Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'nnhzqfvq' = '%ALLUSERSPROFILE%\Documents\elburmdg.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nnhzqfvq' = '%ALLUSERSPROFILE%\Documents\elburmdg.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'cmtjrqvf' = '%ALLUSERSPROFILE%\Documents\My Videos\wvxqwyzr.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'dmlukqpf' = '%HOMEPATH%\My Documents\My Music\zrcskktn.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fmnqmiwf' = '%HOMEPATH%\My Documents\ampqixqn.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fmnqmiwf' = '%HOMEPATH%\My Documents\ampqixqn.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'dmlukqpf' = '%HOMEPATH%\My Documents\My Music\zrcskktn.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rdlagqew' = '%ALLUSERSPROFILE%\Documents\My Music\tobtopxj.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'edlnwygj' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'edlnwygj' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'rdlagqew' = '%ALLUSERSPROFILE%\Documents\My Music\tobtopxj.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cmtjrqvf' = '%ALLUSERSPROFILE%\Documents\My Videos\wvxqwyzr.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ayyebxdu' = '%ALLUSERSPROFILE%\Documents\My Pictures\zyoigeuo.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ayyebxdu' = '%ALLUSERSPROFILE%\Documents\My Pictures\zyoigeuo.exe'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\elburmdg.exe
- %WINDIR%\Tasks\nnhzqfvq.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\wvxqwyzr.exe
- %WINDIR%\Tasks\dmlukqpf.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\ampqixqn.exe
- %WINDIR%\Tasks\fmnqmiwf.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\zrcskktn.exe
- %WINDIR%\Tasks\rdlagqew.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\<File name>.exe
- %WINDIR%\Tasks\edlnwygj.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\tobtopxj.exe
- %WINDIR%\Tasks\cmtjrqvf.job
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\zyoigeuo.exe
- %WINDIR%\Tasks\ayyebxdu.job
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.ap19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.ap19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- C:\Far2\Plugins\FTP\Notes_rus.ap19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\plugin.ap19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.ap19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- C:\Far2\Plugins\FTP\FtpCmds.ap19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.ap19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\Plugins\FTP\Notes.ap19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.ap19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.ap19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Plugins\7-Zip\far7z.ap19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Plugins\Colorer\catalog.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\Colorer\hrc\changes.ap19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.ap19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.ap19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.ap19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.ap19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.ap19
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.new
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
- <SYSTEM32>\dllcache\sam.sdf.new
- %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.ap19
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.ap19
- %ProgramFiles%\FireFox\blocklist.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
- %ProgramFiles%\FireFox\blocklist.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- C:\Documents and Settings\Default User\Templates\winword2.ap19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- C:\Documents and Settings\Default User\Templates\winword.ap19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- %ALLUSERSPROFILE%\Documents\My Videos\wvxqwyzr.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\zyoigeuo.exe
- %ALLUSERSPROFILE%\Documents\My Music\tobtopxj.exe
- %ALLUSERSPROFILE%\Documents\elburmdg.exe
- %HOMEPATH%\My Documents\!!! Readme For Decrypt !!!.txt
- %HOMEPATH%\My Documents\ampqixqn.exe
- %HOMEPATH%\My Documents\My Music\zrcskktn.exe
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Templates\excel4.ap19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.ap19
- C:\Documents and Settings\Default User\Templates\winword.a19
- C:\Documents and Settings\Default User\Templates\quattro.ap19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.ap19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- C:\Documents and Settings\Default User\Templates\excel.ap19
- C:\Documents and Settings\Default User\Templates\excel.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.ap19
- C:\Far2\Documentation\eng\Far.FAQ.ap19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- C:\Far2\Documentation\eng\Bug.Report.ap19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Plugins.Review.ap19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\Plugins.Install.ap19
- C:\Far2\Addons\README.a19
- %HOMEPATH%\Templates\winword2.ap19
- %HOMEPATH%\Templates\winword2.a19
- C:\Far2\Addons\README.ap19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\eng\Arc.Support.ap19
- C:\Far2\Documentation\eng\Arc.Support.a19
- C:\Far2\Documentation\rus\Plugins.Install.ap19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Documentation\rus\Far.FAQ.ap19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\rus\TechInfo.ap19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Documentation\rus\Plugins.Review.ap19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Documentation\eng\TechInfo.ap19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\rus\Arc.Support.ap19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Documentation\rus\Bug.Report.ap19
- C:\Far2\Documentation\rus\Bug.Report.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- <LS_APPDATA>\IconCache.ap19
- <LS_APPDATA>\IconCache.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- %HOMEPATH%\Templates\powerpnt.ap19
- %HOMEPATH%\Templates\powerpnt.a19
- %HOMEPATH%\Templates\excel4.ap19
- %HOMEPATH%\Templates\quattro.a19
- %HOMEPATH%\Templates\winword.ap19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\quattro.ap19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.ap19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.ap19
- %HOMEPATH%\Templates\excel4.a19
- %HOMEPATH%\Templates\excel.ap19
- %HOMEPATH%\Templates\excel.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\rus\Bug.Report.a19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
- %ProgramFiles%\FireFox\blocklist.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
- C:\Documents and Settings\Default User\Templates\excel.a19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- C:\Documents and Settings\Default User\Templates\winword.a19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\zyoigeuo.exe
- %ALLUSERSPROFILE%\Documents\My Videos\wvxqwyzr.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\wvxqwyzr.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\zyoigeuo.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\<File name>.exe
- %ALLUSERSPROFILE%\Documents\My Music\tobtopxj.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\tobtopxj.exe
- %ALLUSERSPROFILE%\Documents\elburmdg.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\ampqixqn.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- %HOMEPATH%\My Documents\ampqixqn.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\elburmdg.exe
- %HOMEPATH%\My Documents\My Music\zrcskktn.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\zrcskktn.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- %HOMEPATH%\Templates\quattro.a19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\winword2.a19
- %HOMEPATH%\Templates\powerpnt.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- %HOMEPATH%\Templates\excel.a19
- %HOMEPATH%\Templates\excel4.a19
- C:\Far2\Addons\README.a19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Arc.Support.a19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- <LS_APPDATA>\IconCache.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
- %ProgramFiles%\FireFox\blocklist.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- C:\Documents and Settings\Default User\Templates\excel.a19
- C:\Documents and Settings\Default User\Templates\winword.a19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\eng\Arc.Support.a19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Documentation\rus\Bug.Report.a19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Addons\README.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- <LS_APPDATA>\IconCache.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- %HOMEPATH%\Templates\quattro.a19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\winword2.a19
- %HOMEPATH%\Templates\excel.a19
- %HOMEPATH%\Templates\excel4.a19
- %HOMEPATH%\Templates\powerpnt.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19
- %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
- ClassName: 'SysTreeView32' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: ''