Originally posted by NeilAvent

The two which could help in this instance is FileMon And RegMon. They will record any Filesystem operations or Registry operations. So when you run the executable you will get a list of what files it reads/edits as well as what files it looks for but arnt actually there. You also get the same sort of response for the registry. [/B]
Does this save it into a log? Because if it doesn't it is pretty much useless as after this program deletes the Win.com file (and others) it shuts down you computer automatically, force quitting all open applications.