Trojan.Encoder.26990

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'unlock' = '"c:\How To Decode Files.hta"'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'searchfiles' = '%WINDIR%\searchfiles.exe'
[<HKLM>\Software\Classes\.BadNews\shell\open\command] '' = '%WINDIR%\SysWow64\mshta.exe "c:\How To Decode Files.hta"'

Infects the following executable files

%ProgramFiles%\partinfo\partinfo.exe id kz3iwoau+avx.badnews
%ProgramFiles%\ftpte\ftpte.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gc\gc.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gcasdtserv\gcasdtserv.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gcasserv\gcasserv.exe id kz3iwoau+avx.badnews
%ProgramFiles%\ge\ge.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gg\gg.exe id kz3iwoau+avx.badnews
%ProgramFiles%\giantantispywaremain\giantantispywaremain.exe id kz3iwoau+avx.badnews
%ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gnotify\gnotify.exe id kz3iwoau+avx.badnews
%ProgramFiles%\googledesktop\googledesktop.exe id kz3iwoau+avx.badnews
%ProgramFiles%\googletalk\googletalk.exe id kz3iwoau+avx.badnews
%ProgramFiles%\googleupdate\googleupdate.exe id kz3iwoau+avx.badnews
%ProgramFiles%\guardgni\guardgni.exe id kz3iwoau+avx.badnews
%ProgramFiles%\guardnt\guardnt.exe id kz3iwoau+avx.badnews
%ProgramFiles%\gw\gw.exe id kz3iwoau+avx.badnews
%ProgramFiles%\helpctr\helpctr.exe id kz3iwoau+avx.badnews
%ProgramFiles%\helper\helper.exe id kz3iwoau+avx.badnews
%ProgramFiles%\hipsdiag\hipsdiag.exe id kz3iwoau+avx.badnews
%ProgramFiles%\hregmon\hregmon.exe id kz3iwoau+avx.badnews
%ProgramFiles%\hrres\hrres.exe id kz3iwoau+avx.badnews
%ProgramFiles%\hsockpe\hsockpe.exe id kz3iwoau+avx.badnews
%ProgramFiles%\iamapp\iamapp.exe id kz3iwoau+avx.badnews
%ProgramFiles%\iamserv\iamserv.exe id kz3iwoau+avx.badnews
%ProgramFiles%\clamscan\clamscan.exe id kz3iwoau+avx.badnews
%ProgramFiles%\fsfwwsch\fsfwwsch.exe id kz3iwoau+avx.badnews
%ProgramFiles%\fsihs\fsihs.exe id kz3iwoau+avx.badnews
%ProgramFiles%\netstatviewer\netstatviewer.exe id kz3iwoau+avx.badnews
%ProgramFiles%\monsysnt\monsysnt.exe id kz3iwoau+avx.badnews
%ProgramFiles%\firebird\firebird.exe id kz3iwoau+avx.badnews
%CommonProgramFiles(x86)%\microsoft shared\office14\1033\msointl.rest.idx_dll id kz3iwoau+avx.badnews
%CommonProgramFiles(x86)%\microsoft shared\help\msenv.dll id kz3iwoau+avx.badnews

Creates the following files on removable media

<Drive name for removable media>:\how to decode files.hta
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\archer.avi

Malicious functions

To complicate detection of its presence in the operating system,

blocks the following features:

User Account Control (UAC)

Terminates or attempts to terminate

the following system processes:

<SYSTEM32>\taskhost.exe
%WINDIR%\syswow64\vssadmin.exe
%WINDIR%\syswow64\werfault.exe

the following user processes:

iexplore.exe
firefox.exe

Modifies file system

Creates the following files

%WINDIR%\searchfiles.exe
%ProgramFiles%\maxthon\how to decode files.hta
%ProgramFiles%\maplestory\how to decode files.hta
%ProgramFiles%\malwareremoval\how to decode files.hta
%ProgramFiles%\magent\how to decode files.hta
%ProgramFiles%\luupdate\how to decode files.hta
%ProgramFiles%\mcshield\how to decode files.hta
%ProgramFiles%\luna\how to decode files.hta
%ProgramFiles%\mcmnhdlr\how to decode files.hta
%ProgramFiles%\luconfig\how to decode files.hta
%ProgramFiles%\lucallbackproxy\how to decode files.hta
%ProgramFiles%\lpfw\how to decode files.hta
%ProgramFiles%\lotroclient\how to decode files.hta
%ProgramFiles%\logwatnt\how to decode files.hta
%ProgramFiles%\liveupdate\how to decode files.hta
%ProgramFiles%\luinit\how to decode files.hta
%ProgramFiles%\livesrv\how to decode files.hta
%ProgramFiles%\lucheck\how to decode files.hta
%ProgramFiles%\mcregwiz\how to decode files.hta
%ProgramFiles%\mcupdmgr\how to decode files.hta
%ProgramFiles%\mcvsshld\how to decode files.hta
%ProgramFiles%\nod32\how to decode files.hta
%ProgramFiles%\nod\how to decode files.hta
%ProgramFiles%\nisoptui\how to decode files.hta
%ProgramFiles%\mva\how to decode files.hta
%ProgramFiles%\msnmsgr\how to decode files.hta
%ProgramFiles%\msn6\how to decode files.hta
%ProgramFiles%\nod32kui\how to decode files.hta
%ProgramFiles%\msmpsvc\how to decode files.hta
%ProgramFiles%\mpssvc\how to decode files.hta
%ProgramFiles%\mpftray\how to decode files.hta
%ProgramFiles%\mpeng\how to decode files.hta
%ProgramFiles%\mp3tray\how to decode files.hta
%ProgramFiles%\mp3toys\how to decode files.hta
%ProgramFiles%\mp3toystray\how to decode files.hta
%ProgramFiles%\mfpmp\how to decode files.hta
%ProgramFiles%\msimn\how to decode files.hta
%ProgramFiles%\memstring\how to decode files.hta
%ProgramFiles%\notifyha\how to decode files.hta
%ProgramFiles%\nod32krn\how to decode files.hta
%ProgramFiles%\licmgr\how to decode files.hta
%ProgramFiles%\kavstart\how to decode files.hta
%ProgramFiles%\inocit\how to decode files.hta
%ProgramFiles%\inorpc\how to decode files.hta
%ProgramFiles%\incmail\how to decode files.hta
%ProgramFiles%\impcnt\how to decode files.hta
%ProgramFiles%\imnotfy\how to decode files.hta
%ProgramFiles%\imapp\how to decode files.hta
%ProgramFiles%\inotask\how to decode files.hta
%ProgramFiles%\inort\how to decode files.hta
%ProgramFiles%\ilaunchr\how to decode files.hta
%ProgramFiles%\iexplore\how to decode files.hta
%ProgramFiles%\ieuser\how to decode files.hta
%ProgramFiles%\ieregfix\how to decode files.hta
%ProgramFiles%\icqlite\how to decode files.hta
%ProgramFiles%\icq\how to decode files.hta
%ProgramFiles%\iamserv\how to decode files.hta
%ProgramFiles%\ih8run\how to decode files.hta
%ProgramFiles%\ih8\how to decode files.hta
%ProgramFiles%\inouptng\how to decode files.hta
%ProgramFiles%\inphasenxd\how to decode files.hta
%ProgramFiles%\npavtray\how to decode files.hta
%ProgramFiles%\kavpfw\how to decode files.hta
%ProgramFiles%\kavpf\how to decode files.hta
%ProgramFiles%\kavmm\how to decode files.hta
%ProgramFiles%\k-meleon\how to decode files.hta
%ProgramFiles%\kav\how to decode files.hta
%ProgramFiles%\itunes\how to decode files.hta
%ProgramFiles%\isuac\how to decode files.hta
%ProgramFiles%\issvc\how to decode files.hta
%ProgramFiles%\ispwdsvc\how to decode files.hta
%ProgramFiles%\ispnews\how to decode files.hta
%ProgramFiles%\isafe\how to decode files.hta
%ProgramFiles%\iron\how to decode files.hta
%ProgramFiles%\instlsp\how to decode files.hta
%ProgramFiles%\installlsp\how to decode files.hta
%ProgramFiles%\installlicense\how to decode files.hta
%ProgramFiles%\launcher\how to decode files.hta
%ProgramFiles%\kavsvc\how to decode files.hta
%ProgramFiles%\konnekt\how to decode files.hta
%ProgramFiles%\notstart\how to decode files.hta
%ProgramFiles%\npfmsg\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\msenv\how to decode files.hta
%ProgramFiles%\dpatrolq\how to decode files.hta
%ProgramFiles%\dnf\how to decode files.hta
%ProgramFiles%\dislite\how to decode files.hta
%ProgramFiles%\directftp\how to decode files.hta
%ProgramFiles%\drwadins\how to decode files.hta
%ProgramFiles%\digsby-app\how to decode files.hta
%ProgramFiles%\defensewall\how to decode files.hta
%ProgramFiles%\drvctl\how to decode files.hta
%ProgramFiles%\dbtool\how to decode files.hta
%ProgramFiles%\custsetup\how to decode files.hta
%ProgramFiles%\dekaron\how to decode files.hta
%ProgramFiles%\defwatch\how to decode files.hta
%ProgramFiles%\dbconvert\how to decode files.hta
%ProgramFiles%\digsby\how to decode files.hta
%ProgramFiles%\drweb\how to decode files.hta
%ProgramFiles%\cssexc\how to decode files.hta
%ProgramFiles%\cuteftp\how to decode files.hta
%ProgramFiles%\drvirus\how to decode files.hta
%ProgramFiles%\drweb32w\how to decode files.hta
%ProgramFiles%\drweb386\how to decode files.hta
%ProgramFiles%\flashgot\how to decode files.hta
%ProgramFiles%\flashfxp\how to decode files.hta
%ProgramFiles%\firetray\how to decode files.hta
%ProgramFiles%\firesvc\how to decode files.hta
%ProgramFiles%\egni\how to decode files.hta
%ProgramFiles%\exit_av\how to decode files.hta
%ProgramFiles%\foxit\how to decode files.hta
%ProgramFiles%\ewidoctrl\how to decode files.hta
%ProgramFiles%\elementclient\how to decode files.hta
%ProgramFiles%\drwebwcl\how to decode files.hta
%ProgramFiles%\drwebupw\how to decode files.hta
%ProgramFiles%\ecmd\how to decode files.hta
%ProgramFiles%\drwreg\how to decode files.hta
%ProgramFiles%\drwebscd\how to decode files.hta
%ProgramFiles%\custinstall\how to decode files.hta
%ProgramFiles%\eudora\how to decode files.hta
%ProgramFiles%\fpavserver\how to decode files.hta
%ProgramFiles%\csendto\how to decode files.hta
%ProgramFiles%\cpd\how to decode files.hta
%ProgramFiles%\cavscons\how to decode files.hta
%ProgramFiles%\copyx64\how to decode files.hta
%ProgramFiles%\monlite\how to decode files.hta
%ProgramFiles%\mp3theater\how to decode files.hta
%ProgramFiles%\ccapp\how to decode files.hta
%ProgramFiles%\ccevtmgr\how to decode files.hta
%ProgramFiles%\cavvl\how to decode files.hta
%ProgramFiles%\cavumas\how to decode files.hta
%ProgramFiles%\cavsubmit\how to decode files.hta
%ProgramFiles%\cavuserupd\how to decode files.hta
%ProgramFiles%\cavsub\how to decode files.hta
%ProgramFiles%\ntrtscan\how to decode files.hta
%ProgramFiles%\ntxconfig\how to decode files.hta
%ProgramFiles%\ntoskrnl\how to decode files.hta
%ProgramFiles%\nsstray\how to decode files.hta
%ProgramFiles%\nssserv\how to decode files.hta
%ProgramFiles%\nsmdtr\how to decode files.hta
%ProgramFiles%\cavse\how to decode files.hta
%ProgramFiles%\cavsn\how to decode files.hta
%ProgramFiles%\cavq\how to decode files.hta
%ProgramFiles%\installcavs\how to decode files.hta
%ALLUSERSPROFILE%\microsoft toolkit\how to decode files.hta
%ProgramFiles%\drvmap\how to decode files.hta
%ProgramFiles%\claw95cf\how to decode files.hta
%ProgramFiles%\cmgrdian\how to decode files.hta
%ProgramFiles%\cmain\how to decode files.hta
%ProgramFiles%\clrcche\how to decode files.hta
%ProgramFiles%\clisvc\how to decode files.hta
%ProgramFiles%\cleaner3\how to decode files.hta
%ProgramFiles%\cleaner\how to decode files.hta
%ProgramFiles%\claw95\how to decode files.hta
%ProgramFiles%\clamwin\how to decode files.hta
%ProgramFiles%\clamtray\how to decode files.hta
%ProgramFiles%\clamscan\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\office10\how to decode files.hta
%ProgramFiles%\chrome\how to decode files.hta
%ProgramFiles%\cemrep\how to decode files.hta
%ProgramFiles%\ccsetmgr\how to decode files.hta
%ProgramFiles%\ccleaner\how to decode files.hta
%ProgramFiles%\courier\how to decode files.hta
%ProgramFiles%\ccproxy\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\how to decode files.hta
%ProgramFiles%\iamapp\how to decode files.hta
%ProgramFiles%\vba32ifs\how to decode files.hta
%ProgramFiles%\vettray\how to decode files.hta
%ProgramFiles%\vcrmon\how to decode files.hta
%ProgramFiles%\vchk\how to decode files.hta
%ProgramFiles%\uupd\how to decode files.hta
%ProgramFiles%\upgrepl\how to decode files.hta
%ProgramFiles%\vba32ldr\how to decode files.hta
%ProgramFiles%\updclient\how to decode files.hta
%ProgramFiles%\viritexp\how to decode files.hta
%ProgramFiles%\up2date\how to decode files.hta
%ProgramFiles%\unp_test\how to decode files.hta
%ProgramFiles%\swagent\how to decode files.hta
%ProgramFiles%\swdoctor\how to decode files.hta
%ProgramFiles%\swdsvc\how to decode files.hta
%ProgramFiles%\sweb\how to decode files.hta
%ProgramFiles%\updater\how to decode files.hta
%ProgramFiles%\vba32pp3\how to decode files.hta
%ProgramFiles%\updaterui\how to decode files.hta
%ProgramFiles%\vbsntw\how to decode files.hta
%ProgramFiles%\tmas\how to decode files.hta
%ProgramFiles%\vrmonsvc\how to decode files.hta
%ProgramFiles%\visthupd\how to decode files.hta
%ProgramFiles%\vba32ecm\how to decode files.hta
%ProgramFiles%\symwsc\how to decode files.hta
%ProgramFiles%\sysinfo\how to decode files.hta
%ProgramFiles%\tbmon\how to decode files.hta
%ProgramFiles%\tca\how to decode files.hta
%ProgramFiles%\teatimer\how to decode files.hta
%ProgramFiles%\vrfwsvc\how to decode files.hta
%ProgramFiles%\wil\how to decode files.hta
%ProgramFiles%\webscanx\how to decode files.hta
%ProgramFiles%\webproxy\how to decode files.hta
%ProgramFiles%\tgsvcstp\how to decode files.hta
%ProgramFiles%\thebat\how to decode files.hta
%ProgramFiles%\thgnard\how to decode files.hta
%ProgramFiles%\thunderbird\how to decode files.hta
%ProgramFiles%\swriter\how to decode files.hta
%ProgramFiles%\winaw32\how to decode files.hta
%ProgramFiles%\symantecrootinstaller\how to decode files.hta
%ProgramFiles%\symlcsvc\how to decode files.hta
%ProgramFiles%\symproxysvc\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\identitycrl\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\office\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\how to decode files.hta
%ProgramFiles%\ashenhcd\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\vs7debug\1033\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\stationery\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\office14\1033\how to decode files.hta
%CommonProgramFiles(x86)%\java\java update\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1031\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1041\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1042\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\3082\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1049\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\2052\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1046\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\1050\how to decode files.hta
C:\far2\addons\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\mf\how to decode files.hta
%ProgramFiles%\vrrw32\how to decode files.hta
%ProgramFiles%\fpavupdm\how to decode files.hta
%ProgramFiles%\winss\how to decode files.hta
%ProgramFiles%\symsport\how to decode files.hta
%ProgramFiles%\svcntaux\how to decode files.hta
%ProgramFiles%\uninstallcavs\how to decode files.hta
%ProgramFiles%\uninstaller\how to decode files.hta
%ProgramFiles%\uninstalllsp\how to decode files.hta
%ProgramFiles%\wclose\how to decode files.hta
%ProgramFiles%\vsstat\how to decode files.hta
%ProgramFiles%\vsserv\how to decode files.hta
%ProgramFiles%\vsmon\how to decode files.hta
%ProgramFiles%\uiscan\how to decode files.hta
%ProgramFiles%\una\how to decode files.hta
%ProgramFiles%\vshwin32\how to decode files.hta
%ProgramFiles%\twelvesky2\how to decode files.hta
%ProgramFiles%\trtddptr\how to decode files.hta
%ProgramFiles%\trojanhunter\how to decode files.hta
%ProgramFiles%\winroute\how to decode files.hta
%ProgramFiles%\winrar\how to decode files.hta
%ProgramFiles(x86)%\adobe\acrobat reader dc\esl\how to decode files.hta
%ProgramFiles%\viritsvc\how to decode files.hta
%ProgramFiles%\flock\how to decode files.hta
%ProgramFiles%\vistaux\how to decode files.hta
%ProgramFiles%\winbaram\how to decode files.hta
%ProgramFiles%\fssw\how to decode files.hta
%ProgramFiles%\fsstm\how to decode files.hta
%ProgramFiles%\fssm32\how to decode files.hta
%ProgramFiles%\fssg\how to decode files.hta
%ProgramFiles%\fssf\how to decode files.hta
%ProgramFiles%\fsus\how to decode files.hta
%ProgramFiles%\fsqh\how to decode files.hta
%ProgramFiles%\fstlui\how to decode files.hta
%ProgramFiles%\fspc\how to decode files.hta
%ProgramFiles%\fsma32\how to decode files.hta
%ProgramFiles%\fsm32\how to decode files.hta
%ProgramFiles%\fslaunch\how to decode files.hta
%ProgramFiles%\fsdiagui\how to decode files.hta
%ProgramFiles%\fsdiag\how to decode files.hta
%ProgramFiles%\fspex\how to decode files.hta
%ProgramFiles%\ftpte\how to decode files.hta
%ProgramFiles%\fsmb32\how to decode files.hta
%ProgramFiles%\gc\how to decode files.hta
%ProgramFiles%\gcasdtserv\how to decode files.hta
%ProgramFiles%\hrres\how to decode files.hta
%ProgramFiles%\hipsdiag\how to decode files.hta
%ProgramFiles%\helper\how to decode files.hta
%ProgramFiles%\helpctr\how to decode files.hta
%ProgramFiles%\gw\how to decode files.hta
%ProgramFiles%\guardnt\how to decode files.hta
%ProgramFiles%\guardgni\how to decode files.hta
%ProgramFiles%\googleupdate\how to decode files.hta
%ProgramFiles%\hregmon\how to decode files.hta
%ProgramFiles%\googletalk\how to decode files.hta
%ProgramFiles%\gnotify\how to decode files.hta
%ProgramFiles%\giantantispywareupdater\how to decode files.hta
%ProgramFiles%\giantantispywaremain\how to decode files.hta
%ProgramFiles%\gg\how to decode files.hta
%ProgramFiles%\ge\how to decode files.hta
%ProgramFiles%\gcasserv\how to decode files.hta
%ProgramFiles%\fsdfwd\how to decode files.hta
%ProgramFiles%\googledesktop\how to decode files.hta
%ProgramFiles%\fsdbuh\how to decode files.hta
%ProgramFiles%\fsdc\how to decode files.hta
%ProgramFiles%\fsbwsys\how to decode files.hta
%ProgramFiles%\windows mail\how to decode files.hta
%ProgramFiles%\usdownloader\how to decode files.hta
%ProgramFiles%\upsobmaker\how to decode files.hta
%ProgramFiles%\unopkg\how to decode files.hta
%ProgramFiles%\unoinfo\how to decode files.hta
%ProgramFiles%\tmlisten\how to decode files.hta
%ProgramFiles%\tmntsrv\how to decode files.hta
%ProgramFiles%\tmpfw\how to decode files.hta
%ProgramFiles%\tmproxy\how to decode files.hta
%ProgramFiles%\tnbutil\how to decode files.hta
%ProgramFiles%\totalcmd\how to decode files.hta
%ProgramFiles%\tracelog\how to decode files.hta
%ProgramFiles%\traymon\how to decode files.hta
%ProgramFiles%\trillian\how to decode files.hta
%ProgramFiles%\trojanguarder\how to decode files.hta
%ProgramFiles%\visthlic\how to decode files.hta
%ProgramFiles%\virusnews\how to decode files.hta
%ProgramFiles%\wincmd32\how to decode files.hta
%ProgramFiles%\viruskeeper\how to decode files.hta
%ProgramFiles%\hsockpe\how to decode files.hta
%ProgramFiles%\winmail\how to decode files.hta
%ProgramFiles%\fsavwscr\how to decode files.hta
%ProgramFiles%\fsavwsch\how to decode files.hta
%ProgramFiles%\fsavstrt\how to decode files.hta
%ProgramFiles%\fsavgui\how to decode files.hta
%ProgramFiles%\fsavaui\how to decode files.hta
%ProgramFiles%\fsav32\how to decode files.hta
%ProgramFiles%\fsav\how to decode files.hta
%ProgramFiles%\fsauach\how to decode files.hta
%ProgramFiles%\fsaua\how to decode files.hta
%ProgramFiles%\fsample\how to decode files.hta
%ProgramFiles%\freshclam\how to decode files.hta
%ProgramFiles%\fpwin\how to decode files.hta
%ProgramFiles%\fptrayproc\how to decode files.hta
%ProgramFiles%\fpscan\how to decode files.hta
%ProgramFiles%\windows portable devices\how to decode files.hta
%ProgramFiles%\windump\how to decode files.hta
%ProgramFiles%\windows photo viewer\how to decode files.hta
%ProgramFiles%\windowlist\how to decode files.hta
%ProgramFiles%\fsuninst\how to decode files.hta
%ProgramFiles%\miranda32\how to decode files.hta
%ProgramFiles%\mir3game\how to decode files.hta
%ProgramFiles%\miro\how to decode files.hta
%ProgramFiles%\ashquick\how to decode files.hta
%ProgramFiles%\agb5\how to decode files.hta
%ProgramFiles%\ageofconan\how to decode files.hta
%ProgramFiles%\ahnsd\how to decode files.hta
%ProgramFiles%\airdefense\how to decode files.hta
%ProgramFiles%\aim6\how to decode files.hta
%ProgramFiles%\avgnpsvc\how to decode files.hta
%ProgramFiles%\ashpopwz\how to decode files.hta
%ProgramFiles%\avgupden\how to decode files.hta
%ProgramFiles%\avgwizfw\how to decode files.hta
%ProgramFiles%\a2service\how to decode files.hta
%ProgramFiles%\a2start\how to decode files.hta
%ProgramFiles%\a2upd\how to decode files.hta
%ProgramFiles%\aimpro\how to decode files.hta
%ProgramFiles%\backweb-4476822\how to decode files.hta
%ProgramFiles%\aavshield\how to decode files.hta
%ProgramFiles%\avgupsvc\how to decode files.hta
%ProgramFiles%\ashdisp\how to decode files.hta
%ProgramFiles%\b2\how to decode files.hta
%ProgramFiles%\avpm\how to decode files.hta
%ProgramFiles%\spiderml\how to decode files.hta
%ProgramFiles%\a2cmd\how to decode files.hta
%ProgramFiles%\avgcc\how to decode files.hta
%ProgramFiles%\ashsimpl\how to decode files.hta
%ProgramFiles%\ashskpcc\how to decode files.hta
%ProgramFiles%\ashwebsv\how to decode files.hta
%ProgramFiles%\spybotsd\how to decode files.hta
%ProgramFiles%\cavmr\how to decode files.hta
%ProgramFiles%\cavoar\how to decode files.hta
%ProgramFiles%\etherd\how to decode files.hta
%ProgramFiles%\stopsignav\how to decode files.hta
%ProgramFiles%\start_diag\how to decode files.hta
%ProgramFiles%\avinitnt\how to decode files.hta
%ProgramFiles%\avpcc\how to decode files.hta
%ProgramFiles%\a2wizard\how to decode files.hta
%ProgramFiles%\cavmud\how to decode files.hta
%ProgramFiles%\sro_client\how to decode files.hta
%ProgramFiles%\about\how to decode files.hta
%ProgramFiles%\ackwin32\how to decode files.hta
%ProgramFiles%\pidgin\how to decode files.hta
%ProgramFiles%\amsn\how to decode files.hta
%ProgramFiles%\netxray\how to decode files.hta
%ProgramFiles%\pqboot32\how to decode files.hta
%ProgramFiles%\pccntmon\how to decode files.hta
%ProgramFiles%\polutil\how to decode files.hta
%ProgramFiles%\postinstall\how to decode files.hta
%ProgramFiles%\ppfw\how to decode files.hta
%ProgramFiles%\pctav\how to decode files.hta
%ProgramFiles%\pertsk\how to decode files.hta
%ProgramFiles%\pm8flash\how to decode files.hta
%ProgramFiles%\pmagic\how to decode files.hta
%ProgramFiles%\pmagicbt\how to decode files.hta
%ProgramFiles%\pmagicnt\how to decode files.hta
%ProgramFiles%\pccguide\how to decode files.hta
%ProgramFiles%\pavfnsvr\how to decode files.hta
%ProgramFiles%\pavkre\how to decode files.hta
%ProgramFiles%\pcctlcom\how to decode files.hta
%ProgramFiles%\pccpfw\how to decode files.hta
%ProgramFiles%\pm\how to decode files.hta
%ProgramFiles%\spidernt\how to decode files.hta
%ProgramFiles%\avkservice\how to decode files.hta
%ProgramFiles%\bdsubmit\how to decode files.hta
%ProgramFiles%\amon\how to decode files.hta
%ProgramFiles%\anti-trojan\how to decode files.hta
%ProgramFiles%\antivirus\how to decode files.hta
%ProgramFiles%\aoltbserver\how to decode files.hta
%ProgramFiles%\armor2net\how to decode files.hta
%ProgramFiles%\armorsurf\how to decode files.hta
%ProgramFiles%\ash\how to decode files.hta
%ProgramFiles%\ashavsrv\how to decode files.hta
%ProgramFiles%\ashavast\how to decode files.hta
%ProgramFiles%\ashdug\how to decode files.hta
%ProgramFiles%\onaccessinstaller\how to decode files.hta
%ProgramFiles%\opera\how to decode files.hta
%ProgramFiles%\partin9x\how to decode files.hta
%ProgramFiles%\pavproxy\how to decode files.hta
%ProgramFiles%\pavprot\how to decode files.hta
%ProgramFiles%\pavsrv51\how to decode files.hta
%ProgramFiles%\admunch\how to decode files.hta
%ProgramFiles%\pavprsrv\how to decode files.hta
C:\far2\encyclopedia\how to decode files.hta
%ProgramFiles%\pavfires\how to decode files.hta
%ProgramFiles%\avgvv\how to decode files.hta
%CommonProgramFiles(x86)%\system\en-us\how to decode files.hta
%CommonProgramFiles(x86)%\system\ole db\how to decode files.hta
%CommonProgramFiles(x86)%\system\ado\how to decode files.hta
%ProgramFiles%\dvd maker\how to decode files.hta
C:\users\how to decode files.hta
%CommonProgramFiles(x86)%\px storage engine\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\dao\how to decode files.hta
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\how to decode files.hta
%ProgramFiles%\fprottray\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\portal\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\vc\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\vsto\how to decode files.hta
%ProgramFiles%\aswregsvr\how to decode files.hta
%ProgramFiles%\aswupdsv\how to decode files.hta
%ProgramFiles%\avgnpdln\how to decode files.hta
%ALLUSERSPROFILE%\mozilla\logs\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\msinfo\how to decode files.hta
%ProgramFiles%\windows media player\how to decode files.hta
%ProgramFiles%\windows sidebar\how to decode files.hta
D:\how to decode files.hta
<Current directory>\how to decode files.hta
D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\how to decode files.hta
C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\how to decode files.hta
%ProgramFiles(x86)%\how to decode files.hta
%ALLUSERSPROFILE%\how to decode files.hta
%CommonProgramFiles(x86)%\system\how to decode files.hta
%ProgramFiles%\how to decode files.hta
C:\how to decode files.hta
%ProgramFiles(x86)%\adobe\acrobat reader dc\how to decode files.hta
%CommonProgramFiles(x86)%\steam\how to decode files.hta
C:\totalcmd\how to decode files.hta
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\how to decode files.hta
%ProgramFiles%\webmoney\how to decode files.hta
%ProgramFiles%\windows journal\how to decode files.hta
%ProgramFiles%\windows defender\how to decode files.hta
%ProgramFiles%\avciman\how to decode files.hta
C:\far2\how to decode files.hta
%ProgramFiles%\avcmd\how to decode files.hta
%CommonProgramFiles(x86)%\services\how to decode files.hta
%ProgramFiles%\avgdiag\how to decode files.hta
%ProgramFiles%\blackd\how to decode files.hta
%ProgramFiles%\btini\how to decode files.hta
%ProgramFiles%\btinint\how to decode files.hta
%ProgramFiles%\avkwctl\how to decode files.hta
%ProgramFiles%\avnotify\how to decode files.hta
%ProgramFiles%\avscan\how to decode files.hta
%ProgramFiles%\avsynmgr\how to decode files.hta
%ProgramFiles%\bdagent\how to decode files.hta
%ProgramFiles%\bdmcon\how to decode files.hta
%ProgramFiles%\bdnews\how to decode files.hta
%ProgramFiles%\bdoesrv\how to decode files.hta
%ProgramFiles%\bdss\how to decode files.hta
%ProgramFiles%\avgfwsrv\how to decode files.hta
%ProgramFiles%\avginet\how to decode files.hta
%ProgramFiles%\avgrssvc\how to decode files.hta
%ProgramFiles%\avgscan\how to decode files.hta
%ProgramFiles%\bdsurvey\how to decode files.hta
%ProgramFiles%\avgemc\how to decode files.hta
%ProgramFiles%\blackice\how to decode files.hta
%ProgramFiles%\avkserv\how to decode files.hta
%ProgramFiles%\avgw\how to decode files.hta
%ProgramFiles%\cavaud\how to decode files.hta
%ProgramFiles%\bdswitch\how to decode files.hta
%ProgramFiles%\bdwizreg\how to decode files.hta
%ProgramFiles%\blindman\how to decode files.hta
%ProgramFiles%\cavasm\how to decode files.hta
%ProgramFiles%\ehsniffer\how to decode files.hta
%ProgramFiles%\firefox\how to decode files.hta
%ProgramFiles%\cavemsrv\how to decode files.hta
%ProgramFiles%\webfiltr\how to decode files.hta
%ProgramFiles%\almon\how to decode files.hta
%ProgramFiles%\spiderui\how to decode files.hta
%ProgramFiles%\sporder\how to decode files.hta
%ProgramFiles%\streetsolkshim\how to decode files.hta
%ProgramFiles%\submitfiles\how to decode files.hta
%ProgramFiles%\cabalmain\how to decode files.hta
%ProgramFiles%\cafix\how to decode files.hta
%ProgramFiles%\cavapp\how to decode files.hta
%ProgramFiles%\alsvc\how to decode files.hta
%ProgramFiles%\bdsubmitwiz\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\ilscache\how to decode files.hta
%ProgramFiles%\partinnt\how to decode files.hta
%ProgramFiles%\psimsvc\how to decode files.hta
%ProgramFiles%\pqbw\how to decode files.hta
%ProgramFiles%\psctrls\how to decode files.hta
%ProgramFiles%\ps\how to decode files.hta
%ProgramFiles%\protect\how to decode files.hta
%ProgramFiles%\processviewer\how to decode files.hta
%ProgramFiles%\pqpent\how to decode files.hta
%ProgramFiles%\privatebrowser\how to decode files.hta
%ProgramFiles%\pqpe\how to decode files.hta
%ProgramFiles%\httplook\how to decode files.hta
%ProgramFiles%\spbbcsvc\how to decode files.hta
%ProgramFiles%\spamcfg\how to decode files.hta
%ProgramFiles%\soffice\how to decode files.hta
%ProgramFiles%\so3d\how to decode files.hta
%ProgramFiles%\sniffer\how to decode files.hta
%ProgramFiles%\prevxsetup\how to decode files.hta
%ProgramFiles%\python\how to decode files.hta
%ProgramFiles%\iris\how to decode files.hta
%ProgramFiles%\pqpe9x\how to decode files.hta
%ProgramFiles%\preconfig\how to decode files.hta
%ProgramFiles%\preupd\how to decode files.hta
%ProgramFiles%\ashsimp2\how to decode files.hta
%ProgramFiles%\ashserv\how to decode files.hta
%ProgramFiles%\ashmaisv\how to decode files.hta
%ProgramFiles%\ashlogv\how to decode files.hta
%ProgramFiles%\nvcut\how to decode files.hta
%ProgramFiles%\nvcte\how to decode files.hta
%ProgramFiles%\ashupd\how to decode files.hta
%ProgramFiles%\pmagic9x\how to decode files.hta
%ProgramFiles%\nvcod\how to decode files.hta
%ProgramFiles%\nwservice\how to decode files.hta
%ProgramFiles%\oasrv\how to decode files.hta
%ProgramFiles%\oaui\how to decode files.hta
%ProgramFiles%\ofcpfwsvc\how to decode files.hta
%ProgramFiles%\oget\how to decode files.hta
%ProgramFiles%\oladdin\how to decode files.hta
%ProgramFiles%\nupgrade\how to decode files.hta
%ProgramFiles%\prevsrv\how to decode files.hta
%ProgramFiles%\qhwscsvc\how to decode files.hta
%ProgramFiles%\qrtfix\how to decode files.hta
%ProgramFiles%\quaranti\how to decode files.hta
%ProgramFiles%\quickstart\how to decode files.hta
%ProgramFiles%\smc\how to decode files.hta
%ProgramFiles%\sndsrvc\how to decode files.hta
%ProgramFiles%\seccenter\how to decode files.hta
%ProgramFiles%\sfagent\how to decode files.hta
%ProgramFiles%\rq\how to decode files.hta
%ProgramFiles%\rtvscan\how to decode files.hta
%ProgramFiles%\safari\how to decode files.hta
%ProgramFiles%\sarcli\how to decode files.hta
%ProgramFiles%\savmain\how to decode files.hta
%ProgramFiles%\savprogress\how to decode files.hta
%ProgramFiles%\scanner\how to decode files.hta
%ProgramFiles%\sched\how to decode files.hta
%ProgramFiles%\pxsupport\how to decode files.hta
%ProgramFiles%\qklez\how to decode files.hta
%ProgramFiles%\spider\how to decode files.hta
%ProgramFiles%\360tray\how to decode files.hta
%ProgramFiles%\ash_updatemediator\how to decode files.hta
%ProgramFiles%\smath\how to decode files.hta
%ProgramFiles%\ashskpck\how to decode files.hta
%ProgramFiles%\smartftp\how to decode files.hta
%ProgramFiles%\partinfo\how to decode files.hta
%ProgramFiles%\ragexe\how to decode files.hta
%ProgramFiles%\ragfree\how to decode files.hta
%ProgramFiles%\rapget\how to decode files.hta
%ProgramFiles%\rat\how to decode files.hta
%ProgramFiles%\ravmon\how to decode files.hta
%ProgramFiles%\savscan\how to decode files.hta
%ProgramFiles%\sbase\how to decode files.hta
%ProgramFiles%\scalc\how to decode files.hta
%ProgramFiles%\sdhelp\how to decode files.hta
%ProgramFiles%\sdinvoker\how to decode files.hta
%ProgramFiles%\sdloader\how to decode files.hta
%ProgramFiles%\sdraw\how to decode files.hta
%ProgramFiles%\sdtrayapp\how to decode files.hta
%ProgramFiles%\seamonkey\how to decode files.hta
%ProgramFiles%\sigtool\how to decode files.hta
%ProgramFiles%\simpress\how to decode files.hta
%ProgramFiles%\sitecli\how to decode files.hta
%ProgramFiles%\skypepm\how to decode files.hta
%ProgramFiles%\partin\how to decode files.hta
%ProgramFiles%\skype\how to decode files.hta
%ProgramFiles%\ashchest\how to decode files.hta
%ProgramFiles%\savadminservice\how to decode files.hta
%ProgramFiles%\scanningprocess\how to decode files.hta
%ProgramFiles%\ekrn\how to decode files.hta
%ProgramFiles%\f-sched\how to decode files.hta
%ProgramFiles%\ezantivirusregistrationcheck\how to decode files.hta
%ProgramFiles%\realmon\how to decode files.hta
%ProgramFiles%\fameh32\how to decode files.hta
%ProgramFiles%\ravtimer\how to decode files.hta
%ProgramFiles%\fch32\how to decode files.hta
%ProgramFiles%\fdmwi\how to decode files.hta
%ProgramFiles%\filezilla\how to decode files.hta
%ProgramFiles%\firebird\how to decode files.hta
%ProgramFiles%\monsysnt\how to decode files.hta
%ProgramFiles%\mvc\how to decode files.hta
%ProgramFiles%\far\how to decode files.hta
%ProgramFiles%\myagtsvc\how to decode files.hta
%ProgramFiles%\fdm\how to decode files.hta
%ProgramFiles%\rcimlby\how to decode files.hta
%ProgramFiles%\register\how to decode files.hta
%ProgramFiles%\removeit\how to decode files.hta
%ProgramFiles%\pxagent\how to decode files.hta
%ProgramFiles%\pxconsole\how to decode files.hta
%ProgramFiles%\pxl\how to decode files.hta
%ProgramFiles%\pxl1\how to decode files.hta
%ProgramFiles%\pxreset\how to decode files.hta
%ProgramFiles%\oscheck\how to decode files.hta
%ProgramFiles%\pshost\how to decode files.hta
%ProgramFiles%\outlook\how to decode files.hta
%ProgramFiles%\internet explorer\how to decode files.hta
%ProgramFiles%\qip\how to decode files.hta
%ProgramFiles%\sargui\how to decode files.hta
%ProgramFiles%\runsetup\how to decode files.hta
%ProgramFiles%\rulaunch\how to decode files.hta
%ProgramFiles%\rescue\how to decode files.hta
%ProgramFiles%\rfwmain\how to decode files.hta
%ProgramFiles%\outpost\how to decode files.hta
%ProgramFiles%\remover\how to decode files.hta
%ProgramFiles%\myagttry\how to decode files.hta
%ProgramFiles%\navapsvc\how to decode files.hta
%ProgramFiles%\navlu32\how to decode files.hta
%ProgramFiles%\navstub\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\msdn\how to decode files.hta
%ALLUSERSPROFILE%\microsoft help\how to decode files.hta
%CommonProgramFiles(x86)%\system\msadc\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\vs7debug\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\office14\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\help\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\information retrieval\how to decode files.hta
%ProgramFiles%\a2scan\how to decode files.hta
%ProgramFiles%\avcenter\how to decode files.hta
%ProgramFiles%\avadmin\how to decode files.hta
%ProgramFiles%\avconfig\how to decode files.hta
%ProgramFiles%\avconsol\how to decode files.hta
%ProgramFiles%\avgamsvr\how to decode files.hta
%ProgramFiles%\a2guard\how to decode files.hta
%ProgramFiles%\a2hijackfree\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\ink\how to decode files.hta
%ProgramFiles%\autostartexplorer\how to decode files.hta
C:\users\default\how to decode files.hta
%ProgramFiles%\autodown\how to decode files.hta
%CommonProgramFiles(x86)%\microsoft shared\vgx\how to decode files.hta
%ProgramFiles%\autotrace\how to decode files.hta
%ProgramFiles%\navw32\how to decode files.hta
%ProgramFiles%\navwnt\how to decode files.hta
%ProgramFiles%\neowatchlog\how to decode files.hta
%ProgramFiles%\neowatchtray\how to decode files.hta
%ProgramFiles%\netstatviewer\how to decode files.hta
%ProgramFiles%\fsfwwscr\how to decode files.hta
%ProgramFiles%\fsgetwab\how to decode files.hta
%ProgramFiles%\fsgk32\how to decode files.hta
%ProgramFiles%\fsgk32st\how to decode files.hta
%ProgramFiles%\fsguidll\how to decode files.hta
%ProgramFiles%\fsguiexe\how to decode files.hta
%ProgramFiles%\fshdll32\how to decode files.hta
%ProgramFiles%\fshelp\how to decode files.hta
%ProgramFiles%\fshotfix\how to decode files.hta
%ProgramFiles%\fsihcomp\how to decode files.hta
%ProgramFiles%\fsihs\how to decode files.hta
%ProgramFiles%\fsfwwsch\how to decode files.hta
%ALLUSERSPROFILE%\microsoft\user account pictures\how to decode files.hta
%ProgramFiles(x86)%\internet explorer\how to decode files.hta

Moves the following files

from %ProgramFiles(x86)%\desktop.ini to %ProgramFiles(x86)%\desktop.ini id kz3iwoau+avx.badnews
from %ProgramFiles%\kavpf\kavpf.exe to %ProgramFiles%\kavpf\kavpf.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\kavmm\kavmm.exe to %ProgramFiles%\kavmm\kavmm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\k-meleon\k-meleon.exe to %ProgramFiles%\k-meleon\k-meleon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\kav\kav.exe to %ProgramFiles%\kav\kav.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\luinit\luinit.exe to %ProgramFiles%\luinit\luinit.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\itunes\itunes.exe to %ProgramFiles%\itunes\itunes.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\issvc\issvc.exe to %ProgramFiles%\issvc\issvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ispwdsvc\ispwdsvc.exe to %ProgramFiles%\ispwdsvc\ispwdsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ispnews\ispnews.exe to %ProgramFiles%\ispnews\ispnews.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\isafe\isafe.exe to %ProgramFiles%\isafe\isafe.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\iron\iron.exe to %ProgramFiles%\iron\iron.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\instlsp\instlsp.exe to %ProgramFiles%\instlsp\instlsp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\konnekt\konnekt.exe to %ProgramFiles%\konnekt\konnekt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\isuac\isuac.exe to %ProgramFiles%\isuac\isuac.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mcshield\mcshield.exe to %ProgramFiles%\mcshield\mcshield.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\kavpfw\kavpfw.exe to %ProgramFiles%\kavpfw\kavpfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\kavstart\kavstart.exe to %ProgramFiles%\kavstart\kavstart.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\kavsvc\kavsvc.exe to %ProgramFiles%\kavsvc\kavsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\launcher\launcher.exe to %ProgramFiles%\launcher\launcher.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\maplestory\maplestory.exe to %ProgramFiles%\maplestory\maplestory.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\malwareremoval\malwareremoval.exe to %ProgramFiles%\malwareremoval\malwareremoval.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\magent\magent.exe to %ProgramFiles%\magent\magent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\luupdate\luupdate.exe to %ProgramFiles%\luupdate\luupdate.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\installlsp\installlsp.exe to %ProgramFiles%\installlsp\installlsp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\luna\luna.exe to %ProgramFiles%\luna\luna.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\luconfig\luconfig.exe to %ProgramFiles%\luconfig\luconfig.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\installlicense\installlicense.exe to %ProgramFiles%\installlicense\installlicense.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\lucheck\lucheck.exe to %ProgramFiles%\lucheck\lucheck.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\lpfw\lpfw.exe to %ProgramFiles%\lpfw\lpfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\lotroclient\lotroclient.exe to %ProgramFiles%\lotroclient\lotroclient.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\logwatnt\logwatnt.exe to %ProgramFiles%\logwatnt\logwatnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\liveupdate\liveupdate.exe to %ProgramFiles%\liveupdate\liveupdate.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mcregwiz\mcregwiz.exe to %ProgramFiles%\mcregwiz\mcregwiz.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\livesrv\livesrv.exe to %ProgramFiles%\livesrv\livesrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\licmgr\licmgr.exe to %ProgramFiles%\licmgr\licmgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe to %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\maxthon\maxthon.exe to %ProgramFiles%\maxthon\maxthon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\installcavs\installcavs.exe to %ProgramFiles%\installcavs\installcavs.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inort\inort.exe to %ProgramFiles%\inort\inort.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\hipsdiag\hipsdiag.exe to %ProgramFiles%\hipsdiag\hipsdiag.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\helper\helper.exe to %ProgramFiles%\helper\helper.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\helpctr\helpctr.exe to %ProgramFiles%\helpctr\helpctr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gw\gw.exe to %ProgramFiles%\gw\gw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\guardnt\guardnt.exe to %ProgramFiles%\guardnt\guardnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\iamserv\iamserv.exe to %ProgramFiles%\iamserv\iamserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\guardgni\guardgni.exe to %ProgramFiles%\guardgni\guardgni.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\googletalk\googletalk.exe to %ProgramFiles%\googletalk\googletalk.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\googledesktop\googledesktop.exe to %ProgramFiles%\googledesktop\googledesktop.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gnotify\gnotify.exe to %ProgramFiles%\gnotify\gnotify.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe to %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe to %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gg\gg.exe to %ProgramFiles%\gg\gg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\hsockpe\hsockpe.exe to %ProgramFiles%\hsockpe\hsockpe.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\googleupdate\googleupdate.exe to %ProgramFiles%\googleupdate\googleupdate.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\hregmon\hregmon.exe to %ProgramFiles%\hregmon\hregmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\hrres\hrres.exe to %ProgramFiles%\hrres\hrres.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\iamapp\iamapp.exe to %ProgramFiles%\iamapp\iamapp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\icq\icq.exe to %ProgramFiles%\icq\icq.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inocit\inocit.exe to %ProgramFiles%\inocit\inocit.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inorpc\inorpc.exe to %ProgramFiles%\inorpc\inorpc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\incmail\incmail.exe to %ProgramFiles%\incmail\incmail.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\impcnt\impcnt.exe to %ProgramFiles%\impcnt\impcnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inphasenxd\inphasenxd.exe to %ProgramFiles%\inphasenxd\inphasenxd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inouptng\inouptng.exe to %ProgramFiles%\inouptng\inouptng.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\imnotfy\imnotfy.exe to %ProgramFiles%\imnotfy\imnotfy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\inotask\inotask.exe to %ProgramFiles%\inotask\inotask.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ih8run\ih8run.exe to %ProgramFiles%\ih8run\ih8run.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\iexplore\iexplore.exe to %ProgramFiles%\iexplore\iexplore.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ieuser\ieuser.exe to %ProgramFiles%\ieuser\ieuser.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ieregfix\ieregfix.exe to %ProgramFiles%\ieregfix\ieregfix.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\icqlite\icqlite.exe to %ProgramFiles%\icqlite\icqlite.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\imapp\imapp.exe to %ProgramFiles%\imapp\imapp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ilaunchr\ilaunchr.exe to %ProgramFiles%\ilaunchr\ilaunchr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ih8\ih8.exe to %ProgramFiles%\ih8\ih8.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe to %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mcupdmgr\mcupdmgr.exe to %ProgramFiles%\mcupdmgr\mcupdmgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mcvsshld\mcvsshld.exe to %ProgramFiles%\mcvsshld\mcvsshld.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\chrome.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nod32krn\nod32krn.exe to %ProgramFiles%\nod32krn\nod32krn.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mp3theater\mp3theater.exe to %ProgramFiles%\mp3theater\mp3theater.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nisoptui\nisoptui.exe to %ProgramFiles%\nisoptui\nisoptui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mva\mva.exe to %ProgramFiles%\mva\mva.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\msnmsgr\msnmsgr.exe to %ProgramFiles%\msnmsgr\msnmsgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\msn6\msn6.exe to %ProgramFiles%\msn6\msn6.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nod32kui\nod32kui.exe to %ProgramFiles%\nod32kui\nod32kui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\msmpsvc\msmpsvc.exe to %ProgramFiles%\msmpsvc\msmpsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nod\nod.exe to %ProgramFiles%\nod\nod.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mpftray\mpftray.exe to %ProgramFiles%\mpftray\mpftray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mp3tray\mp3tray.exe to %ProgramFiles%\mp3tray\mp3tray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mp3toys\mp3toys.exe to %ProgramFiles%\mp3toys\mp3toys.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mp3toystray\mp3toystray.exe to %ProgramFiles%\mp3toystray\mp3toystray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mfpmp\mfpmp.exe to %ProgramFiles%\mfpmp\mfpmp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\msimn\msimn.exe to %ProgramFiles%\msimn\msimn.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mpssvc\mpssvc.exe to %ProgramFiles%\mpssvc\mpssvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\memstring\memstring.exe to %ProgramFiles%\memstring\memstring.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mpeng\mpeng.exe to %ProgramFiles%\mpeng\mpeng.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nod32\nod32.exe to %ProgramFiles%\nod32\nod32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\notifyha\notifyha.exe to %ProgramFiles%\notifyha\notifyha.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\notstart\notstart.exe to %ProgramFiles%\notstart\notstart.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ge\ge.exe to %ProgramFiles%\ge\ge.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ntrtscan\ntrtscan.exe to %ProgramFiles%\ntrtscan\ntrtscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ntoskrnl\ntoskrnl.exe to %ProgramFiles%\ntoskrnl\ntoskrnl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nsstray\nsstray.exe to %ProgramFiles%\nsstray\nsstray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nssserv\nssserv.exe to %ProgramFiles%\nssserv\nssserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nsmdtr\nsmdtr.exe to %ProgramFiles%\nsmdtr\nsmdtr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\npfmsg\npfmsg.exe to %ProgramFiles%\npfmsg\npfmsg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\monlite\monlite.exe to %ProgramFiles%\monlite\monlite.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\npavtray\npavtray.exe to %ProgramFiles%\npavtray\npavtray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ntxconfig\ntxconfig.exe to %ProgramFiles%\ntxconfig\ntxconfig.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gcasserv\gcasserv.exe to %ProgramFiles%\gcasserv\gcasserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsuninst\fsuninst.exe to %ProgramFiles%\fsuninst\fsuninst.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\symproxysvc\symproxysvc.exe to %ProgramFiles%\symproxysvc\symproxysvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\symsport\symsport.exe to %ProgramFiles%\symsport\symsport.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\svcntaux\svcntaux.exe to %ProgramFiles%\svcntaux\svcntaux.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\uninstallcavs\uninstallcavs.exe to %ProgramFiles%\uninstallcavs\uninstallcavs.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\uninstaller\uninstaller.exe to %ProgramFiles%\uninstaller\uninstaller.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\uupd\uupd.exe to %ProgramFiles%\uupd\uupd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\uninstalllsp\uninstalllsp.exe to %ProgramFiles%\uninstalllsp\uninstalllsp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vsstat\vsstat.exe to %ProgramFiles%\vsstat\vsstat.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vsserv\vsserv.exe to %ProgramFiles%\vsserv\vsserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vsmon\vsmon.exe to %ProgramFiles%\vsmon\vsmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\uiscan\uiscan.exe to %ProgramFiles%\uiscan\uiscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\una\una.exe to %ProgramFiles%\una\una.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vshwin32\vshwin32.exe to %ProgramFiles%\vshwin32\vshwin32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\swriter\swriter.exe to %ProgramFiles%\swriter\swriter.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\wclose\wclose.exe to %ProgramFiles%\wclose\wclose.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\symlcsvc\symlcsvc.exe to %ProgramFiles%\symlcsvc\symlcsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\symantecrootinstaller\symantecrootinstaller.exe to %ProgramFiles%\symantecrootinstaller\symantecrootinstaller.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sweb\sweb.exe to %ProgramFiles%\sweb\sweb.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\swdsvc\swdsvc.exe to %ProgramFiles%\swdsvc\swdsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vba32ldr\vba32ldr.exe to %ProgramFiles%\vba32ldr\vba32ldr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vba32ifs\vba32ifs.exe to %ProgramFiles%\vba32ifs\vba32ifs.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\viritexp\viritexp.exe to %ProgramFiles%\viritexp\viritexp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vettray\vettray.exe to %ProgramFiles%\vettray\vettray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vcrmon\vcrmon.exe to %ProgramFiles%\vcrmon\vcrmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\twelvesky2\twelvesky2.exe to %ProgramFiles%\twelvesky2\twelvesky2.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vchk\vchk.exe to %ProgramFiles%\vchk\vchk.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tmas\tmas.exe to %ProgramFiles%\tmas\tmas.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\upgrepl\upgrepl.exe to %ProgramFiles%\upgrepl\upgrepl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\updater\updater.exe to %ProgramFiles%\updater\updater.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\up2date\up2date.exe to %ProgramFiles%\up2date\up2date.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\updaterui\updaterui.exe to %ProgramFiles%\updaterui\updaterui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\unp_test\unp_test.exe to %ProgramFiles%\unp_test\unp_test.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\swagent\swagent.exe to %ProgramFiles%\swagent\swagent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vbsntw\vbsntw.exe to %ProgramFiles%\vbsntw\vbsntw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\swdoctor\swdoctor.exe to %ProgramFiles%\swdoctor\swdoctor.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\updclient\updclient.exe to %ProgramFiles%\updclient\updclient.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vba32pp3\vba32pp3.exe to %ProgramFiles%\vba32pp3\vba32pp3.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\trtddptr\trtddptr.exe to %ProgramFiles%\trtddptr\trtddptr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winss\winss.exe to %ProgramFiles%\winss\winss.exe id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\crashreporter.ini to %ProgramFiles%\firefox\crashreporter.ini id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\clarity.thmx to %ProgramFiles%\microsoft office\document themes 14\clarity.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\crashreporter_override.ini id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\dependentlibs.list id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\firefox.exe to %ProgramFiles%\firefox\firefox.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\chrome.manifest id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\composite.thmx to %ProgramFiles%\microsoft office\document themes 14\composite.thmx id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\office14\accicons.exe to %ProgramFiles%\microsoft office\office14\accicons.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winrar\ace32loader.exe to %ProgramFiles%\winrar\ace32loader.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\freebl3.dll to %ProgramFiles%\firefox\freebl3.dll id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\concourse.thmx to %ProgramFiles%\microsoft office\document themes 14\concourse.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\civic.thmx to %ProgramFiles%\microsoft office\document themes 14\civic.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\office14\accddslm.dll to %ProgramFiles%\microsoft office\office14\accddslm.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\crashreporter.exe to %ProgramFiles%\firefox\crashreporter.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\blocklist.xml id kz3iwoau+avx.badnews
from %ProgramFiles%\thgnard\thgnard.exe to %ProgramFiles%\thgnard\thgnard.exe id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\esl\aiodlite.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\esl\aiodlite.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\office14\accdds.dll to %ProgramFiles%\microsoft office\office14\accdds.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\trojanhunter\trojanhunter.exe to %ProgramFiles%\trojanhunter\trojanhunter.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winrar\7zxa.dll to %ProgramFiles%\winrar\7zxa.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\winroute\winroute.exe to %ProgramFiles%\winroute\winroute.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\austin.thmx to %ProgramFiles%\microsoft office\document themes 14\austin.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\black tie.thmx to %ProgramFiles%\microsoft office\document themes 14\black tie.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\office14\accddsf.dll to %ProgramFiles%\microsoft office\office14\accddsf.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\application.ini id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\microsoft office\document themes 14\aspect.thmx to %ProgramFiles%\microsoft office\document themes 14\aspect.thmx id kz3iwoau+avx.badnews
from %ProgramFiles%\thunderbird\thunderbird.exe to %ProgramFiles%\thunderbird\thunderbird.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\thebat\thebat.exe to %ProgramFiles%\thebat\thebat.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsavwsch\fsavwsch.exe to %ProgramFiles%\fsavwsch\fsavwsch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsavstrt\fsavstrt.exe to %ProgramFiles%\fsavstrt\fsavstrt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsavgui\fsavgui.exe to %ProgramFiles%\fsavgui\fsavgui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsavaui\fsavaui.exe to %ProgramFiles%\fsavaui\fsavaui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsav32\fsav32.exe to %ProgramFiles%\fsav32\fsav32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\windump\windump.exe to %ProgramFiles%\windump\windump.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsav\fsav.exe to %ProgramFiles%\fsav\fsav.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsaua\fsaua.exe to %ProgramFiles%\fsaua\fsaua.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsample\fsample.exe to %ProgramFiles%\fsample\fsample.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\freshclam\freshclam.exe to %ProgramFiles%\freshclam\freshclam.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fpwin\fpwin.exe to %ProgramFiles%\fpwin\fpwin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fptrayproc\fptrayproc.exe to %ProgramFiles%\fptrayproc\fptrayproc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsdbuh\fsdbuh.exe to %ProgramFiles%\fsdbuh\fsdbuh.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsdfwd\fsdfwd.exe to %ProgramFiles%\fsdfwd\fsdfwd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsauach\fsauach.exe to %ProgramFiles%\fsauach\fsauach.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsavwscr\fsavwscr.exe to %ProgramFiles%\fsavwscr\fsavwscr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsbwsys\fsbwsys.exe to %ProgramFiles%\fsbwsys\fsbwsys.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsdiag\fsdiag.exe to %ProgramFiles%\fsdiag\fsdiag.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsdiagui\fsdiagui.exe to %ProgramFiles%\fsdiagui\fsdiagui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fstlui\fstlui.exe to %ProgramFiles%\fstlui\fstlui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fssw\fssw.exe to %ProgramFiles%\fssw\fssw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsstm\fsstm.exe to %ProgramFiles%\fsstm\fsstm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fssm32\fssm32.exe to %ProgramFiles%\fssm32\fssm32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fpscan\fpscan.exe to %ProgramFiles%\fpscan\fpscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fssg\fssg.exe to %ProgramFiles%\fssg\fssg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsqh\fsqh.exe to %ProgramFiles%\fsqh\fsqh.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winmail\winmail.exe to %ProgramFiles%\winmail\winmail.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fspex\fspex.exe to %ProgramFiles%\fspex\fspex.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsmb32\fsmb32.exe to %ProgramFiles%\fsmb32\fsmb32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsma32\fsma32.exe to %ProgramFiles%\fsma32\fsma32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsm32\fsm32.exe to %ProgramFiles%\fsm32\fsm32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fslaunch\fslaunch.exe to %ProgramFiles%\fslaunch\fslaunch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fssf\fssf.exe to %ProgramFiles%\fssf\fssf.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsus\fsus.exe to %ProgramFiles%\fsus\fsus.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ftpte\ftpte.exe to %ProgramFiles%\ftpte\ftpte.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fspc\fspc.exe to %ProgramFiles%\fspc\fspc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\windowlist\windowlist.exe to %ProgramFiles%\windowlist\windowlist.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\viritsvc\viritsvc.exe to %ProgramFiles%\viritsvc\viritsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\wincmd32\wincmd32.exe to %ProgramFiles%\wincmd32\wincmd32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vrmonsvc\vrmonsvc.exe to %ProgramFiles%\vrmonsvc\vrmonsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vrfwsvc\vrfwsvc.exe to %ProgramFiles%\vrfwsvc\vrfwsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\visthupd\visthupd.exe to %ProgramFiles%\visthupd\visthupd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vba32ecm\vba32ecm.exe to %ProgramFiles%\vba32ecm\vba32ecm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\symwsc\symwsc.exe to %ProgramFiles%\symwsc\symwsc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\viruskeeper\viruskeeper.exe to %ProgramFiles%\viruskeeper\viruskeeper.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vistaux\vistaux.exe to %ProgramFiles%\vistaux\vistaux.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\vrrw32\vrrw32.exe to %ProgramFiles%\vrrw32\vrrw32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sysinfo\sysinfo.exe to %ProgramFiles%\sysinfo\sysinfo.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\wil\wil.exe to %ProgramFiles%\wil\wil.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winaw32\winaw32.exe to %ProgramFiles%\winaw32\winaw32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\webscanx\webscanx.exe to %ProgramFiles%\webscanx\webscanx.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\webproxy\webproxy.exe to %ProgramFiles%\webproxy\webproxy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tgsvcstp\tgsvcstp.exe to %ProgramFiles%\tgsvcstp\tgsvcstp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tbmon\tbmon.exe to %ProgramFiles%\tbmon\tbmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tca\tca.exe to %ProgramFiles%\tca\tca.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\teatimer\teatimer.exe to %ProgramFiles%\teatimer\teatimer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gc\gc.exe to %ProgramFiles%\gc\gc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\gcasdtserv\gcasdtserv.exe to %ProgramFiles%\gcasdtserv\gcasdtserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsdc\fsdc.exe to %ProgramFiles%\fsdc\fsdc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\usdownloader\usdownloader.exe to %ProgramFiles%\usdownloader\usdownloader.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\upsobmaker\upsobmaker.exe to %ProgramFiles%\upsobmaker\upsobmaker.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\unopkg\unopkg.exe to %ProgramFiles%\unopkg\unopkg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\unoinfo\unoinfo.exe to %ProgramFiles%\unoinfo\unoinfo.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tmlisten\tmlisten.exe to %ProgramFiles%\tmlisten\tmlisten.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\virusnews\virusnews.exe to %ProgramFiles%\virusnews\virusnews.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\winbaram\winbaram.exe to %ProgramFiles%\winbaram\winbaram.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\visthlic\visthlic.exe to %ProgramFiles%\visthlic\visthlic.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tmntsrv\tmntsrv.exe to %ProgramFiles%\tmntsrv\tmntsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\totalcmd\totalcmd.exe to %ProgramFiles%\totalcmd\totalcmd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tracelog\tracelog.exe to %ProgramFiles%\tracelog\tracelog.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\traymon\traymon.exe to %ProgramFiles%\traymon\traymon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\trillian\trillian.exe to %ProgramFiles%\trillian\trillian.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\trojanguarder\trojanguarder.exe to %ProgramFiles%\trojanguarder\trojanguarder.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tmpfw\tmpfw.exe to %ProgramFiles%\tmpfw\tmpfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tmproxy\tmproxy.exe to %ProgramFiles%\tmproxy\tmproxy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\tnbutil\tnbutil.exe to %ProgramFiles%\tnbutil\tnbutil.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\onaccessinstaller\onaccessinstaller.exe to %ProgramFiles%\onaccessinstaller\onaccessinstaller.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\partin9x\partin9x.exe to %ProgramFiles%\partin9x\partin9x.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavproxy\pavproxy.exe to %ProgramFiles%\pavproxy\pavproxy.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavprot\pavprot.exe to %ProgramFiles%\pavprot\pavprot.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavprsrv\pavprsrv.exe to %ProgramFiles%\pavprsrv\pavprsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavsrv51\pavsrv51.exe to %ProgramFiles%\pavsrv51\pavsrv51.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\opera\opera.exe to %ProgramFiles%\opera\opera.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pccpfw\pccpfw.exe to %ProgramFiles%\pccpfw\pccpfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pcctlcom\pcctlcom.exe to %ProgramFiles%\pcctlcom\pcctlcom.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pm\pm.exe to %ProgramFiles%\pm\pm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pccntmon\pccntmon.exe to %ProgramFiles%\pccntmon\pccntmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxconsole\pxconsole.exe to %ProgramFiles%\pxconsole\pxconsole.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxl\pxl.exe to %ProgramFiles%\pxl\pxl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxl1\pxl1.exe to %ProgramFiles%\pxl1\pxl1.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxreset\pxreset.exe to %ProgramFiles%\pxreset\pxreset.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\oscheck\oscheck.exe to %ProgramFiles%\oscheck\oscheck.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\outlook\outlook.exe to %ProgramFiles%\outlook\outlook.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\partinnt\partinnt.exe to %ProgramFiles%\partinnt\partinnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\outpost\outpost.exe to %ProgramFiles%\outpost\outpost.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sargui\sargui.exe to %ProgramFiles%\sargui\sargui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\runsetup\runsetup.exe to %ProgramFiles%\runsetup\runsetup.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rulaunch\rulaunch.exe to %ProgramFiles%\rulaunch\rulaunch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rescue\rescue.exe to %ProgramFiles%\rescue\rescue.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rfwmain\rfwmain.exe to %ProgramFiles%\rfwmain\rfwmain.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pshost\pshost.exe to %ProgramFiles%\pshost\pshost.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\partin\partin.exe to %ProgramFiles%\partin\partin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxagent\pxagent.exe to %ProgramFiles%\pxagent\pxagent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\partinfo\partinfo.exe to %ProgramFiles%\partinfo\partinfo.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\netxray\netxray.exe to %ProgramFiles%\netxray\netxray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\removeit\removeit.exe to %ProgramFiles%\removeit\removeit.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\polutil\polutil.exe to %ProgramFiles%\polutil\polutil.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\postinstall\postinstall.exe to %ProgramFiles%\postinstall\postinstall.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ppfw\ppfw.exe to %ProgramFiles%\ppfw\ppfw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pctav\pctav.exe to %ProgramFiles%\pctav\pctav.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pidgin\pidgin.exe to %ProgramFiles%\pidgin\pidgin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pertsk\pertsk.exe to %ProgramFiles%\pertsk\pertsk.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pqboot32\pqboot32.exe to %ProgramFiles%\pqboot32\pqboot32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\psimsvc\psimsvc.exe to %ProgramFiles%\psimsvc\psimsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pmagic\pmagic.exe to %ProgramFiles%\pmagic\pmagic.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pccguide\pccguide.exe to %ProgramFiles%\pccguide\pccguide.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavfnsvr\pavfnsvr.exe to %ProgramFiles%\pavfnsvr\pavfnsvr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavkre\pavkre.exe to %ProgramFiles%\pavkre\pavkre.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pavfires\pavfires.exe to %ProgramFiles%\pavfires\pavfires.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pm8flash\pm8flash.exe to %ProgramFiles%\pm8flash\pm8flash.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pmagicbt\pmagicbt.exe to %ProgramFiles%\pmagicbt\pmagicbt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pmagicnt\pmagicnt.exe to %ProgramFiles%\pmagicnt\pmagicnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sporder\sporder.exe to %ProgramFiles%\sporder\sporder.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\streetsolkshim\streetsolkshim.exe to %ProgramFiles%\streetsolkshim\streetsolkshim.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\submitfiles\submitfiles.exe to %ProgramFiles%\submitfiles\submitfiles.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\accessiblemarshal.dll to %ProgramFiles%\firefox\accessiblemarshal.dll id kz3iwoau+avx.badnews
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spiderui\spiderui.exe to %ProgramFiles%\spiderui\spiderui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini id kz3iwoau+avx.badnews
from %ProgramFiles%\webmoney\webmoney.exe to %ProgramFiles%\webmoney\webmoney.exe id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf id kz3iwoau+avx.badnews
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fprottray\fprottray.exe to %ProgramFiles%\fprottray\fprottray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\webfiltr\webfiltr.exe to %ProgramFiles%\webfiltr\webfiltr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\windows sidebar\settings.ini to %ProgramFiles%\windows sidebar\settings.ini id kz3iwoau+avx.badnews
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\start_diag\start_diag.exe to %ProgramFiles%\start_diag\start_diag.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\stopsignav\stopsignav.exe to %ProgramFiles%\stopsignav\stopsignav.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\remover\remover.exe to %ProgramFiles%\remover\remover.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\qip\qip.exe to %ProgramFiles%\qip\qip.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spiderml\spiderml.exe to %ProgramFiles%\spiderml\spiderml.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spidernt\spidernt.exe to %ProgramFiles%\spidernt\spidernt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spybotsd\spybotsd.exe to %ProgramFiles%\spybotsd\spybotsd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sro_client\sro_client.exe to %ProgramFiles%\sro_client\sro_client.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\register\register.exe to %ProgramFiles%\register\register.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sbase\sbase.exe to %ProgramFiles%\sbase\sbase.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sdinvoker\sdinvoker.exe to %ProgramFiles%\sdinvoker\sdinvoker.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sdloader\sdloader.exe to %ProgramFiles%\sdloader\sdloader.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sdraw\sdraw.exe to %ProgramFiles%\sdraw\sdraw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sdtrayapp\sdtrayapp.exe to %ProgramFiles%\sdtrayapp\sdtrayapp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\seamonkey\seamonkey.exe to %ProgramFiles%\seamonkey\seamonkey.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sndsrvc\sndsrvc.exe to %ProgramFiles%\sndsrvc\sndsrvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sigtool\sigtool.exe to %ProgramFiles%\sigtool\sigtool.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sitecli\sitecli.exe to %ProgramFiles%\sitecli\sitecli.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\skype\skype.exe to %ProgramFiles%\skype\skype.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\skypepm\skypepm.exe to %ProgramFiles%\skypepm\skypepm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\smartftp\smartftp.exe to %ProgramFiles%\smartftp\smartftp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\smath\smath.exe to %ProgramFiles%\smath\smath.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\savscan\savscan.exe to %ProgramFiles%\savscan\savscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ravmon\ravmon.exe to %ProgramFiles%\ravmon\ravmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\simpress\simpress.exe to %ProgramFiles%\simpress\simpress.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sdhelp\sdhelp.exe to %ProgramFiles%\sdhelp\sdhelp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\scalc\scalc.exe to %ProgramFiles%\scalc\scalc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rat\rat.exe to %ProgramFiles%\rat\rat.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rapget\rapget.exe to %ProgramFiles%\rapget\rapget.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\iris\iris.exe to %ProgramFiles%\iris\iris.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spbbcsvc\spbbcsvc.exe to %ProgramFiles%\spbbcsvc\spbbcsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spamcfg\spamcfg.exe to %ProgramFiles%\spamcfg\spamcfg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\soffice\soffice.exe to %ProgramFiles%\soffice\soffice.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\smc\smc.exe to %ProgramFiles%\smc\smc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\so3d\so3d.exe to %ProgramFiles%\so3d\so3d.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\python\python.exe to %ProgramFiles%\python\python.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\seccenter\seccenter.exe to %ProgramFiles%\seccenter\seccenter.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\qhwscsvc\qhwscsvc.exe to %ProgramFiles%\qhwscsvc\qhwscsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\quaranti\quaranti.exe to %ProgramFiles%\quaranti\quaranti.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\quickstart\quickstart.exe to %ProgramFiles%\quickstart\quickstart.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ragexe\ragexe.exe to %ProgramFiles%\ragexe\ragexe.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ragfree\ragfree.exe to %ProgramFiles%\ragfree\ragfree.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sniffer\sniffer.exe to %ProgramFiles%\sniffer\sniffer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\prevxsetup\prevxsetup.exe to %ProgramFiles%\prevxsetup\prevxsetup.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\privatebrowser\privatebrowser.exe to %ProgramFiles%\privatebrowser\privatebrowser.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\qrtfix\qrtfix.exe to %ProgramFiles%\qrtfix\qrtfix.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sfagent\sfagent.exe to %ProgramFiles%\sfagent\sfagent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\flashfxp\flashfxp.exe to %ProgramFiles%\flashfxp\flashfxp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rtvscan\rtvscan.exe to %ProgramFiles%\rtvscan\rtvscan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firesvc\firesvc.exe to %ProgramFiles%\firesvc\firesvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\flashgot\flashgot.exe to %ProgramFiles%\flashgot\flashgot.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\flock\flock.exe to %ProgramFiles%\flock\flock.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firetray\firetray.exe to %ProgramFiles%\firetray\firetray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\httplook\httplook.exe to %ProgramFiles%\httplook\httplook.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\processviewer\processviewer.exe to %ProgramFiles%\processviewer\processviewer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\realmon\realmon.exe to %ProgramFiles%\realmon\realmon.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\safari\safari.exe to %ProgramFiles%\safari\safari.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sarcli\sarcli.exe to %ProgramFiles%\sarcli\sarcli.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\savmain\savmain.exe to %ProgramFiles%\savmain\savmain.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\savprogress\savprogress.exe to %ProgramFiles%\savprogress\savprogress.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\scanner\scanner.exe to %ProgramFiles%\scanner\scanner.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\foxit\foxit to %ProgramFiles%\foxit\foxit id kz3iwoau+avx.badnews
from %ProgramFiles%\rq\rq.exe to %ProgramFiles%\rq\rq.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fpavserver\fpavserver.exe to %ProgramFiles%\fpavserver\fpavserver.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\sched\sched.exe to %ProgramFiles%\sched\sched.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\miro\miro.exe to %ProgramFiles%\miro\miro.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mir3game\mir3game.exe to %ProgramFiles%\mir3game\mir3game.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\miranda32\miranda32.exe to %ProgramFiles%\miranda32\miranda32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fpavupdm\fpavupdm.exe to %ProgramFiles%\fpavupdm\fpavupdm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pxsupport\pxsupport.exe to %ProgramFiles%\pxsupport\pxsupport.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\qklez\qklez.exe to %ProgramFiles%\qklez\qklez.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\spider\spider.exe to %ProgramFiles%\spider\spider.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\freebl3.chk id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\psctrls\psctrls.exe to %ProgramFiles%\psctrls\psctrls.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\navwnt\navwnt.exe to %ProgramFiles%\navwnt\navwnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\neowatchlog\neowatchlog.exe to %ProgramFiles%\neowatchlog\neowatchlog.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\neowatchtray\neowatchtray.exe to %ProgramFiles%\neowatchtray\neowatchtray.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\netstatviewer\netstatviewer.exe to %ProgramFiles%\netstatviewer\netstatviewer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsfwwscr\fsfwwscr.exe to %ProgramFiles%\fsfwwscr\fsfwwscr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsgetwab\fsgetwab.exe to %ProgramFiles%\fsgetwab\fsgetwab.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsihs\fsihs.exe to %ProgramFiles%\fsihs\fsihs.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsgk32\fsgk32.exe to %ProgramFiles%\fsgk32\fsgk32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsguidll\fsguidll.exe to %ProgramFiles%\fsguidll\fsguidll.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsguiexe\fsguiexe.exe to %ProgramFiles%\fsguiexe\fsguiexe.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fshdll32\fshdll32.exe to %ProgramFiles%\fshdll32\fshdll32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fshelp\fshelp.exe to %ProgramFiles%\fshelp\fshelp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fshotfix\fshotfix.exe to %ProgramFiles%\fshotfix\fshotfix.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\navlu32\navlu32.exe to %ProgramFiles%\navlu32\navlu32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\navapsvc\navapsvc.exe to %ProgramFiles%\navapsvc\navapsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\navw32\navw32.exe to %ProgramFiles%\navw32\navw32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\myagttry\myagttry.exe to %ProgramFiles%\myagttry\myagttry.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\myagtsvc\myagtsvc.exe to %ProgramFiles%\myagtsvc\myagtsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\rcimlby\rcimlby.exe to %ProgramFiles%\rcimlby\rcimlby.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\savadminservice\savadminservice.exe to %ProgramFiles%\savadminservice\savadminservice.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\scanningprocess\scanningprocess.exe to %ProgramFiles%\scanningprocess\scanningprocess.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsihcomp\fsihcomp.exe to %ProgramFiles%\fsihcomp\fsihcomp.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsgk32st\fsgk32st.exe to %ProgramFiles%\fsgk32st\fsgk32st.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fch32\fch32.exe to %ProgramFiles%\fch32\fch32.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fdmwi\fdmwi.exe to %ProgramFiles%\fdmwi\fdmwi.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\filezilla\filezilla.exe to %ProgramFiles%\filezilla\filezilla.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\firebird\firebird.exe to %ProgramFiles%\firebird\firebird.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\monsysnt\monsysnt.exe to %ProgramFiles%\monsysnt\monsysnt.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\mvc\mvc.exe to %ProgramFiles%\mvc\mvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ravtimer\ravtimer.exe to %ProgramFiles%\ravtimer\ravtimer.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fdm\fdm.exe to %ProgramFiles%\fdm\fdm.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\navstub\navstub.exe to %ProgramFiles%\navstub\navstub.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\fsfwwsch\fsfwwsch.exe to %ProgramFiles%\fsfwwsch\fsfwwsch.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pmagic9x\pmagic9x.exe to %ProgramFiles%\pmagic9x\pmagic9x.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nvcod\nvcod.exe to %ProgramFiles%\nvcod\nvcod.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nwservice\nwservice.exe to %ProgramFiles%\nwservice\nwservice.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\oasrv\oasrv.exe to %ProgramFiles%\oasrv\oasrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\oaui\oaui.exe to %ProgramFiles%\oaui\oaui.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ofcpfwsvc\ofcpfwsvc.exe to %ProgramFiles%\ofcpfwsvc\ofcpfwsvc.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nvcte\nvcte.exe to %ProgramFiles%\nvcte\nvcte.exe id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm to %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm id kz3iwoau+avx.badnews
from %ProgramFiles%\nupgrade\nupgrade.exe to %ProgramFiles%\nupgrade\nupgrade.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\oget\oget.exe to %ProgramFiles%\oget\oget.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\preconfig\preconfig.exe to %ProgramFiles%\preconfig\preconfig.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pqpent\pqpent.exe to %ProgramFiles%\pqpent\pqpent.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pqpe9x\pqpe9x.exe to %ProgramFiles%\pqpe9x\pqpe9x.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pqpe\pqpe.exe to %ProgramFiles%\pqpe\pqpe.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\pqbw\pqbw.exe to %ProgramFiles%\pqbw\pqbw.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\oladdin\oladdin.exe to %ProgramFiles%\oladdin\oladdin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\prevsrv\prevsrv.exe to %ProgramFiles%\prevsrv\prevsrv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\preupd\preupd.exe to %ProgramFiles%\preupd\preupd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\protect\protect.exe to %ProgramFiles%\protect\protect.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ps\ps.exe to %ProgramFiles%\ps\ps.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\nvcut\nvcut.exe to %ProgramFiles%\nvcut\nvcut.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe id kz3iwoau+avx.badnews
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe id kz3iwoau+avx.badnews
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe id kz3iwoau+avx.badnews

Substitutes the following executable files

<Full path to file>

Substitutes the following files

%CommonProgramFiles(x86)%\Services\verisign.bmp
%ALLUSERSPROFILE%\Microsoft Help\Hx.hxn
%ALLUSERSPROFILE%\microsoft help\hx.hxn id kz3iwoau+avx.badnews

Moves itself

from <Full path to file> to <Full path to file> id kz3iwoau+avx.badnews

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /c vssadmin delete shadows /all' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c vssadmin delete shadows /all

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial