Trojan.Encoder.31280

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Autorun.SQL' = '%WINDIR%\svhost.exe'
[<HKLM>\Software\Classes\EncriptIDfile\Shell\Open\Command] '' = '%WINDIR%\SysWOW64\mshta.exe "%C:\Data recovery.hta"'

Infects the following executable files

%ProgramFiles(x86)%\mozilla firefox\freebl3.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\icudt52.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\icuin52.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\icuuc52.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\mozalloc.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\mozglue.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\msvcp120.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\msvcr120.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\nss3.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\nssckbi.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\nssdbm3.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\sandboxbroker.dll.l4y2lnz44gbk_rsa
%ProgramFiles(x86)%\mozilla firefox\softokn3.dll.l4y2lnz44gbk_rsa

Creates the following files on removable media

<Drive name for removable media>:\data recovery.hta
<Drive name for removable media>:\hypothyroidism_slides.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\samieee_obiee_presentation.pptx
<Drive name for removable media>:\dotnetfx45_full_setup.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\lisp_success.doc
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\hanni_umami_chapter.doc
<Drive name for removable media>:\fi51.doc
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\default.bmp
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\asaprojectcompetition.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx

Modifies file system

Creates the following files

%WINDIR%\svhost.exe
C:\users\default\documents\data recovery.hta
C:\users\default\downloads\data recovery.hta
C:\users\default\links\data recovery.hta
C:\users\default\local settings\data recovery.hta
C:\users\default\music\data recovery.hta
C:\users\default\nethood\data recovery.hta
C:\users\default\pictures\data recovery.hta
C:\users\default\printhood\data recovery.hta
C:\users\default\appdata\data recovery.hta
C:\users\default\desktop\data recovery.hta
C:\users\default\saved games\data recovery.hta
C:\users\default\videos\data recovery.hta
%ProgramFiles(x86)%\winamp\microsoft.vc90.crt\data recovery.hta
%ProgramFiles(x86)%\winamp\skins\data recovery.hta
C:\users\public\downloads\data recovery.hta
C:\users\public\music\data recovery.hta
C:\users\public\pictures\data recovery.hta
C:\users\public\videos\data recovery.hta
%ProgramFiles(x86)%\steam\remoteui\data recovery.hta
C:\users\default\start menu\data recovery.hta
C:\users\default\templates\data recovery.hta
%PROGRAMDATA%\microsoft\assistance\data recovery.hta
%ProgramFiles(x86)%\steam\skins\data recovery.hta
%ProgramFiles(x86)%\google\update\data recovery.hta
%ProgramFiles(x86)%\internet explorer\en-us\data recovery.hta
%ProgramFiles(x86)%\internet explorer\mui\data recovery.hta
%ProgramFiles(x86)%\internet explorer\signup\data recovery.hta
%CommonProgramFiles(x86)%\adobe\data recovery.hta
%CommonProgramFiles(x86)%\microsoft shared\data recovery.hta
%CommonProgramFiles(x86)%\speechengines\data recovery.hta
%CommonProgramFiles(x86)%\steam\data recovery.hta
%ProgramFiles(x86)%\adobe\acrobat reader dc\data recovery.hta
%ProgramFiles%\xcommsvr\data recovery.hta
%PROGRAMDATA%\oracle\java\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\browser\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\webapprt\data recovery.hta
%ProgramFiles(x86)%\reference assemblies\microsoft\data recovery.hta
%ProgramFiles(x86)%\windows media player\en-us\data recovery.hta
%ProgramFiles(x86)%\windows media player\network sharing\data recovery.hta
%ProgramFiles(x86)%\windows media player\skins\data recovery.hta
%ProgramFiles(x86)%\windows media player\visualizations\data recovery.hta
%ProgramFiles(x86)%\google\chrome\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\defaults\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\dictionaries\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\gmp-clearkey\data recovery.hta
%ProgramFiles%\fsgk32st\data recovery.hta
%PROGRAMDATA%\microsoft\crypto\data recovery.hta
%HOMEPATH%\start menu\data recovery.hta
%HOMEPATH%\videos\data recovery.hta
%ProgramFiles(x86)%\qip 2012\skins\data recovery.hta
%ProgramFiles(x86)%\qip 2012\smilies\data recovery.hta
%ProgramFiles(x86)%\qip 2012\sounds\data recovery.hta
%CommonProgramFiles%\microsoft shared\data recovery.hta
%CommonProgramFiles%\designer\data recovery.hta
%ProgramFiles(x86)%\microsoft office\office14\data recovery.hta
%HOMEPATH%\saved games\data recovery.hta
%ProgramFiles(x86)%\microsoft office\office10\data recovery.hta
%HOMEPATH%\templates\data recovery.hta
%ProgramFiles%\freshclam\data recovery.hta
%ProgramFiles%\fsav\data recovery.hta
%ProgramFiles%\fsavaui\data recovery.hta
%ProgramFiles%\fsavstrt\data recovery.hta
%ProgramFiles%\fsavwscr\data recovery.hta
%ProgramFiles%\fsdc\data recovery.hta
%ProgramFiles%\fsdiag\data recovery.hta
%ProgramFiles%\fsfwwsch\data recovery.hta
%ProgramFiles%\fptrayproc\data recovery.hta
%HOMEPATH%\recent\data recovery.hta
%ProgramFiles%\fsaua\data recovery.hta
%HOMEPATH%\printhood\data recovery.hta
%HOMEPATH%\pictures\data recovery.hta
%PROGRAMDATA%\microsoft\ehome\data recovery.hta
%PROGRAMDATA%\microsoft\ilscache\data recovery.hta
%PROGRAMDATA%\microsoft\media player\data recovery.hta
%PROGRAMDATA%\microsoft\mf\data recovery.hta
C:\far2\documentation\data recovery.hta
%PROGRAMDATA%\microsoft\rac\data recovery.hta
%PROGRAMDATA%\microsoft\user account pictures\data recovery.hta
%PROGRAMDATA%\microsoft\vault\data recovery.hta
%PROGRAMDATA%\microsoft\wpd\data recovery.hta
%HOMEPATH%\appdata\data recovery.hta
%PROGRAMDATA%\microsoft\identitycrl\data recovery.hta
%HOMEPATH%\application data\data recovery.hta
%HOMEPATH%\cookies\data recovery.hta
%HOMEPATH%\desktop\data recovery.hta
%HOMEPATH%\documents\data recovery.hta
%HOMEPATH%\favorites\data recovery.hta
%HOMEPATH%\links\data recovery.hta
%HOMEPATH%\local settings\data recovery.hta
%HOMEPATH%\music\data recovery.hta
%HOMEPATH%\nethood\data recovery.hta
%ProgramFiles%\fprottray\data recovery.hta
%HOMEPATH%\contacts\data recovery.hta
C:\far2\encyclopedia\data recovery.hta
%PROGRAMDATA%\microsoft\drm\data recovery.hta
%ProgramFiles%\fsgetwab\data recovery.hta
%ProgramFiles%\flashfxp\data recovery.hta
%ProgramFiles%\avgrssvc\data recovery.hta
%ProgramFiles%\avgupden\data recovery.hta
%ProgramFiles%\avgvv\data recovery.hta
%PROGRAMDATA%\adobe\data recovery.hta
%PROGRAMDATA%\microsoft help\data recovery.hta
%PROGRAMDATA%\mozilla\data recovery.hta
%PROGRAMDATA%\package cache\data recovery.hta
%ProgramFiles%\avgdiag\data recovery.hta
%ProgramFiles%\avgamsvr\data recovery.hta
%ProgramFiles%\avgnpdln\data recovery.hta
%PROGRAMDATA%\sun\data recovery.hta
%ProgramFiles%\avpcc\data recovery.hta
%ProgramFiles%\avscan\data recovery.hta
%ProgramFiles%\bdagent\data recovery.hta
%ProgramFiles%\bdnews\data recovery.hta
%ProgramFiles%\bdss\data recovery.hta
%ProgramFiles%\bdsubmitwiz\data recovery.hta
%ProgramFiles%\bdswitch\data recovery.hta
%ProgramFiles%\avgwizfw\data recovery.hta
%ProgramFiles%\avkserv\data recovery.hta
%ProgramFiles%\avkwctl\data recovery.hta
%ProgramFiles%\btinint\data recovery.hta
%ProgramFiles%\blackd\data recovery.hta
%ProgramFiles%\blindman\data recovery.hta
%ProgramFiles%\airdefense\data recovery.hta
%ProgramFiles%\alsvc\data recovery.hta
%ProgramFiles%\amsn\data recovery.hta
%ProgramFiles%\antivirus\data recovery.hta
%ProgramFiles%\armor2net\data recovery.hta
%ProgramFiles%\ash\data recovery.hta
%ProgramFiles%\ashavast\data recovery.hta
%ProgramFiles%\avconfig\data recovery.hta
%ProgramFiles%\ageofconan\data recovery.hta
%ProgramFiles%\avciman\data recovery.hta
%ProgramFiles%\ashchest\data recovery.hta
%ProgramFiles%\ashpopwz\data recovery.hta
%ProgramFiles%\ashserv\data recovery.hta
%ProgramFiles%\ashsimpl\data recovery.hta
%ProgramFiles%\ashskpck\data recovery.hta
%ProgramFiles%\aswupdsv\data recovery.hta
%ProgramFiles%\autostartexplorer\data recovery.hta
%ProgramFiles%\avadmin\data recovery.hta
%ProgramFiles%\ashdug\data recovery.hta
%ProgramFiles%\ashlogv\data recovery.hta
C:\totalcmd\language\data recovery.hta
%ProgramFiles%\cafix\data recovery.hta
%ProgramFiles%\dnf\data recovery.hta
%ProgramFiles%\cavmud\data recovery.hta
%ProgramFiles%\drweb\data recovery.hta
%ProgramFiles%\drweb386\data recovery.hta
%ProgramFiles%\drwebupw\data recovery.hta
%ProgramFiles%\drwreg\data recovery.hta
%ProgramFiles%\dvd maker\data recovery.hta
%ProgramFiles%\egni\data recovery.hta
%ProgramFiles%\directftp\data recovery.hta
%ProgramFiles%\ehsniffer\data recovery.hta
%ProgramFiles%\etherd\data recovery.hta
%ProgramFiles%\drvmap\data recovery.hta
%ProgramFiles%\ewidoctrl\data recovery.hta
%ProgramFiles%\f-sched\data recovery.hta
%ProgramFiles%\far\data recovery.hta
%ProgramFiles%\fdm\data recovery.hta
%ProgramFiles%\filezilla\data recovery.hta
%ProgramFiles%\firefox\data recovery.hta
%ProgramFiles%\firesvc\data recovery.hta
%ProgramFiles%\elementclient\data recovery.hta
%ProgramFiles%\digsby\data recovery.hta
%ProgramFiles%\avgfwsrv\data recovery.hta
%ProgramFiles%\ezantivirusregistrationcheck\data recovery.hta
%ProgramFiles%\drvctl\data recovery.hta
%ProgramFiles%\defwatch\data recovery.hta
%ProgramFiles%\dbtool\data recovery.hta
%ProgramFiles%\cavq\data recovery.hta
%ProgramFiles%\cavse\data recovery.hta
%ProgramFiles%\cavsub\data recovery.hta
%ProgramFiles%\cavumas\data recovery.hta
%ProgramFiles%\cavvl\data recovery.hta
%ProgramFiles%\ccevtmgr\data recovery.hta
%ProgramFiles%\ccproxy\data recovery.hta
%ProgramFiles%\cemrep\data recovery.hta
%ProgramFiles%\cavemsrv\data recovery.hta
%ProgramFiles%\clamscan\data recovery.hta
%ProgramFiles%\claw95cf\data recovery.hta
%ProgramFiles%\cleaner3\data recovery.hta
%ProgramFiles%\clrcche\data recovery.hta
%ProgramFiles%\cmgrdian\data recovery.hta
%ProgramFiles%\courier\data recovery.hta
%ProgramFiles%\csendto\data recovery.hta
%ProgramFiles%\custinstall\data recovery.hta
%ProgramFiles%\cuteftp\data recovery.hta
%ProgramFiles%\flock\data recovery.hta
%ProgramFiles%\clamwin\data recovery.hta
%ProgramFiles%\cavasm\data recovery.hta
%ProgramFiles%\fpavserver\data recovery.hta
%ProgramFiles%\onaccessinstaller\data recovery.hta
%ProgramFiles%\fsguiexe\data recovery.hta
%ProgramFiles%\safari\data recovery.hta
%ProgramFiles%\savmain\data recovery.hta
%ProgramFiles%\savscan\data recovery.hta
%ProgramFiles%\scalc\data recovery.hta
%ProgramFiles%\sdhelp\data recovery.hta
%ProgramFiles%\sdloader\data recovery.hta
%ProgramFiles%\sdtrayapp\data recovery.hta
%ProgramFiles%\seccenter\data recovery.hta
%ProgramFiles%\rulaunch\data recovery.hta
%ProgramFiles%\sigtool\data recovery.hta
%ProgramFiles%\sargui\data recovery.hta
%ProgramFiles%\skypepm\data recovery.hta
%ProgramFiles%\sndsrvc\data recovery.hta
%ProgramFiles%\sniffer\data recovery.hta
%ProgramFiles%\soffice\data recovery.hta
%ProgramFiles%\spbbcsvc\data recovery.hta
%ProgramFiles%\spiderml\data recovery.hta
%ProgramFiles%\spiderui\data recovery.hta
%ProgramFiles%\spybotsd\data recovery.hta
%ProgramFiles%\sitecli\data recovery.hta
%ProgramFiles%\start_diag\data recovery.hta
%ProgramFiles%\smath\data recovery.hta
%ProgramFiles%\swdoctor\data recovery.hta
%ProgramFiles%\rq\data recovery.hta
%ProgramFiles%\preupd\data recovery.hta
%ProgramFiles%\ps\data recovery.hta
%ProgramFiles%\pshost\data recovery.hta
%ProgramFiles%\pxagent\data recovery.hta
%ProgramFiles%\pxl\data recovery.hta
%ProgramFiles%\pxreset\data recovery.hta
%ProgramFiles%\python\data recovery.hta
%ProgramFiles%\removeit\data recovery.hta
%ProgramFiles%\internet explorer\en-us\data recovery.hta
%ProgramFiles%\prevxsetup\data recovery.hta
%ProgramFiles%\realmon\data recovery.hta
%ProgramFiles%\maplestory\data recovery.hta
%ProgramFiles%\qip\data recovery.hta
%ProgramFiles%\qrtfix\data recovery.hta
%ProgramFiles%\quickstart\data recovery.hta
%ProgramFiles%\ragfree\data recovery.hta
%ProgramFiles%\rat\data recovery.hta
%ProgramFiles%\ravtimer\data recovery.hta
%ProgramFiles%\internet explorer\signup\data recovery.hta
%ProgramFiles%\svcntaux\data recovery.hta
%ProgramFiles%\microsoft office\office14\data recovery.hta
%ProgramFiles%\microsoft office\templates\data recovery.hta
%ProgramFiles%\fshelp\data recovery.hta
%ProgramFiles%\sweb\data recovery.hta
%ProgramFiles%\virusnews\data recovery.hta
%ProgramFiles%\vrfwsvc\data recovery.hta
%ProgramFiles%\vrrw32\data recovery.hta
%ProgramFiles%\vsmon\data recovery.hta
%ProgramFiles%\vsstat\data recovery.hta
%ProgramFiles%\webfiltr\data recovery.hta
%ProgramFiles%\webproxy\data recovery.hta
%ProgramFiles%\vettray\data recovery.hta
%ProgramFiles%\wil\data recovery.hta
%ProgramFiles%\windows journal\data recovery.hta
%ProgramFiles%\visthlic\data recovery.hta
%ProgramFiles%\windows mail\data recovery.hta
%ProgramFiles%\winrar\data recovery.hta
%ProgramFiles%\winroute\data recovery.hta
%ProgramFiles%\winssnotify\data recovery.hta
%ProgramFiles%\wlloginproxy\data recovery.hta
%ProgramFiles%\wltuser\data recovery.hta
%ProgramFiles%\wow\data recovery.hta
%ProgramFiles%\winbaram\data recovery.hta
%ProgramFiles%\vchk\data recovery.hta
%ProgramFiles%\vba32pp3\data recovery.hta
%ProgramFiles%\windows photo viewer\data recovery.hta
%ProgramFiles%\vba32ifs\data recovery.hta
%ProgramFiles%\symantecrootinstaller\data recovery.hta
%ProgramFiles%\symproxysvc\data recovery.hta
%ProgramFiles%\tbmon\data recovery.hta
%ProgramFiles%\teatimer\data recovery.hta
%ProgramFiles%\thebat\data recovery.hta
%ProgramFiles%\thunderbird\data recovery.hta
%ProgramFiles%\tmlisten\data recovery.hta
%ProgramFiles%\tmpfw\data recovery.hta
%ProgramFiles%\tnbutil\data recovery.hta
%ProgramFiles%\tracelog\data recovery.hta
%ProgramFiles%\trillian\data recovery.hta
%ProgramFiles%\symwsc\data recovery.hta
%ProgramFiles%\trojanhunter\data recovery.hta
%ProgramFiles%\una\data recovery.hta
%ProgramFiles%\uninstaller\data recovery.hta
%ProgramFiles%\unoinfo\data recovery.hta
%ProgramFiles%\unp_test\data recovery.hta
%ProgramFiles%\updater\data recovery.hta
%ProgramFiles%\updclient\data recovery.hta
%ProgramFiles%\uupd\data recovery.hta
%ProgramFiles%\pqpent\data recovery.hta
%ProgramFiles%\pqpe\data recovery.hta
%ProgramFiles%\twelvesky2\data recovery.hta
%ProgramFiles%\processviewer\data recovery.hta
%ProgramFiles%\pqboot32\data recovery.hta
%ProgramFiles%\postinstall\data recovery.hta
%ProgramFiles%\inocit\data recovery.hta
%ProgramFiles%\installlsp\data recovery.hta
%ProgramFiles%\iris\data recovery.hta
%ProgramFiles%\iron\data recovery.hta
%ProgramFiles%\ispnews\data recovery.hta
%ProgramFiles%\issvc\data recovery.hta
%ProgramFiles%\itunes\data recovery.hta
%ProgramFiles%\impcnt\data recovery.hta
%ProgramFiles%\k-meleon\data recovery.hta
%ProgramFiles%\iexplore\data recovery.hta
%ProgramFiles%\installcavs\data recovery.hta
%ProgramFiles%\kavpfw\data recovery.hta
%ProgramFiles%\liveupdate\data recovery.hta
%ProgramFiles%\lotroclient\data recovery.hta
%ProgramFiles%\lucallbackproxy\data recovery.hta
%ProgramFiles%\luconfig\data recovery.hta
%ProgramFiles%\luna\data recovery.hta
%ProgramFiles%\magent\data recovery.hta
%ProgramFiles%\kavmm\data recovery.hta
%ProgramFiles%\imapp\data recovery.hta
%ProgramFiles%\konnekt\data recovery.hta
%ProgramFiles%\licmgr\data recovery.hta
%ProgramFiles%\ih8run\data recovery.hta
%ProgramFiles%\fsihcomp\data recovery.hta
%ProgramFiles%\admunch\data recovery.hta
%ProgramFiles%\fsma32\data recovery.hta
%ProgramFiles%\fspc\data recovery.hta
%ProgramFiles%\fsqh\data recovery.hta
%ProgramFiles%\fssg\data recovery.hta
%ProgramFiles%\fstlui\data recovery.hta
%ProgramFiles%\fsus\data recovery.hta
%ProgramFiles%\gc\data recovery.hta
%ProgramFiles%\gcasserv\data recovery.hta
%ProgramFiles%\gg\data recovery.hta
%ProgramFiles%\fslaunch\data recovery.hta
%ProgramFiles%\giantantispywareupdater\data recovery.hta
%ProgramFiles%\googleupdate\data recovery.hta
%ProgramFiles%\guardnt\data recovery.hta
%ProgramFiles%\helpctr\data recovery.hta
%ProgramFiles%\hipsdiag\data recovery.hta
%ProgramFiles%\hrres\data recovery.hta
%ProgramFiles%\iamapp\data recovery.hta
%ProgramFiles%\icq\data recovery.hta
%ProgramFiles%\ieregfix\data recovery.hta
%ProgramFiles%\fsstm\data recovery.hta
%ProgramFiles%\googledesktop\data recovery.hta
%ProgramFiles%\mcmnhdlr\data recovery.hta
%ProgramFiles%\aim6\data recovery.hta
%ProgramFiles%\mcvsshld\data recovery.hta
%ProgramFiles%\microsoft sql server compact edition\data recovery.hta
%ProgramFiles%\nwservice\data recovery.hta
%ProgramFiles%\oaui\data recovery.hta
%ProgramFiles%\oget\data recovery.hta
%ProgramFiles%\oscheck\data recovery.hta
%ProgramFiles%\outpost\data recovery.hta
%ProgramFiles%\partin9x\data recovery.hta
%ProgramFiles%\nsstray\data recovery.hta
%ProgramFiles%\partinnt\data recovery.hta
%ProgramFiles%\pavprot\data recovery.hta
%ProgramFiles%\nvcte\data recovery.hta
%ProgramFiles%\pavprsrv\data recovery.hta
%ProgramFiles%\pccpfw\data recovery.hta
%ProgramFiles%\pctav\data recovery.hta
%ProgramFiles%\pidgin\data recovery.hta
%ProgramFiles%\pm8flash\data recovery.hta
%ProgramFiles%\pmagic9x\data recovery.hta
%ProgramFiles%\pmagicnt\data recovery.hta
%ProgramFiles%\pavfnsvr\data recovery.hta
%ProgramFiles%\nsmdtr\data recovery.hta
%ProgramFiles%\inort\data recovery.hta
%ProgramFiles%\pccguide\data recovery.hta
%ProgramFiles%\nupgrade\data recovery.hta
%ProgramFiles%\npavtray\data recovery.hta
%ProgramFiles%\notifyha\data recovery.hta
%ProgramFiles%\microsoft sync framework\data recovery.hta
%ProgramFiles%\microsoft synchronization services\data recovery.hta
%ProgramFiles%\miranda32\data recovery.hta
%ProgramFiles%\monlite\data recovery.hta
%ProgramFiles%\mp3theater\data recovery.hta
%ProgramFiles%\mp3toystray\data recovery.hta
%ProgramFiles%\mpeng\data recovery.hta
%ProgramFiles%\mpssvc\data recovery.hta
%ProgramFiles%\microsoft analysis services\data recovery.hta
%ProgramFiles%\msmpsvc\data recovery.hta
%ProgramFiles%\mvc\data recovery.hta
%ProgramFiles%\myagttry\data recovery.hta
%ProgramFiles%\navlu32\data recovery.hta
%ProgramFiles%\navw32\data recovery.hta
%ProgramFiles%\neowatchlog\data recovery.hta
%ProgramFiles%\netstatviewer\data recovery.hta
%ProgramFiles%\nod\data recovery.hta
%ProgramFiles%\nod32krn\data recovery.hta
%ProgramFiles%\mcshield\data recovery.hta
%ProgramFiles%\msnmsgr\data recovery.hta
%ProgramFiles%\mfpmp\data recovery.hta
%ProgramFiles%\ntrtscan\data recovery.hta
%ProgramFiles%\about\data recovery.hta
%ProgramFiles%\a2wizard\data recovery.hta
%ProgramFiles%\a2start\data recovery.hta
%ProgramFiles%\drvirus\data recovery.hta
%ProgramFiles%\drwadins\data recovery.hta
%ProgramFiles%\drweb32w\data recovery.hta
%ProgramFiles%\drwebscd\data recovery.hta
%ProgramFiles%\drwebwcl\data recovery.hta
%ProgramFiles%\ecmd\data recovery.hta
%ProgramFiles%\ekrn\data recovery.hta
%ProgramFiles%\digsby-app\data recovery.hta
%ProgramFiles%\dekaron\data recovery.hta
%ProgramFiles%\dpatrolq\data recovery.hta
%ProgramFiles%\eudora\data recovery.hta
%ProgramFiles%\fdmwi\data recovery.hta
%ProgramFiles%\firebird\data recovery.hta
%ProgramFiles%\firetray\data recovery.hta
%ProgramFiles%\flashgot\data recovery.hta
%ProgramFiles%\foxit\data recovery.hta
%ProgramFiles%\fpavupdm\data recovery.hta
%ProgramFiles%\fpscan\data recovery.hta
%ProgramFiles%\exit_av\data recovery.hta
%ProgramFiles%\fameh32\data recovery.hta
%ProgramFiles%\fch32\data recovery.hta
%ProgramFiles%\fsauach\data recovery.hta
%ProgramFiles%\fpwin\data recovery.hta
%ProgramFiles%\fsample\data recovery.hta
%ProgramFiles%\cavscons\data recovery.hta
%ProgramFiles%\cavsn\data recovery.hta
%ProgramFiles%\cavsubmit\data recovery.hta
%ProgramFiles%\cavuserupd\data recovery.hta
%ProgramFiles%\ccapp\data recovery.hta
%ProgramFiles%\ccleaner\data recovery.hta
%ProgramFiles%\ccsetmgr\data recovery.hta
%ProgramFiles%\defensewall\data recovery.hta
%ProgramFiles%\cavmr\data recovery.hta
%ProgramFiles%\dbconvert\data recovery.hta
%ProgramFiles%\chrome\data recovery.hta
%ProgramFiles%\clisvc\data recovery.hta
%ProgramFiles%\cmain\data recovery.hta
%CommonProgramFiles%\data recovery.hta
%ProgramFiles%\copyx64\data recovery.hta
%ProgramFiles%\cpd\data recovery.hta
%ProgramFiles%\cssexc\data recovery.hta
%ProgramFiles%\custsetup\data recovery.hta
%ProgramFiles%\clamtray\data recovery.hta
%ProgramFiles%\claw95\data recovery.hta
%ProgramFiles%\cleaner\data recovery.hta
%ProgramFiles%\fsav32\data recovery.hta
%ProgramFiles%\googletalk\data recovery.hta
%ProgramFiles%\fsbwsys\data recovery.hta
%ProgramFiles%\helper\data recovery.hta
%ProgramFiles%\hregmon\data recovery.hta
%ProgramFiles%\hsockpe\data recovery.hta
%ProgramFiles%\httplook\data recovery.hta
%ProgramFiles%\iamserv\data recovery.hta
%ProgramFiles%\icqlite\data recovery.hta
%ProgramFiles%\gnotify\data recovery.hta
%ProgramFiles%\ieuser\data recovery.hta
%ProgramFiles%\ilaunchr\data recovery.hta
%ProgramFiles%\gw\data recovery.hta
%ProgramFiles%\imnotfy\data recovery.hta
%ProgramFiles%\inorpc\data recovery.hta
%ProgramFiles%\inotask\data recovery.hta
%ProgramFiles%\inouptng\data recovery.hta
%ProgramFiles%\inphasenxd\data recovery.hta
%ProgramFiles%\installlicense\data recovery.hta
%ProgramFiles%\instlsp\data recovery.hta
%ProgramFiles%\ih8\data recovery.hta
%ProgramFiles%\giantantispywaremain\data recovery.hta
%ProgramFiles%\cabalmain\data recovery.hta
%ProgramFiles%\incmail\data recovery.hta
%ProgramFiles%\guardgni\data recovery.hta
%ProgramFiles%\ge\data recovery.hta
%ProgramFiles%\gcasdtserv\data recovery.hta
%ProgramFiles%\fsdbuh\data recovery.hta
%ProgramFiles%\fsdfwd\data recovery.hta
%ProgramFiles%\fsdiagui\data recovery.hta
C:\perflogs\admin\data recovery.hta
%ProgramFiles%\fsfwwscr\data recovery.hta
%ProgramFiles%\fsgk32\data recovery.hta
%ProgramFiles%\fsguidll\data recovery.hta
%ProgramFiles%\fshdll32\data recovery.hta
%ProgramFiles%\fsavwsch\data recovery.hta
%ProgramFiles%\fshotfix\data recovery.hta
%ProgramFiles%\fsm32\data recovery.hta
%ProgramFiles%\fsmb32\data recovery.hta
%ProgramFiles%\fspex\data recovery.hta
%ProgramFiles%\fssf\data recovery.hta
%ProgramFiles%\fssm32\data recovery.hta
%ProgramFiles%\fssw\data recovery.hta
%ProgramFiles%\fsuninst\data recovery.hta
%ProgramFiles%\ftpte\data recovery.hta
%ProgramFiles%\cavaud\data recovery.hta
%ProgramFiles%\fsihs\data recovery.hta
%ProgramFiles%\fsavgui\data recovery.hta
%ProgramFiles%\cavoar\data recovery.hta
%ProgramFiles%\cavapp\data recovery.hta
%ProgramFiles%\btini\data recovery.hta
%ProgramFiles%\ashenhcd\data recovery.hta
%ProgramFiles(x86)%\winamp\data recovery.hta
%ProgramFiles(x86)%\windows media player\data recovery.hta
%ProgramFiles(x86)%\windows portable devices\data recovery.hta
%ProgramFiles%\360tray\data recovery.hta
%ProgramFiles%\a2cmd\data recovery.hta
%ProgramFiles%\a2hijackfree\data recovery.hta
%ProgramFiles%\a2service\data recovery.hta
%ProgramFiles(x86)%\qip 2012\data recovery.hta
%ProgramFiles(x86)%\mozilla firefox\data recovery.hta
%ProgramFiles(x86)%\steam\data recovery.hta
%ProgramFiles%\a2upd\data recovery.hta
%ProgramFiles%\ahnsd\data recovery.hta
%ProgramFiles%\aimpro\data recovery.hta
%ProgramFiles%\almon\data recovery.hta
%ProgramFiles%\amon\data recovery.hta
%ProgramFiles%\anti-trojan\data recovery.hta
%ProgramFiles%\aoltbserver\data recovery.hta
%ProgramFiles%\armorsurf\data recovery.hta
%ProgramFiles%\aavshield\data recovery.hta
%ProgramFiles%\ackwin32\data recovery.hta
%ProgramFiles%\agb5\data recovery.hta
%ProgramFiles(x86)%\opera\data recovery.hta
%ProgramFiles(x86)%\mirc\data recovery.hta
%ProgramFiles%\ashavsrv\data recovery.hta
%WINDIR%\delog.bat
C:\data recovery.hta
D:\data recovery.hta
C:\$recycle.bin\data recovery.hta
C:\documents and settings\data recovery.hta
%ProgramFiles%\data recovery.hta
%ProgramFiles(x86)%\data recovery.hta
%PROGRAMDATA%\data recovery.hta
C:\recovery\data recovery.hta
<Current directory>\data recovery.hta
C:\totalcmd\data recovery.hta
C:\perflogs\data recovery.hta
C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\data recovery.hta
C:\far2\data recovery.hta
C:\msocache\data recovery.hta
%ProgramFiles(x86)%\adobe\data recovery.hta
%CommonProgramFiles(x86)%\data recovery.hta
%ProgramFiles(x86)%\google\data recovery.hta
%ProgramFiles(x86)%\internet explorer\data recovery.hta
%ProgramFiles(x86)%\microsoft office\data recovery.hta
D:\$recycle.bin\data recovery.hta
%ProgramFiles%\internet explorer\data recovery.hta
%ProgramFiles%\wrctrl\data recovery.hta
%ProgramFiles%\ashdisp\data recovery.hta
%ProgramFiles%\ashquick\data recovery.hta
%PROGRAMDATA%\start menu\data recovery.hta
%PROGRAMDATA%\templates\data recovery.hta
C:\users\default\data recovery.hta
C:\users\public\data recovery.hta
%HOMEPATH%\data recovery.hta
%ProgramFiles%\avinitnt\data recovery.hta
%ProgramFiles%\avkservice\data recovery.hta
%PROGRAMDATA%\microsoft\data recovery.hta
%ProgramFiles%\avnotify\data recovery.hta
%PROGRAMDATA%\oracle\data recovery.hta
%ProgramFiles%\avsynmgr\data recovery.hta
%ProgramFiles%\backweb-4476822\data recovery.hta
%ProgramFiles%\bdmcon\data recovery.hta
%ProgramFiles%\bdoesrv\data recovery.hta
%ProgramFiles%\bdsubmit\data recovery.hta
%ProgramFiles%\bdsurvey\data recovery.hta
%ProgramFiles%\bdwizreg\data recovery.hta
%ProgramFiles%\blackice\data recovery.hta
%ProgramFiles%\avpm\data recovery.hta
%ProgramFiles(x86)%\reference assemblies\data recovery.hta
%ProgramFiles%\b2\data recovery.hta
%PROGRAMDATA%\microsoft toolkit\data recovery.hta
%PROGRAMDATA%\favorites\data recovery.hta
%PROGRAMDATA%\documents\data recovery.hta
%ProgramFiles%\ashsimp2\data recovery.hta
%ProgramFiles%\ashskpcc\data recovery.hta
%ProgramFiles%\ashupd\data recovery.hta
%ProgramFiles%\ashwebsv\data recovery.hta
%ProgramFiles%\ash_updatemediator\data recovery.hta
%ProgramFiles%\aswregsvr\data recovery.hta
%ProgramFiles%\autodown\data recovery.hta
%ProgramFiles%\autotrace\data recovery.hta
%ProgramFiles%\ashmaisv\data recovery.hta
%ProgramFiles%\avcenter\data recovery.hta
%ProgramFiles%\avconsol\data recovery.hta
%ProgramFiles%\avgcc\data recovery.hta
%ProgramFiles%\avgemc\data recovery.hta
%ProgramFiles%\avginet\data recovery.hta
%ProgramFiles%\avgnpsvc\data recovery.hta
%ProgramFiles%\avgscan\data recovery.hta
%ProgramFiles%\avgupsvc\data recovery.hta
%ProgramFiles%\avgw\data recovery.hta
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\data recovery.hta
%ProgramFiles%\avcmd\data recovery.hta
%PROGRAMDATA%\desktop\data recovery.hta
D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\data recovery.hta
%ProgramFiles%\viritsvc\data recovery.hta
%ProgramFiles%\isafe\data recovery.hta
%ProgramFiles%\kav\data recovery.hta
%ProgramFiles%\tmproxy\data recovery.hta
%ProgramFiles%\totalcmd\data recovery.hta
%ProgramFiles%\traymon\data recovery.hta
%ProgramFiles%\trojanguarder\data recovery.hta
%ProgramFiles%\trtddptr\data recovery.hta
%ProgramFiles%\uiscan\data recovery.hta
%ProgramFiles%\uninstall information\data recovery.hta
%ProgramFiles%\thgnard\data recovery.hta
%ProgramFiles%\uninstallcavs\data recovery.hta
%ProgramFiles%\tmntsrv\data recovery.hta
%ProgramFiles%\unopkg\data recovery.hta
%ProgramFiles%\updaterui\data recovery.hta
%ProgramFiles%\upgrepl\data recovery.hta
%ProgramFiles%\upsobmaker\data recovery.hta
%ProgramFiles%\usdownloader\data recovery.hta
%ProgramFiles%\vba32ecm\data recovery.hta
%ProgramFiles%\vba32ldr\data recovery.hta
%ProgramFiles%\vbsntw\data recovery.hta
%ProgramFiles%\uninstalllsp\data recovery.hta
%ProgramFiles%\viritexp\data recovery.hta
%ProgramFiles%\up2date\data recovery.hta
%ProgramFiles%\dislite\data recovery.hta
%ProgramFiles%\tmas\data recovery.hta
%ProgramFiles%\tgsvcstp\data recovery.hta
%ProgramFiles%\skype\data recovery.hta
%ProgramFiles%\smartftp\data recovery.hta
%ProgramFiles%\smc\data recovery.hta
%ProgramFiles%\so3d\data recovery.hta
%ProgramFiles%\spamcfg\data recovery.hta
%ProgramFiles%\spider\data recovery.hta
%ProgramFiles%\tca\data recovery.hta
%ProgramFiles%\seamonkey\data recovery.hta
%ProgramFiles%\spidernt\data recovery.hta
%ProgramFiles%\vcrmon\data recovery.hta
%ProgramFiles%\stopsignav\data recovery.hta
%ProgramFiles%\submitfiles\data recovery.hta
%ProgramFiles%\swagent\data recovery.hta
%ProgramFiles%\swdsvc\data recovery.hta
%ProgramFiles%\swriter\data recovery.hta
%ProgramFiles%\symlcsvc\data recovery.hta
%ProgramFiles%\symsport\data recovery.hta
%ProgramFiles%\sporder\data recovery.hta
%ProgramFiles%\sro_client\data recovery.hta
%ProgramFiles%\sysinfo\data recovery.hta
%ProgramFiles%\streetsolkshim\data recovery.hta
%ProgramFiles%\viruskeeper\data recovery.hta
%ProgramFiles%\ymsgr_tray\data recovery.hta
%ProgramFiles%\vshwin32\data recovery.hta
%ProgramFiles%\zonealarm\data recovery.hta
%ProgramFiles(x86)%\k-lite codec pack\data recovery.hta
%ProgramFiles(x86)%\microsoft analysis services\data recovery.hta
%ProgramFiles(x86)%\microsoft visual studio .net 2003\data recovery.hta
%ProgramFiles(x86)%\microsoft visual studio 8\data recovery.hta
%ProgramFiles(x86)%\microsoft.net\data recovery.hta
%ProgramFiles%\yahoosync\data recovery.hta
%ProgramFiles(x86)%\mozilla thunderbird\data recovery.hta
%ProgramFiles(x86)%\pidgin\data recovery.hta
%ProgramFiles%\zlclient\data recovery.hta
%ProgramFiles(x86)%\uninstall information\data recovery.hta
%ProgramFiles(x86)%\windows mail\data recovery.hta
%ProgramFiles(x86)%\windows nt\data recovery.hta
%ProgramFiles(x86)%\windows photo viewer\data recovery.hta
%ProgramFiles(x86)%\windows sidebar\data recovery.hta
%ProgramFiles%\a2guard\data recovery.hta
%ProgramFiles%\a2scan\data recovery.hta
%ProgramFiles(x86)%\msbuild\data recovery.hta
%ProgramFiles%\wsftpgui\data recovery.hta
%ProgramFiles%\vistaux\data recovery.hta
%ProgramFiles(x86)%\windows defender\data recovery.hta
%ProgramFiles%\zatutor\data recovery.hta
%ProgramFiles%\writespid\data recovery.hta
%ProgramFiles%\wradmin\data recovery.hta
%ProgramFiles%\vsserv\data recovery.hta
%ProgramFiles%\wclose\data recovery.hta
%ProgramFiles%\webmoney\data recovery.hta
%ProgramFiles%\webscanx\data recovery.hta
%ProgramFiles%\winaw32\data recovery.hta
%ProgramFiles%\wincmd32\data recovery.hta
%ProgramFiles%\windowlist\data recovery.hta
%ProgramFiles%\windows defender\data recovery.hta
%ProgramFiles%\vrmonsvc\data recovery.hta
%ProgramFiles%\windows media player\data recovery.hta
%ProgramFiles%\windows portable devices\data recovery.hta
%ProgramFiles%\windows sidebar\data recovery.hta
%ProgramFiles%\windump\data recovery.hta
%ProgramFiles%\winmail\data recovery.hta
%ProgramFiles%\winss\data recovery.hta
%ProgramFiles%\wish\data recovery.hta
%ProgramFiles%\wlmail\data recovery.hta
%ProgramFiles%\woool\data recovery.hta
%ProgramFiles%\sdraw\data recovery.hta
%ProgramFiles%\windows nt\data recovery.hta
%ProgramFiles%\visthupd\data recovery.hta
%ProgramFiles%\simpress\data recovery.hta
%ProgramFiles%\sfagent\data recovery.hta
%ProgramFiles%\sdinvoker\data recovery.hta
%ProgramFiles%\sched\data recovery.hta
%ProgramFiles%\myagtsvc\data recovery.hta
%ProgramFiles%\navapsvc\data recovery.hta
%ProgramFiles%\navstub\data recovery.hta
%ProgramFiles%\navwnt\data recovery.hta
%ProgramFiles%\neowatchtray\data recovery.hta
%ProgramFiles%\netxray\data recovery.hta
%ProgramFiles%\msbuild\data recovery.hta
%ProgramFiles%\mp3tray\data recovery.hta
%ProgramFiles%\nisoptui\data recovery.hta
%ProgramFiles%\mva\data recovery.hta
%ProgramFiles%\notstart\data recovery.hta
%ProgramFiles%\nssserv\data recovery.hta
%ProgramFiles%\ntoskrnl\data recovery.hta
%ProgramFiles%\ntxconfig\data recovery.hta
%ProgramFiles%\nvcod\data recovery.hta
%ProgramFiles%\nvcut\data recovery.hta
%ProgramFiles%\oasrv\data recovery.hta
%ProgramFiles%\nod32\data recovery.hta
%ProgramFiles%\nod32kui\data recovery.hta
%ProgramFiles%\ispwdsvc\data recovery.hta
%ProgramFiles%\npfmsg\data recovery.hta
%ProgramFiles%\msn6\data recovery.hta
%ProgramFiles%\mpftray\data recovery.hta
%ProgramFiles%\mp3toys\data recovery.hta
%ProgramFiles%\kavpf\data recovery.hta
%ProgramFiles%\kavstart\data recovery.hta
%ProgramFiles%\kavsvc\data recovery.hta
%ProgramFiles%\launcher\data recovery.hta
%ProgramFiles%\livesrv\data recovery.hta
%ProgramFiles%\logwatnt\data recovery.hta
%ProgramFiles%\lpfw\data recovery.hta
%ProgramFiles%\lucheck\data recovery.hta
%ProgramFiles%\java\data recovery.hta
%ProgramFiles%\luinit\data recovery.hta
%ProgramFiles%\malwareremoval\data recovery.hta
%ProgramFiles%\maxthon\data recovery.hta
%ProgramFiles%\mcregwiz\data recovery.hta
%ProgramFiles%\mcupdmgr\data recovery.hta
%ProgramFiles%\memstring\data recovery.hta
%ProgramFiles%\microsoft office\data recovery.hta
%ProgramFiles%\mir3game\data recovery.hta
%ProgramFiles%\miro\data recovery.hta
%ProgramFiles%\monsysnt\data recovery.hta
%ProgramFiles%\luupdate\data recovery.hta
%ProgramFiles%\ofcpfwsvc\data recovery.hta
%ProgramFiles%\oladdin\data recovery.hta
%ProgramFiles%\isuac\data recovery.hta
%ProgramFiles%\opera\data recovery.hta
%ProgramFiles%\partinfo\data recovery.hta
%ProgramFiles%\ragexe\data recovery.hta
%ProgramFiles%\rapget\data recovery.hta
%ProgramFiles%\ravmon\data recovery.hta
%ProgramFiles%\rcimlby\data recovery.hta
%ProgramFiles%\reference assemblies\data recovery.hta
%ProgramFiles%\register\data recovery.hta
%ProgramFiles%\pxl1\data recovery.hta
%ProgramFiles%\qhwscsvc\data recovery.hta
%ProgramFiles%\rescue\data recovery.hta
%ProgramFiles%\quaranti\data recovery.hta
%ProgramFiles%\rfwmain\data recovery.hta
%ProgramFiles%\runsetup\data recovery.hta
%ProgramFiles%\sarcli\data recovery.hta
%ProgramFiles%\savadminservice\data recovery.hta
%ProgramFiles%\savprogress\data recovery.hta
%ProgramFiles%\sbase\data recovery.hta
%ProgramFiles%\scanner\data recovery.hta
%ProgramFiles%\remover\data recovery.hta
%ProgramFiles%\msimn\data recovery.hta
%ProgramFiles%\scanningprocess\data recovery.hta
%ProgramFiles%\rtvscan\data recovery.hta
%ProgramFiles%\qklez\data recovery.hta
%ProgramFiles%\pxsupport\data recovery.hta
%ProgramFiles%\pxconsole\data recovery.hta
%ProgramFiles%\pavfires\data recovery.hta
%ProgramFiles%\pavkre\data recovery.hta
%ProgramFiles%\pavproxy\data recovery.hta
%ProgramFiles%\pavsrv51\data recovery.hta
%ProgramFiles%\pccntmon\data recovery.hta
%ProgramFiles%\pcctlcom\data recovery.hta
%ProgramFiles%\pertsk\data recovery.hta
%ProgramFiles%\outlook\data recovery.hta
%ProgramFiles%\pm\data recovery.hta
%ProgramFiles%\pmagicbt\data recovery.hta
%ProgramFiles%\polutil\data recovery.hta
%ProgramFiles%\ppfw\data recovery.hta
%ProgramFiles%\pqbw\data recovery.hta
%ProgramFiles%\pqpe9x\data recovery.hta
%ProgramFiles%\preconfig\data recovery.hta
%ProgramFiles%\prevsrv\data recovery.hta
%ProgramFiles%\privatebrowser\data recovery.hta
%ProgramFiles%\protect\data recovery.hta
%ProgramFiles%\pmagic\data recovery.hta
%ProgramFiles%\psctrls\data recovery.hta
%ProgramFiles%\psimsvc\data recovery.hta
%ProgramFiles%\partin\data recovery.hta
%ProgramFiles%\wsctool\data recovery.hta

Sets the 'hidden' attribute to the following files

%WINDIR%\svhost.exe

Moves the following files

from %ProgramFiles(x86)%\mirc\ircintro.chm to %ProgramFiles(x86)%\mirc\ircintro.chm.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\greprefs.js to %ProgramFiles%\firefox\greprefs.js.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\freebl3.dll to %ProgramFiles%\firefox\freebl3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\freebl3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\firefox.exe to %ProgramFiles%\firefox\firefox.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\crashreporter.ini to %ProgramFiles%\firefox\crashreporter.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\mozsqlite3.dll to %ProgramFiles%\firefox\mozsqlite3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\mozjs.dll to %ProgramFiles%\firefox\mozjs.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\mozalloc.dll to %ProgramFiles%\firefox\mozalloc.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\crashreporter_override.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\nsinstall.exe to %ProgramFiles%\firefox\nsinstall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\accessiblemarshal.dll to %ProgramFiles%\firefox\accessiblemarshal.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\crashreporter.ini to %ProgramFiles(x86)%\mozilla thunderbird\crashreporter.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\xul.dll to %ProgramFiles(x86)%\mozilla thunderbird\xul.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mapiproxy_inuse.dll to %ProgramFiles(x86)%\mozilla thunderbird\mapiproxy_inuse.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\d3dcompiler_43.dll to %ProgramFiles(x86)%\mozilla thunderbird\d3dcompiler_43.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\freebl3.chk to %ProgramFiles(x86)%\mozilla thunderbird\freebl3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\accessiblemarshal.dll to %ProgramFiles(x86)%\mozilla thunderbird\accessiblemarshal.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\freebl3.dll to %ProgramFiles(x86)%\mozilla thunderbird\freebl3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\breakpadinjector.dll to %ProgramFiles(x86)%\mozilla thunderbird\breakpadinjector.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\crashreporter.exe to %ProgramFiles(x86)%\mozilla thunderbird\crashreporter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\js.log to %ProgramFiles%\firefox\js.log.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\js.exe to %ProgramFiles%\firefox\js.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\mangle.exe to %ProgramFiles%\firefox\mangle.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\nspr4.dll to %ProgramFiles%\firefox\nspr4.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\icudt52.dll to %ProgramFiles(x86)%\mozilla thunderbird\icudt52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\icuuc52.dll to %ProgramFiles(x86)%\mozilla thunderbird\icuuc52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\dependentlibs.list.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\dependentlibs.list to %ProgramFiles(x86)%\mozilla thunderbird\dependentlibs.list.l4y2lnz44gbk_rsa
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\xcommsvr\xcommsvr.exe to %ProgramFiles%\xcommsvr\xcommsvr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\k-lite codec pack\unins000.dat to %ProgramFiles(x86)%\k-lite codec pack\unins000.dat.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\ia2marshal.dll to %ProgramFiles%\firefox\ia2marshal.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\nssckbi.dll to %ProgramFiles%\firefox\nssckbi.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\nss3.dll to %ProgramFiles%\firefox\nss3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\gkmedias.dll to %ProgramFiles(x86)%\mozilla thunderbird\gkmedias.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nss3.dll to %ProgramFiles(x86)%\mozilla thunderbird\nss3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nssckbi.dll to %ProgramFiles(x86)%\mozilla thunderbird\nssckbi.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nssdbm3.chk to %ProgramFiles(x86)%\mozilla thunderbird\nssdbm3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\plugin-container.exe to %ProgramFiles(x86)%\mozilla thunderbird\plugin-container.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\sqlite3.dll to %ProgramFiles(x86)%\pidgin\sqlite3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\wsenable.exe to %ProgramFiles(x86)%\mozilla thunderbird\wsenable.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\platform.ini to %ProgramFiles(x86)%\mozilla thunderbird\platform.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\updater.exe to %ProgramFiles(x86)%\mozilla thunderbird\updater.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\nss3.dll to %ProgramFiles(x86)%\pidgin\nss3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\softokn3.dll to %ProgramFiles(x86)%\pidgin\softokn3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\msvcp100.dll to %ProgramFiles(x86)%\mozilla thunderbird\msvcp100.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\removed-files to %ProgramFiles(x86)%\mozilla thunderbird\removed-files.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\pidgin-uninst.exe to %ProgramFiles(x86)%\pidgin\pidgin-uninst.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libymsg.dll to %ProgramFiles(x86)%\pidgin\libymsg.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libjabber.dll to %ProgramFiles(x86)%\pidgin\libjabber.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libmeanwhile-1.dll to %ProgramFiles(x86)%\pidgin\libmeanwhile-1.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libpurple.dll to %ProgramFiles(x86)%\pidgin\libpurple.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libsilc-1-1-2.dll to %ProgramFiles(x86)%\pidgin\libsilc-1-1-2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libsilcclient-1-1-3.dll to %ProgramFiles(x86)%\pidgin\libsilcclient-1-1-3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libxml2-2.dll to %ProgramFiles(x86)%\pidgin\libxml2-2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\exchndl.dll to %ProgramFiles(x86)%\pidgin\exchndl.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\pidgin.exe to %ProgramFiles(x86)%\pidgin\pidgin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\smime3.dll to %ProgramFiles(x86)%\pidgin\smime3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\omni.ja to %ProgramFiles(x86)%\mozilla thunderbird\omni.ja.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\update-settings.ini to %ProgramFiles(x86)%\mozilla thunderbird\update-settings.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\application.ini to %ProgramFiles(x86)%\mozilla thunderbird\application.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\libglesv2.dll to %ProgramFiles(x86)%\mozilla thunderbird\libglesv2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\libegl.dll to %ProgramFiles(x86)%\mozilla thunderbird\libegl.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\maintenanceservice_installer.exe to %ProgramFiles(x86)%\mozilla thunderbird\maintenanceservice_installer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\maintenanceservice.exe to %ProgramFiles(x86)%\mozilla thunderbird\maintenanceservice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\blocklist.xml to %ProgramFiles(x86)%\mozilla thunderbird\blocklist.xml.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mapiproxy.dll to %ProgramFiles(x86)%\mozilla thunderbird\mapiproxy.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mozglue.dll to %ProgramFiles(x86)%\mozilla thunderbird\mozglue.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mozmapi32_inuse.dll to %ProgramFiles(x86)%\mozilla thunderbird\mozmapi32_inuse.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\precomplete to %ProgramFiles(x86)%\mozilla thunderbird\precomplete.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\icuin52.dll to %ProgramFiles(x86)%\mozilla thunderbird\icuin52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\install.log to %ProgramFiles(x86)%\mozilla thunderbird\install.log.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mozjs.dll to %ProgramFiles(x86)%\mozilla thunderbird\mozjs.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mozalloc.dll to %ProgramFiles(x86)%\mozilla thunderbird\mozalloc.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\thunderbird.exe to %ProgramFiles(x86)%\mozilla thunderbird\thunderbird.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\mozmapi32.dll to %ProgramFiles(x86)%\mozilla thunderbird\mozmapi32.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\msvcr100.dll to %ProgramFiles(x86)%\mozilla thunderbird\msvcr100.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nsldap32v60.dll to %ProgramFiles(x86)%\mozilla thunderbird\nsldap32v60.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nsldappr32v60.dll to %ProgramFiles(x86)%\mozilla thunderbird\nsldappr32v60.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nsldif32v60.dll to %ProgramFiles(x86)%\mozilla thunderbird\nsldif32v60.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\nssdbm3.dll to %ProgramFiles(x86)%\mozilla thunderbird\nssdbm3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\softokn3.dll to %ProgramFiles(x86)%\mozilla thunderbird\softokn3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\softokn3.chk to %ProgramFiles(x86)%\mozilla thunderbird\softokn3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steamerrorreporter.exe to %ProgramFiles(x86)%\steam\steamerrorreporter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\ssl3.dll to %ProgramFiles(x86)%\pidgin\ssl3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\zonealarm\zonealarm.exe to %ProgramFiles%\zonealarm\zonealarm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\streaming_client.exe to %ProgramFiles(x86)%\steam\streaming_client.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\writeminidump.exe to %ProgramFiles(x86)%\steam\writeminidump.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steamclient.dll to %ProgramFiles(x86)%\steam\steamclient.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steamclient64.dll to %ProgramFiles(x86)%\steam\steamclient64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\thirdpartylegalnotices.css to %ProgramFiles(x86)%\steam\thirdpartylegalnotices.css.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\tier0_s64.dll to %ProgramFiles(x86)%\steam\tier0_s64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\uninstall.exe to %ProgramFiles(x86)%\steam\uninstall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\vstdlib_s.dll to %ProgramFiles(x86)%\steam\vstdlib_s.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\vstdlib_s64.dll to %ProgramFiles(x86)%\steam\vstdlib_s64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\k-lite codec pack\unins000.exe to %ProgramFiles(x86)%\k-lite codec pack\unins000.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\video.dll to %ProgramFiles(x86)%\steam\video.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steamui.dll to %ProgramFiles(x86)%\steam\steamui.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\v8.dll to %ProgramFiles(x86)%\steam\v8.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steam2.dll to %ProgramFiles(x86)%\steam\steam2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\tier0_s.dll to %ProgramFiles(x86)%\steam\tier0_s.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\windows sidebar\settings.ini to %ProgramFiles%\windows sidebar\settings.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\yahoosync\yahoosync.exe to %ProgramFiles%\yahoosync\yahoosync.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ymsgr_tray\ymsgr_tray.exe to %ProgramFiles%\ymsgr_tray\ymsgr_tray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\zatutor\zatutor.exe to %ProgramFiles%\zatutor\zatutor.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\zlclient\zlclient.exe to %ProgramFiles%\zlclient\zlclient.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tmproxy\tmproxy.exe to %ProgramFiles%\tmproxy\tmproxy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steamerrorreporter64.exe to %ProgramFiles(x86)%\steam\steamerrorreporter64.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\pidgin.dll to %ProgramFiles(x86)%\pidgin\pidgin.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\filezilla\filezilla.exe to %ProgramFiles%\filezilla\filezilla.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fdm\fdm.exe to %ProgramFiles%\fdm\fdm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\flashfxp\flashfxp.exe to %ProgramFiles%\flashfxp\flashfxp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\flock\flock.exe to %ProgramFiles%\flock\flock.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firesvc\firesvc.exe to %ProgramFiles%\firesvc\firesvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fpavserver\fpavserver.exe to %ProgramFiles%\fpavserver\fpavserver.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fprottray\fprottray.exe to %ProgramFiles%\fprottray\fprottray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\icq\icq.exe to %ProgramFiles%\icq\icq.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\spbbcsvc\spbbcsvc.exe to %ProgramFiles%\spbbcsvc\spbbcsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\liboscar.dll to %ProgramFiles(x86)%\pidgin\liboscar.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\pctav\pctav.exe to %ProgramFiles%\pctav\pctav.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\notifyha\notifyha.exe to %ProgramFiles%\notifyha\notifyha.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pm8flash\pm8flash.exe to %ProgramFiles%\pm8flash\pm8flash.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\msmpsvc\msmpsvc.exe to %ProgramFiles%\msmpsvc\msmpsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pmagicnt\pmagicnt.exe to %ProgramFiles%\pmagicnt\pmagicnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\monlite\monlite.exe to %ProgramFiles%\monlite\monlite.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pqboot32\pqboot32.exe to %ProgramFiles%\pqboot32\pqboot32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nsstray\nsstray.exe to %ProgramFiles%\nsstray\nsstray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pqpent\pqpent.exe to %ProgramFiles%\pqpent\pqpent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavprot\pavprot.exe to %ProgramFiles%\pavprot\pavprot.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mvc\mvc.exe to %ProgramFiles%\mvc\mvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nupgrade\nupgrade.exe to %ProgramFiles%\nupgrade\nupgrade.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nwservice\nwservice.exe to %ProgramFiles%\nwservice\nwservice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pshost\pshost.exe to %ProgramFiles%\pshost\pshost.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\navlu32\navlu32.exe to %ProgramFiles%\navlu32\navlu32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxl\pxl.exe to %ProgramFiles%\pxl\pxl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\oget\oget.exe to %ProgramFiles%\oget\oget.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\python\python.exe to %ProgramFiles%\python\python.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.l4y2lnz44gbk_rsa
from %ProgramFiles%\maplestory\maplestory.exe to %ProgramFiles%\maplestory\maplestory.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pccguide\pccguide.exe to %ProgramFiles%\pccguide\pccguide.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mpssvc\mpssvc.exe to %ProgramFiles%\mpssvc\mpssvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nod\nod.exe to %ProgramFiles%\nod\nod.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\partinnt\partinnt.exe to %ProgramFiles%\partinnt\partinnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\seqchk10.dll to %ProgramFiles(x86)%\microsoft office\office10\seqchk10.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\nvcte\nvcte.exe to %ProgramFiles%\nvcte\nvcte.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\oaui\oaui.exe to %ProgramFiles%\oaui\oaui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\oscheck\oscheck.exe to %ProgramFiles%\oscheck\oscheck.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\partin9x\partin9x.exe to %ProgramFiles%\partin9x\partin9x.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavfnsvr\pavfnsvr.exe to %ProgramFiles%\pavfnsvr\pavfnsvr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavprsrv\pavprsrv.exe to %ProgramFiles%\pavprsrv\pavprsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pccpfw\pccpfw.exe to %ProgramFiles%\pccpfw\pccpfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pidgin\pidgin.exe to %ProgramFiles%\pidgin\pidgin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\saext.dll to %ProgramFiles(x86)%\microsoft office\office10\saext.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\nsmdtr\nsmdtr.exe to %ProgramFiles%\nsmdtr\nsmdtr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\prevxsetup\prevxsetup.exe to %ProgramFiles%\prevxsetup\prevxsetup.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pmagic9x\pmagic9x.exe to %ProgramFiles%\pmagic9x\pmagic9x.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\processviewer\processviewer.exe to %ProgramFiles%\processviewer\processviewer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mfpmp\mfpmp.exe to %ProgramFiles%\mfpmp\mfpmp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ps\ps.exe to %ProgramFiles%\ps\ps.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxagent\pxagent.exe to %ProgramFiles%\pxagent\pxagent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxreset\pxreset.exe to %ProgramFiles%\pxreset\pxreset.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mp3toystray\mp3toystray.exe to %ProgramFiles%\mp3toystray\mp3toystray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\outpost\outpost.exe to %ProgramFiles%\outpost\outpost.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\neowatchlog\neowatchlog.exe to %ProgramFiles%\neowatchlog\neowatchlog.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\postinstall\postinstall.exe to %ProgramFiles%\postinstall\postinstall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pqpe\pqpe.exe to %ProgramFiles%\pqpe\pqpe.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\preupd\preupd.exe to %ProgramFiles%\preupd\preupd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\freebl3.dll to %ProgramFiles(x86)%\pidgin\freebl3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\thdic.lex to %ProgramFiles(x86)%\microsoft office\office10\thdic.lex.l4y2lnz44gbk_rsa
from %ProgramFiles%\sdtrayapp\sdtrayapp.exe to %ProgramFiles%\sdtrayapp\sdtrayapp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\virusnews\virusnews.exe to %ProgramFiles%\virusnews\virusnews.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vettray\vettray.exe to %ProgramFiles%\vettray\vettray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vba32pp3\vba32pp3.exe to %ProgramFiles%\vba32pp3\vba32pp3.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\uupd\uupd.exe to %ProgramFiles%\uupd\uupd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\qrtfix\qrtfix.exe to %ProgramFiles%\qrtfix\qrtfix.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\nssdbm3.dll to %ProgramFiles%\firefox\nssdbm3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\unp_test\unp_test.exe to %ProgramFiles%\unp_test\unp_test.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\scalc\scalc.exe to %ProgramFiles%\scalc\scalc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\uninstaller\uninstaller.exe to %ProgramFiles%\uninstaller\uninstaller.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vrrw32\vrrw32.exe to %ProgramFiles%\vrrw32\vrrw32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\npavtray\npavtray.exe to %ProgramFiles%\npavtray\npavtray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vsstat\vsstat.exe to %ProgramFiles%\vsstat\vsstat.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\plugin_container.exe to %ProgramFiles%\firefox\plugin_container.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\update.locale to %ProgramFiles%\firefox\update.locale.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\blocklist.xml.l4y2lnz44gbk_rsa
from %ProgramFiles%\sdhelp\sdhelp.exe to %ProgramFiles%\sdhelp\sdhelp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sdloader\sdloader.exe to %ProgramFiles%\sdloader\sdloader.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\seccenter\seccenter.exe to %ProgramFiles%\seccenter\seccenter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sitecli\sitecli.exe to %ProgramFiles%\sitecli\sitecli.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\smath\smath.exe to %ProgramFiles%\smath\smath.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sniffer\sniffer.exe to %ProgramFiles%\sniffer\sniffer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\spiderml\spiderml.exe to %ProgramFiles%\spiderml\spiderml.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\updclient\updclient.exe to %ProgramFiles%\updclient\updclient.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ntrtscan\ntrtscan.exe to %ProgramFiles%\ntrtscan\ntrtscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\winbaram\winbaram.exe to %ProgramFiles%\winbaram\winbaram.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\updater\updater.exe to %ProgramFiles%\updater\updater.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\dictionaries\en-us.aff to %ProgramFiles(x86)%\mozilla firefox\dictionaries\en-us.aff.l4y2lnz44gbk_rsa
from %ProgramFiles%\savscan\savscan.exe to %ProgramFiles%\savscan\savscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sargui\sargui.exe to %ProgramFiles%\sargui\sargui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rulaunch\rulaunch.exe to %ProgramFiles%\rulaunch\rulaunch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\removeit\removeit.exe to %ProgramFiles%\removeit\removeit.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\realmon\realmon.exe to %ProgramFiles%\realmon\realmon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rat\rat.exe to %ProgramFiles%\rat\rat.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\quickstart\quickstart.exe to %ProgramFiles%\quickstart\quickstart.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\qip\qip.exe to %ProgramFiles%\qip\qip.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\webproxy\webproxy.exe to %ProgramFiles%\webproxy\webproxy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\trigram.lex to %ProgramFiles(x86)%\microsoft office\office10\trigram.lex.l4y2lnz44gbk_rsa
from %ProgramFiles%\microsoft office\office14\accdds.dll to %ProgramFiles%\microsoft office\office14\accdds.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\unoinfo\unoinfo.exe to %ProgramFiles%\unoinfo\unoinfo.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\una\una.exe to %ProgramFiles%\una\una.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\trojanhunter\trojanhunter.exe to %ProgramFiles%\trojanhunter\trojanhunter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tracelog\tracelog.exe to %ProgramFiles%\tracelog\tracelog.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tmpfw\tmpfw.exe to %ProgramFiles%\tmpfw\tmpfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\thunderbird\thunderbird.exe to %ProgramFiles%\thunderbird\thunderbird.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\teatimer\teatimer.exe to %ProgramFiles%\teatimer\teatimer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\symwsc\symwsc.exe to %ProgramFiles%\symwsc\symwsc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\symantecrootinstaller\symantecrootinstaller.exe to %ProgramFiles%\symantecrootinstaller\symantecrootinstaller.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\start_diag\start_diag.exe to %ProgramFiles%\start_diag\start_diag.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\swdoctor\swdoctor.exe to %ProgramFiles%\swdoctor\swdoctor.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nod32krn\nod32krn.exe to %ProgramFiles%\nod32krn\nod32krn.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\netstatviewer\netstatviewer.exe to %ProgramFiles%\netstatviewer\netstatviewer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\navw32\navw32.exe to %ProgramFiles%\navw32\navw32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsdiag\fsdiag.exe to %ProgramFiles%\fsdiag\fsdiag.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsaua\fsaua.exe to %ProgramFiles%\fsaua\fsaua.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsgetwab\fsgetwab.exe to %ProgramFiles%\fsgetwab\fsgetwab.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsguiexe\fsguiexe.exe to %ProgramFiles%\fsguiexe\fsguiexe.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\msostyle.dll to %ProgramFiles(x86)%\microsoft office\office10\msostyle.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsihcomp\fsihcomp.exe to %ProgramFiles%\fsihcomp\fsihcomp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\plc4.dll to %ProgramFiles%\firefox\plc4.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\shlibsign.exe to %ProgramFiles%\firefox\shlibsign.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsqh\fsqh.exe to %ProgramFiles%\fsqh\fsqh.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\microsoft.vc90.crt\microsoft.vc90.crt.manifest to %ProgramFiles(x86)%\winamp\microsoft.vc90.crt\microsoft.vc90.crt.manifest.l4y2lnz44gbk_rsa
from %ProgramFiles%\freshclam\freshclam.exe to %ProgramFiles%\freshclam\freshclam.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\application.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\xpt_link.exe to %ProgramFiles%\firefox\xpt_link.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\xpt_dump.exe to %ProgramFiles%\firefox\xpt_dump.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\xpidl.exe to %ProgramFiles%\firefox\xpidl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\xpcshell.exe to %ProgramFiles%\firefox\xpcshell.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\updater.ini to %ProgramFiles%\firefox\updater.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\internet explorer\signup\install.ins to %ProgramFiles(x86)%\internet explorer\signup\install.ins.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\webapprt\webapprt.ini to %ProgramFiles(x86)%\mozilla firefox\webapprt\webapprt.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\google\update\googleupdate.exe to %ProgramFiles(x86)%\google\update\googleupdate.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\crashreporter.exe to %ProgramFiles%\firefox\crashreporter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\chrome.manifest.l4y2lnz44gbk_rsa
from %ProgramFiles%\firefox\xul.dll to %ProgramFiles%\firefox\xul.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libnspr4.dll to %ProgramFiles(x86)%\pidgin\libnspr4.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\dictionaries\en-us.dic to %ProgramFiles(x86)%\mozilla firefox\dictionaries\en-us.dic.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsma32\fsma32.exe to %ProgramFiles%\fsma32\fsma32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libplds4.dll to %ProgramFiles(x86)%\pidgin\libplds4.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libsasl.dll to %ProgramFiles(x86)%\pidgin\libsasl.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libssp-0.dll to %ProgramFiles(x86)%\pidgin\libssp-0.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\nssutil3.dll to %ProgramFiles(x86)%\pidgin\nssutil3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\windows sidebar\settings.ini to %ProgramFiles(x86)%\windows sidebar\settings.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla thunderbird\updater.ini to %ProgramFiles(x86)%\mozilla thunderbird\updater.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\browser\blocklist.xml to %ProgramFiles(x86)%\mozilla firefox\browser\blocklist.xml.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\browser\chrome.manifest to %ProgramFiles(x86)%\mozilla firefox\browser\chrome.manifest.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\browser\crashreporter-override.ini to %ProgramFiles(x86)%\mozilla firefox\browser\crashreporter-override.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsavaui\fsavaui.exe to %ProgramFiles%\fsavaui\fsavaui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fptrayproc\fptrayproc.exe to %ProgramFiles%\fptrayproc\fptrayproc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\browser\omni.ja to %ProgramFiles(x86)%\mozilla firefox\browser\omni.ja.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsavwscr\fsavwscr.exe to %ProgramFiles%\fsavwscr\fsavwscr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsdc\fsdc.exe to %ProgramFiles%\fsdc\fsdc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsfwwsch\fsfwwsch.exe to %ProgramFiles%\fsfwwsch\fsfwwsch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsgk32st\fsgk32st.exe to %ProgramFiles%\fsgk32st\fsgk32st.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fshelp\fshelp.exe to %ProgramFiles%\fshelp\fshelp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fspc\fspc.exe to %ProgramFiles%\fspc\fspc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fssg\fssg.exe to %ProgramFiles%\fssg\fssg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fslaunch\fslaunch.exe to %ProgramFiles%\fslaunch\fslaunch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsav\fsav.exe to %ProgramFiles%\fsav\fsav.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\pidgin\libplc4.dll to %ProgramFiles(x86)%\pidgin\libplc4.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\microsoft.vc90.crt\msvcr90.dll to %ProgramFiles(x86)%\winamp\microsoft.vc90.crt\msvcr90.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\pxsdkpls.dll to %ProgramFiles(x86)%\winamp\pxsdkpls.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\skins\skins_readme.txt to %ProgramFiles(x86)%\steam\skins\skins_readme.txt.l4y2lnz44gbk_rsa
from %ProgramFiles%\gcasserv\gcasserv.exe to %ProgramFiles%\gcasserv\gcasserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\impcnt\impcnt.exe to %ProgramFiles%\impcnt\impcnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kavpfw\kavpfw.exe to %ProgramFiles%\kavpfw\kavpfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\gg\gg.exe to %ProgramFiles%\gg\gg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\licmgr\licmgr.exe to %ProgramFiles%\licmgr\licmgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inort\inort.exe to %ProgramFiles%\inort\inort.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\lotroclient\lotroclient.exe to %ProgramFiles%\lotroclient\lotroclient.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\installcavs\installcavs.exe to %ProgramFiles%\installcavs\installcavs.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\luconfig\luconfig.exe to %ProgramFiles%\luconfig\luconfig.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\iris\iris.exe to %ProgramFiles%\iris\iris.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fstlui\fstlui.exe to %ProgramFiles%\fstlui\fstlui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\k-meleon\k-meleon.exe to %ProgramFiles%\k-meleon\k-meleon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\imapp\imapp.exe to %ProgramFiles%\imapp\imapp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\webapprt\omni.ja to %ProgramFiles(x86)%\mozilla firefox\webapprt\omni.ja.l4y2lnz44gbk_rsa
from %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe to %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mcvsshld\mcvsshld.exe to %ProgramFiles%\mcvsshld\mcvsshld.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mcshield\mcshield.exe to %ProgramFiles%\mcshield\mcshield.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\miranda32\miranda32.exe to %ProgramFiles%\miranda32\miranda32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mp3theater\mp3theater.exe to %ProgramFiles%\mp3theater\mp3theater.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mpeng\mpeng.exe to %ProgramFiles%\mpeng\mpeng.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\msnmsgr\msnmsgr.exe to %ProgramFiles%\msnmsgr\msnmsgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\myagttry\myagttry.exe to %ProgramFiles%\myagttry\myagttry.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\magent\magent.exe to %ProgramFiles%\magent\magent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\microsoft office\office10\ucscribe.dll to %ProgramFiles(x86)%\microsoft office\office10\ucscribe.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsus\fsus.exe to %ProgramFiles%\fsus\fsus.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsstm\fsstm.exe to %ProgramFiles%\fsstm\fsstm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsavstrt\fsavstrt.exe to %ProgramFiles%\fsavstrt\fsavstrt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe to %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\googleupdate\googleupdate.exe to %ProgramFiles%\googleupdate\googleupdate.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\helpctr\helpctr.exe to %ProgramFiles%\helpctr\helpctr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\googledesktop\googledesktop.exe to %ProgramFiles%\googledesktop\googledesktop.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\iamapp\iamapp.exe to %ProgramFiles%\iamapp\iamapp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ieregfix\ieregfix.exe to %ProgramFiles%\ieregfix\ieregfix.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\gc\gc.exe to %ProgramFiles%\gc\gc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ih8run\ih8run.exe to %ProgramFiles%\ih8run\ih8run.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\hrres\hrres.exe to %ProgramFiles%\hrres\hrres.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\iron\iron.exe to %ProgramFiles%\iron\iron.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\issvc\issvc.exe to %ProgramFiles%\issvc\issvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\hipsdiag\hipsdiag.exe to %ProgramFiles%\hipsdiag\hipsdiag.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\iexplore\iexplore.exe to %ProgramFiles%\iexplore\iexplore.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ispnews\ispnews.exe to %ProgramFiles%\ispnews\ispnews.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\itunes\itunes.exe to %ProgramFiles%\itunes\itunes.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kavmm\kavmm.exe to %ProgramFiles%\kavmm\kavmm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\konnekt\konnekt.exe to %ProgramFiles%\konnekt\konnekt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\liveupdate\liveupdate.exe to %ProgramFiles%\liveupdate\liveupdate.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe to %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\guardnt\guardnt.exe to %ProgramFiles%\guardnt\guardnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\luna\luna.exe to %ProgramFiles%\luna\luna.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inocit\inocit.exe to %ProgramFiles%\inocit\inocit.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\installlsp\installlsp.exe to %ProgramFiles%\installlsp\installlsp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\soffice\soffice.exe to %ProgramFiles%\soffice\soffice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\zlib.dll to %ProgramFiles(x86)%\winamp\zlib.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\tataki.dll to %ProgramFiles(x86)%\winamp\tataki.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libavformat-56.dll to %ProgramFiles(x86)%\steam\libavformat-56.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libavresample-2.dll to %ProgramFiles(x86)%\steam\libavresample-2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libavutil-54.dll to %ProgramFiles(x86)%\steam\libavutil-54.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt to %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5 to %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libswscale-3.dll to %ProgramFiles(x86)%\steam\libswscale-3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libx264-142.dll.crypt to %ProgramFiles(x86)%\steam\libx264-142.dll.crypt.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libx264-142.dll.md5 to %ProgramFiles(x86)%\steam\libx264-142.dll.md5.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\sdl2.dll to %ProgramFiles(x86)%\steam\sdl2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\gameoverlayui.exe to %ProgramFiles(x86)%\steam\gameoverlayui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steam.dll to %ProgramFiles(x86)%\steam\steam.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\fpwin\fpwin.exe to %ProgramFiles%\fpwin\fpwin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsample\fsample.exe to %ProgramFiles%\fsample\fsample.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsauach\fsauach.exe to %ProgramFiles%\fsauach\fsauach.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsav32\fsav32.exe to %ProgramFiles%\fsav32\fsav32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsavgui\fsavgui.exe to %ProgramFiles%\fsavgui\fsavgui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsavwsch\fsavwsch.exe to %ProgramFiles%\fsavwsch\fsavwsch.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsbwsys\fsbwsys.exe to %ProgramFiles%\fsbwsys\fsbwsys.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsdbuh\fsdbuh.exe to %ProgramFiles%\fsdbuh\fsdbuh.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsdfwd\fsdfwd.exe to %ProgramFiles%\fsdfwd\fsdfwd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\icuuc.dll to %ProgramFiles(x86)%\steam\icuuc.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\libavcodec-56.dll to %ProgramFiles(x86)%\steam\libavcodec-56.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\icui18n.dll to %ProgramFiles(x86)%\steam\icui18n.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\gameoverlayrenderer64.dll to %ProgramFiles(x86)%\steam\gameoverlayrenderer64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsfwwscr\fsfwwscr.exe to %ProgramFiles%\fsfwwscr\fsfwwscr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mirc\versions.txt to %ProgramFiles(x86)%\mirc\versions.txt.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mirc\readme.txt to %ProgramFiles(x86)%\mirc\readme.txt.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mirc\uninstall.exe to %ProgramFiles(x86)%\mirc\uninstall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\server_tracking_data to %ProgramFiles(x86)%\opera\server_tracking_data.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\installer_prefs.json.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\launcher.exe to %ProgramFiles(x86)%\opera\launcher.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml to %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\resources.pri.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsdiagui\fsdiagui.exe to %ProgramFiles%\fsdiagui\fsdiagui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\opera\installation_status.xml to %ProgramFiles(x86)%\opera\installation_status.xml.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steam.exe.old to %ProgramFiles(x86)%\steam\steam.exe.old.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\winampa.exe to %ProgramFiles(x86)%\winamp\winampa.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\appoverlay64.dll to %ProgramFiles(x86)%\steam\appoverlay64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\crashhandler.dll to %ProgramFiles(x86)%\steam\crashhandler.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\crashhandler64.dll to %ProgramFiles(x86)%\steam\crashhandler64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\cserhelper.dll to %ProgramFiles(x86)%\steam\cserhelper.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\d3dcompiler_46.dll to %ProgramFiles(x86)%\steam\d3dcompiler_46.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\d3dcompiler_46_64.dll to %ProgramFiles(x86)%\steam\d3dcompiler_46_64.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\dbghelp.dll to %ProgramFiles(x86)%\steam\dbghelp.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\gameoverlayrenderer.dll to %ProgramFiles(x86)%\steam\gameoverlayrenderer.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\elevator.exe to %ProgramFiles(x86)%\winamp\elevator.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\elevatorps.dll to %ProgramFiles(x86)%\winamp\elevatorps.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\winh264.dll to %ProgramFiles(x86)%\steam\winh264.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsgk32\fsgk32.exe to %ProgramFiles%\fsgk32\fsgk32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ilaunchr\ilaunchr.exe to %ProgramFiles%\ilaunchr\ilaunchr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\imnotfy\imnotfy.exe to %ProgramFiles%\imnotfy\imnotfy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\incmail\incmail.exe to %ProgramFiles%\incmail\incmail.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inorpc\inorpc.exe to %ProgramFiles%\inorpc\inorpc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inotask\inotask.exe to %ProgramFiles%\inotask\inotask.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inphasenxd\inphasenxd.exe to %ProgramFiles%\inphasenxd\inphasenxd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\inouptng\inouptng.exe to %ProgramFiles%\inouptng\inouptng.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\installlicense\installlicense.exe to %ProgramFiles%\installlicense\installlicense.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\instlsp\instlsp.exe to %ProgramFiles%\instlsp\instlsp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\qip 2012\unins000.dat to %ProgramFiles(x86)%\qip 2012\unins000.dat.l4y2lnz44gbk_rsa
from %ProgramFiles%\ih8\ih8.exe to %ProgramFiles%\ih8\ih8.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\appoverlay.dll to %ProgramFiles(x86)%\steam\appoverlay.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\ieuser\ieuser.exe to %ProgramFiles%\ieuser\ieuser.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\isafe\isafe.exe to %ProgramFiles%\isafe\isafe.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\launcher\launcher.exe to %ProgramFiles%\launcher\launcher.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kavstart\kavstart.exe to %ProgramFiles%\kavstart\kavstart.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ispwdsvc\ispwdsvc.exe to %ProgramFiles%\ispwdsvc\ispwdsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\logwatnt\logwatnt.exe to %ProgramFiles%\logwatnt\logwatnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\livesrv\livesrv.exe to %ProgramFiles%\livesrv\livesrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\accessiblemarshal.dll to %ProgramFiles(x86)%\mozilla firefox\accessiblemarshal.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\isuac\isuac.exe to %ProgramFiles%\isuac\isuac.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\lpfw\lpfw.exe to %ProgramFiles%\lpfw\lpfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kav\kav.exe to %ProgramFiles%\kav\kav.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kavpf\kavpf.exe to %ProgramFiles%\kavpf\kavpf.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\burnlib.dll to %ProgramFiles(x86)%\winamp\burnlib.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\iamserv\iamserv.exe to %ProgramFiles%\iamserv\iamserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ge\ge.exe to %ProgramFiles%\ge\ge.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fshotfix\fshotfix.exe to %ProgramFiles%\fshotfix\fshotfix.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsihs\fsihs.exe to %ProgramFiles%\fsihs\fsihs.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsm32\fsm32.exe to %ProgramFiles%\fsm32\fsm32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsmb32\fsmb32.exe to %ProgramFiles%\fsmb32\fsmb32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fspex\fspex.exe to %ProgramFiles%\fspex\fspex.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fssf\fssf.exe to %ProgramFiles%\fssf\fssf.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fssm32\fssm32.exe to %ProgramFiles%\fssm32\fssm32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fssw\fssw.exe to %ProgramFiles%\fssw\fssw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsuninst\fsuninst.exe to %ProgramFiles%\fsuninst\fsuninst.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\icqlite\icqlite.exe to %ProgramFiles%\icqlite\icqlite.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fsguidll\fsguidll.exe to %ProgramFiles%\fsguidll\fsguidll.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fshdll32\fshdll32.exe to %ProgramFiles%\fshdll32\fshdll32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe to %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\gnotify\gnotify.exe to %ProgramFiles%\gnotify\gnotify.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\googletalk\googletalk.exe to %ProgramFiles%\googletalk\googletalk.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\guardgni\guardgni.exe to %ProgramFiles%\guardgni\guardgni.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\gw\gw.exe to %ProgramFiles%\gw\gw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\helper\helper.exe to %ProgramFiles%\helper\helper.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\hregmon\hregmon.exe to %ProgramFiles%\hregmon\hregmon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\hsockpe\hsockpe.exe to %ProgramFiles%\hsockpe\hsockpe.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\httplook\httplook.exe to %ProgramFiles%\httplook\httplook.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\gcasdtserv\gcasdtserv.exe to %ProgramFiles%\gcasdtserv\gcasdtserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ftpte\ftpte.exe to %ProgramFiles%\ftpte\ftpte.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\steam\steam.exe to %ProgramFiles(x86)%\steam\steam.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\winamp.exe to %ProgramFiles(x86)%\winamp\winamp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fpscan\fpscan.exe to %ProgramFiles%\fpscan\fpscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\lucheck\lucheck.exe to %ProgramFiles%\lucheck\lucheck.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mirc\mirc.exe to %ProgramFiles(x86)%\mirc\mirc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mirc\mirc.chm to %ProgramFiles(x86)%\mirc\mirc.chm.l4y2lnz44gbk_rsa
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\kavsvc\kavsvc.exe to %ProgramFiles%\kavsvc\kavsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fdmwi\fdmwi.exe to %ProgramFiles%\fdmwi\fdmwi.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firebird\firebird.exe to %ProgramFiles%\firebird\firebird.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\qip 2012\qip.exe to %ProgramFiles(x86)%\qip 2012\qip.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\foxit\foxit to %ProgramFiles%\foxit\foxit.l4y2lnz44gbk_rsa
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fch32\fch32.exe to %ProgramFiles%\fch32\fch32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fpavupdm\fpavupdm.exe to %ProgramFiles%\fpavupdm\fpavupdm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\flashgot\flashgot.exe to %ProgramFiles%\flashgot\flashgot.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\firetray\firetray.exe to %ProgramFiles%\firetray\firetray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\chrome.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\icudt52.dll to %ProgramFiles(x86)%\mozilla firefox\icudt52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\uninstwa.exe to %ProgramFiles(x86)%\winamp\uninstwa.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\malwareremoval\malwareremoval.exe to %ProgramFiles%\malwareremoval\malwareremoval.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\skype\skype.exe to %ProgramFiles%\skype\skype.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\smartftp\smartftp.exe to %ProgramFiles%\smartftp\smartftp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\smc\smc.exe to %ProgramFiles%\smc\smc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\so3d\so3d.exe to %ProgramFiles%\so3d\so3d.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\spamcfg\spamcfg.exe to %ProgramFiles%\spamcfg\spamcfg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\spider\spider.exe to %ProgramFiles%\spider\spider.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\spidernt\spidernt.exe to %ProgramFiles%\spidernt\spidernt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sporder\sporder.exe to %ProgramFiles%\sporder\sporder.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sro_client\sro_client.exe to %ProgramFiles%\sro_client\sro_client.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sdraw\sdraw.exe to %ProgramFiles%\sdraw\sdraw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\stopsignav\stopsignav.exe to %ProgramFiles%\stopsignav\stopsignav.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\streetsolkshim\streetsolkshim.exe to %ProgramFiles%\streetsolkshim\streetsolkshim.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\swagent\swagent.exe to %ProgramFiles%\swagent\swagent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\swdsvc\swdsvc.exe to %ProgramFiles%\swdsvc\swdsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\swriter\swriter.exe to %ProgramFiles%\swriter\swriter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\symlcsvc\symlcsvc.exe to %ProgramFiles%\symlcsvc\symlcsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\symsport\symsport.exe to %ProgramFiles%\symsport\symsport.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sysinfo\sysinfo.exe to %ProgramFiles%\sysinfo\sysinfo.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tca\tca.exe to %ProgramFiles%\tca\tca.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tgsvcstp\tgsvcstp.exe to %ProgramFiles%\tgsvcstp\tgsvcstp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sfagent\sfagent.exe to %ProgramFiles%\sfagent\sfagent.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\simpress\simpress.exe to %ProgramFiles%\simpress\simpress.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\seamonkey\seamonkey.exe to %ProgramFiles%\seamonkey\seamonkey.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sdinvoker\sdinvoker.exe to %ProgramFiles%\sdinvoker\sdinvoker.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tmas\tmas.exe to %ProgramFiles%\tmas\tmas.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\qklez\qklez.exe to %ProgramFiles%\qklez\qklez.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\quaranti\quaranti.exe to %ProgramFiles%\quaranti\quaranti.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ragexe\ragexe.exe to %ProgramFiles%\ragexe\ragexe.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rapget\rapget.exe to %ProgramFiles%\rapget\rapget.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ravmon\ravmon.exe to %ProgramFiles%\ravmon\ravmon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rcimlby\rcimlby.exe to %ProgramFiles%\rcimlby\rcimlby.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\register\register.exe to %ProgramFiles%\register\register.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\qhwscsvc\qhwscsvc.exe to %ProgramFiles%\qhwscsvc\qhwscsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\thgnard\thgnard.exe to %ProgramFiles%\thgnard\thgnard.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\libsndfile.dll to %ProgramFiles(x86)%\winamp\libsndfile.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\submitfiles\submitfiles.exe to %ProgramFiles%\submitfiles\submitfiles.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\remover\remover.exe to %ProgramFiles%\remover\remover.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\runsetup\runsetup.exe to %ProgramFiles%\runsetup\runsetup.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sarcli\sarcli.exe to %ProgramFiles%\sarcli\sarcli.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\savadminservice\savadminservice.exe to %ProgramFiles%\savadminservice\savadminservice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\savprogress\savprogress.exe to %ProgramFiles%\savprogress\savprogress.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sbase\sbase.exe to %ProgramFiles%\sbase\sbase.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\scanner\scanner.exe to %ProgramFiles%\scanner\scanner.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\sched\sched.exe to %ProgramFiles%\sched\sched.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\scanningprocess\scanningprocess.exe to %ProgramFiles%\scanningprocess\scanningprocess.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rfwmain\rfwmain.exe to %ProgramFiles%\rfwmain\rfwmain.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rescue\rescue.exe to %ProgramFiles%\rescue\rescue.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\rtvscan\rtvscan.exe to %ProgramFiles%\rtvscan\rtvscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\luinit\luinit.exe to %ProgramFiles%\luinit\luinit.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\tmntsrv\tmntsrv.exe to %ProgramFiles%\tmntsrv\tmntsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\winaw32\winaw32.exe to %ProgramFiles%\winaw32\winaw32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wincmd32\wincmd32.exe to %ProgramFiles%\wincmd32\wincmd32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\winmail\winmail.exe to %ProgramFiles%\winmail\winmail.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\winss\winss.exe to %ProgramFiles%\winss\winss.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\windump\windump.exe to %ProgramFiles%\windump\windump.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wlmail\wlmail.exe to %ProgramFiles%\wlmail\wlmail.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wradmin\wradmin.exe to %ProgramFiles%\wradmin\wradmin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wish\wish.exe to %ProgramFiles%\wish\wish.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\windowlist\windowlist.exe to %ProgramFiles%\windowlist\windowlist.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\woool\woool.exe to %ProgramFiles%\woool\woool.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\webscanx\webscanx.exe to %ProgramFiles%\webscanx\webscanx.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\updater.ini to %ProgramFiles(x86)%\mozilla firefox\updater.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\webmoney\webmoney.exe to %ProgramFiles%\webmoney\webmoney.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\install.ini to %ProgramFiles(x86)%\winamp\install.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\jnetlib.dll to %ProgramFiles(x86)%\winamp\jnetlib.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\libflac.dll to %ProgramFiles(x86)%\winamp\libflac.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\libmp4v2.dll to %ProgramFiles(x86)%\winamp\libmp4v2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\nde.dll to %ProgramFiles(x86)%\winamp\nde.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\nsutil.dll to %ProgramFiles(x86)%\winamp\nsutil.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\nxlite.dll to %ProgramFiles(x86)%\winamp\nxlite.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\paths.ini to %ProgramFiles(x86)%\winamp\paths.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\pconfig.dcf to %ProgramFiles(x86)%\winamp\pconfig.dcf.l4y2lnz44gbk_rsa
from %ProgramFiles%\writespid\writespid.exe to %ProgramFiles%\writespid\writespid.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wsftpgui\wsftpgui.exe to %ProgramFiles%\wsftpgui\wsftpgui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\netxray\netxray.exe to %ProgramFiles%\netxray\netxray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vsserv\vsserv.exe to %ProgramFiles%\vsserv\vsserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vba32ecm\vba32ecm.exe to %ProgramFiles%\vba32ecm\vba32ecm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\trojanguarder\trojanguarder.exe to %ProgramFiles%\trojanguarder\trojanguarder.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\trtddptr\trtddptr.exe to %ProgramFiles%\trtddptr\trtddptr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\uiscan\uiscan.exe to %ProgramFiles%\uiscan\uiscan.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\uninstallcavs\uninstallcavs.exe to %ProgramFiles%\uninstallcavs\uninstallcavs.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\uninstalllsp\uninstalllsp.exe to %ProgramFiles%\uninstalllsp\uninstalllsp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\unopkg\unopkg.exe to %ProgramFiles%\unopkg\unopkg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\up2date\up2date.exe to %ProgramFiles%\up2date\up2date.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\updaterui\updaterui.exe to %ProgramFiles%\updaterui\updaterui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\upgrepl\upgrepl.exe to %ProgramFiles%\upgrepl\upgrepl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\wclose\wclose.exe to %ProgramFiles%\wclose\wclose.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\totalcmd\totalcmd.exe to %ProgramFiles%\totalcmd\totalcmd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\traymon\traymon.exe to %ProgramFiles%\traymon\traymon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vba32ldr\vba32ldr.exe to %ProgramFiles%\vba32ldr\vba32ldr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vbsntw\vbsntw.exe to %ProgramFiles%\vbsntw\vbsntw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vcrmon\vcrmon.exe to %ProgramFiles%\vcrmon\vcrmon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\viritexp\viritexp.exe to %ProgramFiles%\viritexp\viritexp.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\viruskeeper\viruskeeper.exe to %ProgramFiles%\viruskeeper\viruskeeper.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vistaux\vistaux.exe to %ProgramFiles%\vistaux\vistaux.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\visthupd\visthupd.exe to %ProgramFiles%\visthupd\visthupd.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vrmonsvc\vrmonsvc.exe to %ProgramFiles%\vrmonsvc\vrmonsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\vshwin32\vshwin32.exe to %ProgramFiles%\vshwin32\vshwin32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\usdownloader\usdownloader.exe to %ProgramFiles%\usdownloader\usdownloader.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\upsobmaker\upsobmaker.exe to %ProgramFiles%\upsobmaker\upsobmaker.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\softokn3.chk to %ProgramFiles(x86)%\mozilla firefox\softokn3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\install.log to %ProgramFiles(x86)%\mozilla firefox\install.log.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\updater.exe to %ProgramFiles(x86)%\mozilla firefox\updater.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\oasrv\oasrv.exe to %ProgramFiles%\oasrv\oasrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ofcpfwsvc\ofcpfwsvc.exe to %ProgramFiles%\ofcpfwsvc\ofcpfwsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\oladdin\oladdin.exe to %ProgramFiles%\oladdin\oladdin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\onaccessinstaller\onaccessinstaller.exe to %ProgramFiles%\onaccessinstaller\onaccessinstaller.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\opera\opera.exe to %ProgramFiles%\opera\opera.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\outlook\outlook.exe to %ProgramFiles%\outlook\outlook.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\partin\partin.exe to %ProgramFiles%\partin\partin.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\partinfo\partinfo.exe to %ProgramFiles%\partinfo\partinfo.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ntxconfig\ntxconfig.exe to %ProgramFiles%\ntxconfig\ntxconfig.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\msn6\msn6.exe to %ProgramFiles%\msn6\msn6.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nvcut\nvcut.exe to %ProgramFiles%\nvcut\nvcut.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavfires\pavfires.exe to %ProgramFiles%\pavfires\pavfires.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pccntmon\pccntmon.exe to %ProgramFiles%\pccntmon\pccntmon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pcctlcom\pcctlcom.exe to %ProgramFiles%\pcctlcom\pcctlcom.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pertsk\pertsk.exe to %ProgramFiles%\pertsk\pertsk.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pm\pm.exe to %ProgramFiles%\pm\pm.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pmagic\pmagic.exe to %ProgramFiles%\pmagic\pmagic.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pmagicbt\pmagicbt.exe to %ProgramFiles%\pmagicbt\pmagicbt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\polutil\polutil.exe to %ProgramFiles%\polutil\polutil.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ppfw\ppfw.exe to %ProgramFiles%\ppfw\ppfw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavkre\pavkre.exe to %ProgramFiles%\pavkre\pavkre.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavproxy\pavproxy.exe to %ProgramFiles%\pavproxy\pavproxy.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pavsrv51\pavsrv51.exe to %ProgramFiles%\pavsrv51\pavsrv51.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\luupdate\luupdate.exe to %ProgramFiles%\luupdate\luupdate.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pqbw\pqbw.exe to %ProgramFiles%\pqbw\pqbw.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\npfmsg\npfmsg.exe to %ProgramFiles%\npfmsg\npfmsg.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mcregwiz\mcregwiz.exe to %ProgramFiles%\mcregwiz\mcregwiz.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mcupdmgr\mcupdmgr.exe to %ProgramFiles%\mcupdmgr\mcupdmgr.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\memstring\memstring.exe to %ProgramFiles%\memstring\memstring.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mir3game\mir3game.exe to %ProgramFiles%\mir3game\mir3game.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\miro\miro.exe to %ProgramFiles%\miro\miro.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\monsysnt\monsysnt.exe to %ProgramFiles%\monsysnt\monsysnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mp3toys\mp3toys.exe to %ProgramFiles%\mp3toys\mp3toys.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mp3tray\mp3tray.exe to %ProgramFiles%\mp3tray\mp3tray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mpftray\mpftray.exe to %ProgramFiles%\mpftray\mpftray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nssserv\nssserv.exe to %ProgramFiles%\nssserv\nssserv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\ntoskrnl\ntoskrnl.exe to %ProgramFiles%\ntoskrnl\ntoskrnl.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\msimn\msimn.exe to %ProgramFiles%\msimn\msimn.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\myagtsvc\myagtsvc.exe to %ProgramFiles%\myagtsvc\myagtsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\navapsvc\navapsvc.exe to %ProgramFiles%\navapsvc\navapsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\navstub\navstub.exe to %ProgramFiles%\navstub\navstub.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\navwnt\navwnt.exe to %ProgramFiles%\navwnt\navwnt.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\neowatchtray\neowatchtray.exe to %ProgramFiles%\neowatchtray\neowatchtray.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nisoptui\nisoptui.exe to %ProgramFiles%\nisoptui\nisoptui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nod32\nod32.exe to %ProgramFiles%\nod32\nod32.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\nod32kui\nod32kui.exe to %ProgramFiles%\nod32kui\nod32kui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\notstart\notstart.exe to %ProgramFiles%\notstart\notstart.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\maxthon\maxthon.exe to %ProgramFiles%\maxthon\maxthon.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\mva\mva.exe to %ProgramFiles%\mva\mva.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\winamp\whatsnew.txt to %ProgramFiles(x86)%\winamp\whatsnew.txt.l4y2lnz44gbk_rsa
from %ProgramFiles%\pqpe9x\pqpe9x.exe to %ProgramFiles%\pqpe9x\pqpe9x.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\privatebrowser\privatebrowser.exe to %ProgramFiles%\privatebrowser\privatebrowser.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\breakpadinjector.dll to %ProgramFiles(x86)%\mozilla firefox\breakpadinjector.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\crashreporter.exe to %ProgramFiles(x86)%\mozilla firefox\crashreporter.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\crashreporter.ini to %ProgramFiles(x86)%\mozilla firefox\crashreporter.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\d3dcompiler_43.dll to %ProgramFiles(x86)%\mozilla firefox\d3dcompiler_43.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\d3dcompiler_47.dll to %ProgramFiles(x86)%\mozilla firefox\d3dcompiler_47.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\libglesv2.dll to %ProgramFiles(x86)%\mozilla firefox\libglesv2.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\maintenanceservice.exe to %ProgramFiles(x86)%\mozilla firefox\maintenanceservice.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\maintenanceservice_installer.exe to %ProgramFiles(x86)%\mozilla firefox\maintenanceservice_installer.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\plugin-container.exe to %ProgramFiles(x86)%\mozilla firefox\plugin-container.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\preconfig\preconfig.exe to %ProgramFiles%\preconfig\preconfig.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\application.ini to %ProgramFiles(x86)%\mozilla firefox\application.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\webapp-uninstaller.exe to %ProgramFiles(x86)%\mozilla firefox\webapp-uninstaller.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\webapprt-stub.exe to %ProgramFiles(x86)%\mozilla firefox\webapprt-stub.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\wow_helper.exe to %ProgramFiles(x86)%\mozilla firefox\wow_helper.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\precomplete to %ProgramFiles(x86)%\mozilla firefox\precomplete.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\dependentlibs.list to %ProgramFiles(x86)%\mozilla firefox\dependentlibs.list.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\firefox.exe to %ProgramFiles(x86)%\mozilla firefox\firefox.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\freebl3.chk to %ProgramFiles(x86)%\mozilla firefox\freebl3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\libegl.dll to %ProgramFiles(x86)%\mozilla firefox\libegl.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\nssdbm3.chk to %ProgramFiles(x86)%\mozilla firefox\nssdbm3.chk.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\platform.ini to %ProgramFiles(x86)%\mozilla firefox\platform.ini.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\plugin-hang-ui.exe to %ProgramFiles(x86)%\mozilla firefox\plugin-hang-ui.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\update-settings.ini to %ProgramFiles(x86)%\mozilla firefox\update-settings.ini.l4y2lnz44gbk_rsa
from %ProgramFiles%\prevsrv\prevsrv.exe to %ProgramFiles%\prevsrv\prevsrv.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\removed-files to %ProgramFiles(x86)%\mozilla firefox\removed-files.l4y2lnz44gbk_rsa
from %ProgramFiles%\nvcod\nvcod.exe to %ProgramFiles%\nvcod\nvcod.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\protect\protect.exe to %ProgramFiles%\protect\protect.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\psctrls\psctrls.exe to %ProgramFiles%\psctrls\psctrls.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\psimsvc\psimsvc.exe to %ProgramFiles%\psimsvc\psimsvc.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxconsole\pxconsole.exe to %ProgramFiles%\pxconsole\pxconsole.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxl1\pxl1.exe to %ProgramFiles%\pxl1\pxl1.exe.l4y2lnz44gbk_rsa
from %ProgramFiles%\pxsupport\pxsupport.exe to %ProgramFiles%\pxsupport\pxsupport.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\freebl3.dll to %ProgramFiles(x86)%\mozilla firefox\freebl3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\qip 2012\unins000.msg to %ProgramFiles(x86)%\qip 2012\unins000.msg.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\qip 2012\unins000.exe to %ProgramFiles(x86)%\qip 2012\unins000.exe.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\sandboxbroker.dll to %ProgramFiles(x86)%\mozilla firefox\sandboxbroker.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\xul.dll to %ProgramFiles(x86)%\mozilla firefox\xul.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\softokn3.dll to %ProgramFiles(x86)%\mozilla firefox\softokn3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\icuuc52.dll to %ProgramFiles(x86)%\mozilla firefox\icuuc52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\mozalloc.dll to %ProgramFiles(x86)%\mozilla firefox\mozalloc.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\mozglue.dll to %ProgramFiles(x86)%\mozilla firefox\mozglue.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\msvcp120.dll to %ProgramFiles(x86)%\mozilla firefox\msvcp120.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\msvcr120.dll to %ProgramFiles(x86)%\mozilla firefox\msvcr120.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\nss3.dll to %ProgramFiles(x86)%\mozilla firefox\nss3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\nssckbi.dll to %ProgramFiles(x86)%\mozilla firefox\nssckbi.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\nssdbm3.dll to %ProgramFiles(x86)%\mozilla firefox\nssdbm3.dll.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\omni.ja to %ProgramFiles(x86)%\mozilla firefox\omni.ja.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\voucher.bin to %ProgramFiles(x86)%\mozilla firefox\voucher.bin.l4y2lnz44gbk_rsa
from %ProgramFiles(x86)%\mozilla firefox\icuin52.dll to %ProgramFiles(x86)%\mozilla firefox\icuin52.dll.l4y2lnz44gbk_rsa
from %ProgramFiles%\spiderui\spiderui.exe to %ProgramFiles%\spiderui\spiderui.exe.l4y2lnz44gbk_rsa

Substitutes the following executable files

%ProgramFiles(x86)%\Mozilla Firefox\freebl3.dll
%ProgramFiles(x86)%\Mozilla Firefox\icudt52.dll
%ProgramFiles(x86)%\Mozilla Firefox\icuin52.dll
%ProgramFiles(x86)%\Mozilla Firefox\icuuc52.dll
%ProgramFiles(x86)%\Mozilla Firefox\mozalloc.dll
%ProgramFiles(x86)%\Mozilla Firefox\mozglue.dll
%ProgramFiles(x86)%\Mozilla Firefox\msvcp120.dll
%ProgramFiles(x86)%\Mozilla Firefox\msvcr120.dll
%ProgramFiles(x86)%\Mozilla Firefox\nss3.dll
%ProgramFiles(x86)%\Mozilla Firefox\nssckbi.dll
%ProgramFiles(x86)%\Mozilla Firefox\nssdbm3.dll
%ProgramFiles(x86)%\Mozilla Firefox\sandboxbroker.dll
%ProgramFiles(x86)%\Mozilla Firefox\softokn3.dll

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /c ""%WINDIR%\delog.bat" "' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c ""%WINDIR%\delog.bat" "
'%WINDIR%\syswow64\wevtutil.exe' cl "MediaFoundationPlatform"
'%WINDIR%\syswow64\wevtutil.exe' cl "MediaFoundationPipeline"
'%WINDIR%\syswow64\wevtutil.exe' cl "MediaFoundationPerformance"
'%WINDIR%\syswow64\wevtutil.exe' cl "MediaFoundationDeviceProxy"
'%WINDIR%\syswow64\wevtutil.exe' cl "Media Center"
'%WINDIR%\syswow64\wevtutil.exe' cl "MF_MediaFoundationDeviceProxy"
'%WINDIR%\syswow64\wevtutil.exe' cl "Key Management Service"
'%WINDIR%\syswow64\wevtutil.exe' cl "Internet Explorer"
'%WINDIR%\syswow64\wevtutil.exe' cl "HardwareEvents"
'%WINDIR%\syswow64\wevtutil.exe' cl "ForwardedEvents"
'%WINDIR%\syswow64\wevtutil.exe' cl "EndpointMapper"
'%WINDIR%\syswow64\wevtutil.exe' cl "DirectShowPluginControl"
'%WINDIR%\syswow64\wevtutil.exe' cl "DirectShowFilterGraph"
'%WINDIR%\syswow64\wevtutil.exe' cl "DebugChannel"
'%WINDIR%\syswow64\wevtutil.exe' cl "Application"
'%WINDIR%\syswow64\wevtutil.exe' cl "Analytic"
'%WINDIR%\syswow64\wevtutil.exe' el
'%WINDIR%\syswow64\cmd.exe' /c wevtutil.exe el
'%WINDIR%\syswow64\cmd.exe' /c bcdedit
'%WINDIR%\syswow64\wevtutil.exe' cl "Microsoft-IE/Diagnostic"
'%WINDIR%\syswow64\wevtutil.exe' cl "Microsoft-IEFRAME/Diagnostic"

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial