Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Compare\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrd\console\contrib\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrd\console\#How_Decrypt_Files.txt
- C:\Far2\Plugins\EMenu\#How_Decrypt_Files.txt
- C:\Far2\Plugins\EditCase\#How_Decrypt_Files.txt
- C:\Far2\Plugins\DrawLine\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrd\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\bin\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Brackets\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrc\auto\types\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrc\auto\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Colorer\hrc\#How_Decrypt_Files.txt
- C:\Far2\Plugins\HlfViewer\#How_Decrypt_Files.txt
- C:\Far2\Plugins\FTP\lib\#How_Decrypt_Files.txt
- C:\Far2\Plugins\FTP\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ProcList\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Network\#How_Decrypt_Files.txt
- C:\Far2\Plugins\MacroView\#How_Decrypt_Files.txt
- C:\Far2\Plugins\FileCase\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ExtSearch\keys\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ExtSearch\doc\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ExtSearch\#How_Decrypt_Files.txt
- C:\Far2\Plugins\FarCmds\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ExtSearch\sources\RegExp\#How_Decrypt_Files.txt
- C:\Far2\Plugins\ExtSearch\sources\#How_Decrypt_Files.txt
- C:\Far2\Addons\#How_Decrypt_Files.txt
- C:\Far2\#How_Decrypt_Files.txt
- %HOMEPATH%\Templates\#How_Decrypt_Files.txt
- C:\Far2\Addons\Colors\Default Highlighting\#How_Decrypt_Files.txt
- C:\Far2\Addons\Colors\Custom Highlighting\#How_Decrypt_Files.txt
- C:\Far2\Addons\Colors\#How_Decrypt_Files.txt
- %TEMP%\tmp2.tmp
- %HOMEPATH%\Start Menu\Programs\#How_Decrypt_Files.txt
- %HOMEPATH%\Start Menu\#How_Decrypt_Files.txt
- %HOMEPATH%\SendTo\#How_Decrypt_Files.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\#How_Decrypt_Files.txt
- C:\Far2\Plugins\7-Zip\#How_Decrypt_Files.txt
- C:\Far2\FExcept\#How_Decrypt_Files.txt
- C:\Far2\Encyclopedia\#How_Decrypt_Files.txt
- C:\Far2\Plugins\AutoWrap\#How_Decrypt_Files.txt
- C:\Far2\Plugins\arclite\#How_Decrypt_Files.txt
- C:\Far2\Plugins\Align\#How_Decrypt_Files.txt
- C:\Far2\Documentation\rus\#How_Decrypt_Files.txt
- C:\Far2\Addons\Shell\#How_Decrypt_Files.txt
- C:\Far2\Addons\SetUp\#How_Decrypt_Files.txt
- C:\Far2\Addons\Macros\#How_Decrypt_Files.txt
- C:\Far2\Documentation\eng\#How_Decrypt_Files.txt
- C:\Far2\Addons\XLat\Russian\#How_Decrypt_Files.txt
- C:\Far2\Addons\XLat\#How_Decrypt_Files.txt
- C:\Far2\Plugins\TmpPanel\#How_Decrypt_Files.txt
- %CommonProgramFiles%\System\Ole DB\#How_Decrypt_Files.txt
- %CommonProgramFiles%\System\msadc\#How_Decrypt_Files.txt
- %CommonProgramFiles%\System\ado\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\#How_Decrypt_Files.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.new
- %CommonProgramFiles%\System\#How_Decrypt_Files.txt
- %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\MSSoap\Binaries\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Services\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\history\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\places\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\#How_Decrypt_Files.txt
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- <SYSTEM32>\dllcache\sam.sdf.new
- %ProgramFiles%\FireFox\chrome\browser\content\branding\#How_Decrypt_Files.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\#How_Decrypt_Files.txt
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp3.tmp
- %CommonProgramFiles%\Microsoft Shared\DW\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1031\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1028\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1041\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1040\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1036\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1025\#How_Decrypt_Files.txt
- C:\Far2\PluginSDK\Headers.pas\#How_Decrypt_Files.txt
- C:\Far2\PluginSDK\Headers.c\#How_Decrypt_Files.txt
- C:\Far2\Plugins\WinSCP\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DAO\#How_Decrypt_Files.txt
- C:\Muldrop\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\VC\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\Triedit\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\TextConv\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\Web Folders\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\VGX\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\Stationery\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\3082\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\2052\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1042\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\Speech\1033\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\Speech\#How_Decrypt_Files.txt
- %CommonProgramFiles%\Microsoft Shared\MSInfo\#How_Decrypt_Files.txt
- %TEMP%\tmp1.tmp
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\History\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Cookies\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Application Data\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Templates\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Start Menu\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\SendTo\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\#How_Decrypt_Files.txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Application Data\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Microsoft_Sam_Hash.ini
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\5062867b20312591b1ccda1f666024ca_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %APPDATA%\Microsoft\Protect\CREDHIST
- <Current directory>\#How_Decrypt_Files.txt
- C:\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\00000.ini
- %ALLUSERSPROFILE%\Start Menu\Programs\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\DRM\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Videos\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Music\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\#How_Decrypt_Files.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\#How_Decrypt_Files.txt
- %HOMEPATH%\Favorites\Links\#How_Decrypt_Files.txt
- %HOMEPATH%\Favorites\#How_Decrypt_Files.txt
- %HOMEPATH%\Cookies\#How_Decrypt_Files.txt
- <LS_APPDATA>\Microsoft\Media Player\#How_Decrypt_Files.txt
- <LS_APPDATA>\#How_Decrypt_Files.txt
- %HOMEPATH%\Local Settings\#How_Decrypt_Files.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Windows\Themes\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Protect\#How_Decrypt_Files.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\#How_Decrypt_Files.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\#How_Decrypt_Files.txt
- %APPDATA%\Mozilla\Firefox\#How_Decrypt_Files.txt
- %HOMEPATH%\My Documents\#How_Decrypt_Files.txt
- %HOMEPATH%\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\#How_Decrypt_Files.txt
- %HOMEPATH%\Recent\#How_Decrypt_Files.txt
- %HOMEPATH%\My Documents\My Pictures\#How_Decrypt_Files.txt
- %HOMEPATH%\My Documents\My Music\#How_Decrypt_Files.txt
- %HOMEPATH%\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\#How_Decrypt_Files.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\#How_Decrypt_Files.txt
- <LS_APPDATA>\Microsoft\Windows Media\9.0\#How_Decrypt_Files.txt
- %HOMEPATH%\Local Settings\History\#How_Decrypt_Files.txt
- <LS_APPDATA>\VMware\#How_Decrypt_Files.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Cookies\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
- C:\Documents and Settings\LocalService\Local Settings\History\#How_Decrypt_Files.txt
- %APPDATA%\#How_Decrypt_Files.txt
- %HOMEPATH%\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Media Player\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\#How_Decrypt_Files.txt
- %APPDATA%\Microsoft\Address Book\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\#How_Decrypt_Files.txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\#How_Decrypt_Files.txt
- %TEMP%\tmp2.tmp
- %TEMP%\tmp3.tmp
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\5062867b20312591b1ccda1f666024ca_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %TEMP%\tmp1.tmp
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-4mvWRC1xSUntKTdxJe.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-m6N39OAKdY4glApKjFY.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-2MO9mMiuaC9AOlf.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-l6Zb9MV7kz6sncKzM.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-tsDuvGCKS75z2nsf6W.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-vzGDeIKikNpm8I5Ia.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\C7-A0rsaI5MBs55aViCAp.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C0-wN6VkffdSu1iON.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C1-5AkoXaMrA2ypcZ.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-GcODPJHTXqDe3LV6R1.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\C5-LfDcaWrmu6eIW3pWr.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\C2-mHShPGV3iP8PQ2O.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-WoYVUOxWnL2O02U.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-EjBk6CmyGs7FIc.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-momck1IZJjgjb1.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-8kPhTqPzhDyWNImTW.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-uPMGH3d6wzb7ALZ6j4.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-3C2Z6xKKe7ZDNX8kS3i.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-UczQerI6H8wOZEcrfe.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-dbONHHzWct2hPeXSNvj.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-5CdS72dmQDVoJe7OAT.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-tBiyt7Ly38xur3.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-4Cp16zzYXeX1L6c.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-mVHXmA9vjinolmnQE.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-1xYqgyNzsfxD8fi9AAL.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\C8-VmztMK18zLSvWZ9y2AN.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C6-1mM9s0zEq854Z0SQVi.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C4-26feq2n7JgwmMvisa.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C3-2OyAoscznGoVAizK.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C5-E3YmV6sauCBkFBnyV.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C3-fenrKpXpiWfq0AMu.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C5-OxFO22hCtavdZrYHi.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C4-XkXaqzhtOopLi06a0.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C3-4u2KbFR5uVmRakdi.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C0-yYirUDh8wFRrGp.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C3-dE5vf1u1jnxvA1tT.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C7-1HjJ7t0oPY1V3mH2WT2.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\C6-WRE4s9s1uFxcuNp95L.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C6-CvVTn5kBcvPw0hbL1i.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C4-q7dpBWnDCnvsbOndA.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C7-6MdupUMn0R1MFydVWza.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C6-cKrSKtPVSprWPH7oVt.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\C4-WHEb0fAyC2S5y3I2.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C6-nfHzVerxRwILi8KXar.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C2-cdMWIjZ04qlSGVs.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C2-iCY7gfI4yW8ZDp3.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C1-kJbPPgRRGntMJJE.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C0-mRdi8hZqX5f0Pn.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C8-G65J6aUwwWeKrMJzABn.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\C5-CXUchi5VnxDnp00aR.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\places\C3-g5WnydAehFMl8KqL.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-E833Jjv3WRPI5Y.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C5-1AKTecBK3NCXDkknq.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-NiQ9rnvm3FHTaSo.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-cIwISad1ZuFs5H.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C5-OLEjnUtJ7q48DTqe5.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C4-rZwO7YBaWZKMhrGx.Infinite
- from %ProgramFiles%\FireFox\blocklist.xml to %ProgramFiles%\FireFox\C0-81JjO0fY5AC8RZ.Infinite
- from %ProgramFiles%\FireFox\greprefs.js to %ProgramFiles%\FireFox\C6-3e1FH9vb8urW8e9tXI.Infinite
- from %ProgramFiles%\FireFox\js.log to %ProgramFiles%\FireFox\C3-23DfLRx54J6sTd7J.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-wclnGklttol2BXa.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\C2-yjn7ymtHA6XoH3m.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\C0-RxVkIqBZbno4lQ.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pluginreg.dat to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C2-05Dd0WLj0Cydas1.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C7-WFISHLOUJ8qQc3cIZq.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C4-tnO8VW9vJzvMyjfZ.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C1-GMUlihrNIs1HKQ.Infinite
- from %APPDATA%\Microsoft\Address Book\%USERNAME%.wab to %APPDATA%\Microsoft\Address Book\C1-RhuJtRJoHzR8cG.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C3-l1kohcRhasxFkX8t.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C6-RNQFwc0AgyYBm3BRl4.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C6-eEtwujQhlKxwUu4YuP.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C7-j6m0FTe2OTGBKuUPiC.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C4-7dsoTdOSOLL8gbXg.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C0-jaCQ3l0ejaIWop.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C1-oR6dNUOyLjameo.Infinite
- from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\C5-aUO5hOeGsfO2o21ZZ.Infinite
- from %ProgramFiles%\FireFox\README.txt to %ProgramFiles%\FireFox\C6-oOobeC3F4pkqRcnLX9.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-9fkStwsD8Vj1spQI.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-flKKYjPpANJUCDGS.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-8AJB8dNamOheOul.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C3-Mww7WrmZAbqgYrlr.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-widget-left.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C5-5QfqTtcRYxCPgq23N.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-U3uvIdGgMHgWapa.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\inspector.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-NwZzXv62ximHUy.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\license.html to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-QsL618Xw3gR9sA.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C2-5dYwkncNWOEwKF6.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.xml to %ProgramFiles%\FireFox\chrome\browser\content\browser\C6-xx8VesPJCz4pE1E062.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C0-CE9aHpxt0d9Jsa.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C8-ELAtzr6HRuu7y6Hfx4W.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-W09mzckrk1TVilIHJBI.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon128.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C5-H1X83c1DJVEEFYeOj.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon16.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C5-p69yhPXoMMoiZwVXB.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon48.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C1-fswIEeYXmxBsP3.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\about-logo.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C0-KEoHSccmzUo2Ty.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\about-wordmark.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C4-6TMv3MYZhjhCLT4jg.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\about.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C5-E5l2aQYJDXZMrMXZo.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon-small.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-N4AxEqFkZJdghnTAW6g.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\C4-DxLbtTkMiNjAgzKa3.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-y5XvLpDFh9t2ONR9sjU.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon64.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\C7-bKMbqm97dOkMNpoiWFg.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.css to %ProgramFiles%\FireFox\chrome\browser\content\browser\C7-CKjZxl8blE1i6Pngsu.Infinite
- from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.js to %ProgramFiles%\FireFox\chrome\browser\content\browser\C1-RbkebifBis5Cj1d.Infinite
- <SYSTEM32>\dllcache\sam.sdf.new
- 'ap#.##legram.org':443
- 'ic###azip.com':80
- 'wp#d':80
- http://ic###azip.com/
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK ap#.##legram.org
- DNS ASK ic###azip.com
- DNS ASK wp#d
- '<SYSTEM32>\cmd.exe' /C WMIC.exe shadowcopy delete
- '<SYSTEM32>\cmd.exe' /C vssadmin.exe delete shadows /all /Quiet