Trojan.Encoder.25619

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Termite.exe' = '%WINDIR%\Termite.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Payment.exe' = '%HOMEPATH%\Desktop\Payment.exe'
[<HKLM>\SOFTWARE\Classes\guess\Shell\Open\Command] '' = '"%HOMEPATH%\Desktop\Payment.exe" "%1"'

Modifies file system:

Creates the following files:

%WINDIR%\Termite.exe
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pipnss\pipnss.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pipnss\nsserrors.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\passwordmgr\passwordmgr.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\passwordmgr\passwordManager.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\necko\necko.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\xpinstallConfirm.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\xpinstallConfirm.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\update\updates.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\handling.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\update\updates.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\profileSelection.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\profileSelection.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\createProfileWizard.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\removemp.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\preferences.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\ocsp.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\changemp.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\plugins.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\update\history.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\plugins.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pipnss\security.properties.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\cacertexists.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certViewer.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certpicker.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certpicker.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certManager.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certManager.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certerror.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certerror.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certDump.xul.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\deviceManager.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\certManager.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\feedback\main.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\feedback\main.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\services\sync.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\services\errors.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\places\places.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\validation.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\pippki.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\pippki.dtd.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\CAOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\choosetoken.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\changepassword.xul.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\update.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xbl.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\security\caps.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\search\search.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\xmlparser.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\MediaDocument.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\HtmlForm.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dom\dom.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xul.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\svg\svg.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xml\prettyprint.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\update.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\webConsole.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\viewSource.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\viewSource.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\videocontrols.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\tree.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\textcontext.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\storage.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\wizard.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\handling.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\xpinstall.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-region\region.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\downloads.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\extensions.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\blocklist.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\about.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\unknownContentType.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\unknownContentType.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\settingsChange.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\downloads.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\extensions.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xslt\xslt.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\accessible.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\intl.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\accessible.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\platformKeys.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\intl.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\accessible.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\platformKeys.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\intl.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\platformKeys.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\advanced.dtd.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\choosetoken.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\config.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\appPicker.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\config.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\commonDialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\commonDialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\commonDialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\charsetOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\charsetOverlay.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\appPicker.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\console.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\console.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\cookie\cookieAcceptDialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutRights.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutRights-unbranded.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutMemory.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutMemory.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutMemory.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutAbout.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\about.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutSupport.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutSupport.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\consoleBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\cookie\cookieAcceptDialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\finddialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\filepicker.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\filepicker.properties.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\filepicker.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\editMenuOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\editMenuOverlay.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\dialogOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\console.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\finddialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\dialogOverlay.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeToolbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeCharset.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeCharset.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\crashes.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\crashes.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\crash-submit-form.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\contentAreaUtils.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeToolbar.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeToolbar.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\WebSitesOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\viewCertDetails.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\escrowWarn.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\editemailcert.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\editcerts.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\editcacert.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\downloadcert.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\downloadcert.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\device_manager.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\escrowWarn.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\device_manager.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\deletecert.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlManager.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlManager.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlImportDialog.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlImportDialog.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\createCertInfo.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\createCertInfo.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\clientauthask.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\deletecert.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\exceptionDialog.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\exceptionDialog.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\editsslcert.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\formsigning.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\setp12password.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pippki.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\serverCrlNextupdate.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\serverCrlNextupdate.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\resetpassword.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\resetpassword.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\protectedAuth.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\protectedAuth.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pref-crlupdate.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pref-crlupdate.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\password.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\viewCertDetails.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\OthersOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\OrphanOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\MineOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\load_device.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\getpassword.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\getp12password.xul.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\formsigning.xul.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\regionNames.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\wizard.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printProgress.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printPreviewProgress.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printPreview.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\openLocation.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\search.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\sanitize.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\safeMode.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\quitDialog.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\pageInfo.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\pageInfo.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\openLocation.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutPrivateBrowsing.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\setDesktopBackground.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutSessionRestore.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\engineManager.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\engineManager.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\browser.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\browser.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\baseMenuOverlay.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\appstrings.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutSyncTabs.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\inspector.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\netError.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\shellservice.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\taskbar.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\downloads\settingsChange.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\moveBookmarks.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\editBookmarkOverlay.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\bookmarkProperties.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\migration.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\migration.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\subscribe.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\subscribe.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\places.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncBrand.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncGenericChange.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\tabbrowser.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\tabbrowser.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncSetup.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncSetup.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncQuota.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncQuota.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\syncKey.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\tabview.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutRobots.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutHome.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\places.properties.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\engineManager.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\browser.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutSyncTabs.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutSessionRestore.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutPrivateBrowsing.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutCertError.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\tabview.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\inspector.css.guess
<SYSTEM32>\dllcache\msado27.tlb.new
<SYSTEM32>\dllcache\msado25.tlb.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css.guess
<SYSTEM32>\dllcache\msado21.tlb.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.css.guess
<SYSTEM32>\dllcache\msado20.tlb.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.css.guess
<SYSTEM32>\dllcache\sam.spd.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.css.guess
<SYSTEM32>\dllcache\msado26.tlb.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\keyhole-forward-mask.svg.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\fullscreen-video.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\pageInfo.css.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutDialog.dtd.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\places.css.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\aboutCertError.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\branding\browserconfig.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\branding\brand.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\branding\brand.dtd.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\communicator.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\tabview.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\preferences.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\applications.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\organizer.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sanitizeDialog.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\editBookmarkOverlay.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\subscribe.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\subscribe-ui.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncSetup.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncQuota.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncCommon.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\setDesktopBackground.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\searchbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\findUtils.js.guess
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\clientauthask.js.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\advanced-scripts.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\main.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\contentAreaCommands.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\finddialog.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\finddialog.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\findbar.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\findbar.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\filepicker.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\filepicker.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\filefield.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\global-strres.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\editMenuOverlay.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dialogOverlay.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dialog.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\datetimepicker.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dateFormat.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\customizeToolbar.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\customizeToolbar.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\customizeCharset.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\css.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\downloadProgress.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\crashes.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\globalKeys.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\headsUpDisplay.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\searchbar.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printPageSetup.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printjoboptions.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printing.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printdialog.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\printdialog.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\preferences.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\plugins.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\netErrorApp.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\nsWebBrowserPersist.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\notification.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\netError.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\mozilla.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout_errors.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\languageNames.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\keys.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\intl.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\intl.css.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\global.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\crashes.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\console.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\console.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\permissions.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\tabs.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\sync.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\selectBookmark.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\security.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\privacy.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\preferences.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\preferences.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\phishing-afterload-warning-message.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\report-phishing.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\sidebar\sidebar.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\fonts.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\cookies.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\content.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\connection.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\colors.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\applications.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\applicationManager.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\languages.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser-region\region.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\config.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\autoconfig\autoconfig.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\config.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\actions.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\commonDialogs.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\commonDialog.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\charsetTitles.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\charsetOverlay.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\browser.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\brand.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\appstrings.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\appPicker.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\aboutSupport.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\alerts\notificationNames.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\aboutSupport.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\aboutRights.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\aboutRights.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\aboutAbout.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\about.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\cookieAcceptDialog.properties.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\cookieAcceptDialog.dtd.guess
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\applicationManager.dtd.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\globalOverlay.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\globalOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\inlineSpellCheckUI.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-dash.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-caret.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\panelarrow-vertical.svg.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\panelarrow-horizontal.svg.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp-end.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp-end.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\dirListing.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-top.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\extensions.svg.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\extensions.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\eula.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\blocklist.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\about.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\unknownContentType.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\downloads.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\columnpicker.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Minimize.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Close.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-right.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-left.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-bottom.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\slider.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\videocontrols.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Restore.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\chevron.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\popup.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\passwordmgr.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\numberbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\notification.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\netError.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\menulist.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\menu.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printPageSetup.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\listbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\groupbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\globalBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\global.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\findBar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\filepicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\filefield.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\expander.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dropmarker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\linkTree.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printPreview.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\preferences.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\progressmeter.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\textbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\alert.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\wizard.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\webConsole_networkPanel.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\webConsole.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbarbutton.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tabprompts.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tabbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\spinbuttons.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbars.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scale.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\richlistbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\resizer.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\update.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\pluginInstallerWizard.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\pluginProblem.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\alerts\alert.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\wizard.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\webConsole_networkPanel.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scale.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\webConsole.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbarbutton.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\textbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tabprompts.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tabbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\spinbuttons.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbars.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dirListing\dirListing.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-dash.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-caret.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\panelarrow-vertical.svg.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\panelarrow-horizontal.svg.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp-end.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp-end.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-hov.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-dis.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\richlistbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\resizer.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\config.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\commonDialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\colorpicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\button.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\autocomplete.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\datetimepicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\appPicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutMemory.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutCacheEntry.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutCache.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\about.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\xpinstallConfirm.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\viewsource.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\updates.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\profileSelection.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutSupport.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\customizeToolbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dropmarker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\progressmeter.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\menulist.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printPreview.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printPageSetup.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\preferences.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\popup.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\passwordmgr.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\numberbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\notification.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\netError.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\menu.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\expander.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\listbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\linkTree.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\groupbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\globalBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\global.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\findBar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\filepicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\filefield.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\DownloadProgressListener.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\datetimepicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\download.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\resizer.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\radio.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\progressmeter.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\preferences.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\popup.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\numberbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\notification.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menulist.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\checkbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menu.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\groupbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\general.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\findbar.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\filefield.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\expander.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\editor.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\dialog.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\datetimepicker.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\listbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\colorpicker.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\richlistbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbarbutton.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLMonoPrint.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\svg\svgBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\test.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\wizard.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\videocontrols.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\videocontrols.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbar.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scale.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbar.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\textbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\text.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tabbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\stringbundle.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\splitter.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\spinbuttons.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbox.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tree.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\button.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\browser.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\autocomplete.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printProgress.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewProgress.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewProgress.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPageSetup.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPageSetup.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printdialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printUtils.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printdialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\platformHTMLBindings.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsUserSettings.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsDragAndDrop.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsClipboard.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\notfound.wav.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\netError.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\mozilla.xhtml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\menulist.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\plugins.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\remote-test-ipc.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printProgress.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\selectDialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\alerts\alert.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewPartialSource.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\alerts\alert.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xul.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\XPCNativeWrapper.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewZoomOverlay.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSourceUtils.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSource.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSource.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSource.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewPartialSource.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\selectDialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\textbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipcbrowser.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipcbrowser-content.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipcbrowser-chrome.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipc.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\tabprompts.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\tabprompts.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\strres.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.xsl.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Close.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\config.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\downloads.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\xbl-marquee.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\xbl-marquee.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\satchel\formSubmitListener.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManagerExceptions.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManagerExceptions.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManagerCommon.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManager.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManager.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\profileSelection.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallItem.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallConfirm.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallConfirm.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\history.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\history.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallConfirm.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\profileSelection.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\arrow.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutCacheEntry.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\commonDialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\colorpicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\button.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\autocomplete.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\appPicker.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutSupport.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\charsetData.properties.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\arrowd.gif.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutCache.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\about.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\viewsource.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\ua.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\quirk.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\mathml.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\html.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\res\forms.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutMemory.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\createProfileWizard.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\createProfileWizard.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\removemp.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions-content.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\eula.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\eula.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\list.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\about.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\about.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\unknownContentType.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\helperApps.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\downloads.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\downloads.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\update.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\list.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\update.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\removemp.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerWizard.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\ocsp.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\ocsp.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\fontbuilder.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\changemp.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\changemp.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblemContent.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblemBinding.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblem.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerWizard.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\updateinfo.xsl.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerWizard.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerService.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerDatasource.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginFinderBinding.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\handler.xml.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\handler.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\dialog.xul.guess
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\dialog.js.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\customizeToolbar.css.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\handling.css.guess
<SYSTEM32>\dllcache\sam.sdf.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.js.guess
C:\Far2\Addons\SetUp\Executor.CMD.reg.guess
C:\Far2\Addons\SetUp\Executor.4NT.reg.guess
C:\Far2\Addons\SetUp\Descript.ion.guess
C:\Far2\Addons\SetUp\Default165.reg.guess
C:\Far2\Addons\Macros\WheelScreenSwitch.reg.guess
C:\Far2\Addons\Macros\View.Space.reg.guess
C:\Far2\Addons\Macros\View.ShiftInsSearch.reg.guess
C:\Far2\Addons\Macros\View.PgDn.reg.guess
C:\Far2\Addons\Macros\Panel.Esc.reg.guess
C:\Far2\Addons\Macros\View.NextPrevFile.reg.guess
C:\Far2\Addons\Macros\ShiftTab.reg.guess
C:\Far2\Addons\Macros\ShiftF1.reg.guess
C:\Far2\Addons\Macros\ShiftBS.reg.guess
C:\Far2\Addons\Macros\Panel.SpaceToSelect.reg.guess
C:\Far2\Addons\Macros\Panel.SelectFromClipboard.reg.guess
C:\Far2\Addons\Macros\Panel.Numpad.reg.guess
C:\Far2\Addons\Macros\Panel.MouseWheelTilt.reg.guess
C:\Far2\Addons\Macros\Panel.Lynx-mot.reg.guess
C:\Far2\Addons\Macros\View.CtrlUpDown.reg.guess
C:\Far2\Addons\Macros\Panel.JumpToSelectedFile.reg.guess
C:\Far2\Addons\SetUp\WindowsGUI.reg.guess
C:\Far2\Documentation\eng\Bug.Report.txt.guess
C:\Far2\Documentation\rus\Plugins.Review.txt.guess
C:\Far2\Documentation\rus\Plugins.Install.txt.guess
C:\Far2\Documentation\rus\Far.FAQ.txt.guess
C:\Far2\Documentation\rus\Bug.Report.txt.guess
C:\Far2\Documentation\rus\Arc.Support.txt.guess
C:\Far2\Documentation\eng\TechInfo.txt.guess
C:\Far2\Documentation\eng\Plugins.Review.txt.guess
C:\Far2\Documentation\eng\Plugins.Install.txt.guess
C:\Far2\Addons\Shell\FARHere.inf.guess
C:\Far2\Addons\Shell\Descript.ion.guess
C:\Far2\Documentation\eng\Arc.Support.txt.guess
C:\Far2\Addons\XLat\Russian\Qwerty.reg.guess
C:\Far2\Addons\XLat\Russian\Descript.ion.guess
C:\Far2\Addons\XLat\Russian\CtrlShiftX.reg.guess
C:\Far2\Addons\XLat\Russian\CtrlR.reg.guess
C:\Far2\Addons\XLat\Russian\Apps.reg.guess
C:\Far2\Addons\XLat\Russian\AltR.reg.guess
C:\Far2\Addons\XLat\Descript.ion.guess
C:\Far2\Documentation\eng\Far.FAQ.txt.guess
C:\Far2\Encyclopedia\FarEncyclopedia.ru.chm.guess
C:\Far2\Documentation\rus\TechInfo.txt.guess
C:\Far2\Addons\Macros\Panel.CtrlShiftBackSlash.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\dn_like.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\VaxColors.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\Rodion_Doroshkevich.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\nc5pal2.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\import_colors.bat.guess
C:\Far2\Addons\Colors\Default Highlighting\hell.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\GreenMile.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\FARColors242.reg.guess
C:\Far2\Addons\Macros\AltMenu.reg.guess
C:\Far2\Addons\Macros\AltScreens.reg.guess
C:\Far2\Addons\Macros\Panel.CtrlShiftPgUpDn.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\Colors_from_Gernichenko.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\Colors_from_admin_essp_ru.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\black_from_Myodov.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\black_from_july.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\black_from_Fonarev.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\VaxColors.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\Rodion_Doroshkevich.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\Colors_from_Sadovoj.reg.guess
C:\Far2\Addons\Macros\Panel.Del.reg.guess
C:\Far2\Addons\Macros\AltSearch.reg.guess
C:\Far2\Addons\Macros\F9Table.reg.guess
C:\Far2\Addons\Macros\MacroConsts.reg.guess
C:\Far2\Addons\Macros\Panel.CtrlQ.reg.guess
C:\Far2\Addons\Macros\Panel.CtrlLeft.reg.guess
C:\Far2\Addons\Macros\Panel.CtrlIns...reg.guess
C:\Far2\Addons\Macros\Panel.BS.reg.guess
C:\Far2\Addons\Macros\Panel.Apps.reg.guess
C:\Far2\Addons\Macros\Panel.AltBS.reg.guess
C:\Far2\Addons\Macros\OpeningLastFile.reg.guess
C:\Far2\Addons\Macros\Panel.CtrlRight.reg.guess
C:\Far2\Addons\Macros\AltX.reg.guess
C:\Far2\Addons\Macros\CtrlDel.reg.guess
C:\Far2\Addons\Macros\F3.reg.guess
C:\Far2\Addons\Macros\Edit.SaveFile.reg.guess
C:\Far2\Addons\Macros\Edit.SaveAndExit.reg.guess
C:\Far2\Addons\Macros\Edit.Notepad.reg.guess
C:\Far2\Addons\Macros\Dialog.AltDown.reg.guess
C:\Far2\Addons\Macros\Descript.ion.guess
C:\Far2\Addons\Macros\CtrlF10.reg.guess
C:\Far2\Addons\Macros\F9DeactivateMenu.reg.guess
%APPDATA%\Microsoft\Windows\Themes\Custom.theme.guess
C:\Far2\FExcept\changelog.guess
C:\Far2\Plugins\Colorer\hrd\console\blue.hrd.guess
C:\Far2\Plugins\Colorer\hrc\auto\qrm.hrc.guess
C:\Far2\Plugins\Colorer\hrd\console\black.hrd.guess
C:\Far2\Plugins\Colorer\hrd\catalog-text.xml.guess
C:\Far2\Plugins\Colorer\hrd\catalog-rgb.xml.guess
C:\Far2\Plugins\Colorer\hrd\catalog-console.xml.guess
C:\Far2\Plugins\Colorer\hrc\auto\types\auto.jar.guess
C:\Far2\Plugins\Colorer\hrc\auto\vim.hrc.guess
C:\Far2\Plugins\Colorer\hrc\auto\rare-scripts.hrc.guess
C:\Far2\Plugins\Colorer\hrd\console\dnlike.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\default.hrd.guess
C:\Far2\Plugins\Colorer\hrc\common.jar.guess
C:\Far2\Plugins\Colorer\hrc\auto\gen.hrc.guess
C:\Far2\Plugins\Colorer\hrc\auto\fartypes.hrc.guess
C:\Far2\Plugins\Colorer\hrc\auto\ccsql.hrc.guess
C:\Far2\Plugins\Colorer\hrc\proto.hrc.guess
C:\Far2\Plugins\Colorer\hrc\php-prot.ent.hrc.guess
C:\Far2\Plugins\Colorer\hrc\msg.ent.hrc.guess
C:\Far2\Plugins\Colorer\hrc\ini.ent.hrc.guess
C:\Far2\Plugins\Colorer\hrc\auto\gen.j2ee.hrc.guess
C:\Far2\Plugins\Colorer\hrc\auto\litestep.hrc.guess
C:\Far2\Plugins\Colorer\hrd\console\hack.hrd.guess
C:\Far2\Plugins\Colorer\hrc\colorer.ent.hrc.guess
C:\Far2\Plugins\DrawLine\changelog.guess
C:\Far2\Plugins\Compare\CompRus.lng.guess
C:\Far2\Plugins\Compare\CompEng.lng.guess
C:\Far2\Plugins\Compare\Compare.map.guess
C:\Far2\Plugins\Compare\CmpRus.hlf.guess
C:\Far2\Plugins\Compare\CmpEng.hlf.guess
C:\Far2\Plugins\Compare\changelog.guess
C:\Far2\Plugins\Colorer\hrd\console\gray.hrd.guess
C:\Far2\Plugins\DrawLine\DrawEng.hlf.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\ocean.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\classic.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\black_sezal.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\black_ay.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\xmastree.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\white.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\nc.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\mirror.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\gray_pult.hrd.guess
C:\Far2\Plugins\Colorer\hrd\console\contrib\cyberpunk.hrd.guess
C:\Far2\Plugins\Colorer\hrc\changes.txt.guess
C:\Far2\Plugins\Colorer\bin\shortcuts.reg.guess
C:\Far2\Plugins\arclite\arclite_eng.lng.guess
C:\Far2\Plugins\arclite\arclite.map.guess
C:\Far2\Plugins\arclite\7zSD.sfx.guess
C:\Far2\Plugins\arclite\7zS2con.sfx.guess
C:\Far2\Plugins\arclite\7zS2.sfx.guess
C:\Far2\Plugins\arclite\7zCon.sfx.guess
C:\Far2\Plugins\arclite\7z.sfx.guess
C:\Far2\Plugins\arclite\arclite_rus.hlf.guess
C:\Far2\Plugins\Align\changelog.guess
C:\Far2\Plugins\Align\AlignEng.lng.guess
C:\Far2\Plugins\Align\Align.map.guess
C:\Far2\Plugins\7-Zip\far7z.txt.guess
C:\Far2\Plugins\7-Zip\far7z.reg.guess
C:\Far2\Plugins\7-Zip\7-ZipRus.lng.guess
C:\Far2\Plugins\7-Zip\7-ZipRus.hlf.guess
C:\Far2\Plugins\7-Zip\7-ZipEng.lng.guess
C:\Far2\Plugins\7-Zip\7-ZipEng.hlf.guess
C:\Far2\Plugins\Align\AlignRus.lng.guess
C:\Far2\Plugins\arclite\arclite_rus.lng.guess
C:\Far2\Plugins\arclite\changelog.guess
C:\Far2\Plugins\arclite\arclite_eng.hlf.guess
C:\Far2\Plugins\AutoWrap\AutoWrap.map.guess
C:\Far2\Plugins\Colorer\bin\colorer.hlf.guess
C:\Far2\Plugins\Brackets\BrackRus.hlf.guess
C:\Far2\Plugins\Colorer\bin\coloree.lng.guess
C:\Far2\Plugins\Colorer\bin\coloree.hlf.guess
C:\Far2\Plugins\Colorer\README.guess
C:\Far2\Plugins\Colorer\LICENSE.guess
C:\Far2\Plugins\Colorer\catalog.xml.guess
C:\Far2\Plugins\Brackets\changelog.guess
C:\Far2\Plugins\Brackets\BrackRus.reg.guess
C:\Far2\Plugins\Brackets\BrackRus.lng.guess
C:\Far2\Plugins\Brackets\Brackets.map.guess
C:\Far2\Plugins\Colorer\bin\colorer.lng.guess
C:\Far2\Plugins\Brackets\BrackEng.reg.guess
C:\Far2\Plugins\Brackets\BrackEng.lng.guess
C:\Far2\Plugins\Brackets\BrackEng.hlf.guess
C:\Far2\Plugins\Brackets\BrackDel.reg.guess
C:\Far2\Plugins\AutoWrap\WrapRus.lng.guess
C:\Far2\Plugins\AutoWrap\WrapEng.lng.guess
C:\Far2\Plugins\AutoWrap\changelog.guess
C:\Far2\Addons\Colors\Custom Highlighting\nc5pal2.reg.guess
C:\Far2\Addons\Colors\Default Highlighting\Descript.ion.guess
C:\Far2\Addons\Colors\Custom Highlighting\import_colors.bat.guess
C:\Far2\Addons\Colors\Custom Highlighting\hell.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\GreenMile.reg.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst9.wpl.guess
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.bak.guess
%ALLUSERSPROFILE%\DRM\drmv2.sst.guess
%ALLUSERSPROFILE%\DRM\drmv2.lic.guess
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg.guess
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg.guess
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg.guess
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst11.wpl.guess
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst13.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst6.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst5.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst4.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst3.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst2.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst15.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst14.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst7.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst8.wpl.guess
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD.guess
C:\Documents and Settings\Default User\Templates\quattro.wb2.guess
C:\Documents and Settings\Default User\Templates\sndrec.wav.guess
%APPDATA%\Microsoft\Internet Explorer\brndlog.txt.guess
%APPDATA%\Microsoft\Internet Explorer\brndlog.bak.guess
%APPDATA%\Microsoft\Address Book\%USERNAME%.wab~.guess
%APPDATA%\Microsoft\Address Book\%USERNAME%.wab.guess
%APPDATA%\winscp.rnd.guess
C:\Documents and Settings\Default User\Templates\wordpfct.wpg.guess
C:\Documents and Settings\Default User\Templates\wordpfct.wpd.guess
%APPDATA%\Microsoft\Internet Explorer\Desktop.htt.guess
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML.guess
C:\Documents and Settings\Default User\SendTo\Compressed (zipped) Folder.ZFSendToTarget.guess
C:\Documents and Settings\Default User\Templates\powerpnt.ppt.guess
C:\Documents and Settings\Default User\Templates\lotus.wk4.guess
C:\Documents and Settings\Default User\Templates\excel4.xls.guess
C:\Documents and Settings\Default User\Templates\excel.xls.guess
C:\Documents and Settings\Default User\Templates\amipro.sam.guess
C:\Documents and Settings\Default User\SendTo\Mail Recipient.MAPIMail.guess
C:\Documents and Settings\Default User\SendTo\Desktop (create shortcut).DeskLink.guess
C:\Documents and Settings\Default User\Templates\presenta.shw.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst12.wpl.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst10.wpl.guess
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\ball.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\astronaut.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\airplane.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\%USERNAME%.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\guest.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\rasphone.pbk.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\UserMigratedStore_59R.bin.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\beach.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\DefaultStore_59R.bin.guess
C:\startup_local.bat.guess
C:\ntldr.guess
C:\NTDETECT.COM.guess
C:\network.pcap.guess
C:\MSDOS.SYS.guess
C:\IO.SYS.guess
C:\CONFIG.SYS.guess
C:\AUTOEXEC.BAT.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\d42cc0c3858a58db2db37658219e6400_23ef5514-3059-436f-a4a7-4cefaab20eb1.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\butterfly.bmp.guess
%HOMEPATH%\Desktop\Payment.exe
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\car.bmp.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\Plylst1.wpl.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\kick.bmp.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\New Stories (Highway Blues).wma.guess
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\snowflake.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\skater.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\red flower.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\pink flower.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\palm tree.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\lift-off.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\horses.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\cat.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\guitar.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\frog.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\fish.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\duck.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\drip.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\dog.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\dirt bike.bmp.guess
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\chess.bmp.guess
C:\Far2\Plugins\DrawLine\DrawEng.lng.guess
C:\Far2\FExcept\SetFarExceptionHandler.reg.guess
%APPDATA%\Microsoft\Media Player\0007F0B7.wpl.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.sqlite.guess
%HOMEPATH%\SendTo\Desktop (create shortcut).DeskLink.guess
C:\Far2\FarHun.lng.guess
C:\Far2\FarHun.hlf.guess
C:\Far2\FarGer.lng.guess
C:\Far2\FarEng.lng.guess
C:\Far2\FarEng.hlf.guess
C:\Far2\FarCze.lng.guess
C:\Far2\far.map.guess
C:\Far2\FarPol.lng.guess
C:\Far2\ClearPluginsCache.cmd.guess
C:\Far2\changelog.guess
%HOMEPATH%\Templates\wordpfct.wpg.guess
%HOMEPATH%\Templates\wordpfct.wpd.guess
%HOMEPATH%\Templates\sndrec.wav.guess
%HOMEPATH%\Templates\quattro.wb2.guess
%HOMEPATH%\Templates\presenta.shw.guess
%HOMEPATH%\Templates\lotus.wk4.guess
%HOMEPATH%\Templates\amipro.sam.guess
C:\Far2\changelog_eng.guess
%HOMEPATH%\SendTo\My Documents.mydocs.guess
C:\Far2\FarRus.lng.guess
C:\Far2\FarSpa.lng.guess
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.txt.guess
C:\Far2\Addons\Colors\Custom Highlighting\FARColors242.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\dn_like.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\Descript.ion.guess
C:\Far2\Addons\Colors\Custom Highlighting\Colors_from_Sadovoj.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\Colors_from_Gernichenko.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\Colors_from_admin_essp_ru.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\black_from_Myodov.reg.guess
C:\Far2\Addons\Colors\import_colors.bat.guess
C:\Far2\Addons\Colors\Custom Highlighting\black_from_july.reg.guess
C:\Far2\Addons\Colors\Custom Highlighting\black_from_Fonarev.reg.guess
C:\Far2\Addons\Colors\export_colors.bat.guess
C:\Far2\Addons\Colors\Descript.ion.guess
C:\Far2\Addons\README.TXT.guess
C:\Far2\Addons\Descript.ion.guess
C:\Far2\SaveSettings.cmd.guess
C:\Far2\RestoreSettings.cmd.guess
C:\Far2\File_id.diz.guess
C:\Far2\FarRus.hlf.guess
%HOMEPATH%\SendTo\Mail Recipient.MAPIMail.guess
%HOMEPATH%\SendTo\Compressed (zipped) Folder.ZFSendToTarget.guess
%TEMP%\133562\TemporaryFile\TemporaryFile.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.json.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\bookmarks-2011-11-10.json.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.sqlite.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.sqlite.guess
%HOMEPATH%\Favorites\MSN.com.url.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_CACHE_MAP_.guess
%HOMEPATH%\Favorites\Links\Customize Links.url.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\startupCache.4.little.guess
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\Outbox.dbx.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_CACHE_003_.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_CACHE_002_.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\_CACHE_001_.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\XUL.mfl.guess
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.sqlite.guess
<LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.XML.guess
<LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.DTD.guess
<LS_APPDATA>\Microsoft\Media Player\CurrentDatabase_59R.wmdb.guess
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\Offline.dbx.guess
%HOMEPATH%\Favorites\Radio Station Guide.url.guess
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\Inbox.dbx.guess
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\Folders.dbx.guess
<LS_APPDATA>\IconCache.db.guess
%HOMEPATH%\Favorites\Links\Windows.url.guess
%HOMEPATH%\Favorites\Links\Windows Media.url.guess
%HOMEPATH%\Favorites\Links\Windows Marketplace.url.guess
%HOMEPATH%\Favorites\Links\Free Hotmail.url.guess
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db.guess
C:\Far2\Plugins\DrawLine\DrawLine.map.guess
C:\Far2\Plugins\DrawLine\DrawRus.hlf.guess
C:\Far2\Plugins\DrawLine\DrawRus.lng.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\r1033tts.lxa.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\win6BrowserOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.xul.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\ltts1033.lxa.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\viewSourceOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.js.guess
%CommonProgramFiles%\Microsoft Shared\Triedit\dhtmled.ocx.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.xml.guess
%CommonProgramFiles%\Microsoft Shared\Speech\sapi.cpl.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.xml.guess
%CommonProgramFiles%\Microsoft Shared\MSInfo\ieinfo5.ocx.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.js.guess
%CommonProgramFiles%\System\ado\msado21.tlb.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.xml.guess
%CommonProgramFiles%\System\ado\msado27.tlb.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.js.guess
%CommonProgramFiles%\System\ado\msado26.tlb.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.js.guess
%CommonProgramFiles%\System\ado\msado25.tlb.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\history\history-panel.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.xul.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.js.guess
%CommonProgramFiles%\System\ado\msado20.tlb.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.xhtml.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.spd.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncKey.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutPrivateBrowsing.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.css.guess
%ProgramFiles%\FireFox\chrome\toolkit.manifest.guess
%ProgramFiles%\FireFox\chrome\pippki.manifest.guess
%ProgramFiles%\FireFox\chrome\en-US.manifest.guess
%ProgramFiles%\FireFox\chrome\browser.manifest.guess
%ProgramFiles%\FireFox\update.locale.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\baseMenuOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\NetworkPanel.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\hiddenWindow.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\fullscreen-video.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.xml.guess
<SYSTEM32>\dllcache\r1033tts.lxa.new
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\report-phishing-overlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\blockedSite.xhtml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sanitize.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\preferences.xul.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.css.guess
<SYSTEM32>\dllcache\dhtmled.ocx.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncSetup.css.guess
<SYSTEM32>\dllcache\sapi.cpl.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncQuota.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncCommon.css.guess
<SYSTEM32>\dllcache\ieinfo5.ocx.new
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\keyhole-forward-mask.svg.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.css.guess
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\setDesktopBackground.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties2.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\placesOverlay.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced-scripts.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.xml.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.css.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\colors.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.xul.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.js.guess
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.xul.guess
%ProgramFiles%\FireFox\softokn3.chk.guess
C:\Far2\Plugins\Network\NetEng.hlf.guess
%ProgramFiles%\FireFox\README.txt.guess
C:\Far2\Plugins\Network\changelog.guess
C:\Far2\Plugins\FTP\Notes_rus.txt.guess
C:\Far2\Plugins\FTP\Notes.txt.guess
C:\Far2\Plugins\FTP\FtpRus.lng.guess
C:\Far2\Plugins\FTP\FtpRus.hlf.guess
C:\Far2\Plugins\FTP\FtpEng.lng.guess
C:\Far2\Plugins\FTP\FtpEng.hlf.guess
C:\Far2\Plugins\FTP\FtpCmds_rus.txt.guess
C:\Far2\Plugins\FTP\FtpCmds.txt.guess
C:\Far2\Plugins\FarCmds\FARCmdsEng.hlf.guess
C:\Far2\Plugins\FTP\FarFtp.map.guess
C:\Far2\Plugins\FileCase\FileCase.map.guess
C:\Far2\Plugins\FileCase\changelog.guess
C:\Far2\Plugins\FileCase\CaseRus.lng.guess
C:\Far2\Plugins\FileCase\CaseRus.hlf.guess
C:\Far2\Plugins\FileCase\CaseEng.lng.guess
C:\Far2\Plugins\FileCase\CaseEng.hlf.guess
C:\Far2\Plugins\FarCmds\FARCmdsRus.lng.guess
C:\Far2\Plugins\FarCmds\FARCmdsRus.hlf.guess
C:\Far2\Plugins\FTP\changelog.guess
C:\Far2\Plugins\FarCmds\FARCmdsEng.lng.guess
C:\Far2\Plugins\FTP\TechInfo.reg.guess
C:\Far2\Plugins\HlfViewer\HlfViewer.map.guess
C:\Far2\Plugins\MacroView\MacroRus.lng.guess
C:\Far2\Plugins\MacroView\MacroRus.hlf.guess
C:\Far2\Plugins\MacroView\MacroEng.lng.guess
C:\Far2\Plugins\MacroView\MacroEng.hlf.guess
C:\Far2\Plugins\MacroView\changelog.guess
C:\Far2\Plugins\HlfViewer\HlfViewerRus.lng.guess
C:\Far2\Plugins\HlfViewer\HlfViewerRus.hlf.guess
C:\Far2\Plugins\HlfViewer\HlfViewerEng.lng.guess
C:\Far2\Plugins\FTP\lib\ftpDirList.fll.guess
C:\Far2\Plugins\FTP\TechInfo_rus.reg.guess
C:\Far2\Plugins\HlfViewer\changelog.guess
C:\Far2\Plugins\FTP\lib\Progress_ZeMA.reg.guess
C:\Far2\Plugins\FTP\lib\Progress_Wesha.reg.guess
C:\Far2\Plugins\FTP\lib\Progress_JM.reg.guess
C:\Far2\Plugins\FTP\lib\Progress_FarCopy.reg.guess
C:\Far2\Plugins\FTP\lib\ftpProgress.map.guess
C:\Far2\Plugins\FTP\lib\ftpProgress.fll.guess
C:\Far2\Plugins\FTP\lib\ftpDirList.map.guess
C:\Far2\Plugins\HlfViewer\HlfViewerEng.hlf.guess
C:\Far2\Plugins\FarCmds\FARCmds.map.guess
C:\Far2\Plugins\FarCmds\changelog.guess
C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.H.guess
C:\Far2\Plugins\ExtSearch\ES_ENG.HLF.guess
C:\Far2\Plugins\EMenu\HotkeyProperties.reg.guess
C:\Far2\Plugins\EMenu\HotkeyClipboard.reg.guess
C:\Far2\Plugins\EMenu\Hotkey.reg.guess
C:\Far2\Plugins\EMenu\EMenuRus.lng.guess
C:\Far2\Plugins\EMenu\EMenuRus.hlf.guess
C:\Far2\Plugins\EMenu\EMenuEng.lng.guess
C:\Far2\Plugins\ExtSearch\ES_RUS.HLF.guess
C:\Far2\Plugins\EMenu\EMenuEng.hlf.guess
C:\Far2\Plugins\EMenu\EMenu.map.guess
C:\Far2\Plugins\EMenu\changelog.guess
C:\Far2\Plugins\EditCase\EditCase.map.guess
C:\Far2\Plugins\EditCase\ECaseRus.lng.guess
C:\Far2\Plugins\EditCase\ECaseRus.hlf.guess
C:\Far2\Plugins\EditCase\ECaseEng.lng.guess
C:\Far2\Plugins\EditCase\ECaseEng.hlf.guess
C:\Far2\Plugins\EditCase\changelog.guess
C:\Far2\Plugins\EMenu\EMenuDel.reg.guess
C:\Far2\Plugins\ExtSearch\ES_RUS.LNG.guess
C:\Far2\Plugins\ExtSearch\ES_ENG.LNG.guess
C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.TXT.guess
C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.CPP.guess
C:\Far2\Plugins\ExtSearch\sources\ExtMenu.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.H.guess
C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.CPP.guess
C:\Far2\Plugins\ExtSearch\sources\PLUGIN.HPP.guess
C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\ExtSearch.hpp.guess
C:\Far2\Plugins\ExtSearch\sources\ExtSearch.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.cpp.guess
C:\Far2\Plugins\ExtSearch\doc\ENG_READ.TXT.guess
C:\Far2\Plugins\ExtSearch\sources\ExtChCase.cpp.guess
C:\Far2\Plugins\ExtSearch\sources\esearch_debug.bat.guess
C:\Far2\Plugins\ExtSearch\sources\ESEARCH.BAT.guess
C:\Far2\Plugins\ExtSearch\keys\ES_RUS.REG.guess
C:\Far2\Plugins\ExtSearch\keys\ES_ENG.REG.guess
C:\Far2\Plugins\ExtSearch\doc\RUS_READ.TXT.guess
C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.TXT.guess
C:\Far2\Plugins\ExtSearch\doc\REGEXPS.TXT.guess
C:\Far2\Plugins\MacroView\MacroView.map.guess
<SYSTEM32>\dllcache\ltts1033.lxa.new
%ProgramFiles%\FireFox\greprefs.js.guess
C:\Far2\Plugins\Network\NetEng.lng.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\r1033tts.lxa.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\ltts1033.lxa.guess
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\FPEXT.MSG.guess
%CommonProgramFiles%\Microsoft Shared\Web Folders\PUBPLACE.HTT.guess
%CommonProgramFiles%\Microsoft Shared\Triedit\DHTMLED.OCX.guess
%CommonProgramFiles%\Microsoft Shared\TextConv\write32.wpc.guess
%CommonProgramFiles%\Microsoft Shared\TextConv\mswrd832.cnv.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Blank Bkgrd.gif.guess
%CommonProgramFiles%\Microsoft Shared\TextConv\mswrd632.wpc.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\tech.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Sweets Bkgrd.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\sunbannA.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Ivy.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\fieruled.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\citbannA.gif.guess
%CommonProgramFiles%\Microsoft Shared\TextConv\html32.cnv.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\Btzhsepa.gif.guess
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.spd.guess
%CommonProgramFiles%\System\msadc\handsafe.reg.guess
%ProgramFiles%\FireFox\freebl3.chk.guess
%ProgramFiles%\FireFox\dependentlibs.list.guess
%ProgramFiles%\FireFox\chrome.manifest.guess
%ProgramFiles%\FireFox\blocklist.xml.guess
%CommonProgramFiles%\System\Ole DB\sqlxmlx.rll.guess
%CommonProgramFiles%\System\Ole DB\sqlsoldb.chm.guess
%CommonProgramFiles%\System\Ole DB\sqloledb.rll.guess
%CommonProgramFiles%\System\Ole DB\oledbvbs.inc.guess
%CommonProgramFiles%\System\ado\adovbs.inc.guess
%CommonProgramFiles%\System\ado\adojavas.inc.guess
%CommonProgramFiles%\System\msadc\handler.reg.guess
%CommonProgramFiles%\System\msadc\adcvbs.inc.guess
%CommonProgramFiles%\System\msadc\adcjavas.inc.guess
%CommonProgramFiles%\System\ado\msado27.tlb.guess
%CommonProgramFiles%\System\ado\msado26.tlb.guess
%CommonProgramFiles%\System\ado\msado25.tlb.guess
%CommonProgramFiles%\System\ado\msado21.tlb.guess
%CommonProgramFiles%\System\ado\msado20.tlb.guess
%CommonProgramFiles%\System\Ole DB\oledbjvs.inc.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\aswrule.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\anabnr2.gif.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\amaizrul.gif.guess
C:\Far2\Plugins\TmpPanel\TmpEng.hlf.guess
C:\Far2\Plugins\TmpPanel\shortcuts.rus.temp.guess
C:\Far2\Plugins\TmpPanel\shortcuts.rus.reg.guess
C:\Far2\Plugins\TmpPanel\shortcuts.eng.temp.guess
C:\Far2\Plugins\TmpPanel\shortcuts.eng.reg.guess
C:\Far2\Plugins\TmpPanel\disks.rus.temp.guess
C:\Far2\Plugins\TmpPanel\disks.eng.temp.guess
C:\Far2\Plugins\TmpPanel\TmpPanel.map.guess
C:\Far2\Plugins\TmpPanel\changelog.guess
C:\Far2\Plugins\ProcList\ProcRus.hlf.guess
C:\Far2\Plugins\ProcList\Proclist.map.guess
C:\Far2\Plugins\ProcList\ProcEng.lng.guess
C:\Far2\Plugins\ProcList\ProcEng.hlf.guess
C:\Far2\Plugins\ProcList\changelog.guess
C:\Far2\Plugins\Network\Network.map.guess
C:\Far2\Plugins\Network\NetRus.lng.guess
C:\Far2\Plugins\Network\NetRus.hlf.guess
C:\Far2\Plugins\ProcList\ProcRus.lng.guess
C:\Far2\Plugins\TmpPanel\TmpRus.hlf.guess
C:\Far2\Plugins\TmpPanel\TmpEng.lng.guess
C:\Far2\Plugins\TmpPanel\TmpRus.lng.guess
%CommonProgramFiles%\Microsoft Shared\Stationery\aleabanr.gif.guess
C:\Muldrop\dmp_0x8c_0x20000.guess
%CommonProgramFiles%\Microsoft Shared\Speech\sapi.cpl.guess
%CommonProgramFiles%\Microsoft Shared\MSInfo\IEINFO5.OCX.guess
%CommonProgramFiles%\Microsoft Shared\MSInfo\IEFILES5.INF.guess
C:\Muldrop\Tfsnjuf.fyf_0.guess
C:\Muldrop\Pbznfou.fyf_1.guess
C:\Muldrop\Pbznfou.fyf_0.guess
C:\Muldrop\dmp_0xb8_0x20000.guess
C:\Muldrop\dmp_0xb8_0x10000.guess
C:\Muldrop\dmp_0x8c_0x10000.guess
C:\Far2\Plugins\WinSCP\licence.guess
C:\Far2\PluginSDK\Headers.pas\PluginW.pas.guess
C:\Far2\PluginSDK\Headers.pas\FarKeysW.pas.guess
C:\Far2\PluginSDK\Headers.pas\FarColorW.pas.guess
C:\Far2\PluginSDK\Headers.c\plugin.hpp.guess
C:\Far2\PluginSDK\Headers.c\farkeys.hpp.guess
C:\Far2\PluginSDK\Headers.c\farcolor.hpp.guess
C:\Far2\Plugins\WinSCP\WinSCP.lng.guess
C:\Far2\Plugins\WinSCP\readme.guess
%ProgramFiles%\FireFox\nssdbm3.chk.guess
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Minimize.gif.guess

Deletes the following files:

C:\Muldrop\dmp_0x8c_0x10000
C:\Muldrop\dmp_0x8c_0x20000
C:\Muldrop\dmp_0xb8_0x10000
C:\Muldrop\dmp_0xb8_0x20000
C:\Muldrop\Pbznfou.fyf_0
C:\Muldrop\Pbznfou.fyf_1
C:\Muldrop\Tfsnjuf.fyf_0

Moves the following files:

from <Full path to file> to %TEMP%\133562\...\TemporaryFile

Substitutes the following files:

<SYSTEM32>\dllcache\ieinfo5.ocx.new
<SYSTEM32>\dllcache\sapi.cpl.new
<SYSTEM32>\dllcache\dhtmled.ocx.new
<SYSTEM32>\dllcache\ltts1033.lxa.new
<SYSTEM32>\dllcache\r1033tts.lxa.new
<SYSTEM32>\dllcache\sam.sdf.new
<SYSTEM32>\dllcache\sam.spd.new
<SYSTEM32>\dllcache\msado20.tlb.new
<SYSTEM32>\dllcache\msado21.tlb.new
<SYSTEM32>\dllcache\msado25.tlb.new
<SYSTEM32>\dllcache\msado26.tlb.new
<SYSTEM32>\dllcache\msado27.tlb.new

Changes user data files extensions (Trojan.Encoder).

Miscellaneous:

Creates and executes the following:

'%WINDIR%\Termite.exe'
'%HOMEPATH%\Desktop\Payment.exe'

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial