Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Encoder.25013

Added to the Dr.Web virus database: 2018-03-29

Virus description added:

Technical Information

Modifies file system:
Creates the following files:
  • %APPDATA%\Microsoft\Protect\CREDHIST
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\card.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\alert.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\check.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\cd.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35install.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35error.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\VSMsiLog22FD.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3install.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3error.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif.crypt
  • %WINDIR%\OEWABLog.txt.crypt
  • %WINDIR%\pchealth\helpctr\System\images\16x16\warning.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Centers\blue_arrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\wrapperhelp.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\warning.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\progbar.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\info.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\get_conn.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\flyout_arrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\feedback.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Expando\helpdoc.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Expando\expanded.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Expando\endnode.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Expando\collapsed.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\error.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Centers\Uabrand.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Centers\IULogo.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\images\Centers\Connect.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-column.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\chip.gif.crypt
  • <SYSTEM32>\oobe\images\btn3.gif.crypt
  • <SYSTEM32>\oobe\images\btn2.gif.crypt
  • <SYSTEM32>\oobe\images\btn1.gif.crypt
  • <SYSTEM32>\oobe\images\arrow.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\mouseimg.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\mouse4.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\desktop3.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\clicking.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but4_up.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but4_idl.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but4_dwn.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but3_up.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but3_idl.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but3_dwn.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but2_up.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but2_idl.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but2_dwn.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but1_up.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but1_idl.gif.crypt
  • <SYSTEM32>\oobe\html\mouse\images\but1_dwn.gif.crypt
  • <SYSTEM32>\ntimage.gif.crypt
  • <SYSTEM32>\h323log.txt.crypt
  • <SYSTEM32>\eula.txt.crypt
  • <DRIVERS>\gmreadme.txt.crypt
  • <SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt.crypt
  • <SYSTEM32>\oobe\images\bullet1.gif.crypt
  • <SYSTEM32>\CatRoot2\dberr.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif.crypt
  • %WINDIR%\setuplog.txt.crypt
  • %WINDIR%\Web\printers\images\ipp_0012.gif.crypt
  • %WINDIR%\Web\printers\images\ipp_0005.gif.crypt
  • %WINDIR%\Web\printers\images\ipp_0004.gif.crypt
  • %WINDIR%\Web\printers\images\ipp_0003.gif.crypt
  • %WINDIR%\Web\printers\images\ipp_0002.gif.crypt
  • %WINDIR%\Web\exclam.gif.crypt
  • %WINDIR%\Web\bullet.gif.crypt
  • <ANALYSETOOLS_DIR>\THP\www\ncsi.txt.crypt
  • <ANALYSETOOLS_DIR>\Angar2\tools\th_\www\ncsi.txt.crypt
  • <SYSTEM32>\Restore\MachineGuid.txt.crypt
  • <SYSTEM32>\oobe\images\redshd.gif.crypt
  • <SYSTEM32>\oobe\images\qmark.gif.crypt
  • <SYSTEM32>\oobe\images\progress.gif.crypt
  • <SYSTEM32>\oobe\images\prodkey.gif.crypt
  • <SYSTEM32>\oobe\images\oemlogo.gif.crypt
  • <SYSTEM32>\oobe\images\mousewn1.gif.crypt
  • <SYSTEM32>\oobe\images\mouse.gif.crypt
  • <SYSTEM32>\oobe\images\monitor2.gif.crypt
  • <SYSTEM32>\oobe\images\monitor.gif.crypt
  • <SYSTEM32>\oobe\images\merlin.gif.crypt
  • <SYSTEM32>\oobe\images\magnify.gif.crypt
  • <SYSTEM32>\oobe\images\hand2.gif.crypt
  • <SYSTEM32>\oobe\images\hand1.gif.crypt
  • <SYSTEM32>\oobe\images\grn_btn.gif.crypt
  • <SYSTEM32>\oobe\images\greenshd.gif.crypt
  • <SYSTEM32>\oobe\images\dialtone.gif.crypt
  • <SYSTEM32>\oobe\images\clickhr.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\windows.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\usb.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\system.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\printer.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\info.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\gears.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\error.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif.crypt
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\drive.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif.crypt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\res\arrow.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Close.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-dash.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-caret.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp-end.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp-end.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\res\arrowd.gif.crypt
  • C:\Far2\Documentation\rus\Plugins.Review.txt.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Restore.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\slider.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp-end.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp-end.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-sharp.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-hov.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\columnpicker.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\chevron.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-top.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-right.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-left.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-bottom.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check-dis.gif.crypt
  • %WINDIR%\Web\printers\images\ipp_0015.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.jpg.crypt
  • %HOMEPATH%\Templates\excel.xls.crypt
  • C:\Far2\Documentation\rus\Arc.Support.txt.crypt
  • C:\Far2\Documentation\eng\TechInfo.txt.crypt
  • C:\Far2\Documentation\eng\Plugins.Review.txt.crypt
  • C:\Far2\Documentation\eng\Plugins.Install.txt.crypt
  • C:\Far2\Documentation\eng\Far.FAQ.txt.crypt
  • C:\Far2\Documentation\eng\Bug.Report.txt.crypt
  • C:\Far2\Documentation\eng\Arc.Support.txt.crypt
  • %HOMEPATH%\Templates\winword2.doc.crypt
  • %HOMEPATH%\Templates\winword.doc.crypt
  • %HOMEPATH%\Templates\powerpnt.ppt.crypt
  • %HOMEPATH%\Templates\excel4.xls.crypt
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.txt.crypt
  • C:\Far2\Documentation\rus\Far.FAQ.txt.crypt
  • C:\Documents and Settings\Default User\Templates\winword2.doc.crypt
  • C:\Documents and Settings\Default User\Templates\winword.doc.crypt
  • C:\Documents and Settings\Default User\Templates\powerpnt.ppt.crypt
  • C:\Documents and Settings\Default User\Templates\excel4.xls.crypt
  • C:\Documents and Settings\Default User\Templates\excel.xls.crypt
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.txt.crypt
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg.crypt
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg.crypt
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg.crypt
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg.crypt
  • %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\ec702f375e1b12d218f67ab9ef19ca23_23ef5514-3059-436f-a4a7-4cefaab20eb1
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sweets Bkgrd.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\tech.gif.crypt
  • C:\Far2\Documentation\rus\Plugins.Install.txt.crypt
  • C:\Far2\Plugins\7-Zip\far7z.txt.crypt
  • C:\Far2\Documentation\rus\Bug.Report.txt.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\sunbannA.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Ivy.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\fieruled.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.jpg.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\citbannA.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Btzhsepa.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Blank Bkgrd.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\aswrule.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\anabnr2.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\amaizrul.gif.crypt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\aleabanr.gif.crypt
  • C:\Far2\Plugins\FTP\Notes_rus.txt.crypt
  • C:\Far2\Plugins\FTP\Notes.txt.crypt
  • C:\Far2\Plugins\FTP\FtpCmds_rus.txt.crypt
  • C:\Far2\Plugins\FTP\FtpCmds.txt.crypt
  • C:\Far2\Plugins\Colorer\hrc\changes.txt.crypt
  • C:\Far2\Documentation\rus\TechInfo.txt.crypt
  • <SYSTEM32>\oobe\images\dialup.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-caret.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Minimize.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplayh.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplay.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpauseh.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpause.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taonh.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taon.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoffh.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoff.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnth.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cntd.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnt.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapph.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapp.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktrh.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktr.gif.crypt
  • %WINDIR%\Help\Tours\mmTour\segment5.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\segment4.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\segment3.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\segment2.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\segment1.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\nav.txt.crypt
  • %WINDIR%\Help\Tours\mmTour\intro.txt.crypt
  • %WINDIR%\Help\Tours\htmlTour\spacer.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_unlock_down.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_unlock.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-dash.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_start_here_down.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_start_here.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\videobg.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\mplogo.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif.crypt
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU2.txt.crypt
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU1.txt.crypt
  • %WINDIR%\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\CacheSize.txt.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm9.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm8.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm7.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm6.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm5.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm4.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm3.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm2.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm1.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\vidsamp.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\tourbg.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Close.gif.crypt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\mplogoh.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Minimize.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-column-active.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-before.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-before-hover.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-before-active.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-after.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-after-hover.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-row-after-active.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-before.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-before-hover.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-before-active.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-after.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-after-hover.gif.crypt
  • %ProgramFiles%\FireFox\res\table-add-column-after-active.gif.crypt
  • %ProgramFiles%\FireFox\res\grabber.gif.crypt
  • %ProgramFiles%\FireFox\README.txt.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree\columnpicker.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\chevron.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-top.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-right.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-left.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-bottom.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\slider.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check-dis.gif.crypt
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Restore.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_gray.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_safe_easy_down.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_safe_easy.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-row-hover.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-column-hover.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_connected_down.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_connected.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_blank.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_best_down.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\nav_best.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\bot_bar.gif.crypt
  • %WINDIR%\Help\Tours\htmlTour\bluearrow.gif.crypt
  • %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt.crypt
  • %WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt.crypt
  • <STUBS_DIR>\proc_tools.txt.crypt
  • <STUBS_DIR>\proc_im.txt.crypt
  • <STUBS_DIR>\proc_games.txt.crypt
  • <STUBS_DIR>\proc_fake.txt.crypt
  • <STUBS_DIR>\proc_browsers.txt.crypt
  • <STUBS_DIR>\proc_banks.txt.crypt
  • <STUBS_DIR>\proc_av.txt.crypt
  • <STUBS_DIR>\list_short.txt.crypt
  • <STUBS_DIR>\list_full.txt.crypt
  • %ProgramFiles%\Outlook Express\msoe.txt.crypt
  • %ProgramFiles%\Movie Maker\Shared\Profiles\Blank.txt.crypt
  • %ProgramFiles%\Movie Maker\Shared\Empty.txt.crypt
  • %ProgramFiles%\Messenger\lvback.gif.crypt
  • %ProgramFiles%\Messenger\logowin.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-row.gif.crypt
  • %ProgramFiles%\FireFox\res\table-remove-row-active.gif.crypt
  • %WINDIR%\Web\tips.gif.crypt
Deletes the following files:
  • %WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt
  • <SYSTEM32>\DirectX\Dinput\ms34_07.png
  • <SYSTEM32>\DirectX\Dinput\ms34_08.png
  • <SYSTEM32>\DirectX\Dinput\ms3b.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_1.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_2.png
  • <SYSTEM32>\DirectX\Dinput\ms34_05.png
  • <SYSTEM32>\DirectX\Dinput\ms34_06.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_3.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_c.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_m.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_t.png
  • <SYSTEM32>\DirectX\Dinput\ms56.png
  • <SYSTEM32>\DirectX\Dinput\ms56_1.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_4.png
  • <SYSTEM32>\DirectX\Dinput\ms3b_a.png
  • <SYSTEM32>\DirectX\Dinput\ms34_04.png
  • <SYSTEM32>\DirectX\Dinput\ms34_03.png
  • <SYSTEM32>\DirectX\Dinput\ms34_02.png
  • <SYSTEM32>\DirectX\Dinput\ms27_3.png
  • <SYSTEM32>\DirectX\Dinput\ms27_4.png
  • <SYSTEM32>\DirectX\Dinput\ms27_5.png
  • <SYSTEM32>\DirectX\Dinput\ms28.png
  • <SYSTEM32>\DirectX\Dinput\ms28_1.png
  • <SYSTEM32>\DirectX\Dinput\ms28_2.png
  • <SYSTEM32>\DirectX\Dinput\ms27_2.png
  • <SYSTEM32>\DirectX\Dinput\ms28_3.png
  • <SYSTEM32>\DirectX\Dinput\ms28_5.png
  • <SYSTEM32>\DirectX\Dinput\ms28_6.png
  • <SYSTEM32>\DirectX\Dinput\ms28_7.png
  • <SYSTEM32>\DirectX\Dinput\ms28_8.png
  • <SYSTEM32>\DirectX\Dinput\ms34.png
  • <SYSTEM32>\DirectX\Dinput\ms34_01.png
  • <SYSTEM32>\DirectX\Dinput\ms28_4.png
  • <SYSTEM32>\DirectX\Dinput\ms56_10.png
  • <SYSTEM32>\DirectX\Dinput\ms56_2.png
  • <SYSTEM32>\DirectX\Dinput\ms56_3.png
  • <SYSTEM32>\DirectX\Dinput\ms56_4.png
  • <SYSTEM32>\DirectX\Dinput\ms7_3.png
  • <SYSTEM32>\DirectX\Dinput\ms7_4.png
  • <SYSTEM32>\DirectX\Dinput\ms7_5.png
  • <SYSTEM32>\DirectX\Dinput\ms7_6.png
  • <SYSTEM32>\DirectX\Dinput\ms7_7.png
  • <SYSTEM32>\DirectX\Dinput\ms7_8.png
  • <SYSTEM32>\DirectX\Dinput\ms7_9.png
  • <SYSTEM32>\DirectX\Dinput\ms8.png
  • <SYSTEM32>\DirectX\Dinput\ms8_1.png
  • <SYSTEM32>\DirectX\Dinput\ms8_10.png
  • <SYSTEM32>\DirectX\Dinput\ms8_2.png
  • <SYSTEM32>\DirectX\Dinput\ms8_3.png
  • <SYSTEM32>\DirectX\Dinput\ms8_4.png
  • <SYSTEM32>\DirectX\Dinput\ms8_5.png
  • <SYSTEM32>\DirectX\Dinput\ms8_6.png
  • <SYSTEM32>\DirectX\Dinput\ms7_2.png
  • <SYSTEM32>\DirectX\Dinput\ms7.png
  • <SYSTEM32>\DirectX\Dinput\ms7_1.png
  • <SYSTEM32>\DirectX\Dinput\ms6_9.png
  • <SYSTEM32>\DirectX\Dinput\ms56_5.png
  • <SYSTEM32>\DirectX\Dinput\ms56_6.png
  • <SYSTEM32>\DirectX\Dinput\ms56_7.png
  • <SYSTEM32>\DirectX\Dinput\ms56_8.png
  • <SYSTEM32>\DirectX\Dinput\ms56_9.png
  • <SYSTEM32>\DirectX\Dinput\ms6.png
  • <SYSTEM32>\DirectX\Dinput\ms6_1.png
  • <SYSTEM32>\DirectX\Dinput\ms6_10.png
  • <SYSTEM32>\DirectX\Dinput\ms6_2.png
  • <SYSTEM32>\DirectX\Dinput\ms6_3.png
  • <SYSTEM32>\DirectX\Dinput\ms6_4.png
  • <SYSTEM32>\DirectX\Dinput\ms6_5.png
  • <SYSTEM32>\DirectX\Dinput\ms6_6.png
  • <SYSTEM32>\DirectX\Dinput\ms6_7.png
  • <SYSTEM32>\DirectX\Dinput\ms6_8.png
  • <SYSTEM32>\DirectX\Dinput\ms8_7.png
  • <SYSTEM32>\DirectX\Dinput\ms27_1.png
  • <SYSTEM32>\DirectX\Dinput\ms27.png
  • <SYSTEM32>\DirectX\Dinput\ms26_08.png
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_right.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\outlook_express.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\square_bullet.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\messenger_big.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\monitor_left.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\check.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\spacer.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\status_ok.gif
  • %WINDIR%\setuplog.txt
  • <SYSTEM32>\CatRoot2\dberr.txt
  • <SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\help.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreenshot3.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\logon_anim.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\info.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\IM_icon.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_warning_32x.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\address_book.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\arrow.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\attention.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_attention.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_away.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_none.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_offline.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Envelope.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\floppy.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\generic_mail.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\icon_extweb.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\buddy_busy.gif
  • <SYSTEM32>\config\systemprofile\Templates\excel.xls
  • <SYSTEM32>\config\systemprofile\Templates\excel4.xls
  • <SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt
  • <SYSTEM32>\config\systemprofile\Templates\winword.doc
  • <SYSTEM32>\DirectX\Dinput\ms1b_03.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_04.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_05.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_06.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_07.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_08.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_09.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_10.png
  • <SYSTEM32>\DirectX\Dinput\ms26.png
  • <SYSTEM32>\DirectX\Dinput\ms26_01.png
  • <SYSTEM32>\DirectX\Dinput\ms26_02.png
  • <SYSTEM32>\DirectX\Dinput\ms26_03.png
  • <SYSTEM32>\DirectX\Dinput\ms26_04.png
  • <SYSTEM32>\DirectX\Dinput\ms26_05.png
  • <SYSTEM32>\DirectX\Dinput\ms26_06.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_02.png
  • <SYSTEM32>\DirectX\Dinput\ms1b.png
  • <SYSTEM32>\DirectX\Dinput\ms1b_01.png
  • <SYSTEM32>\DirectX\Dinput\lgc291.png
  • <SYSTEM32>\config\systemprofile\Templates\winword2.doc
  • <SYSTEM32>\DirectX\Dinput\act_rs.png
  • <SYSTEM32>\DirectX\Dinput\glmda.png
  • <SYSTEM32>\DirectX\Dinput\glmdiggp.png
  • <SYSTEM32>\DirectX\Dinput\gr3001.png
  • <SYSTEM32>\DirectX\Dinput\gr4001.png
  • <SYSTEM32>\DirectX\Dinput\gr4001_g.png
  • <SYSTEM32>\DirectX\Dinput\gr4003.png
  • <SYSTEM32>\DirectX\Dinput\gr4005.png
  • <SYSTEM32>\DirectX\Dinput\ia3002_1.png
  • <SYSTEM32>\DirectX\Dinput\ia3002_2.png
  • <SYSTEM32>\DirectX\Dinput\lgc202.png
  • <SYSTEM32>\DirectX\Dinput\lgc207.png
  • <SYSTEM32>\DirectX\Dinput\lgc209.png
  • <SYSTEM32>\DirectX\Dinput\lgc20a.png
  • <SYSTEM32>\DirectX\Dinput\ms26_07.png
  • <SYSTEM32>\DirectX\Dinput\ms8_8.png
  • <SYSTEM32>\DirectX\Dinput\ms8_9.png
  • <SYSTEM32>\DirectX\Dinput\mse.png
  • <SYSTEM32>\oobe\images\newmark8.jpg
  • <SYSTEM32>\oobe\images\newtop1.jpg
  • <SYSTEM32>\oobe\images\newtop8.jpg
  • <SYSTEM32>\oobe\images\nextdown.jpg
  • <SYSTEM32>\oobe\images\nextoff.jpg
  • <SYSTEM32>\oobe\images\newbtm8.jpg
  • <SYSTEM32>\oobe\images\newmark1.jpg
  • <SYSTEM32>\oobe\images\nextover.jpg
  • <SYSTEM32>\oobe\images\oemlogo.gif
  • <SYSTEM32>\oobe\images\prodkey.gif
  • <SYSTEM32>\oobe\images\progress.gif
  • <SYSTEM32>\oobe\images\qmark.gif
  • <SYSTEM32>\oobe\images\redshd.gif
  • <SYSTEM32>\oobe\images\nextup.jpg
  • <SYSTEM32>\oobe\images\oemcoa.jpg
  • <SYSTEM32>\oobe\images\newbtm1.jpg
  • <SYSTEM32>\oobe\images\mousewn1.gif
  • <SYSTEM32>\oobe\images\skipoff.jpg
  • <SYSTEM32>\oobe\images\bullet1.gif
  • <SYSTEM32>\oobe\images\clickhr.gif
  • <SYSTEM32>\oobe\images\dialtone.gif
  • <SYSTEM32>\oobe\images\dialup.gif
  • <SYSTEM32>\oobe\images\greenshd.gif
  • <SYSTEM32>\oobe\images\grn_btn.gif
  • <SYSTEM32>\oobe\images\hand1.gif
  • <SYSTEM32>\oobe\images\hand2.gif
  • <SYSTEM32>\oobe\images\magnify.gif
  • <SYSTEM32>\oobe\images\merlin.gif
  • <SYSTEM32>\oobe\images\monitor.gif
  • <SYSTEM32>\oobe\images\monitor2.gif
  • <SYSTEM32>\oobe\images\mouse.gif
  • <SYSTEM32>\oobe\images\skipdown.jpg
  • <SYSTEM32>\oobe\images\btn2.gif
  • <SYSTEM32>\oobe\images\mslogo.jpg
  • %WINDIR%\Web\Wallpaper\Wind.jpg
  • <SYSTEM32>\oobe\images\skipover.jpg
  • %WINDIR%\Web\Wallpaper\Azul.jpg
  • %WINDIR%\Web\Wallpaper\Crystal.jpg
  • %WINDIR%\Web\Wallpaper\Follow.jpg
  • %WINDIR%\Web\Wallpaper\Friend.jpg
  • %WINDIR%\Web\Wallpaper\Home.jpg
  • %WINDIR%\Web\Wallpaper\Moon flower.jpg
  • %WINDIR%\Web\Wallpaper\Peace.jpg
  • %WINDIR%\Web\Wallpaper\Power.jpg
  • %WINDIR%\Web\Wallpaper\Purple flower.jpg
  • %WINDIR%\Web\Wallpaper\Radiance.jpg
  • %WINDIR%\Web\Wallpaper\Red moon desert.jpg
  • %WINDIR%\Web\Wallpaper\Ripple.jpg
  • %WINDIR%\Web\Wallpaper\Stonehenge.jpg
  • %WINDIR%\Web\Wallpaper\Tulips.jpg
  • %WINDIR%\Web\Wallpaper\Vortec space.jpg
  • %WINDIR%\Web\Wallpaper\Autumn.jpg
  • <SYSTEM32>\oobe\images\btn1.gif
  • <SYSTEM32>\oobe\images\btn3.gif
  • %WINDIR%\Web\printers\images\ipp_0015.gif
  • <SYSTEM32>\oobe\images\thanks10.png
  • <SYSTEM32>\oobe\images\thanks8.png
  • <SYSTEM32>\oobe\images\wpaback.jpg
  • <SYSTEM32>\oobe\images\wpabtm.jpg
  • <SYSTEM32>\oobe\images\wpaflag.jpg
  • <SYSTEM32>\oobe\images\wpakey.jpg
  • <SYSTEM32>\oobe\images\wpatop.jpg
  • <SYSTEM32>\Restore\MachineGuid.txt
  • %WINDIR%\Web\bullet.gif
  • %WINDIR%\Web\exclam.gif
  • %WINDIR%\Web\printers\images\ipp_0002.gif
  • %WINDIR%\Web\printers\images\ipp_0003.gif
  • %WINDIR%\Web\printers\images\ipp_0004.gif
  • %WINDIR%\Web\printers\images\ipp_0005.gif
  • %WINDIR%\Web\printers\images\ipp_0012.gif
  • %WINDIR%\Web\tips.gif
  • <SYSTEM32>\oobe\images\skipup.jpg
  • <SYSTEM32>\oobe\images\backup.jpg
  • <SYSTEM32>\oobe\images\backover.jpg
  • <SYSTEM32>\oobe\images\backoff.jpg
  • <SYSTEM32>\DirectX\Dinput\msprw.png
  • <SYSTEM32>\DirectX\Dinput\msprw_1.png
  • <SYSTEM32>\DirectX\Dinput\msprw_2.png
  • <SYSTEM32>\DirectX\Dinput\msprw_3.png
  • <SYSTEM32>\DirectX\Dinput\msprw_4.png
  • <SYSTEM32>\DirectX\Dinput\msprw_5.png
  • <SYSTEM32>\DirectX\Dinput\msprw_6.png
  • <SYSTEM32>\DirectX\Dinput\msprw_7.png
  • <SYSTEM32>\DirectX\Dinput\msprw_8.png
  • <SYSTEM32>\DirectX\Dinput\SV-262e1.png
  • <SYSTEM32>\DirectX\Dinput\SV-262e3.png
  • <SYSTEM32>\DirectX\Dinput\SV-262e4.png
  • <SYSTEM32>\DirectX\Dinput\sv2511.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_7.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_5.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_9.png
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r3_c2.gif
  • <SYSTEM32>\DirectX\Dinput\sv2512.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_4.png
  • <SYSTEM32>\DirectX\Dinput\mse_10.png
  • <SYSTEM32>\DirectX\Dinput\mse_2.png
  • <SYSTEM32>\DirectX\Dinput\mse_3.png
  • <SYSTEM32>\DirectX\Dinput\mse_4.png
  • <SYSTEM32>\DirectX\Dinput\mse_5.png
  • <SYSTEM32>\DirectX\Dinput\mse_6.png
  • <SYSTEM32>\DirectX\Dinput\mse_1.png
  • <SYSTEM32>\DirectX\Dinput\mse_7.png
  • <SYSTEM32>\DirectX\Dinput\mse_9.png
  • <SYSTEM32>\DirectX\Dinput\msf1f.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_1.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_10.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_2.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_3.png
  • <SYSTEM32>\DirectX\Dinput\mse_8.png
  • <SYSTEM32>\DirectX\Dinput\msf1f_6.png
  • <SYSTEM32>\oobe\html\mouse\images\heidelb.jpg
  • <DRIVERS>\gmreadme.txt
  • <SYSTEM32>\oobe\html\mouse\images\bulzano.jpg
  • <SYSTEM32>\oobe\html\mouse\images\paris.jpg
  • <SYSTEM32>\oobe\html\mouse\images\parism.jpg
  • <SYSTEM32>\oobe\html\mouse\images\pisa.jpg
  • <SYSTEM32>\oobe\html\mouse\images\pisam.jpg
  • <SYSTEM32>\oobe\html\mouse\images\prague.jpg
  • <SYSTEM32>\oobe\html\mouse\images\praguem.jpg
  • <SYSTEM32>\oobe\html\mouse\images\tyrol.jpg
  • <SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg
  • <SYSTEM32>\oobe\html\mouse\images\venice.jpg
  • <SYSTEM32>\oobe\html\mouse\images\venicem.jpg
  • <SYSTEM32>\oobe\html\mouse\images\verona.jpg
  • <SYSTEM32>\oobe\html\mouse\images\veronam.jpg
  • <SYSTEM32>\oobe\images\arrow.gif
  • <SYSTEM32>\oobe\images\backdown.jpg
  • <SYSTEM32>\eula.txt
  • <SYSTEM32>\oobe\html\mouse\images\mouseimg.gif
  • <SYSTEM32>\ntimage.gif
  • <SYSTEM32>\oobe\html\mouse\images\mouse4.gif
  • <SYSTEM32>\DirectX\Dinput\msf1f_8.png
  • <SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg
  • <SYSTEM32>\oobe\html\mouse\images\but1_dwn.gif
  • <SYSTEM32>\oobe\html\mouse\images\but1_idl.gif
  • <SYSTEM32>\oobe\html\mouse\images\but1_up.gif
  • <SYSTEM32>\oobe\html\mouse\images\but2_dwn.gif
  • <SYSTEM32>\oobe\html\mouse\images\but2_idl.gif
  • <SYSTEM32>\oobe\html\mouse\images\but2_up.gif
  • <SYSTEM32>\oobe\html\mouse\images\but3_dwn.gif
  • <SYSTEM32>\oobe\html\mouse\images\but3_idl.gif
  • <SYSTEM32>\oobe\html\mouse\images\but3_up.gif
  • <SYSTEM32>\oobe\html\mouse\images\but4_dwn.gif
  • <SYSTEM32>\oobe\html\mouse\images\but4_idl.gif
  • <SYSTEM32>\oobe\html\mouse\images\but4_up.gif
  • <SYSTEM32>\oobe\html\mouse\images\clicking.gif
  • <SYSTEM32>\oobe\html\mouse\images\desktop3.gif
  • <SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg
  • %WINDIR%\Web\Wallpaper\Ascent.jpg
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c3.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\personalizing.gif
  • %WINDIR%\Help\Tours\mmTour\segment1.txt
  • %WINDIR%\Help\Tours\mmTour\segment2.txt
  • %WINDIR%\Help\Tours\mmTour\segment3.txt
  • %WINDIR%\Help\Tours\mmTour\segment4.txt
  • %WINDIR%\Help\Tours\mmTour\segment5.txt
  • %WINDIR%\Help\Tours\mmTour\intro.txt
  • %WINDIR%\Help\Tours\mmTour\nav.txt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktr.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapph.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnt.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cntd.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cnth.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoff.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\bktrh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\cloapp.gif
  • %WINDIR%\Help\Tours\htmlTour\window_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\spacer.gif
  • %WINDIR%\Help\Tours\htmlTour\start_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\ul_logo.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg
  • %WINDIR%\Help\Tours\htmlTour\unlock_built.jpg
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taoffh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taon.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\taonh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpause.gif
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU2.txt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\alert_lrg.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\aspx_file.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\branding_Full2.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\folder.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\image1.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\image2.gif
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU1.txt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm9.gif
  • %WINDIR%\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\CacheSize.txt
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm8.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tpauseh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplay.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\Btn\tplayh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\mplogo.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\mplogoh.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\tourbg.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\videobg.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\vidsamp.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm1.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm2.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm3.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm4.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm5.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm6.gif
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Img\WMarks\wm7.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\requiredBang.gif
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\control_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_networks.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg
  • %WINDIR%\Help\Tours\htmlTour\folder_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\gradient.jpg
  • %WINDIR%\Help\Tours\htmlTour\icon_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\img004b.jpg
  • %WINDIR%\Help\Tours\htmlTour\img014.jpg
  • %WINDIR%\Help\Tours\htmlTour\desktop_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\end_up.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_road.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_road_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_robust.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg
  • %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt
  • %WINDIR%\Help\Tours\htmlTour\best_secure.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\bluearrow.gif
  • %WINDIR%\Help\Tours\htmlTour\bot_bar.gif
  • %WINDIR%\Help\Tours\htmlTour\connected_data.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg
  • %WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg
  • %WINDIR%\Help\Tours\htmlTour\img033.jpg
  • %WINDIR%\Help\Tours\htmlTour\img033a.jpg
  • %WINDIR%\Help\Tours\htmlTour\img034.jpg
  • %WINDIR%\Help\Tours\htmlTour\img040.jpg
  • %WINDIR%\Help\Tours\htmlTour\nav_best_down.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_blank.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_connected.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_connected_down.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_gray.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_safe_easy.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_safe_easy_down.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_start_here.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_start_here_down.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_unlock.gif
  • %WINDIR%\Help\Tours\htmlTour\nav_unlock_down.gif
  • %WINDIR%\Help\Tours\htmlTour\pen_icon.jpg
  • %WINDIR%\Help\Tours\htmlTour\question_icon.jpg
  • %WINDIR%\Help\Tours\htmlTour\read_icon.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg
  • %WINDIR%\Help\Tours\htmlTour\nav_best.gif
  • %WINDIR%\Help\Tours\htmlTour\intro_logo.jpg
  • %WINDIR%\Help\Tours\htmlTour\logo.jpg
  • %WINDIR%\Help\Tours\htmlTour\img149.jpg
  • %WINDIR%\Help\Tours\htmlTour\img046.jpg
  • %WINDIR%\Help\Tours\htmlTour\img060.jpg
  • %WINDIR%\Help\Tours\htmlTour\img068.jpg
  • %WINDIR%\Help\Tours\htmlTour\img072.jpg
  • %WINDIR%\Help\Tours\htmlTour\img074a.jpg
  • %WINDIR%\Help\Tours\htmlTour\img089.jpg
  • %WINDIR%\Help\Tours\htmlTour\img100.jpg
  • %WINDIR%\Help\Tours\htmlTour\img103.jpg
  • %WINDIR%\Help\Tours\htmlTour\img109.jpg
  • %WINDIR%\Help\Tours\htmlTour\img110.jpg
  • %WINDIR%\Help\Tours\htmlTour\img116.jpg
  • %WINDIR%\Help\Tours\htmlTour\img121.jpg
  • %WINDIR%\Help\Tours\htmlTour\img123.jpg
  • %WINDIR%\Help\Tours\htmlTour\img126.jpg
  • %WINDIR%\Help\Tours\htmlTour\img136.jpg
  • %WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\100_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\10_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\15_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\20_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\25_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\95_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\0_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\30_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\45_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\50_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\55_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\5_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\60_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\35_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\40_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\90_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\80_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\70_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\20_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\25_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\30_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\35_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\40_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\45_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\50_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\55_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\5_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\60_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\65_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\70_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\75_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\65_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\10_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\85_chart.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c1.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\75_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieGrey.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieWhite.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\printer.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c1.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c2.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r1_c3.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\r3_c2.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\spacer.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\system.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\Untitled.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\usb.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\windows.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GArrow.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\GRect.gif
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Info_Icon.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\PieChart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\100_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\15_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\info.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\85_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\90_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\95_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\alert.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\BArrow.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\card.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\cd.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\check.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\chip.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\drive.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\error.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\floppy.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\GArrow.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\gears.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\monitor.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\47x24pie\80_chart.gif
  • %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\33x16pie\0_chart.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\Helpee_line.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\HelpIcon_solid.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\image1.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\image2.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\requiredBang.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_1x1.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_leftCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
  • %WINDIR%\OEWABLog.txt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onWhite.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\folder.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\r1_c2.gif
  • %WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\deselectedTab_1x1.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_leftCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\unSelectedTab_rightCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\yellowCORNER.gif
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3error.txt
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3install.txt
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\selectedTab_rightCorner.gif
  • %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\VSMsiLog22FD.txt
  • %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35install.txt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\alert_lrg.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\aspx_file.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\branding_Full2.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg
  • %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35error.txt
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\gradient_onBlue.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\Animation.gif
  • %WINDIR%\pchealth\helpctr\System\images\16x16\warning.gif
  • %WINDIR%\pchealth\helpctr\System\images\Centers\IULogo.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DownArrow.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\UpArrow.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\hide-chat.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\info.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendChat.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoiceOn.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\show-chat.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ESC_key.gif
  • %WINDIR%\pchealth\helpctr\System\images\Centers\blue_arrow.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.gif
  • %WINDIR%\pchealth\helpctr\System\images\Centers\Connect.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\connected.gif
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\headerGRADIENT_Tall.gif
  • %WINDIR%\pchealth\helpctr\System\images\Centers\Uabrand.gif
  • %WINDIR%\pchealth\helpctr\System\images\error.gif
  • %WINDIR%\pchealth\helpctr\System\images\Expando\collapsed.gif
  • %WINDIR%\pchealth\helpctr\System\images\Expando\endnode.gif
  • %WINDIR%\pchealth\helpctr\System\images\Expando\expanded.gif
  • %WINDIR%\pchealth\helpctr\System\images\Expando\helpdoc.gif
  • %WINDIR%\pchealth\helpctr\System\images\feedback.gif
  • %WINDIR%\pchealth\helpctr\System\images\flyout_arrow.gif
  • %WINDIR%\pchealth\helpctr\System\images\get_conn.gif
  • %WINDIR%\pchealth\helpctr\System\images\info.gif
  • %WINDIR%\pchealth\helpctr\System\images\progbar.gif
  • %WINDIR%\pchealth\helpctr\System\images\warning.gif
  • %WINDIR%\pchealth\helpctr\System\images\wrapperhelp.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\icon_warning_32x.gif
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\combobox_line.gif
  • %WINDIR%\Web\Wallpaper\Windows XP.jpg
Changes user data files extensions (Trojan.Encoder).

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android