16385_none_d6dba508d240dfc8\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-autochkconfigurator_31bf3856ad364e35_6.1.7600.16385_none_1898d1bbe9180b39\chkntfs.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-authentication-logonui_31bf3856ad364e35_6.1.7601.17514_none_679a7c79d17ac3bd\LogonUI.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-atbroker_31bf3856ad364e35_6.1.7600.16385_none_cf7705f47fa8cd65\AtBroker.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_59537a3710696511\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.17514_none_59537a3710696511\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_5722666f137ae177\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_5722666f137ae177\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-alg_31bf3856ad364e35_6.1.7600.16385_none_a8bfa843bc721ead\alg.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-adaptertroubleshooter_31bf3856ad364e35_6.1.7600.16385_none_d1d79dd7e49a786f\AdapterTroubleshooter.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-acluifilefoldercomtool_31bf3856ad364e35_6.1.7600.16385_none_58257acb668f62bc\cacls.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ion-telemetry-agent_31bf3856ad364e35_6.1.7601.17514_none_d473bbc8c4e38fd5\aitagent.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ime-upgrade-results_31bf3856ad364e35_6.1.7601.17514_none_c5bfe28f89b5e534\WindowsAnytimeUpgradeResults.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7601.17514_none_d7186da9aafbefce\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.20591_none_d562277ec736bfba\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.16481_none_d4e35a9fae1103ff\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.1.7600.16385_none_d4e759e1ae0d6c34\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_339cdc37847a979b\pcalua.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..atibility-assistant_31bf3856ad364e35_6.1.7600.16385_none_339cdc37847a979b\pcawrk.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.1.7600.16385_none_81d82fe9c216eb89\pcaui.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_mcupdate_31bf3856ad364e35_6.1.7601.17514_none_caa43bab0a1077a3\mcupdate.exe is infected with W32.Xpiro.B
C:\Windows\winsxs\x86_eventviewersettings_31bf3856ad364e35_6.1.7600.16385_none_f4ce2e2a6506b973\eventvwr.exe is infected with W32.Xpiro.B
C:\Windows\System32\AdapterTroubleshooter.exe is infected with W32.Xpiro.B
C:\Windows\System32\aitagent.exe is infected with W32.Xpiro.B
C:\Windows\System32\alg.exe is infected with W32.Xpiro.B
C:\Windows\System32\appidcertstorecheck.exe is infected with W32.Xpiro.B
C:\Windows\System32\appidpolicyconverter.exe is infected with W32.Xpiro.B
C:\Windows\System32\ARP.EXE is infected with W32.Xpiro.B
C:\Windows\System32\at.exe is infected with W32.Xpiro.B
C:\Windows\System32\AtBroker.exe is infected with W32.Xpiro.B
C:\Windows\System32\atiapfxx.exe is infected with W32.Xpiro.B
C:\Windows\System32\atibtmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\ATIODCLI.exe is infected with W32.Xpiro.B
C:\Windows\System32\ATIODE.exe is infected with W32.Xpiro.B
C:\Windows\System32\attrib.exe is infected with W32.Xpiro.B
C:\Windows\System32\auditpol.exe is infected with W32.Xpiro.B
C:\Windows\System32\AxInstUI.exe is infected with W32.Xpiro.B
C:\Windows\System32\baaupdate.exe is infected with W32.Xpiro.B
C:\Windows\System32\bcdboot.exe is infected with W32.Xpiro.B
C:\Windows\System32\bcdedit.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeHdCfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeUISrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\BdeUnlockWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\BitLockerWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\BitLockerWizardElev.exe is infected with W32.Xpiro.B
C:\Windows\System32\bitsadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\bootcfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\bridgeunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\browserchoice.exe is infected with W32.Xpiro.B
C:\Windows\System32\bthudtask.exe is infected with W32.Xpiro.B
C:\Windows\System32\cacls.exe is infected with W32.Xpiro.B
C:\Windows\System32\CertEnrollCtrl.exe is infected with W32.Xpiro.B
C:\Windows\System32\certutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\change.exe is infected with W32.Xpiro.B
C:\Windows\System32\charmap.exe is infected with W32.Xpiro.B
C:\Windows\System32\chglogon.exe is infected with W32.Xpiro.B
C:\Windows\System32\chgport.exe is infected with W32.Xpiro.B
C:\Windows\System32\chgusr.exe is infected with W32.Xpiro.B
C:\Windows\System32\chkdsk.exe is infected with W32.Xpiro.B
C:\Windows\System32\chkntfs.exe is infected with W32.Xpiro.B
C:\Windows\System32\choice.exe is infected with W32.Xpiro.B
C:\Windows\System32\cipher.exe is infected with W32.Xpiro.B
C:\Windows\System32\cleanmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\cliconfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\clip.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmd.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmdkey.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmdl32.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmmon32.exe is infected with W32.Xpiro.B
C:\Windows\System32\cmstp.exe is infected with W32.Xpiro.B
C:\Windows\System32\cofire.exe is infected with W32.Xpiro.B
C:\Windows\System32\colorcpl.exe is infected with W32.Xpiro.B
C:\Windows\System32\comp.exe is infected with W32.Xpiro.B
C:\Windows\System32\compact.exe is infected with W32.Xpiro.B
C:\Windows\System32\CompMgmtLauncher.exe is infected with W32.Xpiro.B
C:\Windows\System32\ComputerDefaults.exe is infected with W32.Xpiro.B
C:\Windows\System32\control.exe is infected with W32.Xpiro.B
C:\Windows\System32\convert.exe is infected with W32.Xpiro.B
C:\Windows\System32\credwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\cscript.exe is infected with W32.Xpiro.B
C:\Windows\System32\csrstub.exe is infected with W32.Xpiro.B
C:\Windows\System32\ctfmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\cttune.exe is infected with W32.Xpiro.B
C:\Windows\System32\cttunesvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dccw.exe is infected with W32.Xpiro.B
C:\Windows\System32\dcomcnfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\ddodiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\Defrag.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceDisplayObjectProvider.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceEject.exe is infected with W32.Xpiro.B
C:\Windows\System32\DevicePairingWizard.exe is infected with W32.Xpiro.B
C:\Windows\System32\DeviceProperties.exe is infected with W32.Xpiro.B
C:\Windows\System32\DFDWiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\dfrgui.exe is infected with W32.Xpiro.B
C:\Windows\System32\dialer.exe is infected with W32.Xpiro.B
C:\Windows\System32\diantz.exe is infected with W32.Xpiro.B
C:\Windows\System32\dinotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskpart.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskperf.exe is infected with W32.Xpiro.B
C:\Windows\System32\diskraid.exe is infected with W32.Xpiro.B
C:\Windows\System32\Dism.exe is infected with W32.Xpiro.B
C:\Windows\System32\dispdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\DisplaySwitch.exe is infected with W32.Xpiro.B
C:\Windows\System32\djoin.exe is infected with W32.Xpiro.B
C:\Windows\System32\dllhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\dllhst3g.exe is infected with W32.Xpiro.B
C:\Windows\System32\dnscacheugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\doskey.exe is infected with W32.Xpiro.B
C:\Windows\System32\dpapimig.exe is infected with W32.Xpiro.B
C:\Windows\System32\DpiScaling.exe is infected with W32.Xpiro.B
C:\Windows\System32\dplaysvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dpnsvr.exe is infected with W32.Xpiro.B
C:\Windows\System32\dvdplay.exe is infected with W32.Xpiro.B
C:\Windows\System32\dvdupgrd.exe is infected with W32.Xpiro.B
C:\Windows\System32\DWWIN.EXE is infected with W32.Xpiro.B
C:\Windows\System32\dxdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\Eap3Host.exe is infected with W32.Xpiro.B
C:\Windows\System32\efsui.exe is infected with W32.Xpiro.B
C:\Windows\System32\esentutl.exe is infected with W32.Xpiro.B
C:\Windows\System32\eudcedit.exe is infected with W32.Xpiro.B
C:\Windows\System32\eventcreate.exe is infected with W32.Xpiro.B
C:\Windows\System32\eventvwr.exe is infected with W32.Xpiro.B
C:\Windows\System32\expand.exe is infected with W32.Xpiro.B
C:\Windows\System32\extrac32.exe is infected with W32.Xpiro.B
C:\Windows\System32\fc.exe is infected with W32.Xpiro.B
C:\Windows\System32\find.exe is infected with W32.Xpiro.B
C:\Windows\System32\findstr.exe is infected with W32.Xpiro.B
C:\Windows\System32\finger.exe is infected with W32.Xpiro.B
C:\Windows\System32\fixmapi.exe is infected with W32.Xpiro.B
C:\Windows\System32\fltMC.exe is infected with W32.Xpiro.B
C:\Windows\System32\fontview.exe is infected with W32.Xpiro.B
C:\Windows\System32\forfiles.exe is infected with W32.Xpiro.B
C:\Windows\System32\fsutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\ftp.exe is infected with W32.Xpiro.B
C:\Windows\System32\fvenotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\fveprompt.exe is infected with W32.Xpiro.B
C:\Windows\System32\FXSCOVER.exe is infected with W32.Xpiro.B
C:\Windows\System32\FXSUNATD.exe is infected with W32.Xpiro.B
C:\Windows\System32\GettingStarted.exe is infected with W32.Xpiro.B
C:\Windows\System32\gpscript.exe is infected with W32.Xpiro.B
C:\Windows\System32\gpupdate.exe is infected with W32.Xpiro.B
C:\Windows\System32\grpconv.exe is infected with W32.Xpiro.B
C:\Windows\System32\hdwwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\help.exe is infected with W32.Xpiro.B
C:\Windows\System32\HOSTNAME.EXE is infected with W32.Xpiro.B
C:\Windows\System32\hwrcomp.exe is infected with W32.Xpiro.B
C:\Windows\System32\hwrreg.exe is infected with W32.Xpiro.B
C:\Windows\System32\icacls.exe is infected with W32.Xpiro.B
C:\Windows\System32\icsunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\ie4uinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\ieUnatt.exe is infected with W32.Xpiro.B
C:\Windows\System32\iexpress.exe is infected with W32.Xpiro.B
C:\Windows\System32\InfDefaultInstall.exe is infected with W32.Xpiro.B
C:\Windows\System32\ipconfig.exe is infected with W32.Xpiro.B
C:\Windows\System32\irftp.exe is infected with W32.Xpiro.B
C:\Windows\System32\iscsicli.exe is infected with W32.Xpiro.B
C:\Windows\System32\iscsicpl.exe is infected with W32.Xpiro.B
C:\Windows\System32\isoburn.exe is infected with W32.Xpiro.B
C:\Windows\System32\klist.exe is infected with W32.Xpiro.B
C:\Windows\System32\ksetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\ktmutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\label.exe is infected with W32.Xpiro.B
C:\Windows\System32\LocationNotifications.exe is infected with W32.Xpiro.B
C:\Windows\System32\lodctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\logagent.exe is infected with W32.Xpiro.B
C:\Windows\System32\logman.exe is infected with W32.Xpiro.B
C:\Windows\System32\logoff.exe is infected with W32.Xpiro.B
C:\Windows\System32\LogonUI.exe is infected with W32.Xpiro.B
C:\Windows\System32\lpksetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\lpremove.exe is infected with W32.Xpiro.B
C:\Windows\System32\makecab.exe is infected with W32.Xpiro.B
C:\Windows\System32\manage-bde.exe is infected with W32.Xpiro.B
C:\Windows\System32\mblctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\mcbuilder.exe is infected with W32.Xpiro.B
C:\Windows\System32\mctadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\MdRes.exe is infected with W32.Xpiro.B
C:\Windows\System32\MdSched.exe is infected with W32.Xpiro.B
C:\Windows\System32\mfpmp.exe is infected with W32.Xpiro.B
C:\Windows\System32\mmc.exe is infected with W32.Xpiro.B
C:\Windows\System32\mobsync.exe is infected with W32.Xpiro.B
C:\Windows\System32\mountvol.exe is infected with W32.Xpiro.B
C:\Windows\System32\mpnotify.exe is infected with W32.Xpiro.B
C:\Windows\System32\MRINFO.EXE is infected with W32.Xpiro.B
C:\Windows\System32\msconfig.exe is infected with W32.Xpiro.B
C:\Windows\System32\msdt.exe is infected with W32.Xpiro.B
C:\Windows\System32\msdtc.exe is infected with W32.Xpiro.B
C:\Windows\System32\msfeedssync.exe is infected with W32.Xpiro.B
C:\Windows\System32\msg.exe is infected with W32.Xpiro.B
C:\Windows\System32\mshta.exe is infected with W32.Xpiro.B
C:\Windows\System32\msiexec.exe is infected with W32.Xpiro.B
C:\Windows\System32\msinfo32.exe is infected with W32.Xpiro.B
C:\Windows\System32\msra.exe is infected with W32.Xpiro.B
C:\Windows\System32\mstsc.exe is infected with W32.Xpiro.B
C:\Windows\System32\mtstocom.exe is infected with W32.Xpiro.B
C:\Windows\System32\MuiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\MultiDigiMon.exe is infected with W32.Xpiro.B
C:\Windows\System32\NAPSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\nbtstat.exe is infected with W32.Xpiro.B
C:\Windows\System32\ndadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\net.exe is infected with W32.Xpiro.B
C:\Windows\System32\net1.exe is infected with W32.Xpiro.B
C:\Windows\System32\netbtugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\netcfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\netiougc.exe is infected with W32.Xpiro.B
C:\Windows\System32\Netplwiz.exe is infected with W32.Xpiro.B
C:\Windows\System32\NetProj.exe is infected with W32.Xpiro.B
C:\Windows\System32\netsh.exe is infected with W32.Xpiro.B
C:\Windows\System32\NETSTAT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\newdev.exe is infected with W32.Xpiro.B
C:\Windows\System32\nltest.exe is infected with W32.Xpiro.B
C:\Windows\System32\notepad.exe is infected with W32.Xpiro.B
C:\Windows\System32\nslookup.exe is infected with W32.Xpiro.B
C:\Windows\System32\ntprint.exe is infected with W32.Xpiro.B
C:\Windows\System32\ntvdm.exe is infected with W32.Xpiro.B
C:\Windows\System32\ocsetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\odbcad32.exe is infected with W32.Xpiro.B
C:\Windows\System32\odbcconf.exe is infected with W32.Xpiro.B
C:\Windows\System32\OptionalFeatures.exe is infected with W32.Xpiro.B
C:\Windows\System32\p2phost.exe is infected with W32.Xpiro.B
C:\Windows\System32\PATHPING.EXE is infected with W32.Xpiro.B
C:\Windows\System32\pcalua.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcaui.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcawrk.exe is infected with W32.Xpiro.B
C:\Windows\System32\pcwrun.exe is infected with W32.Xpiro.B
C:\Windows\System32\perfmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\PING.EXE is infected with W32.Xpiro.B
C:\Windows\System32\PkgMgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\plasrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\PnPUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\PnPutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\powercfg.exe is infected with W32.Xpiro.B
C:\Windows\System32\prevhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\print.exe is infected with W32.Xpiro.B
C:\Windows\System32\PrintBrmUi.exe is infected with W32.Xpiro.B
C:\Windows\System32\printfilterpipelinesvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\PrintIsolationHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\printui.exe is infected with W32.Xpiro.B
C:\Windows\System32\proquota.exe is infected with W32.Xpiro.B
C:\Windows\System32\PushPrinterConnections.exe is infected with W32.Xpiro.B
C:\Windows\System32\qappsrv.exe is infected with W32.Xpiro.B
C:\Windows\System32\qprocess.exe is infected with W32.Xpiro.B
C:\Windows\System32\query.exe is infected with W32.Xpiro.B
C:\Windows\System32\quser.exe is infected with W32.Xpiro.B
C:\Windows\System32\qwinsta.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasautou.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasdial.exe is infected with W32.Xpiro.B
C:\Windows\System32\raserver.exe is infected with W32.Xpiro.B
C:\Windows\System32\rasphone.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpclip.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpshell.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdpsign.exe is infected with W32.Xpiro.B
C:\Windows\System32\rdrleakdiag.exe is infected with W32.Xpiro.B
C:\Windows\System32\RDVGHelper.exe is infected with W32.Xpiro.B
C:\Windows\System32\ReAgentc.exe is infected with W32.Xpiro.B
C:\Windows\System32\recdisc.exe is infected with W32.Xpiro.B
C:\Windows\System32\recover.exe is infected with W32.Xpiro.B
C:\Windows\System32\reg.exe is infected with W32.Xpiro.B
C:\Windows\System32\regedt32.exe is infected with W32.Xpiro.B
C:\Windows\System32\regini.exe is infected with W32.Xpiro.B
C:\Windows\System32\RegisterIEPKEYs.exe is infected with W32.Xpiro.B
C:\Windows\System32\regsvr32.exe is infected with W32.Xpiro.B
C:\Windows\System32\relog.exe is infected with W32.Xpiro.B
C:\Windows\System32\RelPost.exe is infected with W32.Xpiro.B
C:\Windows\System32\repair-bde.exe is infected with W32.Xpiro.B
C:\Windows\System32\replace.exe is infected with W32.Xpiro.B
C:\Windows\System32\reset.exe is infected with W32.Xpiro.B
C:\Windows\System32\resmon.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_isv.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_ssp.exe is infected with W32.Xpiro.B
C:\Windows\System32\RMActivate_ssp_isv.exe is infected with W32.Xpiro.B
C:\Windows\System32\RmClient.exe is infected with W32.Xpiro.B
C:\Windows\System32\Robocopy.exe is infected with W32.Xpiro.B
C:\Windows\System32\ROUTE.EXE is infected with W32.Xpiro.B
C:\Windows\System32\RpcPing.exe is infected with W32.Xpiro.B
C:\Windows\System32\rrinstaller.exe is infected with W32.Xpiro.B
C:\Windows\System32\rstrui.exe is infected with W32.Xpiro.B
C:\Windows\System32\runas.exe is infected with W32.Xpiro.B
C:\Windows\System32\rundll32.exe is infected with W32.Xpiro.B
C:\Windows\System32\RunLegacyCPLElevated.exe is infected with W32.Xpiro.B
C:\Windows\System32\runonce.exe is infected with W32.Xpiro.B
C:\Windows\System32\rwinsta.exe is infected with W32.Xpiro.B
C:\Windows\System32\sbunattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\sc.exe is infected with W32.Xpiro.B
C:\Windows\System32\schtasks.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdbinst.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdchange.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdclt.exe is infected with W32.Xpiro.B
C:\Windows\System32\sdiagnhost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SearchFilterHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SearchProtocolHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\SecEdit.exe is infected with W32.Xpiro.B
C:\Windows\System32\secinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\sethc.exe is infected with W32.Xpiro.B
C:\Windows\System32\SetIEInstalledDate.exe is infected with W32.Xpiro.B
C:\Windows\System32\setspn.exe is infected with W32.Xpiro.B
C:\Windows\System32\setupSNK.exe is infected with W32.Xpiro.B
C:\Windows\System32\setupugc.exe is infected with W32.Xpiro.B
C:\Windows\System32\setx.exe is infected with W32.Xpiro.B
C:\Windows\System32\sfc.exe is infected with W32.Xpiro.B
C:\Windows\System32\shadow.exe is infected with W32.Xpiro.B
C:\Windows\System32\shrpubw.exe is infected with W32.Xpiro.B
C:\Windows\System32\shutdown.exe is infected with W32.Xpiro.B
C:\Windows\System32\sigverif.exe is infected with W32.Xpiro.B
C:\Windows\System32\slui.exe is infected with W32.Xpiro.B
C:\Windows\System32\snmptrap.exe is infected with W32.Xpiro.B
C:\Windows\System32\sort.exe is infected with W32.Xpiro.B
C:\Windows\System32\SoundRecorder.exe is infected with W32.Xpiro.B
C:\Windows\System32\sppsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\spreview.exe is infected with W32.Xpiro.B
C:\Windows\System32\subst.exe is infected with W32.Xpiro.B
C:\Windows\System32\sxstrace.exe is infected with W32.Xpiro.B
C:\Windows\System32\SyncHost.exe is infected with W32.Xpiro.B
C:\Windows\System32\syskey.exe is infected with W32.Xpiro.B
C:\Windows\System32\systeminfo.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesAdvanced.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesComputerName.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesHardware.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesPerformance.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesProtection.exe is infected with W32.Xpiro.B
C:\Windows\System32\SystemPropertiesRemote.exe is infected with W32.Xpiro.B
C:\Windows\System32\systray.exe is infected with W32.Xpiro.B
C:\Windows\System32\tabcal.exe is infected with W32.Xpiro.B
C:\Windows\System32\takeown.exe is infected with W32.Xpiro.B
C:\Windows\System32\TapiUnattend.exe is infected with W32.Xpiro.B
C:\Windows\System32\taskmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\tcmsetup.exe is infected with W32.Xpiro.B
C:\Windows\System32\TCPSVCS.EXE is infected with W32.Xpiro.B
C:\Windows\System32\timeout.exe is infected with W32.Xpiro.B
C:\Windows\System32\tracerpt.exe is infected with W32.Xpiro.B
C:\Windows\System32\TRACERT.EXE is infected with W32.Xpiro.B
C:\Windows\System32\tscon.exe is infected with W32.Xpiro.B
C:\Windows\System32\tsdiscon.exe is infected with W32.Xpiro.B
C:\Windows\System32\tskill.exe is infected with W32.Xpiro.B
C:\Windows\System32\TSTheme.exe is infected with W32.Xpiro.B
C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe is infected with W32.Xpiro.B
C:\Windows\System32\TSWbPrxy.exe is infected with W32.Xpiro.B
C:\Windows\System32\typeperf.exe is infected with W32.Xpiro.B
C:\Windows\System32\tzutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\ucsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\UI0Detect.exe is infected with W32.Xpiro.B
C:\Windows\System32\unlodctr.exe is infected with W32.Xpiro.B
C:\Windows\System32\unregmp2.exe is infected with W32.Xpiro.B
C:\Windows\System32\upnpcont.exe is infected with W32.Xpiro.B
C:\Windows\System32\UserAccountControlSettings.exe is infected with W32.Xpiro.B
C:\Windows\System32\userinit.exe is infected with W32.Xpiro.B
C:\Windows\System32\Utilman.exe is infected with W32.Xpiro.B
C:\Windows\System32\VaultCmd.exe is infected with W32.Xpiro.B
C:\Windows\System32\VaultSysUi.exe is infected with W32.Xpiro.B
C:\Windows\System32\vds.exe is infected with W32.Xpiro.B
C:\Windows\System32\vdsldr.exe is infected with W32.Xpiro.B
C:\Windows\System32\verclsid.exe is infected with W32.Xpiro.B
C:\Windows\System32\verifier.exe is infected with W32.Xpiro.B
C:\Windows\System32\vmicsvc.exe is infected with W32.Xpiro.B
C:\Windows\System32\vssadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\VSSVC.exe is infected with W32.Xpiro.B
C:\Windows\System32\w32tm.exe is infected with W32.Xpiro.B
C:\Windows\System32\waitfor.exe is infected with W32.Xpiro.B
C:\Windows\System32\wbadmin.exe is infected with W32.Xpiro.B
C:\Windows\System32\wecutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\WerFault.exe is infected with W32.Xpiro.B
C:\Windows\System32\WerFaultSecure.exe is infected with W32.Xpiro.B
C:\Windows\System32\wermgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\wevtutil.exe is infected with W32.Xpiro.B
C:\Windows\System32\wextract.exe is infected with W32.Xpiro.B
C:\Windows\System32\WFS.exe is infected with W32.Xpiro.B
C:\Windows\System32\where.exe is infected with W32.Xpiro.B
C:\Windows\System32\whoami.exe is infected with W32.Xpiro.B
C:\Windows\System32\wiaacmgr.exe is infected with W32.Xpiro.B
C:\Windows\System32\wimserv.exe is infected with