Trojan.Siggen10.22579

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SOFTWARE\CLASSES\jarfile\shell\open\command] '' = '"%ProgramFiles(x86)%\Java\jre7\bin\javaw.exe" -jar "%1" %*'

Modifies file system

Creates the following files

%TEMP%\nsr99c0.tmp\uac.dll
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\makassar
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\manila
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\nicosia
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\novokuznetsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\novosibirsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\jakarta
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\omsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\pontianak
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\pyongyang
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\qatar
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\qyzylorda
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\rangoon
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kuching
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\oral
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\magadan
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\macau
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kuala_lumpur
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\krasnoyarsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\gaza
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\hebron
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\hong_kong
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\hovd
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\ho_chi_minh
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh87
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\irkutsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\dili
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\jayapura
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kabul
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kamchatka
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\karachi
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kathmandu
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\khandyga
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\dubai
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\kolkata
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\jerusalem
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\dushanbe
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh88
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\seoul
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\cape_verde
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\faroe
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\madeira
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\reykjavik
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\south_georgia
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\stanley
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\yerevan
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\adelaide
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\broken_hill
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\currie
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\darwin
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\eucla
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\hobart
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\lindeman
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\bermuda
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\canary
%ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\azores
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\yekaterinburg
%ProgramFiles(x86)%\java\jre7\lib\zi\america\whitehorse
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\shanghai
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\singapore
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\srednekolymsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\taipei
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\tashkent
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh89
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\samarkand
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\sakhalin
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\tbilisi
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\ulaanbaatar
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\urumqi
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\ust-nera
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\vladivostok
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\yakutsk
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\tehran
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\thimphu
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\tokyo
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\dhaka
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\damascus
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\colombo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\port-au-prince
%ProgramFiles(x86)%\java\jre7\lib\zi\america\porto_velho
%ProgramFiles(x86)%\java\jre7\lib\zi\america\port_of_spain
%ProgramFiles(x86)%\java\jre7\lib\zi\america\puerto_rico
%ProgramFiles(x86)%\java\jre7\lib\zi\america\rainy_river
%ProgramFiles(x86)%\java\jre7\lib\zi\america\rankin_inlet
%ProgramFiles(x86)%\java\jre7\lib\zi\america\sao_paulo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\recife
%ProgramFiles(x86)%\java\jre7\lib\zi\america\resolute
%ProgramFiles(x86)%\java\jre7\lib\zi\america\rio_branco
%ProgramFiles(x86)%\java\jre7\lib\zi\america\santarem
%ProgramFiles(x86)%\java\jre7\lib\zi\america\santa_isabel
%ProgramFiles(x86)%\java\jre7\lib\zi\america\santiago
%ProgramFiles(x86)%\java\jre7\lib\zi\america\pangnirtung
%ProgramFiles(x86)%\java\jre7\lib\zi\america\panama
%ProgramFiles(x86)%\java\jre7\lib\zi\america\phoenix
%ProgramFiles(x86)%\java\jre7\lib\zi\america\ojinaga
%ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\new_salem
%ProgramFiles(x86)%\java\jre7\lib\zi\america\menominee
%ProgramFiles(x86)%\java\jre7\lib\zi\america\metlakatla
%ProgramFiles(x86)%\java\jre7\lib\zi\america\mexico_city
%ProgramFiles(x86)%\java\jre7\lib\zi\america\miquelon
%ProgramFiles(x86)%\java\jre7\lib\zi\america\moncton
%ProgramFiles(x86)%\java\jre7\lib\zi\america\monterrey
%ProgramFiles(x86)%\java\jre7\lib\zi\america\santo_domingo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\montevideo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\regina
%ProgramFiles(x86)%\java\jre7\lib\zi\america\nassau
%ProgramFiles(x86)%\java\jre7\lib\zi\america\nipigon
%ProgramFiles(x86)%\java\jre7\lib\zi\america\nome
%ProgramFiles(x86)%\java\jre7\lib\zi\america\noronha
%ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\beulah
%ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\center
%ProgramFiles(x86)%\java\jre7\lib\zi\america\montreal
%ProgramFiles(x86)%\java\jre7\lib\zi\america\merida
%ProgramFiles(x86)%\java\jre7\lib\zi\america\new_york
%ProgramFiles(x86)%\java\jre7\lib\zi\america\paramaribo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\scoresbysund
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\troll
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\almaty
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\amman
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\anadyr
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\aqtau
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\aqtobe
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\syowa
%ProgramFiles(x86)%\java\jre7\lib\zi\america\sitka
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\vostok
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\ashgabat
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\beirut
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\bishkek
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\brunei
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\chita
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\choibalsan
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\baghdad
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\baku
%ProgramFiles(x86)%\java\jre7\lib\zi\asia\bangkok
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\brisbane
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\lord_howe
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\mawson
%ProgramFiles(x86)%\java\jre7\lib\zi\america\swift_current
%ProgramFiles(x86)%\java\jre7\lib\zi\america\tegucigalpa
%ProgramFiles(x86)%\java\jre7\lib\zi\america\thule
%ProgramFiles(x86)%\java\jre7\lib\zi\america\thunder_bay
%ProgramFiles(x86)%\java\jre7\lib\zi\america\tijuana
%ProgramFiles(x86)%\java\jre7\lib\zi\america\toronto
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\palmer
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\rothera
%ProgramFiles(x86)%\java\jre7\lib\zi\america\vancouver
%ProgramFiles(x86)%\java\jre7\lib\zi\america\yakutat
%ProgramFiles(x86)%\java\jre7\lib\zi\america\yellowknife
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\casey
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\davis
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\dumontdurville
%ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\macquarie
%ProgramFiles(x86)%\java\jre7\lib\zi\america\st_johns
%ProgramFiles(x86)%\java\jre7\lib\zi\america\winnipeg
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\istanbul
%WINDIR%\syswow64\javaw.exe
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\sydney
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\gambier
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\guadalcanal
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\guam
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\honolulu
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kiritimati
%ProgramFiles(x86)%\java\jre7\lib\zi\mst
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kosrae
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\majuro
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\marquesas
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\midway
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\nauru
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\niue
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\norfolk
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\fiji
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kwajalein
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\galapagos
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\funafuti
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\fakaofo
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\enderbury
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\kerguelen
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\mahe
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\maldives
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\mauritius
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\reunion
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\noumea
%ProgramFiles(x86)%\java\jre7\lib\zi\met
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\chagos
%ProgramFiles(x86)%\java\jre7\lib\zi\mst7mdt
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\auckland
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\bougainville
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\chatham
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\chuuk
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\easter
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\christmas
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\efate
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\apia
%ProgramFiles(x86)%\java\jre7\lib\zi\indian\cocos
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pago_pago
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\port_moresby
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\yst9
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\yst9ydt
%ProgramFiles(x86)%\java\jre7\lib\zi\wet
%ProgramFiles(x86)%\java\jre7\lib\zi\zoneinfomappings
%ProgramFiles(x86)%\java\jre7\release
%ProgramFiles(x86)%\java\jre7\lib\rt.jar
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\mst7
%ProgramFiles(x86)%\java\jre7\lib\charsets.jar
%ProgramFiles(x86)%\java\jre7\lib\javaws.jar
%ProgramFiles(x86)%\java\jre7\lib\plugin.jar
%ProgramFiles(x86)%\java\jre7\lib\jsse.jar
%ProgramFiles(x86)%\java\jre7\lib\ext\localedata.jar
%ProgramFiles(x86)%\java\jre7\lib\jfxrt.jar
%WINDIR%\syswow64\java.exe
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\pst8
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\pst8pdt
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\mst7mdt
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\hst10
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\melbourne
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\rarotonga
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\saipan
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tahiti
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tarawa
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tongatapu
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\palau
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pohnpei
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pitcairn
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\wake
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\ast4adt
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\cst6
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\cst6cdt
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\est5
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\est5edt
%ProgramFiles(x86)%\java\jre7\lib\zi\pacific\wallis
%ProgramFiles(x86)%\java\jre7\lib\zi\pst8pdt
%ProgramFiles(x86)%\java\jre7\lib\zi\systemv\ast4
%ProgramFiles(x86)%\java\jre7\lib\zi\hst
%ProgramFiles(x86)%\java\jre7\lib\zi\gmt
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\zurich
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-13
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-14
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-2
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-3
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-4
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-5
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\athens
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-6
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-8
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-9
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\uct
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\utc
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\amsterdam
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-10
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-1
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-12
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+9
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+8
%ProgramFiles(x86)%\java\jre7\lib\zi\cet
%ProgramFiles(x86)%\java\jre7\lib\zi\eet
%ProgramFiles(x86)%\java\jre7\lib\zi\est
%ProgramFiles(x86)%\java\jre7\lib\zi\est5edt
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+1
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\andorra
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+10
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-7
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+12
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+3
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+4
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+5
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+6
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+7
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+11
%ProgramFiles(x86)%\java\jre7\lib\zi\cst6cdt
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+2
%ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-11
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\belgrade
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\paris
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\riga
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\rome
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\samara
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\simferopol
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\sofia
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\oslo
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\berlin
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\prague
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\stockholm
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\vienna
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\vilnius
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\volgograd
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\warsaw
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\zaporozhye
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\tallinn
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\tirane
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\uzhgorod
%ProgramFiles(x86)%\java\jre7\lib\zi\america\mazatlan
%ProgramFiles(x86)%\java\jre7\lib\zi\australia\perth
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\minsk
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\bucharest
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\budapest
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\chisinau
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\copenhagen
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\dublin
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\gibraltar
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\monaco
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\moscow
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\helsinki
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\kiev
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\lisbon
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\london
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\luxembourg
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\madrid
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\malta
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\brussels
%ProgramFiles(x86)%\java\jre7\lib\zi\europe\kaliningrad
%ProgramFiles(x86)%\java\jre7\lib\deploy.jar
%ProgramFiles(x86)%\java\jre7\lib\zi\america\matamoros
%ProgramFiles(x86)%\java\jre7\lib\zi\america\kentucky\louisville
%ProgramFiles(x86)%\java\jre7\bin\plugin2\msvcr100.dll
%ProgramFiles(x86)%\java\jre7\bin\plugin2\npjp2.dll
%ProgramFiles(x86)%\java\jre7\bin\policytool.exe
%ProgramFiles(x86)%\java\jre7\bin\prism-d3d.dll
%ProgramFiles(x86)%\java\jre7\bin\rmid.exe
%ProgramFiles(x86)%\java\jre7\bin\klist.exe
%ProgramFiles(x86)%\java\jre7\bin\rmiregistry.exe
%ProgramFiles(x86)%\java\jre7\bin\splashscreen.dll
%ProgramFiles(x86)%\java\jre7\bin\ssv.dll
%ProgramFiles(x86)%\java\jre7\bin\ssvagent.exe
%ProgramFiles(x86)%\java\jre7\bin\sunec.dll
%ProgramFiles(x86)%\java\jre7\bin\sunmscapi.dll
%ProgramFiles(x86)%\java\jre7\bin\t2k.dll
%ProgramFiles(x86)%\java\jre7\bin\npt.dll
%ProgramFiles(x86)%\java\jre7\bin\servertool.exe
%ProgramFiles(x86)%\java\jre7\bin\pack200.exe
%ProgramFiles(x86)%\java\jre7\bin\orbd.exe
%ProgramFiles(x86)%\java\jre7\bin\npoji610.dll
%ProgramFiles(x86)%\java\jre7\bin\npjpi170_80.dll
%ProgramFiles(x86)%\java\jre7\bin\jsdt.dll
%ProgramFiles(x86)%\java\jre7\bin\jsound.dll
%ProgramFiles(x86)%\java\jre7\bin\jsoundds.dll
%ProgramFiles(x86)%\java\jre7\bin\kcms.dll
%ProgramFiles(x86)%\java\jre7\bin\keytool.exe
%ProgramFiles(x86)%\java\jre7\bin\tnameserv.exe
%ProgramFiles(x86)%\java\jre7\bin\kinit.exe
%ProgramFiles(x86)%\java\jre7\bin\jpioji.dll
%ProgramFiles(x86)%\java\jre7\bin\ktab.exe
%ProgramFiles(x86)%\java\jre7\bin\libxslt.dll
%ProgramFiles(x86)%\java\jre7\bin\management.dll
%ProgramFiles(x86)%\java\jre7\bin\mlib_image.dll
%ProgramFiles(x86)%\java\jre7\bin\msvcr100.dll
%ProgramFiles(x86)%\java\jre7\bin\net.dll
%ProgramFiles(x86)%\java\jre7\bin\jpishare.dll
%ProgramFiles(x86)%\java\jre7\bin\nio.dll
%ProgramFiles(x86)%\java\jre7\bin\libxml2.dll
%ProgramFiles(x86)%\java\jre7\bin\jqs.exe
%ProgramFiles(x86)%\java\jre7\bin\unpack.dll
%ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge-32.dll
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_de.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_es.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_fr.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_it.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_ja.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_ko.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\ffjcext.zip
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_pt_br.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_cn.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_hk.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_tw.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\splash.gif
%ProgramFiles(x86)%\java\jre7\lib\deploy.pack
%ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge-32.jar
%ProgramFiles(x86)%\java\jre7\lib\deploy\jqs\jqsmessages.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages.properties
%ProgramFiles(x86)%\java\jre7\lib\deploy\jqs\jqs.conf
%ProgramFiles(x86)%\java\jre7\lib\currency.data
%ProgramFiles(x86)%\java\jre7\bin\jaas_nt.dll
%ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\wsdetect.dll
%ProgramFiles(x86)%\java\jre7\bin\zip.dll
%ProgramFiles(x86)%\java\jre7\lib\accessibility.properties
%ProgramFiles(x86)%\java\jre7\lib\alt-rt.jar
%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe
%ProgramFiles(x86)%\java\jre7\bin\w2k_lsa_auth.dll
%ProgramFiles(x86)%\java\jre7\bin\verify.dll
%ProgramFiles(x86)%\java\jre7\lib\calendars.properties
%ProgramFiles(x86)%\java\jre7\lib\cmm\gray.pf
%ProgramFiles(x86)%\java\jre7\lib\cmm\linear_rgb.pf
%ProgramFiles(x86)%\java\jre7\lib\cmm\pycc.pf
%ProgramFiles(x86)%\java\jre7\lib\cmm\srgb.pf
%ProgramFiles(x86)%\java\jre7\lib\content-types.properties
%ProgramFiles(x86)%\java\jre7\lib\charsets.pack
%ProgramFiles(x86)%\java\jre7\lib\classlist
%ProgramFiles(x86)%\java\jre7\lib\cmm\ciexyz.pf
%ProgramFiles(x86)%\java\jre7\bin\jpinscp.dll
%ProgramFiles(x86)%\java\jre7\bin\jpiexp.dll
%ProgramFiles(x86)%\java\jre7\bin\jpicom.dll
%ProgramFiles(x86)%\java\jre7\thirdpartylicensereadme-javafx.txt
%ProgramFiles(x86)%\java\jre7\thirdpartylicensereadme.txt
%ProgramFiles(x86)%\java\jre7\welcome.html
%ProgramFiles(x86)%\java\jre7\bin\awt.dll
%ProgramFiles(x86)%\java\jre7\bin\axbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\client\jvm.dll
%ProgramFiles(x86)%\java\jre7\bin\eula.dll
%ProgramFiles(x86)%\java\jre7\bin\client\xusage.txt
%ProgramFiles(x86)%\java\jre7\bin\decora-sse.dll
%ProgramFiles(x86)%\java\jre7\bin\deploy.dll
%ProgramFiles(x86)%\java\jre7\bin\dtplugin\deployjava1.dll
%ProgramFiles(x86)%\java\jre7\bin\dtplugin\npdeployjava1.dll
%ProgramFiles(x86)%\java\jre7\bin\dt_shmem.dll
%ProgramFiles(x86)%\java\jre7\copyright
%TEMP%\java_install.log
%ProgramFiles(x86)%\java\jre7\readme.txt
%TEMP%\java_install_reg.log
%ProgramFiles(x86)%\java\jre7\core.zip
%TEMP%\nsr99c0.tmp\system.dll
%TEMP%\no-cover.jpg
%TEMP%\nsr99c0.tmp\img.dll
%TEMP%\zonainstall.log
%TEMP%\nsr99c0.tmp\nsisfile.dll
%APPDATA%\zona\init.xml
%ProgramFiles(x86)%\java\jre7\bin\dt_socket.dll
%TEMP%\nsr99c0.tmp\nsisxml.dll
%ProgramFiles(x86)%\java\jre7\bin\dcpr.dll
%TEMP%\jre_setup.exe
%TEMP%\nsw9cee.tmp
%TEMP%\nsw9cef.tmp
%LOCALAPPDATA%low\sun\java\jre1.7.0_80\data1.cab
%LOCALAPPDATA%low\sun\java\jre1.7.0_80\jre1.7.0_80.msi
%TEMP%\jre_setup.log
%TEMP%\nsr99c0.tmp\httpget.dll
%TEMP%\bullet.bmp
%TEMP%\nsw9ced.tmp
%ProgramFiles(x86)%\java\jre7\license
%ProgramFiles(x86)%\java\jre7\bin\fontmanager.dll
%ProgramFiles(x86)%\java\jre7\bin\javaws.exe
%ProgramFiles(x86)%\java\jre7\bin\jawt.dll
%ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge-32.dll
%ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\jdbcodbc.dll
%ProgramFiles(x86)%\java\jre7\bin\jdwp.dll
%ProgramFiles(x86)%\java\jre7\bin\javaw.exe
%ProgramFiles(x86)%\java\jre7\bin\fxplugins.dll
%ProgramFiles(x86)%\java\jre7\bin\java_crw_demo.dll
%ProgramFiles(x86)%\java\jre7\bin\jfr.dll
%ProgramFiles(x86)%\java\jre7\bin\jp2iexp.dll
%ProgramFiles(x86)%\java\jre7\bin\jp2launcher.exe
%ProgramFiles(x86)%\java\jre7\bin\jp2native.dll
%ProgramFiles(x86)%\java\jre7\bin\jp2ssv.dll
%ProgramFiles(x86)%\java\jre7\bin\jpeg.dll
%ProgramFiles(x86)%\java\jre7\bin\jfxmedia.dll
%ProgramFiles(x86)%\java\jre7\bin\jfxwebkit.dll
%ProgramFiles(x86)%\java\jre7\bin\jli.dll
%ProgramFiles(x86)%\java\jre7\lib\deploy\messages_sv.properties
%ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge.jar
%ProgramFiles(x86)%\java\jre7\bin\javacpl.exe
%ProgramFiles(x86)%\java\jre7\bin\glib-lite.dll
%ProgramFiles(x86)%\java\jre7\bin\gstreamer-lite.dll
%ProgramFiles(x86)%\java\jre7\bin\hprof.dll
%ProgramFiles(x86)%\java\jre7\bin\installer.dll
%ProgramFiles(x86)%\java\jre7\bin\instrument.dll
%ProgramFiles(x86)%\java\jre7\bin\j2pcsc.dll
%ProgramFiles(x86)%\java\jre7\bin\javafx-font.dll
%ProgramFiles(x86)%\java\jre7\bin\javafx-iio.dll
%ProgramFiles(x86)%\java\jre7\bin\j2pkcs11.dll
%ProgramFiles(x86)%\java\jre7\bin\java-rmi.exe
%ProgramFiles(x86)%\java\jre7\bin\java.dll
%ProgramFiles(x86)%\java\jre7\bin\java.exe
%ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge-32.dll
%ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\javacpl.cpl
%ProgramFiles(x86)%\java\jre7\bin\glass.dll
%ProgramFiles(x86)%\java\jre7\bin\jabswitch.exe
%ProgramFiles(x86)%\java\jre7\lib\rt.pack
%ProgramFiles(x86)%\java\jre7\lib\zi\america\manaus
%ProgramFiles(x86)%\java\jre7\lib\ext\localedata.pack
%ProgramFiles(x86)%\java\jre7\lib\zi\america\bogota
%ProgramFiles(x86)%\java\jre7\lib\zi\america\boise
%ProgramFiles(x86)%\java\jre7\lib\zi\america\cambridge_bay
%ProgramFiles(x86)%\java\jre7\lib\zi\america\campo_grande
%ProgramFiles(x86)%\java\jre7\lib\zi\america\cancun
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\salta
%ProgramFiles(x86)%\java\jre7\lib\zi\america\caracas
%ProgramFiles(x86)%\java\jre7\lib\zi\america\cayman
%ProgramFiles(x86)%\java\jre7\lib\zi\america\chicago
%ProgramFiles(x86)%\java\jre7\lib\zi\america\chihuahua
%ProgramFiles(x86)%\java\jre7\lib\zi\america\costa_rica
%ProgramFiles(x86)%\java\jre7\lib\zi\america\creston
%ProgramFiles(x86)%\java\jre7\lib\zi\america\cuiaba
%ProgramFiles(x86)%\java\jre7\lib\zi\america\belize
%ProgramFiles(x86)%\java\jre7\lib\zi\america\cayenne
%ProgramFiles(x86)%\java\jre7\lib\zi\america\boa_vista
%ProgramFiles(x86)%\java\jre7\lib\zi\america\blanc-sablon
%ProgramFiles(x86)%\java\jre7\lib\zi\america\belem
%ProgramFiles(x86)%\java\jre7\lib\zi\america\barbados
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\catamarca
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\cordoba
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\jujuy
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\la_rioja
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\mendoza
%ProgramFiles(x86)%\java\jre7\lib\zi\america\curacao
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\rio_gallegos
%ProgramFiles(x86)%\java\jre7\lib\zi\america\antigua
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\san_juan
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\tucuman
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\ushuaia
%ProgramFiles(x86)%\java\jre7\lib\zi\america\asuncion
%ProgramFiles(x86)%\java\jre7\lib\zi\america\atikokan
%ProgramFiles(x86)%\java\jre7\lib\zi\america\bahia
%ProgramFiles(x86)%\java\jre7\lib\zi\america\araguaina
%ProgramFiles(x86)%\java\jre7\lib\zi\america\bahia_banderas
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\san_luis
%ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\buenos_aires
%ProgramFiles(x86)%\java\jre7\lib\zi\america\danmarkshavn
%ProgramFiles(x86)%\java\jre7\lib\zi\america\detroit
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\vevay
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\vincennes
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\winamac
%ProgramFiles(x86)%\java\jre7\lib\zi\america\inuvik
%ProgramFiles(x86)%\java\jre7\lib\zi\america\iqaluit
%ProgramFiles(x86)%\java\jre7\lib\zi\america\jamaica
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\knox
%ProgramFiles(x86)%\java\jre7\lib\zi\america\juneau
%ProgramFiles(x86)%\java\jre7\lib\zi\america\kentucky\monticello
%ProgramFiles(x86)%\java\jre7\lib\zi\america\la_paz
%ProgramFiles(x86)%\java\jre7\lib\zi\america\lima
%ProgramFiles(x86)%\java\jre7\lib\zi\america\los_angeles
%ProgramFiles(x86)%\java\jre7\lib\zi\america\maceio
%ProgramFiles(x86)%\java\jre7\lib\zi\america\managua
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\petersburg
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\tell_city
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\marengo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\indianapolis
%ProgramFiles(x86)%\java\jre7\lib\ext\dnsns.jar
%ProgramFiles(x86)%\java\jre7\lib\zi\america\edmonton
%ProgramFiles(x86)%\java\jre7\lib\zi\america\eirunepe
%ProgramFiles(x86)%\java\jre7\lib\zi\america\el_salvador
%ProgramFiles(x86)%\java\jre7\lib\zi\america\fortaleza
%ProgramFiles(x86)%\java\jre7\lib\zi\america\glace_bay
%ProgramFiles(x86)%\java\jre7\lib\zi\america\dawson
%ProgramFiles(x86)%\java\jre7\lib\zi\america\denver
%ProgramFiles(x86)%\java\jre7\lib\zi\america\dawson_creek
%ProgramFiles(x86)%\java\jre7\lib\zi\america\godthab
%ProgramFiles(x86)%\java\jre7\lib\zi\america\guayaquil
%ProgramFiles(x86)%\java\jre7\lib\zi\america\guyana
%ProgramFiles(x86)%\java\jre7\lib\zi\america\halifax
%ProgramFiles(x86)%\java\jre7\lib\zi\america\havana
%ProgramFiles(x86)%\java\jre7\lib\zi\america\hermosillo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\goose_bay
%ProgramFiles(x86)%\java\jre7\lib\zi\america\grand_turk
%ProgramFiles(x86)%\java\jre7\lib\zi\america\guatemala
%ProgramFiles(x86)%\java\jre7\lib\zi\america\anchorage
%ProgramFiles(x86)%\java\jre7\lib\zi\america\adak
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\windhoek
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_linkdrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_linknodrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_movedrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_movenodrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\javafx.properties
%ProgramFiles(x86)%\java\jre7\lib\javaws.pack
%ProgramFiles(x86)%\java\jre7\lib\management\jmxremote.access
%ProgramFiles(x86)%\java\jre7\lib\jce.jar
%ProgramFiles(x86)%\java\jre7\lib\jfr\profile.jfc
%ProgramFiles(x86)%\java\jre7\lib\jfr.jar
%ProgramFiles(x86)%\java\jre7\lib\jfxrt.pack
%ProgramFiles(x86)%\java\jre7\lib\jsse.pack
%ProgramFiles(x86)%\java\jre7\lib\jvm.hprof.txt
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\invalid32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\cursors.properties
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_copynodrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\i386\jvm.cfg
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidatypewriterregular.ttf
%ProgramFiles(x86)%\java\jre7\lib\ext\meta-index
%ProgramFiles(x86)%\java\jre7\lib\ext\sunjce_provider.jar
%ProgramFiles(x86)%\java\jre7\lib\ext\sunmscapi.jar
%ProgramFiles(x86)%\java\jre7\lib\ext\sunpkcs11.jar
%ProgramFiles(x86)%\java\jre7\lib\ext\zipfs.jar
%ProgramFiles(x86)%\java\jre7\lib\flavormap.properties
%ProgramFiles(x86)%\java\jre7\lib\logging.properties
%ProgramFiles(x86)%\java\jre7\lib\fontconfig.bfc
%ProgramFiles(x86)%\java\jre7\lib\jfr\default.jfc
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightdemibold.ttf
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightitalic.ttf
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightregular.ttf
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidasansdemibold.ttf
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidasansregular.ttf
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidatypewriterbold.ttf
%ProgramFiles(x86)%\java\jre7\lib\fontconfig.properties.src
%ProgramFiles(x86)%\java\jre7\lib\ext\sunec.jar
%ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightdemiitalic.ttf
%ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_copydrop32x32.gif
%ProgramFiles(x86)%\java\jre7\lib\management\jmxremote.password.template
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\accra
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\bissau
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\cairo
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\casablanca
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\ceuta
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\el_aaiun
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\abidjan
%ProgramFiles(x86)%\java\jre7\lib\management\management.properties
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\algiers
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\johannesburg
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\monrovia
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\nairobi
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\ndjamena
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\tripoli
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\tunis
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\khartoum
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\lagos
%ProgramFiles(x86)%\java\jre7\lib\zi\africa\maputo
%ProgramFiles(x86)%\java\jre7\lib\zi\america\martinique
%ProgramFiles(x86)%\java\jre7\lib\ext\jaccess.jar
%ProgramFiles(x86)%\java\jre7\lib\security\us_export_policy.jar
%ProgramFiles(x86)%\java\jre7\lib\management-agent.jar
%ProgramFiles(x86)%\java\jre7\lib\meta-index
%ProgramFiles(x86)%\java\jre7\lib\net.properties
%ProgramFiles(x86)%\java\jre7\lib\plugin.pack
%ProgramFiles(x86)%\java\jre7\lib\psfont.properties.ja
%ProgramFiles(x86)%\java\jre7\lib\psfontj2d.properties
%ProgramFiles(x86)%\java\jre7\lib\sound.properties
%ProgramFiles(x86)%\java\jre7\lib\tzmappings
%ProgramFiles(x86)%\java\jre7\lib\resources.jar
%ProgramFiles(x86)%\java\jre7\lib\security\cacerts
%ProgramFiles(x86)%\java\jre7\lib\security\java.policy
%ProgramFiles(x86)%\java\jre7\lib\security\java.security
%ProgramFiles(x86)%\java\jre7\lib\security\javafx.policy
%ProgramFiles(x86)%\java\jre7\lib\security\javaws.policy
%ProgramFiles(x86)%\java\jre7\lib\security\local_policy.jar
%ProgramFiles(x86)%\java\jre7\lib\management\snmp.acl.template
%ProgramFiles(x86)%\java\jre7\lib\security\blacklist
%WINDIR%\syswow64\windowsaccessbridge-32.dll

Deletes the following files

%ProgramFiles(x86)%\java\jre7\lib\rt.pack
%ProgramFiles(x86)%\java\jre7\lib\charsets.pack
%ProgramFiles(x86)%\java\jre7\lib\deploy.pack
%ProgramFiles(x86)%\java\jre7\lib\javaws.pack
%ProgramFiles(x86)%\java\jre7\lib\plugin.pack
%ProgramFiles(x86)%\java\jre7\lib\jsse.pack
%ProgramFiles(x86)%\java\jre7\lib\ext\localedata.pack
%ProgramFiles(x86)%\java\jre7\lib\jfxrt.pack
%ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge.jar
%ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge.dll
%ProgramFiles(x86)%\java\jre7\core.zip
%ProgramFiles(x86)%\java\jre7\bin\javacpl.cpl

Network activity

Connects to

'ja####.oracle.com':443

TCP

HTTP GET requests

http://dl.#ona.ru/jre_latest.exe
http://www.zo#a.ru/installer.html?gu#############################################################################################################################################################...
http://dl.#ona.ru/Zona.7z
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
http://dl.#ona.ru/appdata.7z
http://st##.#iniload.org/installer.html?gu#######################################################################################################################################################...
http://ja####.oracle.com/webapps/download/GetFile/1.7.0_80-b15/windows-i586/Java3BillDevices_en.jpg

'zo#a.ru':443

'ja#######d-secure.oracle.com':443

UDP

DNS ASK dl.#ona.ru
DNS ASK zo#a.ru
DNS ASK microsoft.com
DNS ASK st##.#iniload.org
DNS ASK ja#######d-secure.oracle.com
DNS ASK rp####cs.sun.com
DNS ASK ja####.oracle.com

Miscellaneous

Searches for the following windows

ClassName: '#32770' WindowName: ''
ClassName: 'Button' WindowName: ''
ClassName: 'Static' WindowName: ''
ClassName: 'msctls_progress32' WindowName: ''

Creates and executes the following

'%TEMP%\jre_setup.exe' /s REBOOT=Suppress JAVAUPDATE=0 WEBSTARTICON=0 /L \"%TEMP%\jre_setup.log\"
'%ProgramFiles(x86)%\java\jre7\bin\javaws.exe' -fix -permissions -silent
'%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -Xshare:dump
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.pack" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.pack" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.pack" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.pack" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\rt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\rt.jar"
'%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -classpath "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar" com.sun.deploy.panel.JreLocator
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.pack" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.jar"
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\rt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\rt.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.pack" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.pack" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.pack" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.pack" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.jar"' (with hidden window)
'%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.pack" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar"' (with hidden window)

Executes the following

'%WINDIR%\syswow64\msiexec.exe' /i "%LOCALAPPDATA%Low\Sun\Java\jre1.7.0_80\jre1.7.0_80.msi" REBOOT=Suppress JAVAUPDATE=0 WEBSTARTICON=0 /L "%TEMP%\jre_setup.log" /qn METHOD=joff

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial