FOR USERS

Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Encoder.13207

Added to the Dr.Web virus database: 2017-08-01

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\README.txt
Infects the following executable files:
  • C:\Far2\Plugins\ExtSearch\esearch.dll
  • C:\Far2\Plugins\EMenu\EMenu.dll
  • C:\Far2\Plugins\FileCase\FileCase.dll
  • C:\Far2\Plugins\FarCmds\FARCmds.dll
  • C:\Far2\Plugins\Compare\Compare.dll
  • C:\Far2\Plugins\Colorer\bin\colorer.dll
  • C:\Far2\Plugins\EditCase\EditCase.dll
  • C:\Far2\Plugins\DrawLine\DrawLine.dll
  • C:\Far2\Plugins\FTP\FarFtp.dll
  • C:\Far2\Plugins\ProcList\Proclist.dll
  • C:\Far2\Plugins\Network\Network.dll
  • C:\Far2\Plugins\WinSCP\WinSCP.dll
  • C:\Far2\Plugins\TmpPanel\TmpPanel.dll
  • C:\Far2\Plugins\FTP\lib\ftpProgress.fll
  • C:\Far2\Plugins\FTP\lib\ftpDirList.fll
  • C:\Far2\Plugins\MacroView\MacroView.dll
  • C:\Far2\Plugins\HlfViewer\HlfViewer.dll
  • C:\Far2\Plugins\7-Zip\7-ZipFar64.dll
  • C:\Far2\Plugins\7-Zip\7-ZipFar.dll
  • C:\Far2\Plugins\Align\Align.dll
  • C:\Far2\Plugins\7-Zip\7z.dll
  • C:\Far2\FExcept\demangle32.dll
  • C:\Far2\Far.exe
  • C:\Far2\FExcept\FExcept.dll
  • C:\Far2\FExcept\ExcDump.dll
  • C:\Far2\Plugins\arclite\7z.dll
  • C:\Far2\Plugins\arclite\arclite.dll
  • C:\Far2\Plugins\arclite\7zSD.sfx
  • C:\Far2\Plugins\Brackets\Brackets.dll
  • C:\Far2\Plugins\AutoWrap\AutoWrap.dll
  • C:\Far2\Plugins\arclite\7zCon.sfx
  • C:\Far2\Plugins\arclite\7z.sfx
  • C:\Far2\Plugins\arclite\7zS2con.sfx
  • C:\Far2\Plugins\arclite\7zS2.sfx
Malicious functions:
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Task Manager (Taskmgr)
Modifies file system:
Creates the following files:
  • C:\Muldrop\EyuSfbsdi.dqq_0
  • C:\Muldrop\EyuRfhEyq.dqq_0
  • C:\Muldrop\EyuSfbsdiMjy.dqq_0
  • C:\Muldrop\EyuSfbsdi.iqq_0
  • C:\Muldrop\EyuMfov.dqq_0
  • C:\Muldrop\Eyfdvups.CMD.sfh_0
  • C:\Muldrop\Eyfdvups.4NT.sfh_0
  • C:\Muldrop\EyuCmjqBpbse.dqq_0
  • C:\Muldrop\EyuCiCbtf.dqq_0
  • C:\Muldrop\FARCnetEoh.img_0
  • C:\Muldrop\FARCnet.nbq_0
  • C:\Muldrop\FARCnetRvt.img_0
  • C:\Muldrop\FARCnetEoh.moh_0
  • C:\Muldrop\FARCnet.emm_0
  • C:\Muldrop\F3.sfh_0
  • C:\Muldrop\EyuSfbsdiRfh.dqq_0
  • C:\Muldrop\F9Tbcmf.sfh_0
  • C:\Muldrop\F9DfbdujwbufMfov.sfh_0
  • C:\Muldrop\EydDvnq.emm_0
  • C:\Muldrop\ENG_READ.TXT_0
  • C:\Muldrop\ENG_NEWS.TXT_0
  • C:\Muldrop\eo_mjlf.sfh_0
  • C:\Muldrop\eomjlf.ise_0
  • C:\Muldrop\EMfovRvt.moh_0
  • C:\Muldrop\EMfovEoh.img_0
  • C:\Muldrop\EMfovDfm.sfh_0
  • C:\Muldrop\EMfovRvt.img_0
  • C:\Muldrop\EMfovEoh.moh_0
  • C:\Muldrop\ES_RUS.HLF_0
  • C:\Muldrop\ES_ENG.REG_0
  • C:\Muldrop\ES_RUS.REG_0
  • C:\Muldrop\ES_RUS.LNG_0
  • C:\Muldrop\ES_ENG.LNG_0
  • C:\Muldrop\epxompbet.trmjuf_0
  • C:\Muldrop\eo_mjlf.sfh_1
  • C:\Muldrop\ES_ENG.HLF_0
  • C:\Muldrop\ESEARCH.BAT_0
  • C:\Muldrop\FARCnetRvt.moh_0
  • C:\Muldrop\FpouCbdif3.0.0.0.ebu_0
  • C:\Muldrop\Fjmf_je.eja_0
  • C:\Muldrop\ftfbsdi.emm_0
  • C:\Muldrop\Fsff Hpunbjm.vsm_0
  • C:\Muldrop\FjmfCbtf.nbq_0
  • C:\Muldrop\FbsSqb.moh_0
  • C:\Muldrop\FbsRvt.moh_0
  • C:\Muldrop\FjmfCbtf.emm_0
  • C:\Muldrop\FEydfqu.emm_0
  • C:\Muldrop\FuqRvt.moh_0
  • C:\Muldrop\FuqRvt.img_0
  • C:\Muldrop\fyufotjpot.joj_0
  • C:\Muldrop\fyqpsu_dpmpst.cbu_0
  • C:\Muldrop\FuqEoh.moh_0
  • C:\Muldrop\FuqCnet.uyu_0
  • C:\Muldrop\ftfbsdi_efcvh.cbu_0
  • C:\Muldrop\FuqEoh.img_0
  • C:\Muldrop\FuqCnet_svt.uyu_0
  • C:\Muldrop\FbsRvt.img_0
  • C:\Muldrop\FbsCaf.moh_0
  • C:\Muldrop\Fbs.fyf_0
  • C:\Muldrop\FbsEodzdmpqfejb.sv.din_0
  • C:\Muldrop\FbsCpmpsW.qbt_0
  • C:\Muldrop\Fbs.FAQ.uyu_1
  • C:\Muldrop\FARCpmpst242.sfh_1
  • C:\Muldrop\FARCpmpst242.sfh_0
  • C:\Muldrop\Fbs.FAQ.uyu_0
  • C:\Muldrop\FARHfsf.jog_0
  • C:\Muldrop\FbsHvo.moh_0
  • C:\Muldrop\FbsHvo.img_0
  • C:\Muldrop\FbsPpm.moh_0
  • C:\Muldrop\FbsKfztW.qbt_0
  • C:\Muldrop\FbsGfs.moh_0
  • C:\Muldrop\FbsEoh.moh_0
  • C:\Muldrop\FbsEoh.img_0
  • C:\Muldrop\FbsFuq.nbq_0
  • C:\Muldrop\FbsFuq.emm_0
  • C:\Muldrop\dibohfmph_13
  • C:\Muldrop\dibohfmph_12
  • C:\Muldrop\dibohfmph_15
  • C:\Muldrop\dibohfmph_14
  • C:\Muldrop\dibohfmph_11
  • C:\Muldrop\dibohfmph_0
  • C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_1
  • C:\Muldrop\dibohfmph_10
  • C:\Muldrop\dibohfmph_1
  • C:\Muldrop\dibohfmph_6
  • C:\Muldrop\dibohfmph_5
  • C:\Muldrop\dibohfmph_8
  • C:\Muldrop\dibohfmph_7
  • C:\Muldrop\dibohfmph_4
  • C:\Muldrop\dibohfmph_17
  • C:\Muldrop\dibohfmph_16
  • C:\Muldrop\dibohfmph_3
  • C:\Muldrop\dibohfmph_2
  • C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_0
  • C:\Muldrop\ddtrm.isd_0
  • C:\Muldrop\dbubmph.ynm_0
  • C:\Muldrop\dfsu8.ec_0
  • C:\Muldrop\Dfgbvmu165.sfh_0
  • C:\Muldrop\dbubmph-ufyu.ynm_0
  • C:\Muldrop\Cvtupnjaf Ljolt.vsm_0
  • C:\Muldrop\CusmSijguX.sfh_0
  • C:\Muldrop\dbubmph-shc.ynm_0
  • C:\Muldrop\dbubmph-dpotpmf.ynm_0
  • C:\Muldrop\Dftdsjqu.jpo_6
  • C:\Muldrop\Dftdsjqu.jpo_5
  • C:\Muldrop\Dftdsjqu.jpo_8
  • C:\Muldrop\Dftdsjqu.jpo_7
  • C:\Muldrop\Dftdsjqu.jpo_4
  • C:\Muldrop\Dftdsjqu.jpo_1
  • C:\Muldrop\Dftdsjqu.jpo_0
  • C:\Muldrop\Dftdsjqu.jpo_3
  • C:\Muldrop\Dftdsjqu.jpo_2
  • C:\Muldrop\dibohfmph_9
  • C:\Muldrop\ECbtfRvt.moh_0
  • C:\Muldrop\ECbtfRvt.img_0
  • C:\Muldrop\Eeju.SbwfAoeEyju.sfh_0
  • C:\Muldrop\Eeju.Npufqbe.sfh_0
  • C:\Muldrop\ECbtfEoh.moh_0
  • C:\Muldrop\DsbxRvt.moh_0
  • C:\Muldrop\DsbxRvt.img_0
  • C:\Muldrop\ECbtfEoh.img_0
  • C:\Muldrop\dzcfsqvol.ise_0
  • C:\Muldrop\ejtlt.svt.ufnq_0
  • C:\Muldrop\ejtlt.foh.ufnq_0
  • C:\Muldrop\EMfov.nbq_0
  • C:\Muldrop\EMfov.emm_0
  • C:\Muldrop\efnbohmf32.emm_0
  • C:\Muldrop\EejuCbtf.emm_0
  • C:\Muldrop\Eeju.SbwfFjmf.sfh_0
  • C:\Muldrop\efgbvmu.ise_0
  • C:\Muldrop\EejuCbtf.nbq_0
  • C:\Muldrop\DsbxLjof.nbq_0
  • C:\Muldrop\dpmpsff.moh_0
  • C:\Muldrop\dpmpsff.img_0
  • C:\Muldrop\dpmpsfs.fou.isd_0
  • C:\Muldrop\dpmpsfs.emm_0
  • C:\Muldrop\dmbttjd.ise_0
  • C:\Muldrop\dibohft.uyu_0
  • C:\Muldrop\dibohfmph_foh_0
  • C:\Muldrop\Djbmph.AmuDpxo.sfh_0
  • C:\Muldrop\dispnfbqqttupsf.trmjuf_0
  • C:\Muldrop\DsbxEoh.img_0
  • C:\Muldrop\dppljft.trmjuf_0
  • C:\Muldrop\DsbxLjof.emm_0
  • C:\Muldrop\DsbxEoh.moh_0
  • C:\Muldrop\dpoufou-qsfgt.trmjuf_0
  • C:\Muldrop\dpmpsfs.moh_0
  • C:\Muldrop\dpmpsfs.img_0
  • C:\Muldrop\dpnqbujcjmjuz.joj_0
  • C:\Muldrop\dpnnpo.kbs_0
  • C:\Muldrop\Pmzmtu14.xqm_0
  • C:\Muldrop\Pmzmtu13.xqm_0
  • C:\Muldrop\Pmzmtu2.xqm_0
  • C:\Muldrop\Pmzmtu15.xqm_0
  • C:\Muldrop\Pmzmtu12.xqm_0
  • C:\Muldrop\Pmzmtu1.xqm_0
  • C:\Muldrop\PmvhjoW.qbt_0
  • C:\Muldrop\Pmzmtu11.xqm_0
  • C:\Muldrop\Pmzmtu10.xqm_0
  • C:\Muldrop\Pmzmtu9.xqm_0
  • C:\Muldrop\Pmzmtu8.xqm_0
  • C:\Muldrop\PspdEoh.moh_0
  • C:\Muldrop\PspdEoh.img_0
  • C:\Muldrop\Pmzmtu7.xqm_0
  • C:\Muldrop\Pmzmtu4.xqm_0
  • C:\Muldrop\Pmzmtu3.xqm_0
  • C:\Muldrop\Pmzmtu6.xqm_0
  • C:\Muldrop\Pmzmtu5.xqm_0
  • C:\Muldrop\Pmvhjot.Rfwjfx.uyu_1
  • C:\Muldrop\Pbofm.Etd.sfh_0
  • C:\Muldrop\Pbofm.Dfm.sfh_0
  • C:\Muldrop\Pbofm.Lzoy-npu.sfh_0
  • C:\Muldrop\Pbofm.JvnqTpSfmfdufeFjmf.sfh_0
  • C:\Muldrop\Pbofm.CusmSijguPhUqDo.sfh_0
  • C:\Muldrop\Pbofm.CusmQ.sfh_0
  • C:\Muldrop\Pbofm.CusmLfgu.sfh_0
  • C:\Muldrop\Pbofm.CusmSijguBbdlSmbti.sfh_0
  • C:\Muldrop\Pbofm.CusmRjhiu.sfh_0
  • C:\Muldrop\Pmvhjot.Iotubmm.uyu_0
  • C:\Muldrop\PLUGIN.HPP_0
  • C:\Muldrop\Pmvhjot.Rfwjfx.uyu_0
  • C:\Muldrop\Pmvhjot.Iotubmm.uyu_1
  • C:\Muldrop\pdfbo.ise_0
  • C:\Muldrop\Pbofm.Nvnqbe.sfh_0
  • C:\Muldrop\Pbofm.MpvtfWiffmTjmu.sfh_0
  • C:\Muldrop\Pbofm.SqbdfTpSfmfdu.sfh_0
  • C:\Muldrop\Pbofm.SfmfduFspnCmjqcpbse.sfh_0
  • C:\Muldrop\Pspdmjtu.emm_0
  • C:\Muldrop\SbwfSfuujoht.dne_0
  • C:\Muldrop\sbsf-tdsjqut.isd_0
  • C:\Muldrop\SfuFbsEydfqujpoHboemfs.sfh_0
  • C:\Muldrop\sfbenf_0
  • C:\Muldrop\RUS_READ.TXT_0
  • C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_1
  • C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_0
  • C:\Muldrop\RUS_NEWS.TXT_0
  • C:\Muldrop\rsn.isd_0
  • C:\Muldrop\TfdiIogp.sfh_0
  • C:\Muldrop\tfbsdi.trmjuf_0
  • C:\Muldrop\TfdiIogp.uyu_1
  • C:\Muldrop\TfdiIogp.uyu_0
  • C:\Muldrop\tfbsdi.ktpo_0
  • C:\Muldrop\SijguF1.sfh_0
  • C:\Muldrop\SijguBS.sfh_0
  • C:\Muldrop\Svotfu.kqh_0
  • C:\Muldrop\SijguTbc.sfh_0
  • C:\Muldrop\RftupsfSfuujoht.dne_0
  • C:\Muldrop\Psphsftt_ZfMA.sfh_0
  • C:\Muldrop\Psphsftt_Wftib.sfh_0
  • C:\Muldrop\qiq-qspu.fou.isd_0
  • C:\Muldrop\qfsnjttjpot.trmjuf_0
  • C:\Muldrop\Psphsftt_JM.sfh_0
  • C:\Muldrop\PspdRvt.img_0
  • C:\Muldrop\Pspdmjtu.nbq_0
  • C:\Muldrop\Psphsftt_FbsCpqz.sfh_0
  • C:\Muldrop\PspdRvt.moh_0
  • C:\Muldrop\Qxfsuz.sfh_0
  • C:\Muldrop\qspup.isd_0
  • C:\Muldrop\REGEXPS.TXT_0
  • C:\Muldrop\Rbejp Subujpo Gvjef.vsm_0
  • C:\Muldrop\qspgjmft.joj_0
  • C:\Muldrop\qmvhjo.iqq_0
  • C:\Muldrop\qmbdft.trmjuf_0
  • C:\Muldrop\qsfgt.kt_0
  • C:\Muldrop\qmvhjosfh.ebu_0
  • C:\Muldrop\HpulfzPspqfsujft.sfh_0
  • C:\Muldrop\HpulfzCmjqcpbse.sfh_0
  • C:\Muldrop\hsbz_qvmu.ise_0
  • C:\Muldrop\hsbz.ise_0
  • C:\Muldrop\Hpulfz.sfh_0
  • C:\Muldrop\HmgVjfxfsEoh.moh_0
  • C:\Muldrop\HmgVjfxfsEoh.img_0
  • C:\Muldrop\HmgVjfxfsRvt.moh_0
  • C:\Muldrop\HmgVjfxfsRvt.img_0
  • C:\Muldrop\jnqpsu_dpmpst.cbu_2
  • C:\Muldrop\jnqpsu_dpmpst.cbu_1
  • C:\Muldrop\joefy.ebu_1
  • C:\Muldrop\joefy.ebu_0
  • C:\Muldrop\jnqpsu_dpmpst.cbu_0
  • C:\Muldrop\IdpoCbdif.ec_0
  • C:\Muldrop\ibdl.ise_0
  • C:\Muldrop\ifmm.sfh_1
  • C:\Muldrop\ifmm.sfh_0
  • C:\Muldrop\HmgVjfxfs.nbq_0
  • C:\Muldrop\gbsuzqft.isd_0
  • C:\Muldrop\gbslfzt.iqq_0
  • C:\Muldrop\gpsnijtupsz.trmjuf_0
  • C:\Muldrop\GDIPFONTCACHEV1.DAT_0
  • C:\Muldrop\gbsdpmps.iqq_0
  • C:\Muldrop\gbs.nbq_0
  • C:\Muldrop\fyufotjpot.trmjuf_0
  • C:\Muldrop\gbs7a.uyu_0
  • C:\Muldrop\gbs7a.sfh_0
  • C:\Muldrop\hfo.isd_0
  • C:\Muldrop\guqPsphsftt.nbq_0
  • C:\Muldrop\HmgVjfxfs.emm_0
  • C:\Muldrop\hfo.k2ff.isd_0
  • C:\Muldrop\guqPsphsftt.gmm_0
  • C:\Muldrop\GsffoMjmf.sfh_1
  • C:\Muldrop\GsffoMjmf.sfh_0
  • C:\Muldrop\guqDjsLjtu.nbq_0
  • C:\Muldrop\guqDjsLjtu.gmm_0
  • C:\Muldrop\joefy.ebu_2
  • C:\Muldrop\njssps.ise_0
  • C:\Muldrop\njnfTzqft.seg_0
  • C:\Muldrop\Npuft_svt.uyu_0
  • C:\Muldrop\Npuft.uyu_0
  • C:\Muldrop\Nfx Supsjft (Hjhixbz Bmvft).xnb_0
  • C:\Muldrop\NfuRvt.moh_0
  • C:\Muldrop\NfuRvt.img_0
  • C:\Muldrop\Nfuxpsl.nbq_0
  • C:\Muldrop\Nfuxpsl.emm_0
  • C:\Muldrop\Pbofm.Aqqt.sfh_0
  • C:\Muldrop\Pbofm.AmuBS.sfh_0
  • C:\Muldrop\Pbofm.CusmIot...sfh_0
  • C:\Muldrop\Pbofm.BS.sfh_0
  • C:\Muldrop\OqfojohLbtuFjmf.sfh_0
  • C:\Muldrop\od.ise_0
  • C:\Muldrop\nth.fou.isd_0
  • C:\Muldrop\od5qbm2.sfh_1
  • C:\Muldrop\od5qbm2.sfh_0
  • C:\Muldrop\NfuEoh.moh_0
  • C:\Muldrop\MbdspRvt.img_0
  • C:\Muldrop\MbdspEoh.moh_0
  • C:\Muldrop\MbdspVjfx.emm_0
  • C:\Muldrop\MbdspRvt.moh_0
  • C:\Muldrop\MbdspEoh.img_0
  • C:\Muldrop\lfz3.ec_0
  • C:\Muldrop\joj.fou.isd_0
  • C:\Muldrop\MbdspCpotut.sfh_0
  • C:\Muldrop\LICENSE_0
  • C:\Muldrop\MSN.dpn.vsm_0
  • C:\Muldrop\mpdbmtupsf.seg_0
  • C:\Muldrop\NfuEoh.img_0
  • C:\Muldrop\Mz Dpdvnfout.nzepdt_0
  • C:\Muldrop\mjuftufq.isd_0
  • C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_0
  • C:\Muldrop\MbdspVjfx.nbq_0
  • C:\Muldrop\mjdfodf_0
  • C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_1
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\README.txt
  • %APPDATA%\Mozilla\Firefox\README.txt
  • %APPDATA%\Mozilla\Firefox\Profiles\README.txt
  • %APPDATA%\README.txt
  • %APPDATA%\Mozilla\README.txt
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\README.txt
  • %APPDATA%\Mozilla\Extensions\README.txt
  • %APPDATA%\Microsoft\README.txt
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\README.txt
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\README.txt
  • <LS_APPDATA>\Identities\README.txt
  • <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\README.txt
  • <LS_APPDATA>\Microsoft\README.txt
  • <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\README.txt
  • %HOMEPATH%\Desktop\README.txt
  • %HOMEPATH%\Cookies\README.txt
  • %HOMEPATH%\Favorites\README.txt
  • %HOMEPATH%\Favorites\Links\README.txt
  • <LS_APPDATA>\Mozilla\Firefox\README.txt
  • C:\Documents and Settings\README.txt
  • %HOMEPATH%\README.txt
  • C:\Far2\Addons\Colors\Default Highlighting\README.txt
  • C:\Far2\Addons\Colors\Custom Highlighting\README.txt
  • %HOMEPATH%\Templates\README.txt
  • %HOMEPATH%\Start Menu\Programs\Accessories\README.txt
  • %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\README.txt
  • %HOMEPATH%\Start Menu\README.txt
  • %HOMEPATH%\Start Menu\Programs\README.txt
  • C:\Far2\Documentation\eng\README.txt
  • C:\Far2\Addons\XLat\README.txt
  • C:\Far2\Documentation\README.txt
  • C:\Far2\Documentation\rus\README.txt
  • C:\Far2\Addons\XLat\Russian\README.txt
  • C:\Far2\Addons\Macros\README.txt
  • C:\Far2\Addons\Colors\README.txt
  • C:\Far2\Addons\Shell\README.txt
  • C:\Far2\Addons\SetUp\README.txt
  • %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\README.txt
  • %TEMP%\README.txt
  • %HOMEPATH%\Local Settings\History\README.txt
  • %HOMEPATH%\Local Settings\README.txt
  • %HOMEPATH%\Local Settings\<INETFILES>\README.txt
  • %HOMEPATH%\Local Settings\History\History.IE5\README.txt
  • <LS_APPDATA>\VMware\README.txt
  • <LS_APPDATA>\Mozilla\README.txt
  • %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\README.txt
  • <LS_APPDATA>\README.txt
  • %HOMEPATH%\PrintHood\README.txt
  • %HOMEPATH%\NetHood\README.txt
  • %HOMEPATH%\SendTo\README.txt
  • %HOMEPATH%\Recent\README.txt
  • %HOMEPATH%\My Documents\README.txt
  • %HOMEPATH%\My Documents\My Music\README.txt
  • %HOMEPATH%\My Documents\Downloads\README.txt
  • %HOMEPATH%\My Documents\My Received Files\README.txt
  • %HOMEPATH%\My Documents\My Pictures\README.txt
  • %ALLUSERSPROFILE%\README.txt
  • %ALLUSERSPROFILE%\Templates\README.txt
  • C:\Documents and Settings\Default User\Application Data\README.txt
  • C:\Documents and Settings\Default User\Application Data\Microsoft\README.txt
  • %ALLUSERSPROFILE%\Start Menu\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Games\README.txt
  • C:\Documents and Settings\Default User\Local Settings\History\README.txt
  • C:\Documents and Settings\Default User\Local Settings\History\History.IE5\README.txt
  • C:\Documents and Settings\Default User\Local Settings\<INETFILES>\README.txt
  • C:\Documents and Settings\Default User\Local Settings\Temp\README.txt
  • C:\Documents and Settings\Default User\Local Settings\Application Data\README.txt
  • C:\Documents and Settings\Default User\Desktop\README.txt
  • C:\Documents and Settings\Default User\Cookies\README.txt
  • C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\README.txt
  • C:\Documents and Settings\Default User\Favorites\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\README.txt
  • %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\README.txt
  • %ALLUSERSPROFILE%\Documents\My Music\Sample Music\README.txt
  • %ALLUSERSPROFILE%\Documents\My Music\README.txt
  • %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\README.txt
  • %ALLUSERSPROFILE%\Documents\My Music\My Playlists\README.txt
  • %ALLUSERSPROFILE%\Application Data\Microsoft\README.txt
  • <Current directory>\README.txt
  • %ALLUSERSPROFILE%\Desktop\README.txt
  • %ALLUSERSPROFILE%\Application Data\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\README.txt
  • %ALLUSERSPROFILE%\Favorites\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\README.txt
  • %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\README.txt
  • %ALLUSERSPROFILE%\DRM\README.txt
  • %ALLUSERSPROFILE%\Documents\My Pictures\README.txt
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\README.txt
  • %ALLUSERSPROFILE%\Documents\README.txt
  • %ALLUSERSPROFILE%\Documents\My Videos\README.txt
  • C:\Documents and Settings\Default User\Local Settings\README.txt
  • C:\Documents and Settings\NetworkService\Application Data\README.txt
  • C:\Documents and Settings\NetworkService\Application Data\Microsoft\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\README.txt
  • C:\Documents and Settings\NetworkService\Cookies\README.txt
  • C:\Documents and Settings\LocalService\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\Temp\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\History\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\README.txt
  • C:\Documents and Settings\NetworkService\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\README.txt
  • %APPDATA%\Identities\README.txt
  • %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\Application Data\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\Temp\README.txt
  • C:\Documents and Settings\NetworkService\Local Settings\History\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\README.txt
  • C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\README.txt
  • C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\README.txt
  • C:\Documents and Settings\Default User\Start Menu\Programs\Startup\README.txt
  • C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\README.txt
  • C:\Documents and Settings\Default User\SendTo\README.txt
  • C:\Documents and Settings\Default User\NetHood\README.txt
  • C:\Documents and Settings\Default User\My Documents\README.txt
  • C:\Documents and Settings\Default User\Recent\README.txt
  • C:\Documents and Settings\Default User\PrintHood\README.txt
  • C:\Documents and Settings\LocalService\Cookies\README.txt
  • C:\Documents and Settings\LocalService\Application Data\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\Application Data\README.txt
  • C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\README.txt
  • C:\Documents and Settings\LocalService\Application Data\Microsoft\README.txt
  • C:\Documents and Settings\Default User\Start Menu\README.txt
  • C:\Documents and Settings\Default User\Start Menu\Programs\README.txt
  • C:\Documents and Settings\Default User\README.txt
  • C:\Documents and Settings\Default User\Templates\README.txt
  • C:\Muldrop\BsbdlRvt.moh_0
  • C:\Muldrop\BsbdlRvt.img_0
  • C:\Muldrop\bsdmjuf.emm_0
  • C:\Muldrop\BsbdlRvt.sfh_0
  • C:\Muldrop\Bsbdlfut.nbq_0
  • C:\Muldrop\BsbdlEoh.moh_0
  • C:\Muldrop\BsbdlEoh.img_0
  • C:\Muldrop\Bsbdlfut.emm_0
  • C:\Muldrop\BsbdlEoh.sfh_0
  • C:\Muldrop\Bvh.Rfqpsu.uyu_1
  • C:\Muldrop\Bvh.Rfqpsu.uyu_0
  • C:\Muldrop\CbtfEoh.img_0
  • C:\Muldrop\bvup.kbs_0
  • C:\Muldrop\bsdmjuf_svt.moh_0
  • C:\Muldrop\bsdmjuf_foh.img_0
  • C:\Muldrop\bsdmjuf.nbq_0
  • C:\Muldrop\bsdmjuf_svt.img_0
  • C:\Muldrop\bsdmjuf_foh.moh_0
  • C:\Muldrop\BsbdlDfm.sfh_0
  • C:\Muldrop\AmuR.sfh_0
  • C:\Muldrop\AmuMfov.sfh_0
  • C:\Muldrop\AmuSfbsdi.sfh_0
  • C:\Muldrop\AmuSdsffot.sfh_0
  • C:\Muldrop\AmjhoRvt.moh_0
  • C:\Muldrop\Amjho.emm_0
  • C:\Muldrop\7aTpFbs.joj_0
  • C:\Muldrop\AmjhoEoh.moh_0
  • C:\Muldrop\Amjho.nbq_0
  • C:\Muldrop\AvupWsbq.nbq_0
  • C:\Muldrop\AvupWsbq.emm_0
  • C:\Muldrop\Bmvf ijmmt.kqh_0
  • C:\Muldrop\Bffuipwfo't Sznqipoz Np. 9 (Sdifsap).xnb_0
  • C:\Muldrop\AUTOEXEC.BAT_0
  • C:\Muldrop\Aqqt.sfh_0
  • C:\Muldrop\AmuX.sfh_0
  • C:\Muldrop\Asd.Svqqpsu.uyu_1
  • C:\Muldrop\Asd.Svqqpsu.uyu_0
  • C:\Muldrop\CbtfEoh.moh_0
  • C:\Muldrop\Cpnqbsf.nbq_0
  • C:\Muldrop\Cpnqbsf.emm_0
  • C:\Muldrop\CpnqRvt.moh_0
  • C:\Muldrop\CpnqEoh.moh_0
  • C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_1
  • C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_0
  • C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_1
  • C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_0
  • C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_1
  • C:\Muldrop\CusmDfm.sfh_0
  • C:\Muldrop\CREGEXP.H_0
  • C:\Muldrop\CusmR.sfh_0
  • C:\Muldrop\CusmF10.sfh_0
  • C:\Muldrop\CREGEXP.CPP_0
  • C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_1
  • C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_0
  • C:\Muldrop\cpplnbslt.iunm_0
  • C:\Muldrop\cpplnbslt-2011-11-10.ktpo_0
  • C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_0
  • C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_0
  • C:\Muldrop\cmbdl_bz.ise_0
  • C:\Muldrop\cmbdl_gspn_kvmz.sfh_0
  • C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_1
  • C:\Muldrop\cmbdl.ise_0
  • C:\Muldrop\CbtfRvt.moh_0
  • C:\Muldrop\CbtfRvt.img_0
  • C:\Muldrop\CLOCALE.H_0
  • C:\Muldrop\CLOCALE.CPP_0
  • C:\Muldrop\CnqEoh.img_0
  • C:\Muldrop\cmvf.ise_0
  • C:\Muldrop\CONFIG.SYS_0
  • C:\Muldrop\CnqRvt.img_0
  • C:\Muldrop\CmfbsPmvhjotCbdif.dne_0
  • C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_0
  • C:\Muldrop\cmbdl_gspn_kvmz.sfh_1
  • C:\Muldrop\cmbdl_tfabm.ise_0
  • C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_1
  • C:\Far2\Plugins\FileCase\README.txt
  • C:\Far2\Plugins\FarCmds\README.txt
  • C:\Far2\Plugins\FTP\README.txt
  • C:\Far2\Plugins\FTP\lib\README.txt
  • C:\Far2\Plugins\ExtSearch\README.txt
  • C:\Far2\Plugins\ExtSearch\keys\README.txt
  • C:\Far2\Plugins\ExtSearch\doc\README.txt
  • C:\Far2\Plugins\ExtSearch\sources\README.txt
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\README.txt
  • C:\Far2\Plugins\WinSCP\console\README.txt
  • C:\Far2\Plugins\WinSCP\components\README.txt
  • C:\Far2\Plugins\WinSCP\dragext\README.txt
  • C:\Far2\Plugins\WinSCP\core\README.txt
  • C:\Far2\Plugins\TmpPanel\README.txt
  • C:\Far2\Plugins\MacroView\README.txt
  • C:\Far2\Plugins\HlfViewer\README.txt
  • C:\Far2\Plugins\ProcList\README.txt
  • C:\Far2\Plugins\Network\README.txt
  • C:\Far2\Plugins\EMenu\README.txt
  • C:\Far2\Plugins\Brackets\README.txt
  • C:\Far2\Plugins\AutoWrap\README.txt
  • C:\Far2\Plugins\Colorer\hrc\auto\types\README.txt
  • C:\Far2\Plugins\Colorer\bin\README.txt
  • C:\Far2\Plugins\arclite\README.txt
  • C:\Far2\FExcept\README.txt
  • C:\Far2\Encyclopedia\README.txt
  • C:\Far2\Plugins\Align\README.txt
  • C:\Far2\Plugins\7-Zip\README.txt
  • C:\Far2\Plugins\Compare\README.txt
  • C:\Far2\Plugins\Colorer\README.txt
  • C:\Far2\Plugins\EditCase\README.txt
  • C:\Far2\Plugins\DrawLine\README.txt
  • C:\Far2\Plugins\Colorer\hrd\README.txt
  • C:\Far2\Plugins\Colorer\hrc\README.txt
  • C:\Far2\Plugins\Colorer\hrc\auto\README.txt
  • C:\Far2\Plugins\Colorer\hrd\console\README.txt
  • C:\Far2\Plugins\Colorer\hrd\console\contrib\README.txt
  • C:\Far2\Plugins\WinSCP\far\README.txt
  • C:\Muldrop\7-ZjqEoh.moh_0
  • C:\Muldrop\7-ZjqEoh.img_0
  • C:\Muldrop\7-ZjqFbs64.emm_0
  • C:\Muldrop\7-ZjqFbs.emm_0
  • C:\Far2\README.txt
  • C:\Far2\PluginSDK\Headers.c\README.txt
  • C:\Far2\Plugins\README.txt
  • C:\Far2\PluginSDK\README.txt
  • C:\Far2\PluginSDK\Headers.pas\README.txt
  • C:\Muldrop\7aS2.tgy_0
  • C:\Muldrop\7aCpo.tgy_0
  • C:\Muldrop\7aSD.tgy_0
  • C:\Muldrop\7aS2dpo.tgy_0
  • C:\Muldrop\7a.tgy_0
  • C:\Muldrop\7-ZjqRvt.moh_0
  • C:\Muldrop\7-ZjqRvt.img_0
  • C:\Muldrop\7a.emm_1
  • C:\Muldrop\7a.emm_0
  • C:\Far2\Plugins\WinSCP\README.txt
  • C:\Far2\Plugins\WinSCP\packages\filemng\README.txt
  • C:\Far2\Plugins\WinSCP\packages\dragndrop\README.txt
  • C:\Far2\Plugins\WinSCP\packages\tb2k\README.txt
  • C:\Far2\Plugins\WinSCP\packages\my\README.txt
  • C:\Far2\Plugins\WinSCP\lib\README.txt
  • C:\Far2\Plugins\WinSCP\filezilla\misc\README.txt
  • C:\Far2\Plugins\WinSCP\fari\README.txt
  • C:\Far2\Plugins\WinSCP\forms\README.txt
  • C:\Far2\Plugins\WinSCP\filezilla\README.txt
  • C:\Far2\Plugins\WinSCP\release\README.txt
  • C:\Far2\Plugins\WinSCP\putty\README.txt
  • C:\Far2\Plugins\WinSCP\windows\README.txt
  • C:\Far2\Plugins\WinSCP\resource\README.txt
  • C:\Far2\Plugins\WinSCP\putty\windows\README.txt
  • C:\Far2\Plugins\WinSCP\packages\theme\README.txt
  • C:\Far2\Plugins\WinSCP\packages\tbx\README.txt
  • C:\Far2\Plugins\WinSCP\putty\charset\README.txt
  • C:\Far2\Plugins\WinSCP\packages\README.txt
Moves the following files:
  • from C:\Muldrop\GsffoMjmf.sfh_1 to C:\Muldrop\R3NmZm9Nam1mLnNmaF8x.fantom
  • from C:\Muldrop\guqDjsLjtu.gmm_0 to C:\Muldrop\Z3VxRGpzTGp0dS5nbW1fMA==.fantom
  • from C:\Muldrop\guqDjsLjtu.nbq_0 to C:\Muldrop\Z3VxRGpzTGp0dS5uYnFfMA==.fantom
  • from C:\Muldrop\GDIPFONTCACHEV1.DAT_0 to C:\Muldrop\R0RJUEZPTlRDQUNIRVYxLkRBVF8w.fantom
  • from C:\Muldrop\gpsnijtupsz.trmjuf_0 to C:\Muldrop\Z3BzbmlqdHVwc3oudHJtanVmXzA=.fantom
  • from C:\Muldrop\GsffoMjmf.sfh_0 to C:\Muldrop\R3NmZm9Nam1mLnNmaF8w.fantom
  • from C:\Muldrop\guqPsphsftt.gmm_0 to C:\Muldrop\Z3VxUHNwaHNmdHQuZ21tXzA=.fantom
  • from C:\Muldrop\HmgVjfxfs.emm_0 to C:\Muldrop\SG1nVmpmeGZzLmVtbV8w.fantom
  • from C:\Muldrop\HmgVjfxfs.nbq_0 to C:\Muldrop\SG1nVmpmeGZzLm5icV8w.fantom
  • from C:\Muldrop\HmgVjfxfsEoh.img_0 to C:\Muldrop\SG1nVmpmeGZzRW9oLmltZ18w.fantom
  • from C:\Muldrop\guqPsphsftt.nbq_0 to C:\Muldrop\Z3VxUHNwaHNmdHQubmJxXzA=.fantom
  • from C:\Muldrop\hfo.isd_0 to C:\Muldrop\aGZvLmlzZF8w.fantom
  • from C:\Muldrop\hfo.k2ff.isd_0 to C:\Muldrop\aGZvLmsyZmYuaXNkXzA=.fantom
  • from C:\Muldrop\FuqRvt.moh_0 to C:\Muldrop\RnVxUnZ0Lm1vaF8w.fantom
  • from C:\Muldrop\fyqpsu_dpmpst.cbu_0 to C:\Muldrop\ZnlxcHN1X2RwbXBzdC5jYnVfMA==.fantom
  • from C:\Muldrop\fyufotjpot.joj_0 to C:\Muldrop\Znl1Zm90anBvdC5qb2pfMA==.fantom
  • from C:\Muldrop\FuqEoh.img_0 to C:\Muldrop\RnVxRW9oLmltZ18w.fantom
  • from C:\Muldrop\FuqEoh.moh_0 to C:\Muldrop\RnVxRW9oLm1vaF8w.fantom
  • from C:\Muldrop\FuqRvt.img_0 to C:\Muldrop\RnVxUnZ0LmltZ18w.fantom
  • from C:\Muldrop\fyufotjpot.trmjuf_0 to C:\Muldrop\Znl1Zm90anBvdC50cm1qdWZfMA==.fantom
  • from C:\Muldrop\gbsdpmps.iqq_0 to C:\Muldrop\Z2JzZHBtcHMuaXFxXzA=.fantom
  • from C:\Muldrop\gbslfzt.iqq_0 to C:\Muldrop\Z2JzbGZ6dC5pcXFfMA==.fantom
  • from C:\Muldrop\gbsuzqft.isd_0 to C:\Muldrop\Z2JzdXpxZnQuaXNkXzA=.fantom
  • from C:\Muldrop\gbs.nbq_0 to C:\Muldrop\Z2JzLm5icV8w.fantom
  • from C:\Muldrop\gbs7a.sfh_0 to C:\Muldrop\Z2JzN2Euc2ZoXzA=.fantom
  • from C:\Muldrop\gbs7a.uyu_0 to C:\Muldrop\Z2JzN2EudXl1XzA=.fantom
  • from C:\Muldrop\joefy.ebu_1 to C:\Muldrop\am9lZnkuZWJ1XzE=.fantom
  • from C:\Muldrop\joefy.ebu_2 to C:\Muldrop\am9lZnkuZWJ1XzI=.fantom
  • from C:\Muldrop\joj.fou.isd_0 to C:\Muldrop\am9qLmZvdS5pc2RfMA==.fantom
  • from C:\Muldrop\jnqpsu_dpmpst.cbu_1 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMQ==.fantom
  • from C:\Muldrop\jnqpsu_dpmpst.cbu_2 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMg==.fantom
  • from C:\Muldrop\joefy.ebu_0 to C:\Muldrop\am9lZnkuZWJ1XzA=.fantom
  • from C:\Muldrop\lfz3.ec_0 to C:\Muldrop\bGZ6My5lY18w.fantom
  • from C:\Muldrop\MbdspEoh.moh_0 to C:\Muldrop\TWJkc3BFb2gubW9oXzA=.fantom
  • from C:\Muldrop\MbdspRvt.img_0 to C:\Muldrop\TWJkc3BSdnQuaW1nXzA=.fantom
  • from C:\Muldrop\MbdspRvt.moh_0 to C:\Muldrop\TWJkc3BSdnQubW9oXzA=.fantom
  • from C:\Muldrop\LICENSE_0 to C:\Muldrop\TElDRU5TRV8w.fantom
  • from C:\Muldrop\MbdspCpotut.sfh_0 to C:\Muldrop\TWJkc3BDcG90dXQuc2ZoXzA=.fantom
  • from C:\Muldrop\MbdspEoh.img_0 to C:\Muldrop\TWJkc3BFb2guaW1nXzA=.fantom
  • from C:\Muldrop\Hpulfz.sfh_0 to C:\Muldrop\SHB1bGZ6LnNmaF8w.fantom
  • from C:\Muldrop\HpulfzCmjqcpbse.sfh_0 to C:\Muldrop\SHB1bGZ6Q21qcWNwYnNlLnNmaF8w.fantom
  • from C:\Muldrop\HpulfzPspqfsujft.sfh_0 to C:\Muldrop\SHB1bGZ6UHNwcWZzdWpmdC5zZmhfMA==.fantom
  • from C:\Muldrop\HmgVjfxfsEoh.moh_0 to C:\Muldrop\SG1nVmpmeGZzRW9oLm1vaF8w.fantom
  • from C:\Muldrop\HmgVjfxfsRvt.img_0 to C:\Muldrop\SG1nVmpmeGZzUnZ0LmltZ18w.fantom
  • from C:\Muldrop\HmgVjfxfsRvt.moh_0 to C:\Muldrop\SG1nVmpmeGZzUnZ0Lm1vaF8w.fantom
  • from C:\Muldrop\hsbz.ise_0 to C:\Muldrop\aHNiei5pc2VfMA==.fantom
  • from C:\Muldrop\ifmm.sfh_0 to C:\Muldrop\aWZtbS5zZmhfMA==.fantom
  • from C:\Muldrop\ifmm.sfh_1 to C:\Muldrop\aWZtbS5zZmhfMQ==.fantom
  • from C:\Muldrop\jnqpsu_dpmpst.cbu_0 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMA==.fantom
  • from C:\Muldrop\hsbz_qvmu.ise_0 to C:\Muldrop\aHNiel9xdm11LmlzZV8w.fantom
  • from C:\Muldrop\ibdl.ise_0 to C:\Muldrop\aWJkbC5pc2VfMA==.fantom
  • from C:\Muldrop\IdpoCbdif.ec_0 to C:\Muldrop\SWRwb0NiZGlmLmVjXzA=.fantom
  • from C:\Muldrop\FARCnet.nbq_0 to C:\Muldrop\RkFSQ25ldC5uYnFfMA==.fantom
  • from C:\Muldrop\FARCnetEoh.img_0 to C:\Muldrop\RkFSQ25ldEVvaC5pbWdfMA==.fantom
  • from C:\Muldrop\FARCnetEoh.moh_0 to C:\Muldrop\RkFSQ25ldEVvaC5tb2hfMA==.fantom
  • from C:\Muldrop\F9DfbdujwbufMfov.sfh_0 to C:\Muldrop\RjlEZmJkdWp3YnVmTWZvdi5zZmhfMA==.fantom
  • from C:\Muldrop\F9Tbcmf.sfh_0 to C:\Muldrop\RjlUYmNtZi5zZmhfMA==.fantom
  • from C:\Muldrop\FARCnet.emm_0 to C:\Muldrop\RkFSQ25ldC5lbW1fMA==.fantom
  • from C:\Muldrop\FARCnetRvt.img_0 to C:\Muldrop\RkFSQ25ldFJ2dC5pbWdfMA==.fantom
  • from C:\Muldrop\FARHfsf.jog_0 to C:\Muldrop\RkFSSGZzZi5qb2dfMA==.fantom
  • from C:\Muldrop\Fbs.FAQ.uyu_0 to C:\Muldrop\RmJzLkZBUS51eXVfMA==.fantom
  • from C:\Muldrop\Fbs.FAQ.uyu_1 to C:\Muldrop\RmJzLkZBUS51eXVfMQ==.fantom
  • from C:\Muldrop\FARCnetRvt.moh_0 to C:\Muldrop\RkFSQ25ldFJ2dC5tb2hfMA==.fantom
  • from C:\Muldrop\FARCpmpst242.sfh_0 to C:\Muldrop\RkFSQ3BtcHN0MjQyLnNmaF8w.fantom
  • from C:\Muldrop\FARCpmpst242.sfh_1 to C:\Muldrop\RkFSQ3BtcHN0MjQyLnNmaF8x.fantom
  • from C:\Muldrop\Eyfdvups.CMD.sfh_0 to C:\Muldrop\RXlmZHZ1cHMuQ01ELnNmaF8w.fantom
  • from C:\Muldrop\EyuCiCbtf.dqq_0 to C:\Muldrop\RXl1Q2lDYnRmLmRxcV8w.fantom
  • from C:\Muldrop\EyuCmjqBpbse.dqq_0 to C:\Muldrop\RXl1Q21qcUJwYnNlLmRxcV8w.fantom
  • from C:\Muldrop\ES_RUS.REG_0 to C:\Muldrop\RVNfUlVTLlJFR18w.fantom
  • from C:\Muldrop\EydDvnq.emm_0 to C:\Muldrop\RXlkRHZucS5lbW1fMA==.fantom
  • from C:\Muldrop\Eyfdvups.4NT.sfh_0 to C:\Muldrop\RXlmZHZ1cHMuNE5ULnNmaF8w.fantom
  • from C:\Muldrop\EyuMfov.dqq_0 to C:\Muldrop\RXl1TWZvdi5kcXFfMA==.fantom
  • from C:\Muldrop\EyuSfbsdiMjy.dqq_0 to C:\Muldrop\RXl1U2Zic2RpTWp5LmRxcV8w.fantom
  • from C:\Muldrop\EyuSfbsdiRfh.dqq_0 to C:\Muldrop\RXl1U2Zic2RpUmZoLmRxcV8w.fantom
  • from C:\Muldrop\F3.sfh_0 to C:\Muldrop\RjMuc2ZoXzA=.fantom
  • from C:\Muldrop\EyuRfhEyq.dqq_0 to C:\Muldrop\RXl1UmZoRXlxLmRxcV8w.fantom
  • from C:\Muldrop\EyuSfbsdi.dqq_0 to C:\Muldrop\RXl1U2Zic2RpLmRxcV8w.fantom
  • from C:\Muldrop\EyuSfbsdi.iqq_0 to C:\Muldrop\RXl1U2Zic2RpLmlxcV8w.fantom
  • from C:\Muldrop\FEydfqu.emm_0 to C:\Muldrop\RkV5ZGZxdS5lbW1fMA==.fantom
  • from C:\Muldrop\FjmfCbtf.emm_0 to C:\Muldrop\RmptZkNidGYuZW1tXzA=.fantom
  • from C:\Muldrop\FjmfCbtf.nbq_0 to C:\Muldrop\RmptZkNidGYubmJxXzA=.fantom
  • from C:\Muldrop\FbsRvt.img_0 to C:\Muldrop\RmJzUnZ0LmltZ18w.fantom
  • from C:\Muldrop\FbsRvt.moh_0 to C:\Muldrop\RmJzUnZ0Lm1vaF8w.fantom
  • from C:\Muldrop\FbsSqb.moh_0 to C:\Muldrop\RmJzU3FiLm1vaF8w.fantom
  • from C:\Muldrop\Fjmf_je.eja_0 to C:\Muldrop\RmptZl9qZS5lamFfMA==.fantom
  • from C:\Muldrop\ftfbsdi_efcvh.cbu_0 to C:\Muldrop\ZnRmYnNkaV9lZmN2aC5jYnVfMA==.fantom
  • from C:\Muldrop\FuqCnet.uyu_0 to C:\Muldrop\RnVxQ25ldC51eXVfMA==.fantom
  • from C:\Muldrop\FuqCnet_svt.uyu_0 to C:\Muldrop\RnVxQ25ldF9zdnQudXl1XzA=.fantom
  • from C:\Muldrop\FpouCbdif3.0.0.0.ebu_0 to C:\Muldrop\RnBvdUNiZGlmMy4wLjAuMC5lYnVfMA==.fantom
  • from C:\Muldrop\Fsff Hpunbjm.vsm_0 to C:\Muldrop\RnNmZiBIcHVuYmptLnZzbV8w.fantom
  • from C:\Muldrop\ftfbsdi.emm_0 to C:\Muldrop\ZnRmYnNkaS5lbW1fMA==.fantom
  • from C:\Muldrop\FbsEodzdmpqfejb.sv.din_0 to C:\Muldrop\RmJzRW9kemRtcHFmZWpiLnN2LmRpbl8w.fantom
  • from C:\Muldrop\FbsEoh.img_0 to C:\Muldrop\RmJzRW9oLmltZ18w.fantom
  • from C:\Muldrop\FbsEoh.moh_0 to C:\Muldrop\RmJzRW9oLm1vaF8w.fantom
  • from C:\Muldrop\Fbs.fyf_0 to C:\Muldrop\RmJzLmZ5Zl8w.fantom
  • from C:\Muldrop\FbsCaf.moh_0 to C:\Muldrop\RmJzQ2FmLm1vaF8w.fantom
  • from C:\Muldrop\FbsCpmpsW.qbt_0 to C:\Muldrop\RmJzQ3BtcHNXLnFidF8w.fantom
  • from C:\Muldrop\FbsFuq.emm_0 to C:\Muldrop\RmJzRnVxLmVtbV8w.fantom
  • from C:\Muldrop\FbsHvo.moh_0 to C:\Muldrop\RmJzSHZvLm1vaF8w.fantom
  • from C:\Muldrop\FbsKfztW.qbt_0 to C:\Muldrop\RmJzS2Z6dFcucWJ0XzA=.fantom
  • from C:\Muldrop\FbsPpm.moh_0 to C:\Muldrop\RmJzUHBtLm1vaF8w.fantom
  • from C:\Muldrop\FbsFuq.nbq_0 to C:\Muldrop\RmJzRnVxLm5icV8w.fantom
  • from C:\Muldrop\FbsGfs.moh_0 to C:\Muldrop\RmJzR2ZzLm1vaF8w.fantom
  • from C:\Muldrop\FbsHvo.img_0 to C:\Muldrop\RmJzSHZvLmltZ18w.fantom
  • from C:\Muldrop\PspdRvt.img_0 to C:\Muldrop\UHNwZFJ2dC5pbWdfMA==.fantom
  • from C:\Muldrop\PspdRvt.moh_0 to C:\Muldrop\UHNwZFJ2dC5tb2hfMA==.fantom
  • from C:\Muldrop\Psphsftt_FbsCpqz.sfh_0 to C:\Muldrop\UHNwaHNmdHRfRmJzQ3Bxei5zZmhfMA==.fantom
  • from C:\Muldrop\PspdEoh.moh_0 to C:\Muldrop\UHNwZEVvaC5tb2hfMA==.fantom
  • from C:\Muldrop\Pspdmjtu.emm_0 to C:\Muldrop\UHNwZG1qdHUuZW1tXzA=.fantom
  • from C:\Muldrop\Pspdmjtu.nbq_0 to C:\Muldrop\UHNwZG1qdHUubmJxXzA=.fantom
  • from C:\Muldrop\Psphsftt_JM.sfh_0 to C:\Muldrop\UHNwaHNmdHRfSk0uc2ZoXzA=.fantom
  • from C:\Muldrop\qiq-qspu.fou.isd_0 to C:\Muldrop\cWlxLXFzcHUuZm91LmlzZF8w.fantom
  • from C:\Muldrop\qmbdft.trmjuf_0 to C:\Muldrop\cW1iZGZ0LnRybWp1Zl8w.fantom
  • from C:\Muldrop\qmvhjo.iqq_0 to C:\Muldrop\cW12aGpvLmlxcV8w.fantom
  • from C:\Muldrop\Psphsftt_Wftib.sfh_0 to C:\Muldrop\UHNwaHNmdHRfV2Z0aWIuc2ZoXzA=.fantom
  • from C:\Muldrop\Psphsftt_ZfMA.sfh_0 to C:\Muldrop\UHNwaHNmdHRfWmZNQS5zZmhfMA==.fantom
  • from C:\Muldrop\qfsnjttjpot.trmjuf_0 to C:\Muldrop\cWZzbmp0dGpwb3QudHJtanVmXzA=.fantom
  • from C:\Muldrop\Pmzmtu15.xqm_0 to C:\Muldrop\UG16bXR1MTUueHFtXzA=.fantom
  • from C:\Muldrop\Pmzmtu2.xqm_0 to C:\Muldrop\UG16bXR1Mi54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu3.xqm_0 to C:\Muldrop\UG16bXR1My54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu12.xqm_0 to C:\Muldrop\UG16bXR1MTIueHFtXzA=.fantom
  • from C:\Muldrop\Pmzmtu13.xqm_0 to C:\Muldrop\UG16bXR1MTMueHFtXzA=.fantom
  • from C:\Muldrop\Pmzmtu14.xqm_0 to C:\Muldrop\UG16bXR1MTQueHFtXzA=.fantom
  • from C:\Muldrop\Pmzmtu4.xqm_0 to C:\Muldrop\UG16bXR1NC54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu8.xqm_0 to C:\Muldrop\UG16bXR1OC54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu9.xqm_0 to C:\Muldrop\UG16bXR1OS54cW1fMA==.fantom
  • from C:\Muldrop\PspdEoh.img_0 to C:\Muldrop\UHNwZEVvaC5pbWdfMA==.fantom
  • from C:\Muldrop\Pmzmtu5.xqm_0 to C:\Muldrop\UG16bXR1NS54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu6.xqm_0 to C:\Muldrop\UG16bXR1Ni54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu7.xqm_0 to C:\Muldrop\UG16bXR1Ny54cW1fMA==.fantom
  • from C:\Muldrop\SfuFbsEydfqujpoHboemfs.sfh_0 to C:\Muldrop\U2Z1RmJzRXlkZnF1anBvSGJvZW1mcy5zZmhfMA==.fantom
  • from C:\Muldrop\SijguBS.sfh_0 to C:\Muldrop\U2lqZ3VCUy5zZmhfMA==.fantom
  • from C:\Muldrop\SijguF1.sfh_0 to C:\Muldrop\U2lqZ3VGMS5zZmhfMA==.fantom
  • from C:\Muldrop\sbsf-tdsjqut.isd_0 to C:\Muldrop\c2JzZi10ZHNqcXV0LmlzZF8w.fantom
  • from C:\Muldrop\SbwfSfuujoht.dne_0 to C:\Muldrop\U2J3ZlNmdXVqb2h0LmRuZV8w.fantom
  • from C:\Muldrop\sfbenf_0 to C:\Muldrop\c2ZiZW5mXzA=.fantom
  • from C:\Muldrop\SijguTbc.sfh_0 to C:\Muldrop\U2lqZ3VUYmMuc2ZoXzA=.fantom
  • from C:\Muldrop\TfdiIogp.sfh_0 to C:\Muldrop\VGZkaUlvZ3Auc2ZoXzA=.fantom
  • from C:\Muldrop\TfdiIogp.uyu_0 to C:\Muldrop\VGZkaUlvZ3AudXl1XzA=.fantom
  • from C:\Muldrop\TfdiIogp.uyu_1 to C:\Muldrop\VGZkaUlvZ3AudXl1XzE=.fantom
  • from C:\Muldrop\Svotfu.kqh_0 to C:\Muldrop\U3ZvdGZ1LmtxaF8w.fantom
  • from C:\Muldrop\tfbsdi.ktpo_0 to C:\Muldrop\dGZic2RpLmt0cG9fMA==.fantom
  • from C:\Muldrop\tfbsdi.trmjuf_0 to C:\Muldrop\dGZic2RpLnRybWp1Zl8w.fantom
  • from C:\Muldrop\qspup.isd_0 to C:\Muldrop\cXNwdXAuaXNkXzA=.fantom
  • from C:\Muldrop\Qxfsuz.sfh_0 to C:\Muldrop\UXhmc3V6LnNmaF8w.fantom
  • from C:\Muldrop\Rbejp Subujpo Gvjef.vsm_0 to C:\Muldrop\UmJlanAgU3VidWpwbyBHdmplZi52c21fMA==.fantom
  • from C:\Muldrop\qmvhjosfh.ebu_0 to C:\Muldrop\cW12aGpvc2ZoLmVidV8w.fantom
  • from C:\Muldrop\qsfgt.kt_0 to C:\Muldrop\cXNmZ3Qua3RfMA==.fantom
  • from C:\Muldrop\qspgjmft.joj_0 to C:\Muldrop\cXNwZ2ptZnQuam9qXzA=.fantom
  • from C:\Muldrop\REGEXPS.TXT_0 to C:\Muldrop\UkVHRVhQUy5UWFRfMA==.fantom
  • from C:\Muldrop\rsn.isd_0 to C:\Muldrop\cnNuLmlzZF8w.fantom
  • from C:\Muldrop\RUS_NEWS.TXT_0 to C:\Muldrop\UlVTX05FV1MuVFhUXzA=.fantom
  • from C:\Muldrop\RUS_READ.TXT_0 to C:\Muldrop\UlVTX1JFQUQuVFhUXzA=.fantom
  • from C:\Muldrop\RftupsfSfuujoht.dne_0 to C:\Muldrop\UmZ0dXBzZlNmdXVqb2h0LmRuZV8w.fantom
  • from C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_0 to C:\Muldrop\UnBlanBvX0Rwc3B0aWxmd2pkaS5zZmhfMA==.fantom
  • from C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_1 to C:\Muldrop\UnBlanBvX0Rwc3B0aWxmd2pkaS5zZmhfMQ==.fantom
  • from C:\Muldrop\njnfTzqft.seg_0 to C:\Muldrop\bmpuZlR6cWZ0LnNlZ18w.fantom
  • from C:\Muldrop\njssps.ise_0 to C:\Muldrop\bmpzc3BzLmlzZV8w.fantom
  • from C:\Muldrop\Npuft.uyu_0 to C:\Muldrop\TnB1ZnQudXl1XzA=.fantom
  • from C:\Muldrop\Nfuxpsl.emm_0 to C:\Muldrop\TmZ1eHBzbC5lbW1fMA==.fantom
  • from C:\Muldrop\Nfuxpsl.nbq_0 to C:\Muldrop\TmZ1eHBzbC5uYnFfMA==.fantom
  • from C:\Muldrop\Nfx Supsjft (Hjhixbz Bmvft).xnb_0 to C:\Muldrop\TmZ4IFN1cHNqZnQgKEhqaGl4YnogQm12ZnQpLnhuYl8w.fantom
  • from C:\Muldrop\Npuft_svt.uyu_0 to C:\Muldrop\TnB1ZnRfc3Z0LnV5dV8w.fantom
  • from C:\Muldrop\od5qbm2.sfh_1 to C:\Muldrop\b2Q1cWJtMi5zZmhfMQ==.fantom
  • from C:\Muldrop\OqfojohLbtuFjmf.sfh_0 to C:\Muldrop\T3Fmb2pvaExidHVGam1mLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.AmuBS.sfh_0 to C:\Muldrop\UGJvZm0uQW11QlMuc2ZoXzA=.fantom
  • from C:\Muldrop\nth.fou.isd_0 to C:\Muldrop\bnRoLmZvdS5pc2RfMA==.fantom
  • from C:\Muldrop\od.ise_0 to C:\Muldrop\b2QuaXNlXzA=.fantom
  • from C:\Muldrop\od5qbm2.sfh_0 to C:\Muldrop\b2Q1cWJtMi5zZmhfMA==.fantom
  • from C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_1 to C:\Muldrop\TWJqbSBSZmRqcWpmb3UuTUFQSU1iam1fMQ==.fantom
  • from C:\Muldrop\mjdfodf_0 to C:\Muldrop\bWpkZm9kZl8w.fantom
  • from C:\Muldrop\mjuftufq.isd_0 to C:\Muldrop\bWp1ZnR1ZnEuaXNkXzA=.fantom
  • from C:\Muldrop\MbdspVjfx.emm_0 to C:\Muldrop\TWJkc3BWamZ4LmVtbV8w.fantom
  • from C:\Muldrop\MbdspVjfx.nbq_0 to C:\Muldrop\TWJkc3BWamZ4Lm5icV8w.fantom
  • from C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_0 to C:\Muldrop\TWJqbSBSZmRqcWpmb3UuTUFQSU1iam1fMA==.fantom
  • from C:\Muldrop\mpdbmtupsf.seg_0 to C:\Muldrop\bXBkYm10dXBzZi5zZWdfMA==.fantom
  • from C:\Muldrop\NfuEoh.moh_0 to C:\Muldrop\TmZ1RW9oLm1vaF8w.fantom
  • from C:\Muldrop\NfuRvt.img_0 to C:\Muldrop\TmZ1UnZ0LmltZ18w.fantom
  • from C:\Muldrop\NfuRvt.moh_0 to C:\Muldrop\TmZ1UnZ0Lm1vaF8w.fantom
  • from C:\Muldrop\MSN.dpn.vsm_0 to C:\Muldrop\TVNOLmRwbi52c21fMA==.fantom
  • from C:\Muldrop\Mz Dpdvnfout.nzepdt_0 to C:\Muldrop\TXogRHBkdm5mb3V0Lm56ZXBkdF8w.fantom
  • from C:\Muldrop\NfuEoh.img_0 to C:\Muldrop\TmZ1RW9oLmltZ18w.fantom
  • from C:\Muldrop\pdfbo.ise_0 to C:\Muldrop\cGRmYm8uaXNlXzA=.fantom
  • from C:\Muldrop\PLUGIN.HPP_0 to C:\Muldrop\UExVR0lOLkhQUF8w.fantom
  • from C:\Muldrop\Pmvhjot.Iotubmm.uyu_0 to C:\Muldrop\UG12aGpvdC5Jb3R1Ym1tLnV5dV8w.fantom
  • from C:\Muldrop\Pbofm.Nvnqbe.sfh_0 to C:\Muldrop\UGJvZm0uTnZucWJlLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.SfmfduFspnCmjqcpbse.sfh_0 to C:\Muldrop\UGJvZm0uU2ZtZmR1RnNwbkNtanFjcGJzZS5zZmhfMA==.fantom
  • from C:\Muldrop\Pbofm.SqbdfTpSfmfdu.sfh_0 to C:\Muldrop\UGJvZm0uU3FiZGZUcFNmbWZkdS5zZmhfMA==.fantom
  • from C:\Muldrop\Pmvhjot.Iotubmm.uyu_1 to C:\Muldrop\UG12aGpvdC5Jb3R1Ym1tLnV5dV8x.fantom
  • from C:\Muldrop\Pmzmtu1.xqm_0 to C:\Muldrop\UG16bXR1MS54cW1fMA==.fantom
  • from C:\Muldrop\Pmzmtu10.xqm_0 to C:\Muldrop\UG16bXR1MTAueHFtXzA=.fantom
  • from C:\Muldrop\Pmzmtu11.xqm_0 to C:\Muldrop\UG16bXR1MTEueHFtXzA=.fantom
  • from C:\Muldrop\Pmvhjot.Rfwjfx.uyu_0 to C:\Muldrop\UG12aGpvdC5SZndqZngudXl1XzA=.fantom
  • from C:\Muldrop\Pmvhjot.Rfwjfx.uyu_1 to C:\Muldrop\UG12aGpvdC5SZndqZngudXl1XzE=.fantom
  • from C:\Muldrop\PmvhjoW.qbt_0 to C:\Muldrop\UG12aGpvVy5xYnRfMA==.fantom
  • from C:\Muldrop\Pbofm.CusmLfgu.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbUxmZ3Uuc2ZoXzA=.fantom
  • from C:\Muldrop\Pbofm.CusmQ.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVEuc2ZoXzA=.fantom
  • from C:\Muldrop\Pbofm.CusmRjhiu.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVJqaGl1LnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.Aqqt.sfh_0 to C:\Muldrop\UGJvZm0uQXFxdC5zZmhfMA==.fantom
  • from C:\Muldrop\Pbofm.BS.sfh_0 to C:\Muldrop\UGJvZm0uQlMuc2ZoXzA=.fantom
  • from C:\Muldrop\Pbofm.CusmIot...sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbUlvdC4uLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.CusmSijguBbdlSmbti.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVNpamd1QmJkbFNtYnRpLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.JvnqTpSfmfdufeFjmf.sfh_0 to C:\Muldrop\UGJvZm0uSnZucVRwU2ZtZmR1ZmVGam1mLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.Lzoy-npu.sfh_0 to C:\Muldrop\UGJvZm0uTHpveS1ucHUuc2ZoXzA=.fantom
  • from C:\Muldrop\Pbofm.MpvtfWiffmTjmu.sfh_0 to C:\Muldrop\UGJvZm0uTXB2dGZXaWZmbVRqbXUuc2ZoXzA=.fantom
  • from C:\Muldrop\Pbofm.CusmSijguPhUqDo.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVNpamd1UGhVcURvLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.Dfm.sfh_0 to C:\Muldrop\UGJvZm0uRGZtLnNmaF8w.fantom
  • from C:\Muldrop\Pbofm.Etd.sfh_0 to C:\Muldrop\UGJvZm0uRXRkLnNmaF8w.fantom
  • from C:\Muldrop\ES_RUS.LNG_0 to C:\Muldrop\RVNfUlVTLkxOR18w.fantom
  • from C:\Muldrop\BsbdlRvt.sfh_0 to C:\Muldrop\QnNiZGxSdnQuc2ZoXzA=.fantom
  • from C:\Muldrop\bsdmjuf.emm_0 to C:\Muldrop\YnNkbWp1Zi5lbW1fMA==.fantom
  • from C:\Muldrop\bsdmjuf.nbq_0 to C:\Muldrop\YnNkbWp1Zi5uYnFfMA==.fantom
  • from C:\Muldrop\Bsbdlfut.nbq_0 to C:\Muldrop\QnNiZGxmdXQubmJxXzA=.fantom
  • from C:\Muldrop\BsbdlRvt.img_0 to C:\Muldrop\QnNiZGxSdnQuaW1nXzA=.fantom
  • from C:\Muldrop\BsbdlRvt.moh_0 to C:\Muldrop\QnNiZGxSdnQubW9oXzA=.fantom
  • from C:\Muldrop\bsdmjuf_foh.img_0 to C:\Muldrop\YnNkbWp1Zl9mb2guaW1nXzA=.fantom
  • from C:\Muldrop\Bvh.Rfqpsu.uyu_0 to C:\Muldrop\QnZoLlJmcXBzdS51eXVfMA==.fantom
  • from C:\Muldrop\Bvh.Rfqpsu.uyu_1 to C:\Muldrop\QnZoLlJmcXBzdS51eXVfMQ==.fantom
  • from C:\Muldrop\bvup.kbs_0 to C:\Muldrop\YnZ1cC5rYnNfMA==.fantom
  • from C:\Muldrop\bsdmjuf_foh.moh_0 to C:\Muldrop\YnNkbWp1Zl9mb2gubW9oXzA=.fantom
  • from C:\Muldrop\bsdmjuf_svt.img_0 to C:\Muldrop\YnNkbWp1Zl9zdnQuaW1nXzA=.fantom
  • from C:\Muldrop\bsdmjuf_svt.moh_0 to C:\Muldrop\YnNkbWp1Zl9zdnQubW9oXzA=.fantom
  • from C:\Muldrop\AUTOEXEC.BAT_0 to C:\Muldrop\QVVUT0VYRUMuQkFUXzA=.fantom
  • from C:\Muldrop\AvupWsbq.emm_0 to C:\Muldrop\QXZ1cFdzYnEuZW1tXzA=.fantom
  • from C:\Muldrop\AvupWsbq.nbq_0 to C:\Muldrop\QXZ1cFdzYnEubmJxXzA=.fantom
  • from C:\Muldrop\Aqqt.sfh_0 to C:\Muldrop\QXFxdC5zZmhfMA==.fantom
  • from C:\Muldrop\Asd.Svqqpsu.uyu_0 to C:\Muldrop\QXNkLlN2cXFwc3UudXl1XzA=.fantom
  • from C:\Muldrop\Asd.Svqqpsu.uyu_1 to C:\Muldrop\QXNkLlN2cXFwc3UudXl1XzE=.fantom
  • from C:\Muldrop\Bffuipwfo't Sznqipoz Np. 9 (Sdifsap).xnb_0 to C:\Muldrop\QmZmdWlwd2ZvJ3QgU3pucWlwb3ogTnAuIDkgKFNkaWZzYXApLnhuYl8w.fantom
  • from C:\Muldrop\BsbdlEoh.moh_0 to C:\Muldrop\QnNiZGxFb2gubW9oXzA=.fantom
  • from C:\Muldrop\BsbdlEoh.sfh_0 to C:\Muldrop\QnNiZGxFb2guc2ZoXzA=.fantom
  • from C:\Muldrop\Bsbdlfut.emm_0 to C:\Muldrop\QnNiZGxmdXQuZW1tXzA=.fantom
  • from C:\Muldrop\Bmvf ijmmt.kqh_0 to C:\Muldrop\Qm12ZiBpam1tdC5rcWhfMA==.fantom
  • from C:\Muldrop\BsbdlDfm.sfh_0 to C:\Muldrop\QnNiZGxEZm0uc2ZoXzA=.fantom
  • from C:\Muldrop\BsbdlEoh.img_0 to C:\Muldrop\QnNiZGxFb2guaW1nXzA=.fantom
  • from C:\Muldrop\cmvf.ise_0 to C:\Muldrop\Y212Zi5pc2VfMA==.fantom
  • from C:\Muldrop\CnqEoh.img_0 to C:\Muldrop\Q25xRW9oLmltZ18w.fantom
  • from C:\Muldrop\CnqRvt.img_0 to C:\Muldrop\Q25xUnZ0LmltZ18w.fantom
  • from C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9NenBlcHcuc2ZoXzE=.fantom
  • from C:\Muldrop\cmbdl_tfabm.ise_0 to C:\Muldrop\Y21iZGxfdGZhYm0uaXNlXzA=.fantom
  • from C:\Muldrop\CmfbsPmvhjotCbdif.dne_0 to C:\Muldrop\Q21mYnNQbXZoam90Q2JkaWYuZG5lXzA=.fantom
  • from C:\Muldrop\CONFIG.SYS_0 to C:\Muldrop\Q09ORklHLlNZU18w.fantom
  • from C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fR2Zzb2pkaWZvbHAuc2ZoXzE=.fantom
  • from C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fU2JlcHdway5zZmhfMA==.fantom
  • from C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fU2JlcHdway5zZmhfMQ==.fantom
  • from C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fYmVuam9fZnR0cV9zdi5zZmhfMA==.fantom
  • from C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fYmVuam9fZnR0cV9zdi5zZmhfMQ==.fantom
  • from C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fR2Zzb2pkaWZvbHAuc2ZoXzA=.fantom
  • from C:\Muldrop\CbtfRvt.moh_0 to C:\Muldrop\Q2J0ZlJ2dC5tb2hfMA==.fantom
  • from C:\Muldrop\CLOCALE.CPP_0 to C:\Muldrop\Q0xPQ0FMRS5DUFBfMA==.fantom
  • from C:\Muldrop\CLOCALE.H_0 to C:\Muldrop\Q0xPQ0FMRS5IXzA=.fantom
  • from C:\Muldrop\CbtfEoh.img_0 to C:\Muldrop\Q2J0ZkVvaC5pbWdfMA==.fantom
  • from C:\Muldrop\CbtfEoh.moh_0 to C:\Muldrop\Q2J0ZkVvaC5tb2hfMA==.fantom
  • from C:\Muldrop\CbtfRvt.img_0 to C:\Muldrop\Q2J0ZlJ2dC5pbWdfMA==.fantom
  • from C:\Muldrop\cmbdl.ise_0 to C:\Muldrop\Y21iZGwuaXNlXzA=.fantom
  • from C:\Muldrop\cmbdl_gspn_kvmz.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9rdm16LnNmaF8w.fantom
  • from C:\Muldrop\cmbdl_gspn_kvmz.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9rdm16LnNmaF8x.fantom
  • from C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9NenBlcHcuc2ZoXzA=.fantom
  • from C:\Muldrop\cmbdl_bz.ise_0 to C:\Muldrop\Y21iZGxfYnouaXNlXzA=.fantom
  • from C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9GcG9ic2Z3LnNmaF8w.fantom
  • from C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9GcG9ic2Z3LnNmaF8x.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGxhY2VzLnNxbGl0ZQ==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pluginreg.dat to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGx1Z2lucmVnLmRhdA==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cHJlZnMuanM=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\localstore.rdf to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bG9jYWxzdG9yZS5yZGY=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\mimeTypes.rdf to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bWltZVR5cGVzLnJkZg==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGVybWlzc2lvbnMuc3FsaXRl.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.json to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VhcmNoLmpzb24=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2Vzc2lvbnN0b3JlLmpz.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2lnbm9ucy5zcWxpdGU=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\d2ViYXBwc3N0b3JlLnNxbGl0ZQ==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VhcmNoLnNxbGl0ZQ==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VjbW9kLmRi.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2Vzc2lvbnN0b3JlLmJhaw==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y2VydDguZGI=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y2hyb21lYXBwc3N0b3JlLnNxbGl0ZQ==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\compatibility.ini to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29tcGF0aWJpbGl0eS5pbmk=.fantom
  • from %APPDATA%\winscp.rnd to %APPDATA%\d2luc2NwLnJuZA==.fantom
  • from %APPDATA%\Mozilla\Firefox\profiles.ini to %APPDATA%\Mozilla\Firefox\cHJvZmlsZXMuaW5p.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Ym9va21hcmtzLmh0bWw=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29udGVudC1wcmVmcy5zcWxpdGU=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZXh0ZW5zaW9ucy5zcWxpdGU=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Zm9ybWhpc3Rvcnkuc3FsaXRl.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\a2V5My5kYg==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29va2llcy5zcWxpdGU=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZG93bmxvYWRzLnNxbGl0ZQ==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ini to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZXh0ZW5zaW9ucy5pbmk=.fantom
  • from C:\Muldrop\7aTpFbs.joj_0 to C:\Muldrop\N2FUcEZicy5qb2pfMA==.fantom
  • from C:\Muldrop\Amjho.emm_0 to C:\Muldrop\QW1qaG8uZW1tXzA=.fantom
  • from C:\Muldrop\Amjho.nbq_0 to C:\Muldrop\QW1qaG8ubmJxXzA=.fantom
  • from C:\Muldrop\7aS2.tgy_0 to C:\Muldrop\N2FTMi50Z3lfMA==.fantom
  • from C:\Muldrop\7aS2dpo.tgy_0 to C:\Muldrop\N2FTMmRwby50Z3lfMA==.fantom
  • from C:\Muldrop\7aSD.tgy_0 to C:\Muldrop\N2FTRC50Z3lfMA==.fantom
  • from C:\Muldrop\AmjhoEoh.moh_0 to C:\Muldrop\QW1qaG9Fb2gubW9oXzA=.fantom
  • from C:\Muldrop\AmuSdsffot.sfh_0 to C:\Muldrop\QW11U2RzZmZvdC5zZmhfMA==.fantom
  • from C:\Muldrop\AmuSfbsdi.sfh_0 to C:\Muldrop\QW11U2Zic2RpLnNmaF8w.fantom
  • from C:\Muldrop\AmuX.sfh_0 to C:\Muldrop\QW11WC5zZmhfMA==.fantom
  • from C:\Muldrop\AmjhoRvt.moh_0 to C:\Muldrop\QW1qaG9SdnQubW9oXzA=.fantom
  • from C:\Muldrop\AmuMfov.sfh_0 to C:\Muldrop\QW11TWZvdi5zZmhfMA==.fantom
  • from C:\Muldrop\AmuR.sfh_0 to C:\Muldrop\QW11Ui5zZmhfMA==.fantom
  • from C:\Muldrop\7-ZjqEoh.img_0 to C:\Muldrop\Ny1aanFFb2guaW1nXzA=.fantom
  • from C:\Muldrop\7-ZjqEoh.moh_0 to C:\Muldrop\Ny1aanFFb2gubW9oXzA=.fantom
  • from C:\Muldrop\7-ZjqFbs.emm_0 to C:\Muldrop\Ny1aanFGYnMuZW1tXzA=.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\bookmarks-2011-11-10.json to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\Ym9va21hcmtzLTIwMTEtMTEtMTAuanNvbg==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\dXNlckNocm9tZS1leGFtcGxlLmNzcw==.fantom
  • from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\dXNlckNvbnRlbnQtZXhhbXBsZS5jc3M=.fantom
  • from C:\Muldrop\7-ZjqFbs64.emm_0 to C:\Muldrop\Ny1aanFGYnM2NC5lbW1fMA==.fantom
  • from C:\Muldrop\7a.emm_1 to C:\Muldrop\N2EuZW1tXzE=.fantom
  • from C:\Muldrop\7a.tgy_0 to C:\Muldrop\N2EudGd5XzA=.fantom
  • from C:\Muldrop\7aCpo.tgy_0 to C:\Muldrop\N2FDcG8udGd5XzA=.fantom
  • from C:\Muldrop\7-ZjqRvt.img_0 to C:\Muldrop\Ny1aanFSdnQuaW1nXzA=.fantom
  • from C:\Muldrop\7-ZjqRvt.moh_0 to C:\Muldrop\Ny1aanFSdnQubW9oXzA=.fantom
  • from C:\Muldrop\7a.emm_0 to C:\Muldrop\N2EuZW1tXzA=.fantom
  • from C:\Muldrop\DsbxLjof.emm_0 to C:\Muldrop\RHNieExqb2YuZW1tXzA=.fantom
  • from C:\Muldrop\DsbxLjof.nbq_0 to C:\Muldrop\RHNieExqb2YubmJxXzA=.fantom
  • from C:\Muldrop\DsbxRvt.img_0 to C:\Muldrop\RHNieFJ2dC5pbWdfMA==.fantom
  • from C:\Muldrop\dppljft.trmjuf_0 to C:\Muldrop\ZHBwbGpmdC50cm1qdWZfMA==.fantom
  • from C:\Muldrop\DsbxEoh.img_0 to C:\Muldrop\RHNieEVvaC5pbWdfMA==.fantom
  • from C:\Muldrop\DsbxEoh.moh_0 to C:\Muldrop\RHNieEVvaC5tb2hfMA==.fantom
  • from C:\Muldrop\DsbxRvt.moh_0 to C:\Muldrop\RHNieFJ2dC5tb2hfMA==.fantom
  • from C:\Muldrop\ECbtfRvt.img_0 to C:\Muldrop\RUNidGZSdnQuaW1nXzA=.fantom
  • from C:\Muldrop\ECbtfRvt.moh_0 to C:\Muldrop\RUNidGZSdnQubW9oXzA=.fantom
  • from C:\Muldrop\Eeju.Npufqbe.sfh_0 to C:\Muldrop\RWVqdS5OcHVmcWJlLnNmaF8w.fantom
  • from C:\Muldrop\dzcfsqvol.ise_0 to C:\Muldrop\ZHpjZnNxdm9sLmlzZV8w.fantom
  • from C:\Muldrop\ECbtfEoh.img_0 to C:\Muldrop\RUNidGZFb2guaW1nXzA=.fantom
  • from C:\Muldrop\ECbtfEoh.moh_0 to C:\Muldrop\RUNidGZFb2gubW9oXzA=.fantom
  • from C:\Muldrop\dmbttjd.ise_0 to C:\Muldrop\ZG1idHRqZC5pc2VfMA==.fantom
  • from C:\Muldrop\dpmpsff.img_0 to C:\Muldrop\ZHBtcHNmZi5pbWdfMA==.fantom
  • from C:\Muldrop\dpmpsff.moh_0 to C:\Muldrop\ZHBtcHNmZi5tb2hfMA==.fantom
  • from C:\Muldrop\dibohft.uyu_0 to C:\Muldrop\ZGlib2hmdC51eXVfMA==.fantom
  • from C:\Muldrop\dispnfbqqttupsf.trmjuf_0 to C:\Muldrop\ZGlzcG5mYnFxdHR1cHNmLnRybWp1Zl8w.fantom
  • from C:\Muldrop\Djbmph.AmuDpxo.sfh_0 to C:\Muldrop\RGpibXBoLkFtdURweG8uc2ZoXzA=.fantom
  • from C:\Muldrop\dpmpsfs.emm_0 to C:\Muldrop\ZHBtcHNmcy5lbW1fMA==.fantom
  • from C:\Muldrop\dpnnpo.kbs_0 to C:\Muldrop\ZHBubnBvLmtic18w.fantom
  • from C:\Muldrop\dpnqbujcjmjuz.joj_0 to C:\Muldrop\ZHBucWJ1amNqbWp1ei5qb2pfMA==.fantom
  • from C:\Muldrop\dpoufou-qsfgt.trmjuf_0 to C:\Muldrop\ZHBvdWZvdS1xc2ZndC50cm1qdWZfMA==.fantom
  • from C:\Muldrop\dpmpsfs.fou.isd_0 to C:\Muldrop\ZHBtcHNmcy5mb3UuaXNkXzA=.fantom
  • from C:\Muldrop\dpmpsfs.img_0 to C:\Muldrop\ZHBtcHNmcy5pbWdfMA==.fantom
  • from C:\Muldrop\dpmpsfs.moh_0 to C:\Muldrop\ZHBtcHNmcy5tb2hfMA==.fantom
  • from C:\Muldrop\ENG_READ.TXT_0 to C:\Muldrop\RU5HX1JFQUQuVFhUXzA=.fantom
  • from C:\Muldrop\eomjlf.ise_0 to C:\Muldrop\ZW9tamxmLmlzZV8w.fantom
  • from C:\Muldrop\eo_mjlf.sfh_0 to C:\Muldrop\ZW9fbWpsZi5zZmhfMA==.fantom
  • from C:\Muldrop\EMfovRvt.img_0 to C:\Muldrop\RU1mb3ZSdnQuaW1nXzA=.fantom
  • from C:\Muldrop\EMfovRvt.moh_0 to C:\Muldrop\RU1mb3ZSdnQubW9oXzA=.fantom
  • from C:\Muldrop\ENG_NEWS.TXT_0 to C:\Muldrop\RU5HX05FV1MuVFhUXzA=.fantom
  • from C:\Muldrop\eo_mjlf.sfh_1 to C:\Muldrop\ZW9fbWpsZi5zZmhfMQ==.fantom
  • from C:\Muldrop\ES_ENG.LNG_0 to C:\Muldrop\RVNfRU5HLkxOR18w.fantom
  • from C:\Muldrop\ES_ENG.REG_0 to C:\Muldrop\RVNfRU5HLlJFR18w.fantom
  • from C:\Muldrop\ES_RUS.HLF_0 to C:\Muldrop\RVNfUlVTLkhMRl8w.fantom
  • from C:\Muldrop\epxompbet.trmjuf_0 to C:\Muldrop\ZXB4b21wYmV0LnRybWp1Zl8w.fantom
  • from C:\Muldrop\ESEARCH.BAT_0 to C:\Muldrop\RVNFQVJDSC5CQVRfMA==.fantom
  • from C:\Muldrop\ES_ENG.HLF_0 to C:\Muldrop\RVNfRU5HLkhMRl8w.fantom
  • from C:\Muldrop\EejuCbtf.nbq_0 to C:\Muldrop\RWVqdUNidGYubmJxXzA=.fantom
  • from C:\Muldrop\efgbvmu.ise_0 to C:\Muldrop\ZWZnYnZtdS5pc2VfMA==.fantom
  • from C:\Muldrop\efnbohmf32.emm_0 to C:\Muldrop\ZWZuYm9obWYzMi5lbW1fMA==.fantom
  • from C:\Muldrop\Eeju.SbwfAoeEyju.sfh_0 to C:\Muldrop\RWVqdS5TYndmQW9lRXlqdS5zZmhfMA==.fantom
  • from C:\Muldrop\Eeju.SbwfFjmf.sfh_0 to C:\Muldrop\RWVqdS5TYndmRmptZi5zZmhfMA==.fantom
  • from C:\Muldrop\EejuCbtf.emm_0 to C:\Muldrop\RWVqdUNidGYuZW1tXzA=.fantom
  • from C:\Muldrop\ejtlt.foh.ufnq_0 to C:\Muldrop\ZWp0bHQuZm9oLnVmbnFfMA==.fantom
  • from C:\Muldrop\EMfovDfm.sfh_0 to C:\Muldrop\RU1mb3ZEZm0uc2ZoXzA=.fantom
  • from C:\Muldrop\EMfovEoh.img_0 to C:\Muldrop\RU1mb3ZFb2guaW1nXzA=.fantom
  • from C:\Muldrop\EMfovEoh.moh_0 to C:\Muldrop\RU1mb3ZFb2gubW9oXzA=.fantom
  • from C:\Muldrop\ejtlt.svt.ufnq_0 to C:\Muldrop\ZWp0bHQuc3Z0LnVmbnFfMA==.fantom
  • from C:\Muldrop\EMfov.emm_0 to C:\Muldrop\RU1mb3YuZW1tXzA=.fantom
  • from C:\Muldrop\EMfov.nbq_0 to C:\Muldrop\RU1mb3YubmJxXzA=.fantom
  • from C:\Muldrop\dbubmph-shc.ynm_0 to C:\Muldrop\ZGJ1Ym1waC1zaGMueW5tXzA=.fantom
  • from C:\Muldrop\dbubmph-ufyu.ynm_0 to C:\Muldrop\ZGJ1Ym1waC11Znl1LnlubV8w.fantom
  • from C:\Muldrop\dbubmph.ynm_0 to C:\Muldrop\ZGJ1Ym1waC55bm1fMA==.fantom
  • from C:\Muldrop\CusmSijguX.sfh_0 to C:\Muldrop\Q3VzbVNpamd1WC5zZmhfMA==.fantom
  • from C:\Muldrop\Cvtupnjaf Ljolt.vsm_0 to C:\Muldrop\Q3Z0dXBuamFmIExqb2x0LnZzbV8w.fantom
  • from C:\Muldrop\dbubmph-dpotpmf.ynm_0 to C:\Muldrop\ZGJ1Ym1waC1kcG90cG1mLnlubV8w.fantom
  • from C:\Muldrop\ddtrm.isd_0 to C:\Muldrop\ZGR0cm0uaXNkXzA=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_1 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzE=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_2 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzI=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_3 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzM=.fantom
  • from C:\Muldrop\Dfgbvmu165.sfh_0 to C:\Muldrop\RGZnYnZtdTE2NS5zZmhfMA==.fantom
  • from C:\Muldrop\dfsu8.ec_0 to C:\Muldrop\ZGZzdTguZWNfMA==.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_0 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzA=.fantom
  • from C:\Muldrop\CpnqRvt.moh_0 to C:\Muldrop\Q3BucVJ2dC5tb2hfMA==.fantom
  • from C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_0 to C:\Muldrop\Q3BucXNmdHRmZSAoYWpxcWZlKSBGcG1lZnMuWkZTZm9lVHBUYnNoZnVfMA==.fantom
  • from C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_1 to C:\Muldrop\Q3BucXNmdHRmZSAoYWpxcWZlKSBGcG1lZnMuWkZTZm9lVHBUYnNoZnVfMQ==.fantom
  • from C:\Muldrop\Cpnqbsf.emm_0 to C:\Muldrop\Q3BucWJzZi5lbW1fMA==.fantom
  • from C:\Muldrop\Cpnqbsf.nbq_0 to C:\Muldrop\Q3BucWJzZi5uYnFfMA==.fantom
  • from C:\Muldrop\CpnqEoh.moh_0 to C:\Muldrop\Q3BucUVvaC5tb2hfMA==.fantom
  • from C:\Muldrop\cpplnbslt-2011-11-10.ktpo_0 to C:\Muldrop\Y3BwbG5ic2x0LTIwMTEtMTEtMTAua3Rwb18w.fantom
  • from C:\Muldrop\CusmDfm.sfh_0 to C:\Muldrop\Q3VzbURmbS5zZmhfMA==.fantom
  • from C:\Muldrop\CusmF10.sfh_0 to C:\Muldrop\Q3VzbUYxMC5zZmhfMA==.fantom
  • from C:\Muldrop\CusmR.sfh_0 to C:\Muldrop\Q3VzbVIuc2ZoXzA=.fantom
  • from C:\Muldrop\cpplnbslt.iunm_0 to C:\Muldrop\Y3BwbG5ic2x0Lml1bm1fMA==.fantom
  • from C:\Muldrop\CREGEXP.CPP_0 to C:\Muldrop\Q1JFR0VYUC5DUFBfMA==.fantom
  • from C:\Muldrop\CREGEXP.H_0 to C:\Muldrop\Q1JFR0VYUC5IXzA=.fantom
  • from C:\Muldrop\dibohfmph_17 to C:\Muldrop\ZGlib2hmbXBoXzE3.fantom
  • from C:\Muldrop\dibohfmph_2 to C:\Muldrop\ZGlib2hmbXBoXzI=.fantom
  • from C:\Muldrop\dibohfmph_3 to C:\Muldrop\ZGlib2hmbXBoXzM=.fantom
  • from C:\Muldrop\dibohfmph_14 to C:\Muldrop\ZGlib2hmbXBoXzE0.fantom
  • from C:\Muldrop\dibohfmph_15 to C:\Muldrop\ZGlib2hmbXBoXzE1.fantom
  • from C:\Muldrop\dibohfmph_16 to C:\Muldrop\ZGlib2hmbXBoXzE2.fantom
  • from C:\Muldrop\dibohfmph_4 to C:\Muldrop\ZGlib2hmbXBoXzQ=.fantom
  • from C:\Muldrop\dibohfmph_8 to C:\Muldrop\ZGlib2hmbXBoXzg=.fantom
  • from C:\Muldrop\dibohfmph_9 to C:\Muldrop\ZGlib2hmbXBoXzk=.fantom
  • from C:\Muldrop\dibohfmph_foh_0 to C:\Muldrop\ZGlib2hmbXBoX2ZvaF8w.fantom
  • from C:\Muldrop\dibohfmph_5 to C:\Muldrop\ZGlib2hmbXBoXzU=.fantom
  • from C:\Muldrop\dibohfmph_6 to C:\Muldrop\ZGlib2hmbXBoXzY=.fantom
  • from C:\Muldrop\dibohfmph_7 to C:\Muldrop\ZGlib2hmbXBoXzc=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_7 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzc=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_8 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzg=.fantom
  • from C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_0 to C:\Muldrop\RGZ0bHVwcSAoZHNmYnVmIHRpcHN1ZHZ1KS5EZnRsTGpvbF8w.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_4 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzQ=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_5 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzU=.fantom
  • from C:\Muldrop\Dftdsjqu.jpo_6 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzY=.fantom
  • from C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_1 to C:\Muldrop\RGZ0bHVwcSAoZHNmYnVmIHRpcHN1ZHZ1KS5EZnRsTGpvbF8x.fantom
  • from C:\Muldrop\dibohfmph_11 to C:\Muldrop\ZGlib2hmbXBoXzEx.fantom
  • from C:\Muldrop\dibohfmph_12 to C:\Muldrop\ZGlib2hmbXBoXzEy.fantom
  • from C:\Muldrop\dibohfmph_13 to C:\Muldrop\ZGlib2hmbXBoXzEz.fantom
  • from C:\Muldrop\dibohfmph_0 to C:\Muldrop\ZGlib2hmbXBoXzA=.fantom
  • from C:\Muldrop\dibohfmph_1 to C:\Muldrop\ZGlib2hmbXBoXzE=.fantom
  • from C:\Muldrop\dibohfmph_10 to C:\Muldrop\ZGlib2hmbXBoXzEw.fantom
Network activity:
Connects to:
  • 'go#.gl':80
  • 'wp#d':80
TCP:
HTTP GET requests:
  • http://go#.gl/5Z2NSx
  • http://11#.#11.111.1/wpad.dat via wp#d
UDP:
  • DNS ASK go#.gl
  • DNS ASK wp#d

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

The Russian developer of Dr.Web anti-viruses
Doctor Web has been developing anti-virus software since 1992
Dr.Web is trusted by users around the world in 200+ countries
The company has delivered an anti-virus as a service since 2007
24/7 tech support

Dr.Web © Doctor Web
2003 — 2021

Doctor Web is the Russian developer of Dr.Web anti-virus software. Dr.Web anti-virus software has been developed since 1992.

2-12А, 3rd street Yamskogo polya, Moscow, Russia, 125124