Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'aroinics_svc' = '<SYSTEM32>\CMD.EXE /C START %WINDIR%\epuwdpuejffy.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.html
- '<SYSTEM32>\cmd.exe' /c DEL <Full path to file>
- '%WINDIR%\epuwdpuejffy.exe'
- <SYSTEM32>\cmd.exe
- ecmd.exe
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Windows Media\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\Windows Media\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Identities\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Identities\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Identities\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Windows\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\Windows Media\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\Windows\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Microsoft\Windows\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\MMC\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\MMC\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\MMC\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Windows\Themes\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Windows\Themes\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Windows\Themes\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Address Book\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Address Book\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Address Book\_ReCoVeRy_+crjin.png
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.html
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.txt
- %APPDATA%\Identities\_ReCoVeRy_+crjin.png
- %APPDATA%\Identities\_ReCoVeRy_+crjin.html
- %APPDATA%\Identities\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Windows\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Cookies\_ReCoVeRy_+crjin.png
- %APPDATA%\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Cookies\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Favorites\Links\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Cookies\_ReCoVeRy_+crjin.html
- %APPDATA%\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\Firefox\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\_ReCoVeRy_+crjin.txt
- %APPDATA%\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Favorites\Links\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Favorites\Links\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Favorites\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Favorites\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Favorites\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Extensions\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\Extensions\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Extensions\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\Windows\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\Windows\_ReCoVeRy_+crjin.txt
- %APPDATA%\Microsoft\_ReCoVeRy_+crjin.png
- %APPDATA%\Microsoft\_ReCoVeRy_+crjin.html
- %APPDATA%\Microsoft\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\Firefox\Profiles\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\Firefox\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\_ReCoVeRy_+crjin.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\_ReCoVeRy_+crjin.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\Firefox\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\_ReCoVeRy_+crjin.html
- C:\Far2\Documentation\eng\_ReCoVeRy_+crjin.txt
- C:\Far2\Documentation\eng\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\XLat\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\XLat\Russian\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\XLat\Russian\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\XLat\Russian\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\XLat\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\XLat\_ReCoVeRy_+crjin.png
- C:\Far2\Encyclopedia\_ReCoVeRy_+crjin.png
- C:\Far2\Documentation\_ReCoVeRy_+crjin.html
- C:\Far2\Encyclopedia\_ReCoVeRy_+crjin.txt
- C:\Far2\FExcept\_ReCoVeRy_+crjin.png
- C:\Far2\Encyclopedia\_ReCoVeRy_+crjin.html
- C:\Far2\Documentation\_ReCoVeRy_+crjin.txt
- C:\Far2\Documentation\rus\_ReCoVeRy_+crjin.png
- C:\Far2\Documentation\eng\_ReCoVeRy_+crjin.html
- C:\Far2\Documentation\rus\_ReCoVeRy_+crjin.txt
- C:\Far2\Documentation\_ReCoVeRy_+crjin.png
- C:\Far2\Documentation\rus\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Colors\Default Highlighting\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\Colors\Custom Highlighting\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Colors\Default Highlighting\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\Colors\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\Colors\Default Highlighting\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Colors\Custom Highlighting\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\_ReCoVeRy_+crjin.png
- %HOMEPATH%\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\Colors\Custom Highlighting\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\SetUp\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\SetUp\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\Shell\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\Shell\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Shell\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\SetUp\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\Colors\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Colors\_ReCoVeRy_+crjin.txt
- C:\Far2\Addons\Macros\_ReCoVeRy_+crjin.png
- C:\Far2\Addons\Macros\_ReCoVeRy_+crjin.html
- C:\Far2\Addons\Macros\_ReCoVeRy_+crjin.txt
- C:\Far2\FExcept\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrd\console\contrib\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrd\console\contrib\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrd\console\contrib\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\hrd\console\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrd\console\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrc\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\hrc\auto\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrc\auto\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrc\auto\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\hrc\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrc\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Compare\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Compare\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\DrawLine\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Compare\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrd\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrd\console\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\hrd\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrd\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\arclite\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Align\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\arclite\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\AutoWrap\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\arclite\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Align\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\7-Zip\_ReCoVeRy_+crjin.png
- C:\Far2\FExcept\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\7-Zip\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Align\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\7-Zip\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\bin\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\bin\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\hrc\auto\types\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Colorer\hrc\auto\types\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Colorer\hrc\auto\types\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Colorer\bin\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\AutoWrap\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\AutoWrap\_ReCoVeRy_+crjin.txt
- C:\Far2\Plugins\Brackets\_ReCoVeRy_+crjin.png
- C:\Far2\Plugins\Brackets\_ReCoVeRy_+crjin.html
- C:\Far2\Plugins\Brackets\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\_ReCoVeRy_+crjin.html
- %HOMEPATH%\My Documents\Downloads\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\My Documents\Downloads\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\VMware\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\Mozilla\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\Mozilla\_ReCoVeRy_+crjin.png
- <LS_APPDATA>\Mozilla\_ReCoVeRy_+crjin.html
- <LS_APPDATA>\VMware\_ReCoVeRy_+crjin.txt
- <LS_APPDATA>\VMware\_ReCoVeRy_+crjin.png
- %TEMP%\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\History\_ReCoVeRy_+crjin.html
- %TEMP%\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.png
- %TEMP%\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\History\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\History\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.html
- %HOMEPATH%\My Documents\Downloads\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.png
- %HOMEPATH%\SendTo\_ReCoVeRy_+crjin.html
- %HOMEPATH%\SendTo\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Templates\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Templates\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Templates\_ReCoVeRy_+crjin.html
- %HOMEPATH%\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Start Menu\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\Programs\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\Programs\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Start Menu\Programs\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Start Menu\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Start Menu\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\My Received Files\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\My Documents\My Received Files\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\My Received Files\_ReCoVeRy_+crjin.html
- %HOMEPATH%\My Documents\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\My Documents\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\My Pictures\_ReCoVeRy_+crjin.html
- %HOMEPATH%\My Documents\My Music\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\My Documents\My Music\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\My Music\_ReCoVeRy_+crjin.html
- %HOMEPATH%\My Documents\My Pictures\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\My Documents\My Pictures\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Recent\_ReCoVeRy_+crjin.png
- %HOMEPATH%\PrintHood\_ReCoVeRy_+crjin.html
- %HOMEPATH%\Recent\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\SendTo\_ReCoVeRy_+crjin.png
- %HOMEPATH%\Recent\_ReCoVeRy_+crjin.html
- %HOMEPATH%\PrintHood\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\NetHood\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\_ReCoVeRy_+crjin.html
- %HOMEPATH%\NetHood\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\PrintHood\_ReCoVeRy_+crjin.png
- %HOMEPATH%\NetHood\_ReCoVeRy_+crjin.html
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Application Data\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Temp\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Temp\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\History\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\History\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Temp\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\History\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Cookies\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Cookies\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Cookies\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Favorites\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Favorites\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Favorites\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\SendTo\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\SendTo\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\SendTo\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Recent\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\PrintHood\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\PrintHood\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\PrintHood\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Recent\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Recent\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\My Documents\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\My Documents\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\NetHood\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\NetHood\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\NetHood\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\My Documents\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Local Settings\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Local Settings\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Local Settings\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Videos\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Videos\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Videos\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Pictures\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Pictures\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Favorites\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\DRM\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\DRM\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\DRM\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Favorites\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Favorites\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\_ReCoVeRy_+crjin.txt
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\wcspng[1].htm
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\_ReCoVeRy_+crjin.png
- %HOMEPATH%\My Documents\recover_file_jwxoyvptc.txt
- %WINDIR%\epuwdpuejffy.exe
- <Current directory>\_ReCoVeRy_+crjin.png
- <Current directory>\_ReCoVeRy_+crjin.html
- <Current directory>\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Music\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Music\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Templates\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Templates\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Templates\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\_ReCoVeRy_+crjin.html
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\_ReCoVeRy_+crjin.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\_ReCoVeRy_+crjin.png
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\Programs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Cookies\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Cookies\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Cookies\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temp\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temp\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\Temp\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\History\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\NetworkService\Local Settings\History\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Cookies\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Templates\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Templates\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Start Menu\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\Programs\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\Default User\Start Menu\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\Default User\Templates\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\Default User\Start Menu\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Cookies\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Temp\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\Temp\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Temp\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Cookies\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\History\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\History\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\History\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\_ReCoVeRy_+crjin.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\_ReCoVeRy_+crjin.png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\_ReCoVeRy_+crjin.html
- C:\Documents and Settings\LocalService\Local Settings\Application Data\_ReCoVeRy_+crjin.txt
- %WINDIR%\epuwdpuejffy.exe
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js.mp3
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak.mp3
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js.mp3
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css.mp3
- from %APPDATA%\Microsoft\Internet Explorer\brndlog.bak to %APPDATA%\Microsoft\Internet Explorer\brndlog.bak.mp3
- from %APPDATA%\Microsoft\Internet Explorer\brndlog.txt to %APPDATA%\Microsoft\Internet Explorer\brndlog.txt.mp3
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css.mp3
- 'sa####raining.com':80
- 'sh###ngfeng.cn':80
- 'co######reaknetworks.com':80
- 'te####hannel.com':80
- 'mu####randphone.com':80
- 'vt###shop.net':80
- http://sa####raining.com/wp-includes/theme-compat/wcspng.php
- http://sh###ngfeng.cn/images/lurd/wcspng.php
- http://co######reaknetworks.com/dev/wp-content/uploads/2015/07/wcspng.php
- http://te####hannel.com/wp-admin/maint/wcspng.php
- http://mu####randphone.com/wp-content/themes/storefront/wcspng.php
- http://vt###shop.net/wcspng.php
- DNS ASK sa####raining.com
- DNS ASK sh###ngfeng.cn
- DNS ASK co######reaknetworks.com
- DNS ASK te####hannel.com
- DNS ASK mu####randphone.com
- DNS ASK vt###shop.net