W32.HLLW.Oror - Goggles(eng).exe (B)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.HLLW.Oror

Sender:

Varies.  Usually someone you know. (gen)
will be one of the following strings:
alex15
alice
amanda
angel_f
baby_17
badboy
badgirl
blade
blue16
bryan16
candy_f
crazy
CrazyGirl
dave
dreamy
happy
iguana17
jane17
jerry
lady_f
linda1
mellany
mickey
monica
neo
nicole
panda_f
rap_girl
sunny
trish1
tweety
wizzard
and then followed by one of the these:
aol.com (C)
europe.com
hotmail.com
mail.com
support@mcafee.com (AG)
usa.net
yahoo.com
yahoo.co.uk

Subject:

aBcDeFgHiJkLmNoPqRsT..
Bla Bla
Blondies Forever :)
Blondinkii:)
Don't cry
HeY :)
HeY..
Hi!!
Hi BaBy :)
Liubofta e kato Rai, no moje da boli kato Ad
LOVE is like HEAVEN but it can hurt like HELL.
Miracle
Ohoo!!
Pisamce
TinKi WinKy!!
Vajno!!
Very Important
WoWoWoWOWowo..
yoOo ;) (gen)
Zdrasti..
ZzZz :)
or
will be one of these:
Bla Bla
Boom
Ei
Happy
Hello
Hey
HeY
Hey Ya
Hi Again
Hi There
HoWie
Just A Letter
Ohoo
Pisamce
Privet
TinKi WinKy
Wow
Zdr Otnovo
Zdrasti
ZzZz
and then followed by one of these:
..
!!
:)
;))
:pP
~pPp
:>
!
;) (C)
Microsoft Bulgaria_ (B)
Vajno_ (B)
Virus Alert_ (B)
WinAmp Team_ (B)
Yahoo! Toolbar_ (B)

Message:

Due to the significant increase of viruses exploiting this
vulnerability,McAfee Antivirus supports clients of Microsoft Windows
withpatch, whichfixes this bug in Internet Explorer 5.5 and minor
versions. Customers whohave applied this patch are already protected
against the vulnerabilityand do not need to take additional action.
(AG)
Hello, if you are reading this letter, it means that a friend of
yours has sent it to you.The idea is to help you realize who you are
indeed. This is an interactive variant, based onthe original tests of
Dhalai Lama, a great indian philosopher. Before you open the test,
youshould make a wish. Answer to the 5 questions honestly, after that
you will recieve a number.If you want your wish to come true you must
send this letter to that count of your friends.You can make the test
only once, because after that the results won't be real. "If you
wantto enter the other's world, you should explore your soul first" -
Dhalai Lama.
Hi, mTV fans. We rely on you, our biggest friends to help us choose
together the bestsongs for the beginning of the year. Our new
suggestions are:
Avril Lavigne - I'm With You
Eminem - Lose Yourself
Foo Fighters - All My Life
Jay Z - Bonnie & Clyde
J.Lo ft. Lox - Jenny From The Block
Robbie Williams - Feel
T.A.T.U - All The Things She Said
Ima nov opasen virus v neta! Razprostranqva se predimno po IRC i
ICQ.Vnimavai da ne se zarazish, zashtoto iztriva Mp3-ki, Filmi i
Dokumenti. Izpratih ti patch,koqto shte te zashtiti ot zarazqvane.
Iskah da napisha po-dulgo pismo, no nqmah vreme, sorka:( Naposledak
imam adski mnogo rabota nalqvo nadqsno :)) Inache kak varvi? Aide
doskoro iwatch out :))
I've just found this program, and, I don't know why... but it
reminded me of you.I read this there. There are cool ideas,
especially about lOvE. i like it, but let's talkabout you? Are you
oK? Are you in love :))) I'm waiting for the replyyy :)) bye ~pPpP
McAfee Antivirus warns about several new viruses exploiting Microsoft
Internet Explorer. They register themselves as ActiveX controls and
subsequently grant access to the local resources of the visitors.
This type of internet viruses is very dangerous, because they delete
various files of the operating system.
Surprise! You've just received a Yahoo! Greeting from "(username)"
((useremail))!This is an interactive greeting card and requires Flash
Media Player. Enjoy! The Yahoo!Greetings Team. (C)
You can vote with the attached web client, or you can also visit our
web site for acomplete list of the singers and their hits. (AG)
Zdr, izpratih na vsichki edna programka, mnoo qka, btw to imeto si
pokazva. Subject-a e ottam i ima i drugi mnogo qki misli. Moje da
pokaje nai-podhodqshtiq partnior v liubofta :))Ujasno e kak liubofta
moje da ubie vsichko v teb.. Za shtastie ne vinagi e taka :) Bye !!
and many others
Variant B adds one of the following addendums:
P.S. Hvarli edno oko na (website constructed by the worm) :))
P.S. Bqgai na (website constructed by the worm) mnoo zdravo flash4e
ima :pP
P.S. Be happy, don't worry ~pPp. Check this - (website constructed by
the worm) Cool :))
P.S. Have you visited (website constructed by the worm) :) Co0l :))

Attachment:

ACDSee3.0.exe (B)
ACDSee7.1 Full.exe (B)
ACDSee5.5.exe (B)
ACDSee(Cracked).exe (B)
ACDSee(Eng).exe (B)
ACDSee(zip).exe (B)
Actu002_(eng).exe (C)
Actu002_(eng).scr (C)
Actu002_(sHow).exe (C)
Actu002_(sHow).scr (C)
Actu002_2.3.exe (C)
Actu002_2,3.scr (C)
Actu002_3D.exe (C)
Actu002_3D.scr (C)
Anal Explorer3D.exe (B)
Anal Explorer3.0.exe (B)
Anal Explorer4.5.exe (B)
Anal Explorer(Eng).exe (B)
Anal Explorer(sHow).exe (B)
Anal Explorer(Rated).exe (B)
Angel3D_(eng).exe (C)
Angel3D_(eng).scr (C)
Angel3D_(sHow).exe (C)
Angel3D_(sHow).scr (C)
Angel3D_2.3.exe (C)
Angel3D_2.3.scr (C)
Angel3D_3D.exe (C)
Angel3D_3D.scr (C)
BabyBlue(eng).exe (C)
BabyBlue(eng).scr (C)
BabyBlue(sHow).exe (C)
BabyBlue(sHow).scr (C)
BabyBlue2.3.exe (C)
BabyBlue2.3.scr (C)
BabyBlue3D.exe (C)
BabyBlue3D.scr (C)
Blondies.exe (gen)
BoxDave_2.3.exe (C)
BoxDave_2.3.scr (C)
BoxDave_3D.exe (C)
BoxDave_3D.scr (C)
BoxDave_(Eng).exe (C)
BoxDave_(Eng).scr (C)
BoxDave_(sHow).exe (C)
BoxDave_(sHow).scr (C)
BritneySuxx3D.exe (B)
BritneySuxx3.0.exe (B)
BritneySuxx4.5.exe (B)
BritneySuxx(Eng).exe (B)
BritneySuxx(sHow).exe (B)
BritneySuxx(Rated).exe (B)
BritneyUltimate3D.exe (B)
BritneyUltimate3.0.exe (B)
BritneyUltimate4.5.exe (B)
BritneyUltimate(Eng).exe (B)
BritneyUltimate(sHow).exe (B)
BritneyUltimate(Rated).exe (B)
Candy.exe (gen)
Chess(eng).exe (C)
Chess(eng).scr (C)
Chess(sHow).exe (C)
Chess(sHow).scr (C)
Chess2.3.exe (C)
Chess2.3.scr (C)
Chess3D.exe (C)
Chess3D.scr (C)
Chess(zip).exe (B)
Chess_v1.1.exe (B)
Chess_zip.exe (B)
ClubExtreme(eng).exe (B)
ClubExtreme(sHow).exe (B)
ClubExtreme(zip).exe (B)
ClubExtreme_v1.1.exe (B)
ClubExtreme_zip.exe (B)
ClubExtreme2.3.exe (B)
ClubExtreme3D.exe (B)
Counter Strike 1.5 (Editor)3.0.exe (B)
Counter Strike 1.5 (Editor)7.1 Full.exe (B)
Counter Strike 1.5 (Editor)5.5.exe (B)
Counter Strike 1.5 (Editor)(Cracked).exe (B)
Counter Strike 1.5 (Editor)(Eng).exe (B)
Counter Strike 1.5 (Editor)(zip).exe (B)
cRedit_CarDs_gEn3.0.exe (B)
cRedit_CarDs_gEn7.1 Full.exe (B)
cRedit_CarDs_gEnv5.5.exe (B)
cRedit_CarDs_gEn(Cracked).exe (B)
cRedit_CarDs_gEn(Eng).exe (B)
cRedit_CarDs_gEn(zip).exe (B)
Divx5.4 Bundle_3.0.exe (B)
Divx5.4 Bundle_7.1 Full.exe (B)
Divx5.4 Bundle_5.5.exe (B)
Divx5.4 Bundle_(Cracked).exe (B)
Divx5.4 Bundle_(Eng).exe (B)
Divx5.4 Bundle_(zip).exe (B)
DMXtHeMe2.3.exe (B)
DMXtHeMe3D.exe (B)
DMXtHeMe_v1.1.exe (B)
DMXtHeMe_zip.exe (B)
DMXtHeMe(eng).exe (B)
DMXtHeMe(sHow).exe (B)
DMXtHeMe(zip).exe (B)
DMXtHeMe7.1 Full.exe (B)
DMXtHeMev5.5.exe (B)
DMXtHeMe(cracked).exe (B)
Download Accelerator 5.5_3.0.exe (B)
Download Accelerator 5.5_7.1 Full.exe (B)
Download Accelerator 5.5_5.5.exe (B)
Download Accelerator 5.5_(Cracked).exe (B)
Download Accelerator 5.5_(Eng).exe (B)
Download Accelerator 5.5_(zip).exe (B)
Dreamweaver_5.0_Patch_3.0.exe (B)
Dreamweaver_5.0_Patch_7.1 Full.exe (B)
Dreamweaver_5.0_Patch_5.5.exe (B)
Dreamweaver_5.0_Patch_(Cracked).exe (B)
Dreamweaver_5.0_Patch_(Eng).exe (B)
Dreamweaver_5.0_Patch_(zip).exe (B)
Elfbowl(eng).exe (B)
Elfbowl(sHow).exe (B)
Elfbowl(zip).exe (B)
Elfbowl_v1.1.exe (B)
Elfbowl_zip.exe (B)
Elfbowl2.3.exe (B)
Elfbowl3D.exe (B)
EminemDesktop(eng).exe (B)
EminemDesktop(sHow).exe (B)
EminemDesktop(zip).exe (B)
EminemDesktop_v1.1.exe (B)
EminemDesktop_zip.exe (B)
EminemDesktop2.3.exe (B)
EminemDesktop3D.exe (B)
EminemDesktop30.exe (B)
EminemDesktopv5.5.exe (B)
EminemDesktop7.1 Full.exe (B)
Faith.exe (gen)
Fishfood(Eng).exe (C)
Fishfood(Eng).scr (C)
Fishfood(sHow).exe (C)
Fishfood(sHow).scr (C)
Fishfood2.3.exe (C)
Fishfood2.3.scr (C)
Fishfood3D.exe (C)
Fishfood3D.scr (C)
Fun.exe (gen)
Gipsy(eng).exe (B)
Gipsy(sHow).exe (B)
Gipsy(zip).exe (B)
Gipsy_v1.1.exe (B)
Gipsy_zip.exe (B)
Gipsy2.3.exe (B)
Gipsy3D.exe (B)
Goggles(eng).exe (B)
Goggles(sHow).exe (B)
Goggles(zip).exe (B)
Goggles_v1.1.exe (B)
Goggles_zip.exe (B)
Goggles2.3.exe (B)
Goggles3D.exe (B)
GTA 3 Bonus Cars(part1)_3.0.exe (B)
GTA 3 Bonus Cars(part1)_7.1 Full.exe (B)
GTA 3 Bonus Cars(part1)_v5.5.exe (B)
GTA 3 Bonus Cars(part1)_(Cracked).exe (B)
GTA 3 Bonus Cars(part1)_(Eng).exe (B)
GTA 3 Bonus Cars(part1)_(zip).exe (B)
Gypsy2.3.exe (C)
Gypsy2.3.scr (C)
Gypsy3D.exe (C)
Gypsy3D.scr (C)
Gypsy(Eng).exe (C)
Gypsy(Eng).scr (C)
Gypsy(sHow).exe (C)
Gypsy(sHow).scr (C)
Hot Blondies3D.exe (B)
Hot Blondies3.0.exe (B)
Hot Blondies4.5.exe (B)
Hot Blondies(Eng).exe (B)
Hot Blondies(sHow).exe (B)
Hot Blondies(Rated).exe (B)
Iguana(eng).exe (C)
Iguana(eng).scr (C)
Iguana(sHow).exe (C)
Iguana(sHow).scr (C)
Iguana2.3.exe (C)
Iguana2.3.scr (C)
Iguana3D.exe (C)
Iguana3D.scr (C)
install_en_(eng).exe (C)
install_en_(eng).scr (C)
install_en_(sHow).exe (C)
install_en_(sHow).scr (C)
install_en_2.3.exe (C)
install_en_2.3.scr (C)
install_en_3D.exe (C)
install_en_3D.scr (C)
install_en_(zip).exe (B)
install_en__v1.1.exe (B)
install_en__zip.exe (B)
Inter012_(eng).exe (C)
Inter012_(eng).scr (C)
Inter012_(sHow).exe (C)
Inter012_(sHow).scr (C)
Inter012_2.3.exe (C)
Inter012_2.3.scr (C)
Inter012_3D.exe (C)
Inter012_3D.scr (C)
Inter012_(zip).exe (B)
Inter012__v1.1.exe (B)
Inter012__zip.exe (B)
Kama Sutra.exe (gen)
KamaSutra2.3.exe (C)
KamaSutra2.3.scr (C)
KamaSutra3D.exe (C)
KamaSutra3D.scr (C)
KamaSutra(Eng).exe (C)
KamaSutra(Eng).scr (C)
KamaSutra(sHow).exe (C)
KamaSutra(sHow).scr (C)
KamaSutra30.exe (B)
KamaSutrav4.5.exe (B)
KamaSutra(Rated).exe (B)
KaZaA Media Desktop v2.0.8_3.0.exe (B)
KaZaA Media Desktop v2.0.8_7.1 Full.exe (B)
KaZaA Media Desktop v2.0.8_5.5.exe (B)
KaZaA Media Desktop v2.0.8_(Cracked).exe (B)
KaZaA Media Desktop v2.0.8_(Eng).exe (B)
KaZaA Media Desktop v2.0.8_(zip).exe (B)
LaFemmeNikita2.3.exe (C)
LaFemmeNikita2.3.scr (C)
LaFemmeNikita3D.exe (C)
LaFemmeNikita3D.scr (C)
LaFemmeNikita(Eng).exe (C)
LaFemmeNikita(Eng).scr (C)
LaFemmeNikita(sHow).exe (C)
LaFemmeNikita(sHow).scr (C)
LaFemmeNikita30.exe (B)
LaFemmeNikitav4.5.exe (B)
LaFemmeNikita(Rated).exe (B)
Lolita3D.exe (B)
Lolita3.0.exe (B)
Lolita4.5.exe (B)
Lolita(Eng).exe (B)
Lolita(sHow).exe (B)
Lolita(Rated).exe (B)
Love.exe (gen)
Love Zodiak.exe (gen)
Madonna Desktop3.0.exe (B)
Madonna Desktop7.1 Full.exe (B)
Madonna Desktop5.5.exe (B)
Madonna Desktop(Cracked).exe (B)
Madonna Desktop(Eng).exe (B)
Madonna Desktop(zip).exe (B)
Magic.exe (gen)
MeGa HACK3.0.exe (B)
MeGa HACK7.1 Full.exe (B)
MeGa HACKv5.5.exe (B)
MeGa HACK(Cracked).exe (B)
MeGa HACK(Eng).exe (B)
MeGa HACK(zip).exe (B)
mTV.exe (gen)
mTV Charts.exe (gen)
mTV_Charts_(eng).exe (C)
mTV_Charts_(eng).scr (C)
mTV_Charts_(sHow).exe (C)
mTV_Charts_(sHow).scr (C)
mTV_Charts_2.3.exe (C)
mTV_Charts_2.3.scr (C)
mTV_Charts_3D.exe (C)
mTV_Charts_3D.scr (C)
Nero Burning Rom 5.6.0.3_3.0.exe (B)
Nero Burning Rom 5.6.0.3_7.1 Full.exe (B)
Nero Burning Rom 5.6.0.3_5.5.exe (B)
Nero Burning Rom 5.6.0.3_(Cracked).exe (B)
Nero Burning Rom 5.6.0.3_(Eng).exe (B)
Nero Burning Rom 5.6.0.3_(zip).exe (B)
NFS 5 Bonus Cars_3.0.exe (B)
NFS 5 Bonus Cars_7.1 Full.exe (B)
NFS 5 Bonus Cars_5.5.exe (B)
NFS 5 Bonus Cars_(Cracked).exe (B)
NFS 5 Bonus Cars_(Eng).exe (B)
NFS 5 Bonus Cars_(zip).exe (B)
Osama Your Mamma.exe (gen)
Pam Anderson Theme3D.exe (B)
Pam Anderson Theme3.0.exe (B)
Pam Anderson Theme4.5.exe (B)
Pam Anderson Theme(Eng).exe (B)
Pam Anderson Theme(sHow).exe (B)
Pam Anderson Theme(Rated).exe (B)
Pamela.exe (gen)
Pamela3D_(Eng).exe (C)
Pamela3D_(Eng).scr (C)
Pamela3D_(sHow).exe (C)
Pamela3D_(sHow).scr (C)
Pamela3D_2.3.exe (C)
Pamela3D_2.3.scr (C)
Pamela3D_3D.exe (C)
Pamela3D_3D.scr (C)
Pamela3D_(Rated).exe (B)
Pamela3d_30.exe (B)
Pamela3d_v4.5.exe (B)
Panda Anti-Worm.exe (gen)
PcDudes2.3.exe (C)
PcDudes2.3.scr (C)
PcDudes3D.exe (C)
PcDudes3D.scr (C)
PcDudes(Eng).exe (C)
PcDudes(Eng).scr (C)
PcDudes(sHow).exe (C)
PcDudes(sHow).scr (C)
PcDudes(Rated).exe (B)
PcDudesv4.5.exe (B)
PcDudes3D.exe (B)
RedEyez(eng).exe (C)
RedEyez(eng).scr (C)
RedEyez(sHow).exe (C)
RedEyez(sHow).scr (C)
RedEyez2.3.exe (C)
RedEyez2.3.scr (C)
RedEyez3D.exe (C)
RedEyez3D.scr (C)
Serials 2K 7.2 (by SNTeam)_3.0.exe (B)
Serials 2K 7.2 (by SNTeam)_7.1 Full.exe (B)
Serials 2K 7.2 (by SNTeam)_5.5.exe (B)
Serials 2K 7.2 (by SNTeam)_(Cracked).exe (B)
Serials 2K 7.2 (by SNTeam)_(Eng).exe (B)
Serials 2K 7.2 (by SNTeam)_(zip).exe (B)
Serials2002_8.0(17.08.02)_3.0.exe (B)
Serials2002_8.0(17.08.02)_7.1 Full.exe (B)
Serials2002_8.0(17.08.02)_5.5.exe (B)
Serials2002_8.0(17.08.02)_(Cracked).exe (B)
Serials2002_8.0(17.08.02)_(Eng).exe (B)
Serials2002_8.0(17.08.02)_(zip).exe (B)
Setup.exe (gen)
Sex Spy3D.exe (B)
Sex Spy3.0.exe (B)
Sex Spy4.5.exe (B)
Sex Spy(Eng).exe (B)
Sex Spy(sHow).exe (B)
Sex Spy(Rated).exe (B)
Smile.exe (gen)
snowball_fight_(eng).exe (B)
snowball_fight_(sHow).exe (B)
snowball_fight_(zip).exe (B)
snowball_fight_2.3.exe (B)
snowball_fight_3D.exe (B)
snowball_fight__v1.1.exe (B)
snowball_fight__zip.exe (B)
Sorry.exe (gen)
sound_brake_(eng).exe (B)
sound_brake_(sHow).exe (B)
sound_brake_(zip).exe (B)
sound_brake__v1.1.exe (B)
sound_brake__zip.exe (B)
sound_brake_2.3.exe (B)
sound_brake_3D.exe (B)
Story017_(eng).exe (C)
Story017_(eng).scr (C)
Story017_(sHow).exe (C)
Story017_(sHow).scr (C)
Story017_2.3.exe (C)
Story017_2.3.scr (C)
Story017_3D.exe (C)
Story017_3D.scr (C)
Story017_(zip).exe (B)
Story017__v1.1 (B)
Story017__zip (B)
Strip Kournikova3D.exe (B)
Strip Kournikova3.0.exe (B)
Strip Kournikova4.5.exe (B)
Strip Kournikova(Eng).exe (B)
Strip Kournikova(sHow).exe (B)
Strip Kournikova(Rated).exe (B)
Teen Sex Cam3D.exe (B)
Teen Sex Cam3.0.exe (B)
Teen Sex Cam4.5.exe (B)
Teen Sex Cam(Eng).exe (B)
Teen Sex Cam(sHow).exe (B)
Teen Sex Cam(Rated).exe (B)
[TNT]!CC geN.exe (gen)
TNT!CC gEN.exe (gen)
VirtualRape3D.exe (B)
VirtualRape3.0.exe (B)
VirtualRape4.5.exe (B)
VirtualRape(Eng).exe (B)
VirtualRape(sHow).exe (B)
VirtualRape(Rated).exe (B)
WinAmp_3.2_Cool_3.0.exe (B)
WinAmp_3.2_Cool_7.1 Full.exe (B)
WinAmp_3.2_Cool_5.5.exe (B)
WinAmp_3.2_Cool_(Cracked).exe (B)
WinAmp_3.2_Cool_(Eng).exe (B)
WinAmp_3.2_Cool_(zip).exe (B)
Winzip8.2_3.0.exe (B)
Winzip8.2_7.1 Full.exe (B)
Winzip8.2_5.5.exe (B)
Winzip8.2_(Cracked).exe (B)
Winzip8.2_(Eng).exe (B)
Winzip8.2_(zip).exe (B)
WWF_The_ROCK(eng).exe (B)
WWF_The_ROCK(sHow).exe (B)
WWF_The_ROCK(zip).exe (B)
WWF_The_ROCK_v1.1.exe (B)
WWF_The_ROCK_zip.exe (B)
WWF_The_ROCK2.3.exe (B)
WWF_The_ROCK3D.exe (B)
Zip Password Recovery3.0.exe (B)
Zip Password Recovery7.1 Full.exe (B)
Zip Password Recoveryv5.5.exe (B)
Zip Password Recovery(Cracked).exe (B)
Zip Password Recovery(Eng).exe (B)
Zip Password Recovery(zip).exe (B)
Zodiak.exe (gen)

Comments: A mass-mailing worm that sends itself to all email senders that it finds in incomingmessages. The worm also spreads using mIRC, network shares, and mapped drives. It willattempt to close windows and delete files of various antivirus and firewall programs.

Symptoms:


 When run, displays a window that says: Your version of WinZip
Self-Extractor is not licensed, or the license information is missing
or corrupted (gen) 
 When run, displays a window with the word Windows in the title bar
that says: Cannot open file: it does not appear to be a valid program
(C) 
 Displays a window with the words Error Starting Program in the title
bar and the following message: The (filename) file expects a newer
version of Windows. (C)

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Reinstall Symantec antivirus product files if the worm deleted them.
Update the virus definitions, run a full system scan, and delete all files that are detected as W32.HLLW.Oror@mm.
Delete the value
LoadCurrentProfile Rundll16.exe powprof.dll,LoadCurrentUserProfile
from the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete from the following registry key any values that refer to any worm files:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Remove the text that the worm added to C:\Windows\Win.ini (Windows 95/98/Me only).
Delete the following files if they exist:C:\%windir%\Winfile.dll,C:\~msdos.---,C:\%windir%\Def12x.dll,C:\%windir%\Rn3a.vxd