Trojan.Encoder.32483

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\pmd.cer
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\samieee_obiee_presentation.pptx
<Drive name for removable media>:\roozenedowebinar.pptx

Modifies file system

Creates the following files

%TEMP%\f6tc3lmg.0.cs
%TEMP%\f6tc3lmg.cmdline
%TEMP%\f6tc3lmg.out
%TEMP%\cscc551.tmp
%TEMP%\resc562.tmp
%TEMP%\f6tc3lmg.dll
%TEMP%\lgrqcfs1.0.cs
%TEMP%\lgrqcfs1.cmdline
%TEMP%\lgrqcfs1.out
%TEMP%\cscc84d.tmp
%TEMP%\resc85e.tmp
%TEMP%\lgrqcfs1.dll

Deletes the following files

%TEMP%\resc562.tmp
%TEMP%\cscc551.tmp
%TEMP%\f6tc3lmg.out
%TEMP%\f6tc3lmg.pdb
%TEMP%\f6tc3lmg.dll
%TEMP%\f6tc3lmg.cmdline
%TEMP%\f6tc3lmg.0.cs
%TEMP%\resc85e.tmp
%TEMP%\cscc84d.tmp
%TEMP%\lgrqcfs1.dll
%TEMP%\lgrqcfs1.cmdline
%TEMP%\lgrqcfs1.0.cs
%TEMP%\lgrqcfs1.out
%TEMP%\lgrqcfs1.pdb

Moves the following files

from %ProgramFiles(x86)%\mirc\mirc.chm to %ProgramFiles(x86)%\mirc\mirc.chm.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_swedish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_swedish.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechat_voicelevels.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechat_voicelevels.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_spanish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_spanish.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechat_audiolevels.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechat_audiolevels.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_norwegian.tga to %ProgramFiles(x86)%\steam\graphics\new_button_norwegian.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechatactivity.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voicechatactivity.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_italian.tga to %ProgramFiles(x86)%\steam\graphics\new_button_italian.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_swedish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_swedish.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_spanish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_spanish.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_norwegian.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_norwegian.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_italian.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_italian.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_list_item_panel_labels_mask.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_list_item_panel_labels_mask.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_german.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_german.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_indicator_voicehold.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_indicator_voicehold.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_french.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_french.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voiceholdactivity.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_voiceholdactivity.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_close_def.tga to %ProgramFiles(x86)%\steam\graphics\osx_close_def.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_close_down.tga to %ProgramFiles(x86)%\steam\graphics\osx_close_down.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_close_hov.tga to %ProgramFiles(x86)%\steam\graphics\osx_close_hov.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radseldis.tga to %ProgramFiles(x86)%\steam\graphics\radseldis.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_win_dis.tga to %ProgramFiles(x86)%\steam\graphics\osx_win_dis.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_min_hov.tga to %ProgramFiles(x86)%\steam\graphics\osx_min_hov.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_hover_danish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_hover_danish.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_min_down.tga to %ProgramFiles(x86)%\steam\graphics\osx_min_down.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radseldown.tga to %ProgramFiles(x86)%\steam\graphics\radseldown.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_max_hov.tga to %ProgramFiles(x86)%\steam\graphics\osx_max_hov.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_max_down.tga to %ProgramFiles(x86)%\steam\graphics\osx_max_down.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_max_def.tga to %ProgramFiles(x86)%\steam\graphics\osx_max_def.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackfwd_default.tga to %ProgramFiles(x86)%\steam\graphics\music_trackfwd_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\osx_min_def.tga to %ProgramFiles(x86)%\steam\graphics\osx_min_def.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_hover.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_disabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.dbcd09
from %ProgramFiles(x86)%\steam\servers\vacbannedconnrefuseddialog.res to %ProgramFiles(x86)%\steam\servers\vacbannedconnrefuseddialog.res.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_default.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_default.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackfwd_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_trackfwd_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\expand.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\expand.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackfwd_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_trackfwd_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_mute_default.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_mute_default.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_german.tga to %ProgramFiles(x86)%\steam\graphics\new_button_german.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_danish.tga to %ProgramFiles(x86)%\steam\graphics\new_button_danish.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button.tga to %ProgramFiles(x86)%\steam\graphics\new_button.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_chatactivity.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\friends\friends_chatactivity.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\new_button_french.tga to %ProgramFiles(x86)%\steam\graphics\new_button_french.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\nav2_highlight_selected.tga to %ProgramFiles(x86)%\steam\graphics\nav2_highlight_selected.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_mute_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_mute_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_volume_mute_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_volume_mute_disabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\nav_highlight_selected.tga to %ProgramFiles(x86)%\steam\graphics\nav_highlight_selected.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampup_4.tga to %ProgramFiles(x86)%\steam\graphics\rampup_4.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampup_3.tga to %ProgramFiles(x86)%\steam\graphics\rampup_3.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampup_2.tga to %ProgramFiles(x86)%\steam\graphics\rampup_2.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampup_1.tga to %ProgramFiles(x86)%\steam\graphics\rampup_1.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\resizer.tga to %ProgramFiles(x86)%\steam\graphics\resizer.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampdown_4.tga to %ProgramFiles(x86)%\steam\graphics\rampdown_4.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampdown_3.tga to %ProgramFiles(x86)%\steam\graphics\rampdown_3.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.dbcd09
from %ProgramFiles%\firefox\components\accessibility_msaa.xpt to %ProgramFiles%\firefox\components\accessibility_msaa.xpt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrtop.tga to %ProgramFiles(x86)%\steam\graphics\scrtop.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrright.tga to %ProgramFiles(x86)%\steam\graphics\scrright.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.dbcd09
from %ProgramFiles%\firefox\components\accessibility.xpt to %ProgramFiles%\firefox\components\accessibility.xpt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrends.tga to %ProgramFiles(x86)%\steam\graphics\scrends.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrbottomright.tga to %ProgramFiles(x86)%\steam\graphics\scrbottomright.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrbottomleft.tga to %ProgramFiles(x86)%\steam\graphics\scrbottomleft.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrbottom.tga to %ProgramFiles(x86)%\steam\graphics\scrbottom.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\scrleft.tga to %ProgramFiles(x86)%\steam\graphics\scrleft.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\resizer_over.tga to %ProgramFiles(x86)%\steam\graphics\resizer_over.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radselfocus.tga to %ProgramFiles(x86)%\steam\graphics\radselfocus.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampdown_1.tga to %ProgramFiles(x86)%\steam\graphics\rampdown_1.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radunselstd.tga to %ProgramFiles(x86)%\steam\graphics\radunselstd.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radunselfocus.tga to %ProgramFiles(x86)%\steam\graphics\radunselfocus.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radunseldis.tga to %ProgramFiles(x86)%\steam\graphics\radunseldis.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\radselstd.tga to %ProgramFiles(x86)%\steam\graphics\radselstd.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\intro_movie.webm to %ProgramFiles(x86)%\steam\tenfoot\resource\images\intro_movie.webm.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.dbcd09
from %ProgramFiles(x86)%\steam\graphics\rampdown_2.tga to %ProgramFiles(x86)%\steam\graphics\rampdown_2.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackback_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_trackback_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber03.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber03.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_secure_deny.tga to %ProgramFiles(x86)%\steam\servers\icon_secure_deny.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber02.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber02.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_robotron_column.tga to %ProgramFiles(x86)%\steam\servers\icon_robotron_column.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber01.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber01.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_robotron.tga to %ProgramFiles(x86)%\steam\servers\icon_robotron.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_password_column.tga to %ProgramFiles(x86)%\steam\servers\icon_password_column.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_password.tga to %ProgramFiles(x86)%\steam\servers\icon_password.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\loop_8.tga to %ProgramFiles(x86)%\steam\graphics\loop_8.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_bots_column.tga to %ProgramFiles(x86)%\steam\servers\icon_bots_column.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\loop_7.tga to %ProgramFiles(x86)%\steam\graphics\loop_7.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\icon_bots.tga to %ProgramFiles(x86)%\steam\servers\icon_bots.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\loop_3.tga to %ProgramFiles(x86)%\steam\graphics\loop_3.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber05.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber05.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\abutton.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\abutton.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber06.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber06.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber07.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber07.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mnusepright.tga to %ProgramFiles(x86)%\steam\graphics\mnusepright.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mnusepleft.tga to %ProgramFiles(x86)%\steam\graphics\mnusepleft.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mnusepcenter.tga to %ProgramFiles(x86)%\steam\graphics\mnusepcenter.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mini_shrink_mouseover.tga to %ProgramFiles(x86)%\steam\graphics\mini_shrink_mouseover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mini_shrink.tga to %ProgramFiles(x86)%\steam\graphics\mini_shrink.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mini_expand_mouseover.tga to %ProgramFiles(x86)%\steam\graphics\mini_expand_mouseover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\mini_expand.tga to %ProgramFiles(x86)%\steam\graphics\mini_expand.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\game_ready.wav to %ProgramFiles(x86)%\steam\servers\game_ready.wav.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_background.tga to %ProgramFiles(x86)%\steam\graphics\music_background.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\bg_gradient_mask.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\bg_gradient_mask.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber11.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber11.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\betabutton4.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\betabutton4.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber10.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber10.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber09.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber09.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\internetgamespage.res to %ProgramFiles(x86)%\steam\servers\internetgamespage.res.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber08.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber08.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber12.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber12.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\droidsansthai-regular.ttf to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\droidsansthai-regular.ttf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobberinactive.tga to %ProgramFiles(x86)%\steam\graphics\minithrobberinactive.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\loop_1.tga to %ProgramFiles(x86)%\steam\graphics\loop_1.tga.dbcd09
from %ProgramFiles(x86)%\steam\thirdpartylegalnotices.css to %ProgramFiles(x86)%\steam\thirdpartylegalnotices.css.dbcd09
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt to %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt.dbcd09
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5 to %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5.dbcd09
from %ProgramFiles(x86)%\winamp\whatsnew.txt to %ProgramFiles(x86)%\winamp\whatsnew.txt.dbcd09
from %ProgramFiles(x86)%\winamp\pconfig.dcf to %ProgramFiles(x86)%\winamp\pconfig.dcf.dbcd09
from %ProgramFiles(x86)%\winamp\paths.ini to %ProgramFiles(x86)%\winamp\paths.ini.dbcd09
from %ProgramFiles(x86)%\winamp\install.ini to %ProgramFiles(x86)%\winamp\install.ini.dbcd09
from %ProgramFiles(x86)%\qip 2012\unins000.msg to %ProgramFiles(x86)%\qip 2012\unins000.msg.dbcd09
from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets.dbcd09
from %ProgramFiles(x86)%\opera\server_tracking_data to %ProgramFiles(x86)%\opera\server_tracking_data.dbcd09
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\resources.pri.dbcd09
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\installer_prefs.json.dbcd09
from %ProgramFiles(x86)%\mirc\versions.txt to %ProgramFiles(x86)%\mirc\versions.txt.dbcd09
from %ProgramFiles(x86)%\mirc\readme.txt to %ProgramFiles(x86)%\mirc\readme.txt.dbcd09
from %ProgramFiles(x86)%\mirc\ircintro.chm to %ProgramFiles(x86)%\mirc\ircintro.chm.dbcd09
from %ProgramFiles(x86)%\steam\libx264-142.dll.crypt to %ProgramFiles(x86)%\steam\libx264-142.dll.crypt.dbcd09
from %ProgramFiles(x86)%\steam\steam.exe.old to %ProgramFiles(x86)%\steam\steam.exe.old.dbcd09
from %ProgramFiles(x86)%\steam\graphics\inbox_notification_inactive.tga to %ProgramFiles(x86)%\steam\graphics\inbox_notification_inactive.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\inbox_notification_inactive_disabled.tga to %ProgramFiles(x86)%\steam\graphics\inbox_notification_inactive_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialogserverpassword.res to %ProgramFiles(x86)%\steam\servers\dialogserverpassword.res.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\default_keybinds.cfg to %ProgramFiles(x86)%\steam\tenfoot\resource\default_keybinds.cfg.dbcd09
from %ProgramFiles(x86)%\steam\graphics\logo7.tga to %ProgramFiles(x86)%\steam\graphics\logo7.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialogserverbrowser.res to %ProgramFiles(x86)%\steam\servers\dialogserverbrowser.res.dbcd09
from %ProgramFiles(x86)%\steam\graphics\logo6.tga to %ProgramFiles(x86)%\steam\graphics\logo6.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_singleplayer.res to %ProgramFiles(x86)%\steam\servers\dialoggameinfo_singleplayer.res.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\browser\webkit.css to %ProgramFiles(x86)%\steam\tenfoot\resource\browser\webkit.css.dbcd09
from %ProgramFiles(x86)%\steam\graphics\loop_2.tga to %ProgramFiles(x86)%\steam\graphics\loop_2.tga.dbcd09
from %ProgramFiles%\foxit\foxit to %ProgramFiles%\foxit\foxit.dbcd09
from %ProgramFiles(x86)%\steam\graphics\logo4.tga to %ProgramFiles(x86)%\steam\graphics\logo4.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_nonsteam.res to %ProgramFiles(x86)%\steam\servers\dialoggameinfo_nonsteam.res.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_autoretry.res to %ProgramFiles(x86)%\steam\servers\dialoggameinfo_autoretry.res.dbcd09
from %ProgramFiles(x86)%\steam\graphics\keybg.tga to %ProgramFiles(x86)%\steam\graphics\keybg.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\inbox_trade.tga to %ProgramFiles(x86)%\steam\graphics\inbox_trade.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\inbox_offlinemessage.tga to %ProgramFiles(x86)%\steam\graphics\inbox_offlinemessage.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo.res to %ProgramFiles(x86)%\steam\servers\dialoggameinfo.res.dbcd09
from %ProgramFiles(x86)%\steam\steamapps\libraryfolders.vdf to %ProgramFiles(x86)%\steam\steamapps\libraryfolders.vdf.dbcd09
from %ProgramFiles(x86)%\steam\libx264-142.dll.md5 to %ProgramFiles(x86)%\steam\libx264-142.dll.md5.dbcd09
from %ProgramFiles(x86)%\steam\graphics\minithrobber04.tga to %ProgramFiles(x86)%\steam\graphics\minithrobber04.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\favorites_closetab.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\favorites_closetab.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_shuffle_default.tga to %ProgramFiles(x86)%\steam\graphics\music_shuffle_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat_hover.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat_enabled_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat_enabled_hover.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat_enabled.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat_enabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat_default.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat1_enabled_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat1_enabled_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_shuffle_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_shuffle_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackback_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_trackback_disabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_trackback_default.tga to %ProgramFiles(x86)%\steam\graphics\music_trackback_default.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat1_enabled.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat1_enabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_shuffle_enabled_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_shuffle_enabled_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_shuffle_enabled.tga to %ProgramFiles(x86)%\steam\graphics\music_shuffle_enabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_shuffle_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_shuffle_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\reticle.webm to %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\reticle.webm.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_pause_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_pause_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\internetgamespage_filters.res to %ProgramFiles(x86)%\steam\servers\internetgamespage_filters.res.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\community\bg_commodity_mask.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\community\bg_commodity_mask.tga.dbcd09
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\dependentlibs.list.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_pause_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_pause_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_pause_default.tga to %ProgramFiles(x86)%\steam\graphics\music_pause_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_details_mask.tga to %ProgramFiles(x86)%\steam\graphics\music_details_mask.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_browse_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_browse_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_browse_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_browse_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_browse_default.tga to %ProgramFiles(x86)%\steam\graphics\music_browse_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\reticle_80_80.webm to %ProgramFiles(x86)%\steam\tenfoot\resource\images\browser\reticle_80_80.webm.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_placeholder_album.tga to %ProgramFiles(x86)%\steam\graphics\music_placeholder_album.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_player_bg.tga to %ProgramFiles(x86)%\steam\graphics\music_player_bg.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat1_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat1_disabled.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_repeat1_default.tga to %ProgramFiles(x86)%\steam\graphics\music_repeat1_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_player_placeholder_album.tga to %ProgramFiles(x86)%\steam\graphics\music_player_placeholder_album.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_play_hover.tga to %ProgramFiles(x86)%\steam\graphics\music_play_hover.tga.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_play_disabled.tga to %ProgramFiles(x86)%\steam\graphics\music_play_disabled.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.dbcd09
from %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt to %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_play_default.tga to %ProgramFiles(x86)%\steam\graphics\music_play_default.tga.dbcd09
from %ProgramFiles(x86)%\steam\graphics\music_player_placeholder_album_400.tga to %ProgramFiles(x86)%\steam\graphics\music_player_placeholder_album_400.tga.dbcd09
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.dbcd09
from %ProgramFiles%\firefox\greprefs.js to %ProgramFiles%\firefox\greprefs.js.dbcd09

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\f6tc3lmg.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC562.tmp" "%TEMP%\CSCC551.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\lgrqcfs1.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC85E.tmp" "%TEMP%\CSCC84D.tmp"' (with hidden window)

Executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\f6tc3lmg.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC562.tmp" "%TEMP%\CSCC551.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\lgrqcfs1.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESC85E.tmp" "%TEMP%\CSCC84D.tmp"

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial