Trojan.Encoder.15319

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'msvsupport' = '%APPDATA%\Support\msvsupport.exe'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\#How_Decrypt_Files.txt

Malicious functions:

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Executes the following:

'<SYSTEM32>\cmd.exe' /C Bcdedit.exe /set {default} recoveryenabled no
'<SYSTEM32>\cmd.exe' /C Bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures
'<SYSTEM32>\cmd.exe' /C vssadmin.exe delete shadows /all /Quiet
'<SYSTEM32>\cmd.exe' /C WMIC.exe shadowcopy delete

Modifies file system:

Creates the following files:

C:\Far2\Plugins\Colorer\bin\#How_Decrypt_Files.txt
C:\Far2\Plugins\Colorer\#How_Decrypt_Files.txt
C:\Far2\Plugins\Colorer\hrc\auto\types\#How_Decrypt_Files.txt
C:\Far2\Plugins\Colorer\hrd\console\contrib\#How_Decrypt_Files.txt
C:\Far2\Plugins\Colorer\hrd\#How_Decrypt_Files.txt
C:\Far2\Plugins\AutoWrap\#How_Decrypt_Files.txt
C:\Far2\Documentation\rus\#How_Decrypt_Files.txt
C:\Far2\Documentation\eng\#How_Decrypt_Files.txt
C:\Far2\Encyclopedia\#How_Decrypt_Files.txt
C:\Far2\Plugins\Align\#How_Decrypt_Files.txt
C:\Far2\FExcept\#How_Decrypt_Files.txt
C:\Muldrop\#How_Decrypt_Files.txt
C:\Far2\PluginSDK\Headers.pas\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DAO\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1025\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\#How_Decrypt_Files.txt
C:\Far2\PluginSDK\Headers.c\#How_Decrypt_Files.txt
C:\Far2\Plugins\ExtSearch\doc\#How_Decrypt_Files.txt
C:\Far2\Plugins\ExtSearch\#How_Decrypt_Files.txt
C:\Far2\Plugins\ExtSearch\keys\#How_Decrypt_Files.txt
C:\Far2\Plugins\WinSCP\#How_Decrypt_Files.txt
C:\Far2\Plugins\ExtSearch\sources\RegExp\#How_Decrypt_Files.txt
C:\Far2\Addons\XLat\Russian\#How_Decrypt_Files.txt
%HOMEPATH%\My Documents\#How_Decrypt_Files.txt
%HOMEPATH%\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
%HOMEPATH%\My Documents\My Music\#How_Decrypt_Files.txt
%HOMEPATH%\SendTo\#How_Decrypt_Files.txt
%HOMEPATH%\My Documents\My Pictures\#How_Decrypt_Files.txt
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\#How_Decrypt_Files.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\#How_Decrypt_Files.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\#How_Decrypt_Files.txt
<LS_APPDATA>\VMware\#How_Decrypt_Files.txt
%HOMEPATH%\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
%HOMEPATH%\Local Settings\History\#How_Decrypt_Files.txt
C:\Far2\Addons\Macros\#How_Decrypt_Files.txt
C:\Far2\Addons\Colors\#How_Decrypt_Files.txt
C:\Far2\Addons\SetUp\#How_Decrypt_Files.txt
C:\Far2\Addons\XLat\#How_Decrypt_Files.txt
C:\Far2\Addons\Shell\#How_Decrypt_Files.txt
C:\Far2\Addons\#How_Decrypt_Files.txt
%HOMEPATH%\Start Menu\Programs\#How_Decrypt_Files.txt
%HOMEPATH%\Start Menu\#How_Decrypt_Files.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
C:\Far2\#How_Decrypt_Files.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\#How_Decrypt_Files.txt
<SYSTEM32>\dllcache\sam.sdf.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\#How_Decrypt_Files.txt
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.new
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\System\#How_Decrypt_Files.txt
%CommonProgramFiles%\System\Ole DB\#How_Decrypt_Files.txt
%CommonProgramFiles%\System\msadc\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\#How_Decrypt_Files.txt
<SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\#How_Decrypt_Files.txt
%TEMP%\tmp3.tmp
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\#How_Decrypt_Files.txt
%ProgramFiles%\FireFox\chrome\browser\content\browser\history\#How_Decrypt_Files.txt
<SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
%ProgramFiles%\FireFox\chrome\browser\content\browser\migration\#How_Decrypt_Files.txt
%CommonProgramFiles%\Services\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\2052\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1042\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\3082\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\Speech\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\MSInfo\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1041\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1031\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1028\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1040\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\DW\1036\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\Web Folders\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\MSSoap\Binaries\Resources\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\MSSoap\Binaries\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\VGX\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\Stationery\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\Speech\1033\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\TextConv\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\VC\#How_Decrypt_Files.txt
%CommonProgramFiles%\Microsoft Shared\Triedit\#How_Decrypt_Files.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Cookies\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Application Data\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\Programs\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\SendTo\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Start Menu\Programs\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Start Menu\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\History\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\DRM\#How_Decrypt_Files.txt
C:\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\00000.ini
<Current directory>\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\#How_Decrypt_Files.txt
%TEMP%\tmp2.tmp
%APPDATA%\Microsoft\Protect\CREDHIST
%APPDATA%\Support\msvsupport.exe
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\56a892d0db41f053ed32182ab42a030a_23ef5514-3059-436f-a4a7-4cefaab20eb1
%TEMP%\tmp1.tmp
%APPDATA%\Microsoft\Microsoft_Sam_Hash.ini
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Documents\My Music\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Documents\My Pictures\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Documents\My Videos\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Documents\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\#How_Decrypt_Files.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Protect\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Media Player\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\#How_Decrypt_Files.txt
%APPDATA%\Mozilla\Firefox\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Windows\Themes\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\#How_Decrypt_Files.txt
%HOMEPATH%\#How_Decrypt_Files.txt
%APPDATA%\Microsoft\Address Book\#How_Decrypt_Files.txt
%APPDATA%\#How_Decrypt_Files.txt
%HOMEPATH%\Local Settings\#How_Decrypt_Files.txt
%HOMEPATH%\Favorites\Links\#How_Decrypt_Files.txt
<LS_APPDATA>\#How_Decrypt_Files.txt
<LS_APPDATA>\Microsoft\Windows Media\9.0\#How_Decrypt_Files.txt
<LS_APPDATA>\Microsoft\Media Player\#How_Decrypt_Files.txt
%HOMEPATH%\Favorites\#How_Decrypt_Files.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\#How_Decrypt_Files.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\#How_Decrypt_Files.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\#How_Decrypt_Files.txt
%HOMEPATH%\Cookies\#How_Decrypt_Files.txt
%APPDATA%\Support\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\History\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Cookies\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\History\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\Local Settings\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\#How_Decrypt_Files.txt
C:\Documents and Settings\NetworkService\#How_Decrypt_Files.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\#How_Decrypt_Files.txt

Deletes the following files:

%TEMP%\tmp2.tmp
%TEMP%\tmp3.tmp
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\56a892d0db41f053ed32182ab42a030a_23ef5514-3059-436f-a4a7-4cefaab20eb1
%TEMP%\tmp1.tmp

Moves the following files:

from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C0-mPQT2Mt8Dj.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C5-6XJl14f1nWeGG.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C5-jA0IcLHYYkikZ.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C1-kIOAJLkiwTV.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\C4-zANPrxcb50N5.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C8-RmISFKwLQGtfrYG.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C4-oqxrhCBA63wF.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C2-1Z29yMckfEW.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C2-cO8tpVulclf.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-syRURKHE3zcRi.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C5-6vKc7OMhcUrOa.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C0-WKU3eGgFMx.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C8-XenYc8U8pX9Vcfg.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C3-Mcs6PCCKRRbb.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-8BsX4lwimZ2aa9r.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-GnGdbqwSINtk72L.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-IuIwJr5raeeYCVX.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-Z7HgOyP8jhR7Gj1.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-MGnyQr0aeL2KYr9.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-VrC5yw0KA0.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-0cPvicElerg.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C5-C8HWW2h6eec3t.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C7-QaYpQpw0nbnSFKs.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C6-wk3ZB5fKJIkY8u.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\C6-9tBu7yRI676RhS.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-XBJ2wpcRXIj.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\C3-ErIz0h0m7xBg.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\C2-GzLIriHBOEx.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\search\C1-wkiye0HVFAt.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\search\C6-shi2VzMRlTQ4gf.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\search\C6-Ti6ycxKwuJfPOF.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\C8-1bnjzqrbzkDM5E0.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C8-TwuozsypucLnj1m.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C1-kKyCLren0XB.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-acLF7nBtE1Vuo.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.css to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C0-MJFyuRzduj.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\actionicon-tab.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C8-wWt9HFecFrDWr3n.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\appmenu-dropmarker.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C1-il8lQcGuWt0.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.css to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C7-epXExP0mXMWWJA.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.css to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C6-JCODBNC1kt9eO8.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.css to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C3-Ep6j5LT4mdn5.Infinite
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore-window-icon.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\C8-9f3TC0Pa2fYPRax.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-IeOuNYoIChQx.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C3-JxhQLPcAgHIg.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C2-PoFcGmWzrDd.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C8-umzjCWFyjFUJyll.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C3-O8vFCZ2PYfZX.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C3-wDW7rNX2bX02.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C0-sfwQUV8ZSy.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-R9MaEgz6DMTwT.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C2-xIrK1vjHj3Q.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C6-lSC53q8yXFy5b2.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C6-1W8VQwKqP3zpZl.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C8-KSw99km3txIpNUV.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C8-wH3tzt54qUSFNmP.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-HDfyjkBTEyj3.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-D2Ua6p435b.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C3-sZREafSzMzRW.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\C2-TaoBheQVUph.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C4-rG9icod8sPZn.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C7-Nj8XLtWxy8QpeL.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-3I4BpjvuGW.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-ChB58yFAa2t.Infinite
from %ProgramFiles%\FireFox\README.txt to %ProgramFiles%\FireFox\C1-zf8HAAW4SO.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-kOvdXEchOJA.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-ITWUC30JRAk.Infinite
from %ProgramFiles%\FireFox\js.log to %ProgramFiles%\FireFox\C2-xX6xS0NfA8V.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\C5-Di1V91tOUarjA.Infinite
from %ProgramFiles%\FireFox\blocklist.xml to %ProgramFiles%\FireFox\C6-9B1aaizljGq2Tn.Infinite
from %ProgramFiles%\FireFox\greprefs.js to %ProgramFiles%\FireFox\C6-9Z1Rg5fSYE3AmK.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C5-psUyVOdyHKR4h.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-6xEqtWV53f.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-9t2wLhxy8d.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-Znk78GlsWzS.Infinite
from %APPDATA%\Microsoft\Address Book\%USERNAME%.wab to %APPDATA%\Microsoft\Address Book\C0-4RBg60gyvQ.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-XgimPFdUEig.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C1-1uQRiJvlfQy.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C1-zThV5VIwghH.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pluginreg.dat to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-Yl31YookMDx.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C3-8eNfxlfrEmRH.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C1-RO7dPilLdph.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-hmLakfn6yC.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C7-0CKSJZlrbDwCp01.Infinite
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C7-C87YlkDlgBc4DL9.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-0Xkg9hh150.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-BfmzqipOMPDZ8rf.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-DmpIZkxndgzMDM.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-Wuu0XO6SKvOIjOd.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\license.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-qL043W3I0xj.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-tlUsiPzZuo.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C4-hvpckKNGi2vB.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-4kiGMrKE90PGiI.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-UMxLBbzTxTtM.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C4-8zntmtb1hhxqu.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-Q8sjlYjgOvMmQ.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-rX3AJQ3E8O.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C4-gV7g7VkRjIEG.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-PoZDnhuouLU4dW.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-L7oWhORYw8WncW.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-widget-left.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-C1z0N1wB6Cc.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-0G0FkJpFkK.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-bzcCG3xfxMMv.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon-small.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C4-XkXaqzhtOopLi.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-tUtSJ18oZ1.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-wQfYlCZify.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-ppuLFBsQvHjUZZ.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-fcifmQu0Ls7.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\inspector.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-hjkyUR3Yc0.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-aZtGbDKqydf1.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-IrXLINp1G9x.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-kHWDrHnltA.Infinite
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-90uO3JM6McHpj.Infinite

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial