Trojan.Encoder.29707

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\split.avi
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\testee.cer
<Drive name for removable media>:\samieee_obiee_presentation.pptx
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\!!! all your files are encrypted !!!.txt
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\hypothyroidism_slides.pptx

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Modifies file system

Creates the following files

C:\far2\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.001
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.dir
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.001
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.001
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wsb.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wsb
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wid.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wid
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.dir.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.001
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.001
unc\dfdxmxd\users\all users\microsoft\windows\caches\{1e8814b6-8f2d-4b97-87f6-9370f7eb40b7}.2.ver0x0000000000000001.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{1573b5e2-35f5-4eaf-bec0-4e35d1d995f6}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{1573b5e2-35f5-4eaf-bec0-4e35d1d995f6}.2.ver0x0000000000000002.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\caches\cversions.2.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\cversions.2.db
unc\dfdxmxd\users\all users\microsoft\user account pictures\user.bmp
unc\dfdxmxd\users\all users\microsoft\user account pictures\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\user account pictures\guest.bmp
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.002
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.001
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.000
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{1e8814b6-8f2d-4b97-87f6-9370f7eb40b7}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.ci
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.ci.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\officesoftwareprotectionplatform\cache\cache.dat
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mss.chk.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.gthr
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.crwl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.crwl
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\windows.edb.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\windows.edb
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00002.jrs.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00002.jrs
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00001.jrs.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00001.jrs
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.gthr.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\officesoftwareprotectionplatform\cache\cache.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\officesoftwareprotectionplatform\cache\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmieventdata.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmieventdata.dat
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmidatabookmarks.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmidatabookmarks.dat
unc\dfdxmxd\users\all users\microsoft\rac\statedata\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racdatabase.sdf.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\rac\statedata\racdatabase.sdf
unc\dfdxmxd\users\all users\microsoft\rac\publisheddata\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\rac\publisheddata\racwmidatabase.sdf.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\rac\publisheddata\racwmidatabase.sdf
unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mss.chk
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\caches\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_namedurl.hxw
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_k.hxw
unc\dfdxmxd\users\all users\microsoft help\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft help\hx.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx.hxn
unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasdlta.vdm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasdlta.vdm
unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasbase.vdm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasbase.vdm
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mtoc_hx.hxh
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cd2.tmp.hdmp.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\dmi8538.tmp.log.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\dmi8538.tmp.log.xml
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_5d5d8b7c1982ab7c66cf747e7b18b39e2441a_cab_073d8027\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_5d5d8b7c1982ab7c66cf747e7b18b39e2441a_cab_073d8027\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_5d5d8b7c1982ab7c66cf747e7b18b39e2441a_cab_073d8027\report.wer
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed64bf1962bf234c1a7153259451034e674_cab_0731c4f1\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed64bf1962bf234c1a7153259451034e674_cab_0731c4f1\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed64bf1962bf234c1a7153259451034e674_cab_0731c4f1\report.wer
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer7f7e.tmp.mdmp.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer7f7e.tmp.mdmp
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\report.wer
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mvalidator.hxd
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cd2.tmp.hdmp
unc\dfdxmxd\users\all users\microsoft help\ms.infopath.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.infopath.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\ms.groove.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.groove.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\ms.graph.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.graph.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\ms.excel.dev.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.excel.dev.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\ms.excel.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.excel.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mtoc_hx.hxh.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.infopatheditor.14.1033.hxn
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_vs70namedurl.hxw
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_k.hxw
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_f.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_f.hxw
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_a.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_a.hxw
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore.hxn
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mvalidator.hxd
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_vs70namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cc2.tmp.werinternalmetadata.xml.[28e766a6-a0a2-cab5-...
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cc2.tmp.werinternalmetadata.xml
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 03.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 02.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 01.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 01.wma
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.sec.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.sec
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.bla.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.bla
unc\dfdxmxd\users\all users\microsoft\windows\drm\drmstore.hds.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 03.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\drmstore.hds
unc\dfdxmxd\users\all users\microsoft\windows\drm\blackbox.bin.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\blackbox.bin
unc\dfdxmxd\users\all users\microsoft\windows\caches\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{84c252b6-5dca-4ae7-94d3-461f67359cd9}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{84c252b6-5dca-4ae7-94d3-461f67359cd9}.2.ver0x0000000000000001.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db
unc\dfdxmxd\users\all users\microsoft\windows\caches\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 04.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 04.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 02.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 05.wma
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt
unc\dfdxmxd\users\all users\microsoft\windows\start menu\programs\steam\steam support center.url
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\report.wer
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_099489dd\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_099489dd\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_099489dd\report.wer
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_088cc9f7\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_088cc9f7\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_088cc9f7\report.wer
unc\dfdxmxd\users\all users\microsoft\windows\start menu\programs\steam\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\windows\start menu\programs\steam\steam support center.url.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 10.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt.[28e766a6-a0a2-cab5-b88c-2ad46...
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 10.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 09.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 09.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 08.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 08.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 07.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 07.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 06.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 06.wma
unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 05.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
C:\far2\plugins\ftp\lib\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\mf\pending.grl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\mf\pending.grl
unc\dfdxmxd\users\all users\microsoft\mf\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\mf\active.grl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\mf\active.grl
unc\dfdxmxd\users\all users\microsoft\ilscache\imcrcache.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\ilscache\imcrcache.xml
unc\dfdxmxd\users\all users\microsoft\ilscache\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\ilscache\ilrcache.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\ilscache\ilrcache.xml
C:\far2\plugins\editcase\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\5d91c0b736f4f8dbdd317cf8a037fced_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
C:\far2\plugins\farcmds\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\dbgclr.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\dbgclr.ctm
C:\far2\plugins\emenu\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\!!! all your files are encrypted !!!.txt
C:\far2\plugins\filecase\!!! all your files are encrypted !!!.txt
C:\far2\plugins\ftp\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\dexplore.ctm
C:\far2\plugins\tmppanel\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\dexplore.ctm
C:\far2\plugins\proclist\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\!!! all your files are encrypted !!!.txt
C:\far2\plugins\macroview\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\dexplore.ctm
C:\far2\plugins\network\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\5d91c0b736f4f8dbdd317cf8a037fced_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
C:\far2\plugins\drawline\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\dexplore.ctm
unc\dfdxmxd\users\all users\adobe\arm\s\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\adobe\arm\s\armmanifest.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\adobe\arm\s\armmanifest.msi
C:\far2\fexcept\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\adobe\arm\reader_15.007.20033\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\adobe\arm\reader_15.007.20033\readerdcmanifest.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\adobe\arm\reader_15.007.20033\readerdcmanifest.msi
C:\far2\encyclopedia\tap\!!! all your files are encrypted !!!.txt
C:\far2\encyclopedia\!!! all your files are encrypted !!!.txt
C:\far2\documentation\rus\!!! all your files are encrypted !!!.txt
C:\far2\plugins\arclite\!!! all your files are encrypted !!!.txt
C:\far2\documentation\eng\!!! all your files are encrypted !!!.txt
C:\far2\addons\xlat\!!! all your files are encrypted !!!.txt
C:\far2\addons\shell\!!! all your files are encrypted !!!.txt
C:\far2\addons\setup\!!! all your files are encrypted !!!.txt
C:\far2\addons\macros\!!! all your files are encrypted !!!.txt
C:\far2\addons\colors\default_highlighting\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\ntuser.pol.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\ntuser.pol
C:\far2\addons\colors\custom_highlighting\!!! all your files are encrypted !!!.txt
C:\far2\addons\colors\!!! all your files are encrypted !!!.txt
C:\far2\addons\!!! all your files are encrypted !!!.txt
C:\far2\addons\xlat\russian\!!! all your files are encrypted !!!.txt
C:\far2\plugins\autowrap\!!! all your files are encrypted !!!.txt
C:\far2\plugins\align\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini
unc\dfdxmxd\users\all users\microsoft\crypto\keys\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
C:\far2\plugins\compare\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini
C:\far2\plugins\brackets\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi
unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft help\ms.infopatheditor.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\caches\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr0.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\!!! all your files are encrypted !!!.txt
C:\far2\plugins\hlfviewer\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\network\downloader\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\office\mysite.ico
unc\dfdxmxd\users\all users\microsoft\office\mysharepoints.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\mysharepoints.ico
unc\dfdxmxd\users\all users\microsoft\office\documentrepository.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\documentrepository.ico
unc\dfdxmxd\users\all users\microsoft\office\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\office\assetlibrary.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\assetlibrary.ico
unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr1.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr1.dat
unc\dfdxmxd\users\all users\microsoft\office\mysite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\sharepointportalsite.ico
unc\dfdxmxd\users\all users\microsoft\office\sharepointportalsite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\dexplore.ctm
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\dexplore.ctm
C:\far2\pluginsdk\headers.pas\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr0.dat
unc\dfdxmxd\users\all users\microsoft\office\sharepointteamsite.ico
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\sharepointteamsite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
C:\far2\pluginsdk\headers.c\!!! all your files are encrypted !!!.txt
unc\dfdxmxd\users\all users\microsoft help\ms.msaccess.14.1033.hxn

Sets the 'hidden' attribute to the following files

unc\dfdxmxd\users\all users\ntuser.pol.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.bla.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.sec.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mtoc_hx.hxh.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\hx_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\dbgclr.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_a.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_vs70namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.excel.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.excel.dev.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.graph.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.groove.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.infopath.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\blackbox.bin.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\windows\drm\drmstore.hds.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\5d91c0b736f4f8dbdd317cf8a037fced_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.infopatheditor.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_f.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
unc\dfdxmxd\users\all users\microsoft help\ms.msaccess.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]

Moves the following files

from unc\dfdxmxd\users\all users\ntuser.pol to unc\dfdxmxd\users\all users\ntuser.pol.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.css to %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncutils.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncnotification.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\syncnotification.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\synckey.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\synckey.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.js to %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.js to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.css to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.js to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.css to %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.js to %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\urlbarbindings.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\urlbarbindings.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.js to %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\history\history_panel.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\history\history_panel.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.js to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.css to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.css to %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\sidebarutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\sidebarutils.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.js to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\win6browseroverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\win6browseroverlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.js to %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\viewsourceoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\viewsourceoverlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\utilityoverlay.js to %ProgramFiles%\firefox\chrome\browser\content\browser\utilityoverlay.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.infopath.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.infopath.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.js to %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.js to %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\toolkit.manifest to %ProgramFiles%\firefox\chrome\toolkit.manifest.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\pippki.manifest to %ProgramFiles%\firefox\chrome\pippki.manifest.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\en_us.manifest to %ProgramFiles%\firefox\chrome\en_us.manifest.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser.manifest to %ProgramFiles%\firefox\chrome\browser.manifest.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\updater.ini to %ProgramFiles%\firefox\updater.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\softokn3.chk to %ProgramFiles%\firefox\softokn3.chk.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\readme.txt.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\platform.ini to %ProgramFiles%\firefox\platform.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.css to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\nssdbm3.chk to %ProgramFiles%\firefox\nssdbm3.chk.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\freebl3.chk.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\dependentlibs.list.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\crashreporter_override.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\crashreporter.ini to %ProgramFiles%\firefox\crashreporter.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\chrome.manifest.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\blocklist.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\application.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.msaccess.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.msaccess.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\greprefs.js to %ProgramFiles%\firefox\greprefs.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.css to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\nscontextmenu.js to %ProgramFiles%\firefox\chrome\browser\content\browser\nscontextmenu.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\networkpanel.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\networkpanel.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\hiddenwindow.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\hiddenwindow.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\fullscreen_video.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\fullscreen_video.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser_tabpreviews.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\browser_tabpreviews.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.js to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.css to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\basemenuoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\basemenuoverlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs_bindings.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs_bindings.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.css to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutrobots.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutrobots.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutprivatebrowsing.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutprivatebrowsing.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.js to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.infopatheditor.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.infopatheditor.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.css to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.js to %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\sb_loader.js to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\sb_loader.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\report_phishing_overlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\report_phishing_overlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\blockedsite.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\blockedsite.xhtml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\searchbarbindings.css to %ProgramFiles%\firefox\chrome\browser\content\browser\search\searchbarbindings.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\search.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\search\search.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sanitize.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sanitize.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\preferences.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\preferences.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissionsutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissionsutils.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutcerterror.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutcerterror.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\places.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\places.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\organizer.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\organizer.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\editbookmarkoverlay.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\editbookmarkoverlay.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe_ui.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe_ui.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncsetup.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncsetup.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncquota.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncquota.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\synccommon.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\synccommon.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\setdesktopbackground.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\setdesktopbackground.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\searchbar.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\searchbar.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\sanitizedialog.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\sanitizedialog.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\pageinfo.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\pageinfo.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\keyhole_forward_mask.svg to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\keyhole_forward_mask.svg.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\inspector.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\inspector.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\fullscreen_video.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\fullscreen_video.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\enginemanager.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\enginemanager.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\browser.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\browser.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsynctabs.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsynctabs.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsessionrestore.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsessionrestore.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.css to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\organizer.css to %ProgramFiles%\firefox\chrome\browser\content\browser\places\organizer.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\menu.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\places\menu.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\history_panel.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\history_panel.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\treeview.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\treeview.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\placesoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\placesoverlay.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\tree.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\places\tree.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\browserplacesviews.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\browserplacesviews.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties2.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties2.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\security.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\security.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\permissions.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\permissions.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\controller.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\controller.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.xml to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.css to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\colors.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\colors.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced_scripts.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced_scripts.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.xul.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.js.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.groove.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.groove.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.graph.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.graph.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.excel.dev.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.excel.dev.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\ilscache\ilrcache.xml to unc\dfdxmxd\users\all users\microsoft\ilscache\ilrcache.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\dbgclr.ctm to unc\dfdxmxd\users\all users\microsoft\dbgclr\7.1\1033\dbgclr.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\5d91c0b736f4f8dbdd317cf8a037fced_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to unc\dfdxmxd\users\all users\microsoft\crypto\rsa\s-1-5-18\5d91c0b736f4f8dbdd317cf8a037fced_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee to unc\dfdxmxd\users\all users\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\ilscache\imcrcache.xml to unc\dfdxmxd\users\all users\microsoft\ilscache\imcrcache.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini to unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab to unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi to unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini to unc\dfdxmxd\users\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\arm\s\armmanifest.msi to unc\dfdxmxd\users\all users\adobe\arm\s\armmanifest.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\adobe\arm\reader_15.007.20033\readerdcmanifest.msi to unc\dfdxmxd\users\all users\adobe\arm\reader_15.007.20033\readerdcmanifest.msi.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w to unc\dfdxmxd\users\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\mf\active.grl to unc\dfdxmxd\users\all users\microsoft\mf\active.grl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\mf\pending.grl to unc\dfdxmxd\users\all users\microsoft\mf\pending.grl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1028\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\sharepointteamsite.ico to unc\dfdxmxd\users\all users\microsoft\office\sharepointteamsite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\sharepointportalsite.ico to unc\dfdxmxd\users\all users\microsoft\office\sharepointportalsite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\mysite.ico to unc\dfdxmxd\users\all users\microsoft\office\mysite.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\mysharepoints.ico to unc\dfdxmxd\users\all users\microsoft\office\mysharepoints.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\documentrepository.ico to unc\dfdxmxd\users\all users\microsoft\office\documentrepository.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\assetlibrary.ico to unc\dfdxmxd\users\all users\microsoft\office\assetlibrary.ico.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr1.dat to unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr1.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr0.dat to unc\dfdxmxd\users\all users\microsoft\network\downloader\qmgr0.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\3082\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\2052\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1050\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1049\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1046\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1042\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1041\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1040\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1036\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1033\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\dexplore.ctm to unc\dfdxmxd\users\all users\microsoft\msdn\7.0\1031\dexplore.ctm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_099489dd\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_099489dd\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 05.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 05.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_088cc9f7\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_088cc9f7\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\start menu\programs\steam\steam support center.url to unc\dfdxmxd\users\all users\microsoft\windows\start menu\programs\steam\steam support center.url.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 10.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 10.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 09.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 09.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 08.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 08.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 07.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 07.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 06.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 06.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cc2.tmp.werinternalmetadata.xml to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cc2.tmp.werinternalmetadata.xml.[28e766a6-a0a2-cab5-...
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt.[28e766a6-a0a2-cab5-b88c-2ad46...
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 02.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 02.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 01.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 01.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.sec to unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.sec.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.bla to unc\dfdxmxd\users\all users\microsoft\windows\drm\v3ks.bla.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\drm\drmstore.hds to unc\dfdxmxd\users\all users\microsoft\windows\drm\drmstore.hds.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\drm\blackbox.bin to unc\dfdxmxd\users\all users\microsoft\windows\drm\blackbox.bin.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 03.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 03.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cd2.tmp.hdmp to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5cd2.tmp.hdmp.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.excel.14.1033.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.excel.14.1033.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{84c252b6-5dca-4ae7-94d3-461f67359cd9}.2.ver0x0000000000000001.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{84c252b6-5dca-4ae7-94d3-461f67359cd9}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000e.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mvalidator.hxd to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_vs70namedurl.hxw to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_vs70namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_k.hxw to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_f.hxw to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_f.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_a.hxw to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore_1033_mkwd_a.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\ms.dexplore.hxn to unc\dfdxmxd\users\all users\microsoft help\ms.dexplore.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\hx_1033_mvalidator.hxd to unc\dfdxmxd\users\all users\microsoft help\hx_1033_mvalidator.hxd.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\hx_1033_mtoc_hx.hxh to unc\dfdxmxd\users\all users\microsoft help\hx_1033_mtoc_hx.hxh.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_namedurl.hxw to unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_namedurl.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_k.hxw to unc\dfdxmxd\users\all users\microsoft help\hx_1033_mkwd_k.hxw.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft help\hx.hxn to unc\dfdxmxd\users\all users\microsoft help\hx.hxn.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasdlta.vdm to unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasdlta.vdm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasbase.vdm to unc\dfdxmxd\users\all users\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\mpasbase.vdm.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\dmi8538.tmp.log.xml to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_079d8596\dmi8538.tmp.log.xml.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_5d5d8b7c1982ab7c66cf747e7b18b39e2441a_cab_073d8027\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_5d5d8b7c1982ab7c66cf747e7b18b39e2441a_cab_073d8027\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed64bf1962bf234c1a7153259451034e674_cab_0731c4f1\report.wer to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed64bf1962bf234c1a7153259451034e674_cab_0731c4f1\report.wer.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer7f7e.tmp.mdmp to unc\dfdxmxd\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer7f7e.tmp.mdmp.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 04.wma to unc\dfdxmxd\users\all users\microsoft\windows\ringtones\ringtone 04.wma.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmieventdata.dat to unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmieventdata.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.dir to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.dir.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.ci to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.ci.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.gthr to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.gthr.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.crwl to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\gatherlogs\systemindex\systemindex.1.crwl.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\windows.edb to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\windows.edb.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00002.jrs to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00002.jrs.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00001.jrs to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mssres00001.jrs.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mss.chk to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\mss.chk.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmidatabookmarks.dat to unc\dfdxmxd\users\all users\microsoft\rac\statedata\racwmidatabookmarks.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wsb to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wsb.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\rac\statedata\racdatabase.sdf to unc\dfdxmxd\users\all users\microsoft\rac\statedata\racdatabase.sdf.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\rac\publisheddata\racwmidatabase.sdf to unc\dfdxmxd\users\all users\microsoft\rac\publisheddata\racwmidatabase.sdf.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\officesoftwareprotectionplatform\cache\cache.dat to unc\dfdxmxd\users\all users\microsoft\officesoftwareprotectionplatform\cache\cache.dat.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll to unc\dfdxmxd\users\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\applications.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\applications.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutprivatebrowsing.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutprivatebrowsing.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wid to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\00010003.wid.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{1e8814b6-8f2d-4b97-87f6-9370f7eb40b7}.2.ver0x0000000000000001.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{1e8814b6-8f2d-4b97-87f6-9370f7eb40b7}.2.ver0x0000000000000001.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\{1573b5e2-35f5-4eaf-bec0-4e35d1d995f6}.2.ver0x0000000000000002.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\{1573b5e2-35f5-4eaf-bec0-4e35d1d995f6}.2.ver0x0000000000000002.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\windows\caches\cversions.2.db to unc\dfdxmxd\users\all users\microsoft\windows\caches\cversions.2.db.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\propmap\cipt0000.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\index.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.000 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciad0002.000.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.001 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0002.001.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.002 to unc\dfdxmxd\users\all users\microsoft\search\data\applications\windows\projects\systemindex\indexer\cifiles\ciab0001.002.[28e766a6-a0a2-cab5-b88c-2ad467054120]
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css.[28e766a6-a0a2-cab5-b88c-2ad467054120]

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

UDP

DNS ASK ge###tool.com
DNS ASK ip##gger.ru

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /C bcdedit /set {default} bootstatuspolicy ignoreallfailures' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C sc config eventlog start=disabled' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log System' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log Security' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log Application' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C del "%userprofile%\documents\Default.rdp"' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C attrib "%userprofile%\documents\Default.rdp" -s -h' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C reg add "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers"' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C chcp 1250 && net view' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C reg delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers" /f' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C vssadmin delete shadows /all /quiet' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wmic shadowcopy delete' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete backup' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete systemstatebackup -keepversions:0' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete systemstatebackup' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete catalog -quiet' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C bcdedit /set {default} recoveryenabled no' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C reg delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" /va /f' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /C chcp 1250 && net view "\\DFDXMXD"' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /C bcdedit /set {default} bootstatuspolicy ignoreallfailures
'%WINDIR%\syswow64\net.exe' view
'%WINDIR%\syswow64\chcp.com' 1250
'%WINDIR%\syswow64\cmd.exe' /C chcp 1250 && net view
'%WINDIR%\syswow64\sc.exe' config eventlog start=disabled
'%WINDIR%\syswow64\cmd.exe' /C sc config eventlog start=disabled
'%WINDIR%\syswow64\wevtutil.exe' clear-log System
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log System
'%WINDIR%\syswow64\wevtutil.exe' clear-log Security
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log Security
'%WINDIR%\syswow64\wevtutil.exe' clear-log Application
'%WINDIR%\syswow64\cmd.exe' /C wevtutil.exe clear-log Application
'%WINDIR%\syswow64\cmd.exe' /C del "%userprofile%\documents\Default.rdp"
'%WINDIR%\syswow64\attrib.exe' "%HOMEPATH%\documents\Default.rdp" -s -h
'%WINDIR%\syswow64\cmd.exe' /C chcp 1250 && net view "\\DFDXMXD"
'%WINDIR%\syswow64\cmd.exe' /C attrib "%userprofile%\documents\Default.rdp" -s -h
'%WINDIR%\syswow64\cmd.exe' /C reg add "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers"
'%WINDIR%\syswow64\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers" /f
'%WINDIR%\syswow64\cmd.exe' /C reg delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers" /f
'%WINDIR%\syswow64\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" /va /f
'%WINDIR%\syswow64\cmd.exe' /C reg delete "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" /va /f
'%WINDIR%\syswow64\cmd.exe' /C vssadmin delete shadows /all /quiet
'<SYSTEM32>\vssvc.exe'
'%WINDIR%\syswow64\cmd.exe' /C wmic shadowcopy delete
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete backup
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete systemstatebackup -keepversions:0
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete systemstatebackup
'%WINDIR%\syswow64\cmd.exe' /C wbadmin delete catalog -quiet
'%WINDIR%\syswow64\cmd.exe' /C bcdedit /set {default} recoveryenabled no
'%WINDIR%\syswow64\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers"
'%WINDIR%\syswow64\net.exe' view "\\DFDXMXD"

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial