%win_dir%\system32\igfxdl86.exe
%user_profile%\rwq.exe
%win_dir%\system32\drivers\sp_rsdrv2.sys
%user_profile%\local settings\temp\tmp181.exe