Pre-run Files Present


 ~~~ Program Files ~~~



 ~~~ Shortcuts ~~~



 ~~~ Favorites ~~~



 ~~~ system32 folder ~~~

wp.bmp
hookdump.exe
ole32vbs.exe
msole32.exe
hp***.tmp
logfiles


 ~~~ Windows directory ~~~

screen.html
sites.ini


 ~~~ Drive root ~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


   Post-run Files Present


 ~~~ Program Files ~~~



 ~~~ Shortcuts ~~~



 ~~~ Favorites ~~~



 ~~~ system32 folder ~~~



 ~~~ Windows directory ~~~



 ~~~ Drive root ~~~



 ~~~ Wininet.dll ~~~

wininet.dll INFECTED!! Starting replacement procedure.

 ~~~ Replaced wininet.dll from dllcache ~~~



 ~~~ Upon reboot ~~~

wininet.old present!
oleadm.dll not present!


 ~~~ Upon completion ~~~

wininet.old not present!
oleadm.dll not present!