Trojan.Encoder.30854

Technical Information

Modifies file system

Creates the following files

%HOMEPATH%\desktop\readme.txt
%ProgramFiles%\adobe\reader 11.0\setup files\readme.txt
%CommonProgramFiles%\readme.txt
%CommonProgramFiles%\adobe\readme.txt
%CommonProgramFiles%\adobe\acrobat\readme.txt
%CommonProgramFiles%\adobe\arm\readme.txt
%CommonProgramFiles%\adobe\helpcfg\readme.txt
%CommonProgramFiles%\adobe\reader\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\plugins2\adobehunspellplugin\readme.txt
%CommonProgramFiles%\microsoft shared\msinfo\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\readme.txt
%CommonProgramFiles%\java\readme.txt
%CommonProgramFiles%\microsoft shared\readme.txt
%CommonProgramFiles%\microsoft shared\equation\readme.txt
%CommonProgramFiles%\microsoft shared\help\readme.txt
%CommonProgramFiles%\microsoft shared\ink\readme.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\readme.txt
%CommonProgramFiles%\microsoft shared\msenv\readme.txt
%ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\readme.txt
%CommonProgramFiles%\adobe\reader\11.0\linguistics\providers\plugins2\readme.txt
%ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\readme.txt
%ProgramFiles%\adobe\readme.txt
%HOMEPATH%\desktop\wyzilhexnnh9fgmbrqxpqoe5qxvsbw4xjmpb0e6d.txt
C:\readme.txt
C:\$recycle.bin\readme.txt
C:\msocache\readme.txt
C:\msocache\all users\readme.txt
C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-0115-0409-0000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-0117-0409-0000-0000000ff1ce}-c\readme.txt
C:\perflogs\readme.txt
%ProgramFiles%\readme.txt
%ProgramFiles%\adobe\reader 11.0\readme.txt
%ProgramFiles%\adobe\reader 11.0\resource\font\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\idtemplates\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\legal\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\readme.txt
%ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\readme.txt
%ProgramFiles%\adobe\reader 11.0\resource\readme.txt
%ProgramFiles%\adobe\reader 11.0\resource\typesupport\readme.txt
%CommonProgramFiles%\microsoft shared\office10\readme.txt

Moves the following files

from %ProgramFiles%\desktop.ini to %ProgramFiles%\6465736b746f702e696e69
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\617368446973702e657865
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\61736863686573742e657865
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\61736841765372762e657865
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\61736841766173742e657865
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\6173682e657865
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\61726d6f72737572662e657865
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\41726d6f72326e65742e657865
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\6173684475672e657865
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\416f6c54625365727665722e657865
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\416e74692d54726f6a616e2e657865
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\616d736e2e657865
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\616d6f6e2e657865
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\414c7376632e657865
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\414c4d6f6e2e657865
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\616972646566656e73652e657865
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\61696d70726f2e657865
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\416e746956697275732e657865
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\6173685570642e657865
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\617663656e7465722e657865
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\6173684d616953762e657865
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\617661646d696e2e657865
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\4175746f54726163652e657865
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\4175746f73746172744578706c6f7265722e657865
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\4175746f446f776e2e657865
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\61737755706453762e657865
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\6173775265675376722e657865
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\6173685f5570646174654d65646961746f722e657865
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\61696d362e657865
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\61736857656253762e657865
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\617368536b50636b2e657865
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\617368536b5063632e657865
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\61736853696d706c2e657865
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\61736873696d70322e657865
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\617368536572762e657865
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\617368517569636b2e657865
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\617368506f70577a2e657865
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\617368456e6863642e657865
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\6173684c6f67562e657865
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\41686e53442e657865
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\centeuro.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\43454e544555524f2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\icu\icudt26l.dat to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\icu\696375647432366c2e646174
from %ProgramFiles%\adobe\reader 11.0\resource\saslprep\saslprepprofile_norm_bidi.spp to %ProgramFiles%\adobe\reader 11.0\resource\saslprep\5361736c5072657050726f66696c655f6e6f726d5f626964692e737070
from %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\zy______.pfm to %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\7a795f5f5f5f5f5f2e70666d
from %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\zx______.pfm to %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\7a785f5f5f5f5f5f2e70666d
from %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\sy______.pfm to %ProgramFiles%\adobe\reader 11.0\resource\font\pfm\53595f5f5f5f5f5f2e50464d
from %ProgramFiles%\adobe\reader 11.0\resource\font\zy______.pfb to %ProgramFiles%\adobe\reader 11.0\resource\font\5a595f5f5f5f5f5f2e504642
from %ProgramFiles%\adobe\reader 11.0\resource\font\zx______.pfb to %ProgramFiles%\adobe\reader 11.0\resource\font\5a585f5f5f5f5f5f2e504642
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\adobe\symbol.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\adobe\73796d626f6c2e747874
from %ProgramFiles%\adobe\reader 11.0\resource\font\sy______.pfb to %ProgramFiles%\adobe\reader 11.0\resource\font\53595f5f5f5f5f5f2e504642
from %ProgramFiles%\adobe\reader 11.0\resource\font\myriadpro-it.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d797269616450726f2d49742e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\myriadpro-boldit.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d797269616450726f2d426f6c6449742e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\myriadpro-bold.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d797269616450726f2d426f6c642e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\minionpro-regular.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d696e696f6e50726f2d526567756c61722e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\minionpro-it.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d696e696f6e50726f2d49742e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\minionpro-boldit.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d696e696f6e50726f2d426f6c6449742e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\minionpro-bold.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d696e696f6e50726f2d426f6c642e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\font\myriadpro-regular.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\4d797269616450726f2d526567756c61722e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\turkish.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\5455524b4953482e545854
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\416762352e657865
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\corpchar.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\434f5250434841522e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1258.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235382e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1257.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235372e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1254.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235342e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1253.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235332e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1252.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235322e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1251.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235312e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\cp1250.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\win\4350313235302e545854
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\6167656f66636f6e616e2e657865
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\ukraine.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\554b5241494e452e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\symbol.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\53594d424f4c2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\romanian.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\524f4d414e49414e2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\roman.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\524f4d414e2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\iceland.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\4943454c414e442e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\greek.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\475245454b2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\cyrillic.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\435952494c4c49432e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\croatian.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\mac\43524f415449414e2e545854
from %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\adobe\zdingbat.txt to %ProgramFiles%\adobe\reader 11.0\resource\typesupport\unicode\mappings\adobe\7a64696e676261742e747874
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\62646167656e742e657865
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\434d61696e2e657865
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\6176636f6e6669672e657865
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\4361765375622e657865
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\436176536e2e657865
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\63617673652e657865
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\43415653436f6e732e657865
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\436176512e657865
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\4361766f61722e657865
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\4361764d55442e657865
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\4341565375626d69742e657865
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\4361766d722e657865
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\4361764155442e657865
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\43615661736d2e657865
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\4361764170702e657865
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\63616669782e657865
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\636162616c6d61696e2e657865
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\4254496e694e542e657865
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\4254496e692e657865
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\436176456d5372762e657865
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\636c616d7363616e2e657865
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\6176636d642e657865
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\436176766c2e657865
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\636c72636368652e657865
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\436c695376632e657865
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\636c65616e6572332e657865
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\636c65616e65722e657865
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\436c6177393563662e657865
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\436c617739352e657865
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\436c616d57696e2e657865
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\626c696e646d616e2e657865
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\436c616d547261792e657865
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\6368726f6d652e657865
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\43456d5265702e657865
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\63635365744d67722e657865
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\636350726f78792e657865
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\43436c65616e65722e657865
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\63634576744d67722e657865
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\63636170702e657865
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\436176554d41532e657865
from %ProgramFiles%\adobe\reader 11.0\resource\font\courierstd.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\436f75726965725374642e6f7466
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\626c61636b6963652e657865
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\41564b536572766963652e657865
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\61766777697a66772e657865
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\617667772e657865
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\61766776762e657865
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\61766775707376632e657865
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\617667757064656e2e657865
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\6176677363616e2e657865
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\61766772737376632e657865
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\6176696e69746e742e657865
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\6176676e707376632e657865
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\617667696e65742e657865
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\61766766777372762e657865
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\617667656d632e657865
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\617667646961672e657865
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\61766763632e657865
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\617667616d7376722e657865
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\4176636f6e736f6c2e657865
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\6176676e70646c6e2e657865
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\617663696d616e2e657865
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\626477697a7265672e657865
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\41564b5743746c2e657865
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\62647377697463682e657865
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\42445375727665792e657865
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\62647375626d697477697a2e657865
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\62647375626d69742e657865
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\626473732e657865
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\62646f657372762e657865
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\62646e6577732e657865
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\626c61636b642e657865
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\62646d636f6e2e657865
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\4261636b5765622d343437363832322e657865
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\42322e657865
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\617673796e6d67722e657865
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\61767363616e2e657865
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\6176706d2e657865
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\61767063632e657865
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\61766e6f746966792e657865
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\41766b536572762e657865
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\436176557365725570642e657865
from %ProgramFiles%\adobe\reader 11.0\resource\font\courierstd-oblique.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\436f75726965725374642d4f626c697175652e6f7466
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\review_same_reviewers.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7265766965775f73616d655f7265766965776572732e676966
from %ProgramFiles%\adobe\reader 11.0\reader\pdfsigqformalrep.pdf to %ProgramFiles%\adobe\reader 11.0\reader\50444653696751466f726d616c5265702e706466
from %ProgramFiles%\adobe\reader 11.0\reader\pdfprevhndlr.dll to %ProgramFiles%\adobe\reader 11.0\reader\50444650726576486e646c722e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\onix32.dll to %ProgramFiles%\adobe\reader 11.0\reader\4f6e697833322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\npswf32.dll to %ProgramFiles%\adobe\reader 11.0\reader\4e5053574633322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\logtransport2.exe to %ProgramFiles%\adobe\reader 11.0\reader\4c6f675472616e73706f7274322e657865
from %ProgramFiles%\adobe\reader 11.0\reader\logsession.dll to %ProgramFiles%\adobe\reader 11.0\reader\6c6f6773657373696f6e2e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\jp2klib.dll to %ProgramFiles%\adobe\reader 11.0\reader\4a50324b4c69622e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\pe.dll to %ProgramFiles%\adobe\reader 11.0\reader\70652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\icudt40.dll to %ProgramFiles%\adobe\reader 11.0\reader\696375647434302e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\extendscript.dll to %ProgramFiles%\adobe\reader 11.0\reader\457874656e645363726970742e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\eula.exe to %ProgramFiles%\adobe\reader 11.0\reader\45756c612e657865
from %ProgramFiles%\adobe\reader 11.0\reader\cryptocme.sig to %ProgramFiles%\adobe\reader 11.0\reader\63727970746f636d652e736967
from %ProgramFiles%\adobe\reader 11.0\reader\cryptocme.dll to %ProgramFiles%\adobe\reader 11.0\reader\63727970746f636d652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\cooltype.dll to %ProgramFiles%\adobe\reader 11.0\reader\436f6f6c547970652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\ccme_ecdrbg.dll to %ProgramFiles%\adobe\reader 11.0\reader\63636d655f6563647262672e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\ccme_ecc.dll to %ProgramFiles%\adobe\reader 11.0\reader\63636d655f6563632e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\icucnv40.dll to %ProgramFiles%\adobe\reader 11.0\reader\696375636e7634302e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\idtemplates\enu\adobeid.pdf to %ProgramFiles%\adobe\reader 11.0\reader\idtemplates\enu\41646f626549442e706466
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\digsig.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4469675369672e617069
from %ProgramFiles%\adobe\reader 11.0\reader\rt3d.dll to %ProgramFiles%\adobe\reader 11.0\reader\727433642e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\checkers.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\436865636b6572732e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annots.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\416e6e6f74732e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4163726f466f726d2e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\accessibility.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4163636573736962696c6974792e617069
from %ProgramFiles%\adobe\reader 11.0\reader\legal\enu\license.html to %ProgramFiles%\adobe\reader 11.0\reader\legal\enu\6c6963656e73652e68746d6c
from %ProgramFiles%\adobe\reader 11.0\reader\legal\enu\eula.ini to %ProgramFiles%\adobe\reader 11.0\reader\legal\enu\65756c612e696e69
from %ProgramFiles%\adobe\reader 11.0\reader\javascripts\jsbytecodewin.bin to %ProgramFiles%\adobe\reader 11.0\reader\javascripts\4a5342797465436f646557696e2e62696e
from %ProgramFiles%\adobe\reader 11.0\reader\ccme_base_non_fips.dll to %ProgramFiles%\adobe\reader 11.0\reader\63636d655f626173655f6e6f6e5f666970732e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\idtemplates\enu\defaultid.pdf to %ProgramFiles%\adobe\reader 11.0\reader\idtemplates\enu\44656661756c7449442e706466
from %ProgramFiles%\adobe\reader 11.0\reader\browser\nppdf32.dll to %ProgramFiles%\adobe\reader 11.0\reader\browser\6e7070646633322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\air\nppdf32.dll to %ProgramFiles%\adobe\reader 11.0\reader\air\6e7070646633322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\wow_helper.exe to %ProgramFiles%\adobe\reader 11.0\reader\776f775f68656c7065722e657865
from %ProgramFiles%\adobe\reader 11.0\reader\viewerps.dll to %ProgramFiles%\adobe\reader 11.0\reader\56696577657250532e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\sqlite.dll to %ProgramFiles%\adobe\reader 11.0\reader\73716c6974652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\sccore.dll to %ProgramFiles%\adobe\reader 11.0\reader\5363436f72652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\rtc.der to %ProgramFiles%\adobe\reader 11.0\reader\5254432e646572
from %ProgramFiles%\adobe\reader 11.0\reader\pmd.cer to %ProgramFiles%\adobe\reader 11.0\reader\706d642e636572
from %ProgramFiles%\adobe\reader 11.0\reader\reader_sl.exe to %ProgramFiles%\adobe\reader 11.0\reader\7265616465725f736c2e657865
from %ProgramFiles%\adobe\reader 11.0\reader\ccme_base.dll to %ProgramFiles%\adobe\reader 11.0\reader\63636d655f626173652e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\acrofx32.dll to %ProgramFiles%\adobe\reader 11.0\reader\4163726f667833322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\a3dutils.dll to %ProgramFiles%\adobe\reader 11.0\reader\4133445574696c732e646c6c
from %ProgramFiles%\adobe\reader 11.0\esl\aiodlite.dll to %ProgramFiles%\adobe\reader 11.0\esl\41696f644c6974652e646c6c
from %ProgramFiles%\adobe\reader 11.0\readme.htm to %ProgramFiles%\adobe\reader 11.0\526561644d652e68746d
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\41644d756e63682e657865
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\41636b57696e33322e657865
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\41626f75742e657865
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\616176736869656c642e657865
from %ProgramFiles%\adobe\reader 11.0\reader\ace.dll to %ProgramFiles%\adobe\reader 11.0\reader\4143452e646c6c
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\613277697a6172642e657865
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\613273746172742e657865
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\6132736572766963652e657865
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\61327363616e2e657865
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\613248694a61636b467265652e657865
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\613267756172642e657865
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\6132636d642e657865
from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\333630747261792e657865
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\61327570642e657865
from %ProgramFiles%\adobe\reader 11.0\reader\adoberfp.dll to %ProgramFiles%\adobe\reader 11.0\reader\61646f62657266702e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\bibutils.dll to %ProgramFiles%\adobe\reader 11.0\reader\4249425574696c732e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\acrord32.dll to %ProgramFiles%\adobe\reader 11.0\reader\4163726f526433322e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\bib.dll to %ProgramFiles%\adobe\reader 11.0\reader\4249422e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\axsle.dll to %ProgramFiles%\adobe\reader 11.0\reader\4158534c452e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\axe8sharedexpat.dll to %ProgramFiles%\adobe\reader 11.0\reader\4158453853686172656445787061742e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\arh.exe to %ProgramFiles%\adobe\reader 11.0\reader\6172682e657865
from %ProgramFiles%\adobe\reader 11.0\reader\ahclient.dll to %ProgramFiles%\adobe\reader 11.0\reader\6168636c69656e742e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\agmgpuoptin.ini to %ProgramFiles%\adobe\reader 11.0\reader\41474d4750554f7074496e2e696e69
from %ProgramFiles%\adobe\reader 11.0\reader\agm.dll to %ProgramFiles%\adobe\reader 11.0\reader\41474d2e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\ccme_asym.dll to %ProgramFiles%\adobe\reader 11.0\reader\63636d655f6173796d2e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\adobexmp.dll to %ProgramFiles%\adobe\reader 11.0\reader\41646f6265584d502e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\adobelinguistic.dll to %ProgramFiles%\adobe\reader 11.0\reader\41646f62654c696e677569737469632e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\adobecollabsync.exe to %ProgramFiles%\adobe\reader 11.0\reader\41646f6265436f6c6c616253796e632e657865
from %ProgramFiles%\adobe\reader 11.0\reader\adobe.reader.dependencies.manifest to %ProgramFiles%\adobe\reader 11.0\reader\41646f62652e5265616465722e446570656e64656e636965732e6d616e6966657374
from %ProgramFiles%\adobe\reader 11.0\reader\acrotextextractor.exe to %ProgramFiles%\adobe\reader 11.0\reader\4163726f54657874457874726163746f722e657865
from %ProgramFiles%\adobe\reader 11.0\reader\acrordif.dll to %ProgramFiles%\adobe\reader 11.0\reader\4163726f526449462e646c6c
from %ProgramFiles%\adobe\reader 11.0\reader\acrord32info.exe to %ProgramFiles%\adobe\reader 11.0\reader\4163726f52643332496e666f2e657865
from %ProgramFiles%\adobe\reader 11.0\reader\acrord32.exe to %ProgramFiles%\adobe\reader 11.0\reader\4163726f526433322e657865
from %ProgramFiles%\adobe\reader 11.0\reader\acrobroker.exe to %ProgramFiles%\adobe\reader 11.0\reader\4163726f42726f6b65722e657865
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\drvdx9.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\6472764458392e783364
from %ProgramFiles%\adobe\reader 11.0\resource\font\courierstd-bold.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\436f75726965725374642d426f6c642e6f7466
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\escript.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\455363726970742e617069
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\reviews_super.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\726576696577735f73757065722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\reviews_sent.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\726576696577735f73656e742e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\reviews_joined.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\726576696577735f6a6f696e65642e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\reviewers.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7265766965776572732e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\pdf.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7064662e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\open_original_form.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\6f70656e5f6f726967696e616c5f666f726d2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\main.css to %ProgramFiles%\adobe\reader 11.0\reader\tracker\6d61696e2e637373
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\review_browser.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7265766965775f62726f777365722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\info.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\696e666f2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\forms_super.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\666f726d735f73757065722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\forms_received.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\666f726d735f72656365697665642e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\forms_distributed.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\666f726d735f64697374726962757465642e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\end_review.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\656e645f7265766965772e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\ended_review_or_form.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\656e6465645f7265766965775f6f725f666f726d2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\email_initiator.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\656d61696c5f696e69746961746f722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\email_all.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\656d61696c5f616c6c2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\form_responses.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\666f726d5f726573706f6e7365732e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\tr.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\74722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\ebook.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\65426f6f6b2e617069
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\review_shared.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7265766965775f7368617265642e676966
from %ProgramFiles%\adobe\reader 11.0\resource\font\adobepistd.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\41646f626550695374642e6f7466
from %ProgramFiles%\adobe\reader 11.0\resource\enutxt.pdf to %ProgramFiles%\adobe\reader 11.0\resource\454e557478742e706466
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\warning.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7761726e696e672e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\turnonnotificationintray.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7475726e4f6e4e6f74696669636174696f6e496e547261792e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\turnonnotificationinacrobat.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7475726e4f6e4e6f74696669636174696f6e496e4163726f6261742e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\turnoffnotificationintray.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7475726e4f66664e6f74696669636174696f6e496e547261792e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\turnoffnotificationinacrobat.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7475726e4f66664e6f74696669636174696f6e496e4163726f6261742e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\distribute_form.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\646973747269627574655f666f726d2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\trash.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\74726173682e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\tl.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\746c2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\submission_history.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7375626d697373696f6e5f686973746f72792e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\stop_collection_data.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\73746f705f636f6c6c656374696f6e5f646174612e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\server_ok.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7365727665725f6f6b2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\server_lg.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7365727665725f6c672e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\server_issue.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7365727665725f69737375652e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\rss.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7273732e676966
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\review_email.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\7265766965775f656d61696c2e676966
from %ProgramFiles%\adobe\reader 11.0\resource\font\courierstd-boldoblique.otf to %ProgramFiles%\adobe\reader 11.0\resource\font\436f75726965725374642d426f6c644f626c697175652e6f7466
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\create_form.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\6372656174655f666f726d2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\dynamic.pdf to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\44796e616d69632e706466
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\datamatrix.pmp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\446174614d61747269782e706d70
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\adobepdf417.pmp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\41646f62655044463431372e706d70
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\adobepdf.xdc to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\61646f62657064662e786463
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\weblink.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\7765626c696e6b2e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\updater.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\557064617465722e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\spelling.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\5370656c6c696e672e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\sendmail.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\53656e644d61696c2e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\qrcode.pmp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\acroform\pmp\5152436f64652e706d70
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\search.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\5365617263682e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\reflow.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\7265666c6f772e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\readoutloud.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\526561644f75744c6f75642e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\ppklite.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\50504b4c6974652e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\pddom.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\5044446f6d2e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4d756c74696d656469612e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\makeaccessible.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4d616b6541636365737369626c652e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\ia32.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\494133322e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\saveasrtf.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\5361766541735254462e617069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\dva.api to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\4456412e617069
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\bl.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\626c2e676966
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\signhere.pdf to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\5369676e486572652e706466
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\add_reviewer.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\6164645f72657669657765722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\services\services.cfg to %ProgramFiles%\adobe\reader 11.0\reader\services\53657276696365732e636667
from %ProgramFiles%\adobe\reader 11.0\reader\services\dexshare.spi to %ProgramFiles%\adobe\reader 11.0\reader\services\44455853686172652e737069
from %ProgramFiles%\adobe\reader 11.0\reader\services\dexechosign.spi to %ProgramFiles%\adobe\reader 11.0\reader\services\4445584563686f5369676e2e737069
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\prc\myriadcad.otf to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\prc\4d79726961644341442e6f7466
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\tesselate.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\74657373656c6174652e783364
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\prcr.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\707263722e783364
from %ProgramFiles%\adobe\reader 11.0\reader\tracker\br.gif to %ProgramFiles%\adobe\reader 11.0\reader\tracker\62722e676966
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\drvsoft.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\647276534f46542e783364
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\3difr.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\33646966722e783364
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\2d.x3d to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins3d\32642e783364
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\windowsmedia.mpp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\57696e646f77734d656469612e6d7070
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\quicktime.mpp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\517569636b54696d652e6d7070
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\mcimpp.mpp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\4d43494d50502e6d7070
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\flash.mpp to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\multimedia\mpp\466c6173682e6d7070
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\enu\5374616e64617264427573696e6573732e706466
from %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\words.pdf to %ProgramFiles%\adobe\reader 11.0\reader\plug_ins\annotations\stamps\576f7264732e706466
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\434d47726469616e2e657865

Modifies user data files (Trojan.Encoder).

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial