Trojan.Encoder.24739

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'DP_Main' = '%APPDATA%\DP\DP_Main.exe'

Infects the following executable files

<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\ose.exe
C:\far2\plugins\ftp\lib\ftpprogress.fll
C:\far2\plugins\ftp\lib\ftpdirlist.fll
C:\far2\plugins\ftp\farftp.dll
C:\far2\plugins\arclite\arclite.dll
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll
C:\far2\plugins\arclite\7zsd.sfx
C:\far2\plugins\arclite\7z.sfx
C:\far2\plugins\arclite\7z.dll
C:\far2\fexcept\fexcept.dll
C:\far2\fexcept\excdump.dll
C:\far2\fexcept\demangle32.dll
C:\far2\far.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\tcm851ax32.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe
C:\far2\plugins\arclite\7zcon.sfx
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll

Creates the following files on removable media

<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\hypothyroidism_slides.pptx
<Drive name for removable media>:\indogerman2010.pptx
<Drive name for removable media>:\writingcompletesarnarrative_1103.ppt
<Drive name for removable media>:\sacs_presentation_sacs_qep_improving_rt_education_final.ppt
<Drive name for removable media>:\proposaltemplates.ppt
<Drive name for removable media>:\metac.ppt
<Drive name for removable media>:\breakpoint.png
<Drive name for removable media>:\background.png
<Drive name for removable media>:\block.png
<Drive name for removable media>:\delongcacert.pem
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\cert.pem
<Drive name for removable media>:\investmentbankca_ca8.pem
<Drive name for removable media>:\ck_ugo.pem
<Drive name for removable media>:\spib_pima.pdf
<Drive name for removable media>:\fil_20060629111052.pdf
<Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf
<Drive name for removable media>:\lom602.pdf
<Drive name for removable media>:\51.mp4
<Drive name for removable media>:\d0068197bb5a41fea16a220c45390606.mp4
<Drive name for removable media>:\video_1.mp4
<Drive name for removable media>:\hhhlcert.pem
<Drive name for removable media>:\ituneshelpunavailable.html
<Drive name for removable media>:\samieee_obiee_presentation.pptx
<Drive name for removable media>:\price.zip
<Drive name for removable media>:\1sm_price.zip
<Drive name for removable media>:\productos.zip
<Drive name for removable media>:\excel_example.zip
<Drive name for removable media>:\2013_smccc_competition_points_jul2013.xlsx
<Drive name for removable media>:\suspendedcompanies.xlsx
<Drive name for removable media>:\highly_cited_2001.xlsx
<Drive name for removable media>:\cee_mmsprogram_summary_public.xlsx
<Drive name for removable media>:\al.xlsx
<Drive name for removable media>:\guide_reorganization_mapping.xls
<Drive name for removable media>:\removedtitles_records.xls
<Drive name for removable media>:\clip_480_5sec_6mbps_h264.mp4
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\babyboymaintoscenesbackground_pal.wmv
<Drive name for removable media>:\phytoremediation.rtf
<Drive name for removable media>:\military_callsigns_0311.rtf
<Drive name for removable media>:\static_electricity_easy_and_quick_activities.rtf
<Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
<Drive name for removable media>:\krsweden.rtf
<Drive name for removable media>:\fungalnameauthors.rtf
<Drive name for removable media>:\skos.rdf
<Drive name for removable media>:\taxus_baccata.rdf
<Drive name for removable media>:\20140114.rdf
<Drive name for removable media>:\elvisimp.rdf
<Drive name for removable media>:\fiche_inscription_2015.xls
<Drive name for removable media>:\foaf.rdf
<Drive name for removable media>:\spanner.mov
<Drive name for removable media>:\dag2_panel1_320_ref.mov
<Drive name for removable media>:\3.jpg
<Drive name for removable media>:\pmd.cer
<Drive name for removable media>:\adhd_and_obesity.docx
<Drive name for removable media>:\file_p_00000000_1371597592.docx
<Drive name for removable media>:\hadac_newsletter_july_2010_final.docx
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\lisp_success.doc
<Drive name for removable media>:\fi51.doc
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\contractualdeadlines.zip
<Drive name for removable media>:\thlps_keeper_mayer_1965.docx
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\contoso.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\toolbar.bmp
<Drive name for removable media>:\default.bmp
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\calculatorworksheet.xls
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe
<Drive name for removable media>:\parnas_01.jpg
<Drive name for removable media>:\4f0bf7ff71f28.jpg
<Drive name for removable media>:\2.jpg
<Drive name for removable media>:\1189.jpeg
<Drive name for removable media>:\210252809.jpeg
<Drive name for removable media>:\168.jpeg
<Drive name for removable media>:\2.jpeg
<Drive name for removable media>:\4f0bf7ff71f28.jpeg
<Drive name for removable media>:\pushkin.jpeg
<Drive name for removable media>:\region-north-karelia.jpeg
<Drive name for removable media>:\tcm851ax32.exe
<Drive name for removable media>:\iisstart.html
<Drive name for removable media>:\aoc_saq_d_v3_merchant.docx
<Drive name for removable media>:\api-hashmap.html
<Drive name for removable media>:\trivial-merge.html
<Drive name for removable media>:\about.html
<Drive name for removable media>:\tree_view.html
<Drive name for removable media>:\garden.htm
<Drive name for removable media>:\browse.htm
<Drive name for removable media>:\alert.htm
<Drive name for removable media>:\64bit_notes.htm
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\adadsi.html
<Drive name for removable media>:\#decrypt my files#.html

Modifies file system

Creates the following files

%APPDATA%\dp\runasadmin.dp
%CommonProgramFiles%\system\ole db\#decrypt my files#.html
%CommonProgramFiles%\system\ado\en-us\#decrypt my files#.html
%CommonProgramFiles%\system\en-us\#decrypt my files#.html
%CommonProgramFiles%\system\msadc\#decrypt my files#.html
%CommonProgramFiles%\system\msadc\en-us\#decrypt my files#.html
%CommonProgramFiles%\system\msmapi\#decrypt my files#.html
%CommonProgramFiles%\system\msmapi\1033\#decrypt my files#.html
%CommonProgramFiles%\system\ole db\en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web folders\1033\#decrypt my files#.html
%ProgramFiles%\copyx64\#decrypt my files#.html
%ProgramFiles%\courier\#decrypt my files#.html
%ProgramFiles%\cpd\#decrypt my files#.html
%ProgramFiles%\csendto\#decrypt my files#.html
%ProgramFiles%\cssexc\#decrypt my files#.html
%ProgramFiles%\custinstall\#decrypt my files#.html
%CommonProgramFiles%\system\ado\#decrypt my files#.html
%CommonProgramFiles%\system\#decrypt my files#.html
%CommonProgramFiles%\services\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web server extensions\14\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web server extensions\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\web folders\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vba\vba7\#decrypt my files#.html
%ProgramFiles%\custsetup\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vsto\10.0\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vsto\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vgx\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vc\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\#decrypt my files#.html
%CommonProgramFiles%\speechengines\microsoft\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\#decrypt my files#.html
%CommonProgramFiles%\speechengines\#decrypt my files#.html
%ProgramFiles%\cuteftp\#decrypt my files#.html
%ProgramFiles%\defwatch\#decrypt my files#.html
%ProgramFiles%\drwebscd\#decrypt my files#.html
%ProgramFiles%\drwebupw\#decrypt my files#.html
%ProgramFiles%\drwebwcl\#decrypt my files#.html
%ProgramFiles%\drwreg\#decrypt my files#.html
%ProgramFiles%\dvd maker\#decrypt my files#.html
%ProgramFiles%\dvd maker\en-us\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\#decrypt my files#.html
%ProgramFiles%\drweb32w\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\full\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\#decrypt my files#.html
%ProgramFiles%\drweb386\#decrypt my files#.html
%ProgramFiles%\drweb\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\triedit\en-us\#decrypt my files#.html
%ProgramFiles%\dekaron\#decrypt my files#.html
%ProgramFiles%\digsby\#decrypt my files#.html
%ProgramFiles%\digsby-app\#decrypt my files#.html
%ProgramFiles%\directftp\#decrypt my files#.html
%ProgramFiles%\dbconvert\#decrypt my files#.html
%ProgramFiles%\defensewall\#decrypt my files#.html
%ProgramFiles%\dbtool\#decrypt my files#.html
%ProgramFiles%\dislite\#decrypt my files#.html
%ProgramFiles%\drvctl\#decrypt my files#.html
%ProgramFiles%\drvirus\#decrypt my files#.html
%ProgramFiles%\drvmap\#decrypt my files#.html
%ProgramFiles%\drwadins\#decrypt my files#.html
%ProgramFiles%\dnf\#decrypt my files#.html
%ProgramFiles%\dp\#decrypt my files#.html
%ProgramFiles%\dpatrolq\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\vba\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\triedit\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\breeze\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\arctic\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\axis\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\blends\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\boldstri\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\canyon\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\capsules\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\cascade\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\compass\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\concrete\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\deepblue\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\echo\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\textconv\en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\textconv\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\stationery\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\source engine\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\smart tag\lists\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\expeditn\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\smart tag\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\proof\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\edge\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\ice\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\sonora\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\iris\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\strtedge\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\studio\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\water\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\slate\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\sky\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\spring\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\watermar\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\enfr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\esen\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\frar\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\fren\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\arfr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\translat\enes\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\eclipse\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\journal\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\layers\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\level\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\network\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\satin\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\indust\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\papyrus\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\radial\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\refined\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\ripple\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\pixel\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\profile\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\themes14\quad\#decrypt my files#.html
%ProgramFiles%\cavsn\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\#decrypt my files#.html
%ProgramFiles%\hsockpe\#decrypt my files#.html
%ProgramFiles%\gcasserv\#decrypt my files#.html
%ProgramFiles%\ge\#decrypt my files#.html
%ProgramFiles%\gg\#decrypt my files#.html
%ProgramFiles%\giantantispywaremain\#decrypt my files#.html
%ProgramFiles%\giantantispywareupdater\#decrypt my files#.html
%ProgramFiles%\gnotify\#decrypt my files#.html
%ProgramFiles%\guardnt\#decrypt my files#.html
%ProgramFiles%\iamapp\#decrypt my files#.html
%ProgramFiles%\gw\#decrypt my files#.html
%ProgramFiles%\helpctr\#decrypt my files#.html
%ProgramFiles%\helper\#decrypt my files#.html
%ProgramFiles%\hipsdiag\#decrypt my files#.html
%ProgramFiles%\hregmon\#decrypt my files#.html
%ProgramFiles%\hrres\#decrypt my files#.html
%ProgramFiles%\gcasdtserv\#decrypt my files#.html
%ProgramFiles%\gc\#decrypt my files#.html
%ProgramFiles%\fsma32\#decrypt my files#.html
%ProgramFiles%\fssm32\#decrypt my files#.html
%ProgramFiles%\ftpte\#decrypt my files#.html
%ProgramFiles%\fsus\#decrypt my files#.html
%ProgramFiles%\fsuninst\#decrypt my files#.html
%ProgramFiles%\fstlui\#decrypt my files#.html
%ProgramFiles%\fssw\#decrypt my files#.html
%ProgramFiles%\guardgni\#decrypt my files#.html
%ProgramFiles%\fsstm\#decrypt my files#.html
%ProgramFiles%\httplook\#decrypt my files#.html
%ProgramFiles%\fssf\#decrypt my files#.html
%ProgramFiles%\fsqh\#decrypt my files#.html
%ProgramFiles%\fspex\#decrypt my files#.html
%ProgramFiles%\fspc\#decrypt my files#.html
%ProgramFiles%\fsmb32\#decrypt my files#.html
%ProgramFiles%\fssg\#decrypt my files#.html
%ProgramFiles%\iamserv\#decrypt my files#.html
%ProgramFiles%\icq\#decrypt my files#.html
%ProgramFiles%\installlicense\#decrypt my files#.html
%ProgramFiles%\installlsp\#decrypt my files#.html
%ProgramFiles%\instlsp\#decrypt my files#.html
%ProgramFiles%\internet explorer\#decrypt my files#.html
%ProgramFiles%\internet explorer\en-us\#decrypt my files#.html
%ProgramFiles%\internet explorer\signup\#decrypt my files#.html
%ProgramFiles%\installcavs\#decrypt my files#.html
%ProgramFiles%\fsm32\#decrypt my files#.html
%ProgramFiles%\inphasenxd\#decrypt my files#.html
%ProgramFiles%\ispnews\#decrypt my files#.html
%ProgramFiles%\ispwdsvc\#decrypt my files#.html
%ProgramFiles%\issvc\#decrypt my files#.html
%ProgramFiles%\isuac\#decrypt my files#.html
%ProgramFiles%\itunes\#decrypt my files#.html
%ProgramFiles%\iron\#decrypt my files#.html
%ProgramFiles%\iris\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\#decrypt my files#.html
%ProgramFiles%\inotask\#decrypt my files#.html
%ProgramFiles%\imnotfy\#decrypt my files#.html
%ProgramFiles%\ieregfix\#decrypt my files#.html
%ProgramFiles%\ieuser\#decrypt my files#.html
%ProgramFiles%\iexplore\#decrypt my files#.html
%ProgramFiles%\ih8\#decrypt my files#.html
%ProgramFiles%\ih8run\#decrypt my files#.html
%ProgramFiles%\inouptng\#decrypt my files#.html
%ProgramFiles%\fslaunch\#decrypt my files#.html
%ProgramFiles%\icqlite\#decrypt my files#.html
%ProgramFiles%\impcnt\#decrypt my files#.html
%ProgramFiles%\incmail\#decrypt my files#.html
%ProgramFiles%\inocit\#decrypt my files#.html
%ProgramFiles%\inorpc\#decrypt my files#.html
%ProgramFiles%\inort\#decrypt my files#.html
%ProgramFiles%\imapp\#decrypt my files#.html
%ProgramFiles%\ilaunchr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\smart tag\1033\#decrypt my files#.html
%ProgramFiles%\fsihcomp\#decrypt my files#.html
%ProgramFiles%\fsgk32st\#decrypt my files#.html
%ProgramFiles%\eudora\#decrypt my files#.html
%ProgramFiles%\ewidoctrl\#decrypt my files#.html
%ProgramFiles%\exit_av\#decrypt my files#.html
%ProgramFiles%\ezantivirusregistrationcheck\#decrypt my files#.html
%ProgramFiles%\f-sched\#decrypt my files#.html
%ProgramFiles%\fameh32\#decrypt my files#.html
%ProgramFiles%\fch32\#decrypt my files#.html
%ProgramFiles%\flock\#decrypt my files#.html
%ProgramFiles%\fdm\#decrypt my files#.html
%ProgramFiles%\fdmwi\#decrypt my files#.html
%ProgramFiles%\filezilla\#decrypt my files#.html
%ProgramFiles%\firebird\#decrypt my files#.html
%ProgramFiles%\firesvc\#decrypt my files#.html
%ProgramFiles%\firetray\#decrypt my files#.html
%ProgramFiles%\etherd\#decrypt my files#.html
%ProgramFiles%\elementclient\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\push\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\#decrypt my files#.html
%ProgramFiles%\ekrn\#decrypt my files#.html
%ProgramFiles%\ehsniffer\#decrypt my files#.html
%ProgramFiles%\egni\#decrypt my files#.html
%ProgramFiles%\ecmd\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\#decrypt my files#.html
%ProgramFiles%\far\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\#decrypt my files#.html
%ProgramFiles%\flashgot\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\#decrypt my files#.html
%ProgramFiles%\foxit\#decrypt my files#.html
%ProgramFiles%\fpavserver\#decrypt my files#.html
%ProgramFiles%\fsdc\#decrypt my files#.html
%ProgramFiles%\fsdfwd\#decrypt my files#.html
%ProgramFiles%\fsdiag\#decrypt my files#.html
%ProgramFiles%\fsdiagui\#decrypt my files#.html
%ProgramFiles%\fsfwwsch\#decrypt my files#.html
%ProgramFiles%\fsfwwscr\#decrypt my files#.html
%ProgramFiles%\fsdbuh\#decrypt my files#.html
%ProgramFiles%\fsihs\#decrypt my files#.html
%ProgramFiles%\fsbwsys\#decrypt my files#.html
%ProgramFiles%\fsguidll\#decrypt my files#.html
%ProgramFiles%\fsguiexe\#decrypt my files#.html
%ProgramFiles%\fshdll32\#decrypt my files#.html
%ProgramFiles%\fshelp\#decrypt my files#.html
%ProgramFiles%\fshotfix\#decrypt my files#.html
%ProgramFiles%\fsgk32\#decrypt my files#.html
%ProgramFiles%\fsgetwab\#decrypt my files#.html
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\#decrypt my files#.html
%ProgramFiles%\fsavwsch\#decrypt my files#.html
%ProgramFiles%\fsauach\#decrypt my files#.html
%ProgramFiles%\fprottray\#decrypt my files#.html
%ProgramFiles%\fpscan\#decrypt my files#.html
%ProgramFiles%\fptrayproc\#decrypt my files#.html
%ProgramFiles%\fpwin\#decrypt my files#.html
%ProgramFiles%\freshclam\#decrypt my files#.html
%ProgramFiles%\fsavwscr\#decrypt my files#.html
%ProgramFiles%\flashfxp\#decrypt my files#.html
%ProgramFiles%\fpavupdm\#decrypt my files#.html
%ProgramFiles%\fsav\#decrypt my files#.html
%ProgramFiles%\fsav32\#decrypt my files#.html
%ProgramFiles%\fsavaui\#decrypt my files#.html
%ProgramFiles%\fsavgui\#decrypt my files#.html
%ProgramFiles%\fsavstrt\#decrypt my files#.html
%ProgramFiles%\fsaua\#decrypt my files#.html
%ProgramFiles%\fsample\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\#decrypt my files#.html
%ProgramFiles%\alsvc\#decrypt my files#.html
%ProgramFiles%\ageofconan\#decrypt my files#.html
%ProgramFiles%\ahnsd\#decrypt my files#.html
%ProgramFiles%\aim6\#decrypt my files#.html
%ProgramFiles%\aimpro\#decrypt my files#.html
%ProgramFiles%\airdefense\#decrypt my files#.html
%ProgramFiles%\almon\#decrypt my files#.html
%ProgramFiles%\amon\#decrypt my files#.html
%ProgramFiles%\ashavsrv\#decrypt my files#.html
%ProgramFiles%\amsn\#decrypt my files#.html
%ProgramFiles%\anti-trojan\#decrypt my files#.html
%ProgramFiles%\antivirus\#decrypt my files#.html
%ProgramFiles%\aoltbserver\#decrypt my files#.html
%ProgramFiles%\armor2net\#decrypt my files#.html
%ProgramFiles%\armorsurf\#decrypt my files#.html
%ProgramFiles%\agb5\#decrypt my files#.html
%ProgramFiles%\admunch\#decrypt my files#.html
%ProgramFiles%\ackwin32\#decrypt my files#.html
%ProgramFiles%\about\#decrypt my files#.html
%ProgramFiles%\aavshield\#decrypt my files#.html
%ProgramFiles%\a2wizard\#decrypt my files#.html
%ProgramFiles%\a2upd\#decrypt my files#.html
%ProgramFiles%\a2start\#decrypt my files#.html
%ProgramFiles%\ashchest\#decrypt my files#.html
%ProgramFiles%\a2scan\#decrypt my files#.html
%ProgramFiles%\a2hijackfree\#decrypt my files#.html
%ProgramFiles%\a2guard\#decrypt my files#.html
%ProgramFiles%\a2cmd\#decrypt my files#.html
%ProgramFiles%\360tray\#decrypt my files#.html
%ProgramFiles%\#decrypt my files#.html
C:\perflogs\admin\#decrypt my files#.html
%ProgramFiles%\ashavast\#decrypt my files#.html
%ProgramFiles%\ashdisp\#decrypt my files#.html
%ProgramFiles%\autotrace\#decrypt my files#.html
%ProgramFiles%\ashenhcd\#decrypt my files#.html
%ProgramFiles%\avcenter\#decrypt my files#.html
%ProgramFiles%\avciman\#decrypt my files#.html
%ProgramFiles%\avcmd\#decrypt my files#.html
%ProgramFiles%\avconfig\#decrypt my files#.html
%ProgramFiles%\autostartexplorer\#decrypt my files#.html
%ProgramFiles%\autodown\#decrypt my files#.html
%ProgramFiles%\avadmin\#decrypt my files#.html
%ProgramFiles%\avconsol\#decrypt my files#.html
%ProgramFiles%\avgemc\#decrypt my files#.html
%ProgramFiles%\avgfwsrv\#decrypt my files#.html
%ProgramFiles%\avginet\#decrypt my files#.html
%ProgramFiles%\avgnpdln\#decrypt my files#.html
%ProgramFiles%\avgamsvr\#decrypt my files#.html
%ProgramFiles%\avgcc\#decrypt my files#.html
%ProgramFiles%\avgdiag\#decrypt my files#.html
%ProgramFiles%\a2service\#decrypt my files#.html
C:\perflogs\#decrypt my files#.html
C:\far2\plugins\hlfviewer\#decrypt my files#.html
%ProgramFiles%\ashlogv\#decrypt my files#.html
%ProgramFiles%\ashmaisv\#decrypt my files#.html
%ProgramFiles%\ashpopwz\#decrypt my files#.html
%ProgramFiles%\ashquick\#decrypt my files#.html
%ProgramFiles%\aswupdsv\#decrypt my files#.html
%ProgramFiles%\ashdug\#decrypt my files#.html
%ProgramFiles%\aswregsvr\#decrypt my files#.html
%ProgramFiles%\ashserv\#decrypt my files#.html
%ProgramFiles%\ashskpck\#decrypt my files#.html
%ProgramFiles%\ashupd\#decrypt my files#.html
%ProgramFiles%\ashwebsv\#decrypt my files#.html
%ProgramFiles%\ash_updatemediator\#decrypt my files#.html
%ProgramFiles%\ashsimp2\#decrypt my files#.html
%ProgramFiles%\ashsimpl\#decrypt my files#.html
%ProgramFiles%\ashskpcc\#decrypt my files#.html
%ProgramFiles%\java\#decrypt my files#.html
%ProgramFiles%\avgnpsvc\#decrypt my files#.html
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\#decrypt my files#.html
C:\far2\addons\colors\custom_highlighting\#decrypt my files#.html
C:\far2\addons\colors\default_highlighting\#decrypt my files#.html
C:\far2\addons\macros\#decrypt my files#.html
C:\far2\addons\setup\#decrypt my files#.html
C:\far2\addons\shell\#decrypt my files#.html
C:\far2\addons\xlat\#decrypt my files#.html
C:\far2\documentation\#decrypt my files#.html
C:\far2\plugins\autowrap\#decrypt my files#.html
C:\far2\documentation\eng\#decrypt my files#.html
C:\far2\documentation\rus\#decrypt my files#.html
C:\far2\encyclopedia\#decrypt my files#.html
C:\far2\encyclopedia\tap\#decrypt my files#.html
C:\far2\fexcept\#decrypt my files#.html
C:\far2\plugins\#decrypt my files#.html
C:\far2\addons\colors\#decrypt my files#.html
C:\far2\addons\#decrypt my files#.html
<Current directory>\id.dp
D:\$recycle.bin\#decrypt my files#.html
C:\far2\#decrypt my files#.html
C:\documents and settings\#decrypt my files#.html
C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\#decrypt my files#.html
C:\$recycle.bin\#decrypt my files#.html
C:\#decrypt my files#.html
C:\far2\addons\xlat\russian\#decrypt my files#.html
D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\#decrypt my files#.html
C:\far2\plugins\arclite\#decrypt my files#.html
<Current directory>\#decrypt my files#.html
%APPDATA%\dp\dp_main.exe
%ProgramFiles%\dp\decryptioninfo.auth
%HOMEPATH%\documents\decryptioninfo.auth
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\94396ef37db587f8d79007938c7ad1d2_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
D:\#decrypt my files#.html
C:\far2\plugins\align\#decrypt my files#.html
C:\far2\plugins\brackets\#decrypt my files#.html
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\far2\plugins\compare\#decrypt my files#.html
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\#decrypt my files#.html
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\#decrypt my files#.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\#decrypt my files#.html
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\#decrypt my files#.html
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\#decrypt my files#.html
C:\far2\pluginsdk\headers.pas\#decrypt my files#.html
C:\far2\pluginsdk\headers.c\#decrypt my files#.html
C:\far2\pluginsdk\#decrypt my files#.html
C:\far2\plugins\tmppanel\#decrypt my files#.html
C:\far2\plugins\proclist\#decrypt my files#.html
C:\far2\plugins\network\#decrypt my files#.html
C:\far2\plugins\macroview\#decrypt my files#.html
C:\msocache\all users\#decrypt my files#.html
C:\far2\plugins\ftp\lib\#decrypt my files#.html
C:\far2\plugins\ftp\#decrypt my files#.html
C:\far2\plugins\filecase\#decrypt my files#.html
C:\far2\plugins\farcmds\#decrypt my files#.html
C:\far2\plugins\emenu\#decrypt my files#.html
C:\far2\plugins\editcase\#decrypt my files#.html
C:\far2\plugins\drawline\#decrypt my files#.html
C:\msocache\#decrypt my files#.html
%ProgramFiles%\isafe\#decrypt my files#.html
%ProgramFiles%\avgrssvc\#decrypt my files#.html
%ProgramFiles%\b2\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\cs-cz\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\he-il\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\hr-hr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\hu-hu\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\it-it\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fr-fr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\es-es\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\el-gr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\de-de\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\da-dk\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\bg-bg\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\ko-kr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\ja-jp\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\help\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\grphflt\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\filters\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\euro\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\fi-fi\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\ar-sa\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\lt-lt\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\lv-lv\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\nb-no\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\1033\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\cultures\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\equation\1033\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\msinfo\en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\msinfo\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\et-ee\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\#decrypt my files#.html
%ProgramFiles%\avgscan\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\nl-nl\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\pl-pl\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\pt-br\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\pt-pt\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\ro-ro\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\zh-cn\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\msclientdatamgr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\zh-tw\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\sv-se\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\th-th\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\tr-tr\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\uk-ua\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\ru-ru\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\sl-si\#decrypt my files#.html
%ProgramFiles%\avgupden\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\ink\sk-sk\#decrypt my files#.html
%ProgramFiles%\ash\#decrypt my files#.html
%ProgramFiles%\bdswitch\#decrypt my files#.html
%ProgramFiles%\bdnews\#decrypt my files#.html
%ProgramFiles%\bdoesrv\#decrypt my files#.html
%ProgramFiles%\bdss\#decrypt my files#.html
%ProgramFiles%\bdsubmit\#decrypt my files#.html
%ProgramFiles%\bdsubmitwiz\#decrypt my files#.html
%ProgramFiles%\bdsurvey\#decrypt my files#.html
%ProgramFiles%\bdwizreg\#decrypt my files#.html
%ProgramFiles%\avkwctl\#decrypt my files#.html
%ProgramFiles%\blackd\#decrypt my files#.html
%ProgramFiles%\blackice\#decrypt my files#.html
%ProgramFiles%\blindman\#decrypt my files#.html
%ProgramFiles%\btini\#decrypt my files#.html
%ProgramFiles%\btinint\#decrypt my files#.html
%ProgramFiles%\cabalmain\#decrypt my files#.html
%ProgramFiles%\bdmcon\#decrypt my files#.html
%ProgramFiles%\bdagent\#decrypt my files#.html
%ProgramFiles%\avsynmgr\#decrypt my files#.html
%ProgramFiles%\avscan\#decrypt my files#.html
%ProgramFiles%\avpm\#decrypt my files#.html
%ProgramFiles%\avpcc\#decrypt my files#.html
%ProgramFiles%\avnotify\#decrypt my files#.html
%ProgramFiles%\avkservice\#decrypt my files#.html
%ProgramFiles%\cavapp\#decrypt my files#.html
%ProgramFiles%\cafix\#decrypt my files#.html
%ProgramFiles%\avinitnt\#decrypt my files#.html
%ProgramFiles%\avgwizfw\#decrypt my files#.html
%ProgramFiles%\avgw\#decrypt my files#.html
%ProgramFiles%\avgvv\#decrypt my files#.html
%ProgramFiles%\avgupsvc\#decrypt my files#.html
%ProgramFiles%\backweb-4476822\#decrypt my files#.html
%ProgramFiles%\avkserv\#decrypt my files#.html
%ProgramFiles%\cavasm\#decrypt my files#.html
%ProgramFiles%\cavaud\#decrypt my files#.html
%ProgramFiles%\cavemsrv\#decrypt my files#.html
%ProgramFiles%\clamscan\#decrypt my files#.html
%ProgramFiles%\clamtray\#decrypt my files#.html
%ProgramFiles%\clamwin\#decrypt my files#.html
%ProgramFiles%\claw95\#decrypt my files#.html
%ProgramFiles%\claw95cf\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\dw\#decrypt my files#.html
%ProgramFiles%\cemrep\#decrypt my files#.html
%ProgramFiles%\ccsetmgr\#decrypt my files#.html
%ProgramFiles%\clrcche\#decrypt my files#.html
%ProgramFiles%\cmain\#decrypt my files#.html
%ProgramFiles%\cmgrdian\#decrypt my files#.html
%CommonProgramFiles%\#decrypt my files#.html
%CommonProgramFiles%\designer\#decrypt my files#.html
%ProgramFiles%\cleaner\#decrypt my files#.html
%ProgramFiles%\clisvc\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\equation\#decrypt my files#.html
%ProgramFiles%\cleaner3\#decrypt my files#.html
%CommonProgramFiles%\microsoft shared\#decrypt my files#.html
%ProgramFiles%\cavmr\#decrypt my files#.html
%ProgramFiles%\cavmud\#decrypt my files#.html
%ProgramFiles%\cavoar\#decrypt my files#.html
%ProgramFiles%\cavq\#decrypt my files#.html
%ProgramFiles%\cavscons\#decrypt my files#.html
%ProgramFiles%\ccevtmgr\#decrypt my files#.html
%ProgramFiles%\ccproxy\#decrypt my files#.html
%ProgramFiles%\ccleaner\#decrypt my files#.html
%ProgramFiles%\cavsubmit\#decrypt my files#.html
%ProgramFiles%\cavumas\#decrypt my files#.html
%ProgramFiles%\cavuserupd\#decrypt my files#.html
%ProgramFiles%\cavvl\#decrypt my files#.html
%ProgramFiles%\ccapp\#decrypt my files#.html
%ProgramFiles%\cavse\#decrypt my files#.html
%ProgramFiles%\cavsub\#decrypt my files#.html
%ProgramFiles%\java\jre1.8.0_45\#decrypt my files#.html

Moves the following files

from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsm32\fsm32.exe to %ProgramFiles%\fsm32\fsm32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fslaunch\fslaunch.exe to %ProgramFiles%\fslaunch\fslaunch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsihs\fsihs.exe to %ProgramFiles%\fsihs\fsihs.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsihcomp\fsihcomp.exe to %ProgramFiles%\fsihcomp\fsihcomp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fshotfix\fshotfix.exe to %ProgramFiles%\fshotfix\fshotfix.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fshelp\fshelp.exe to %ProgramFiles%\fshelp\fshelp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fshdll32\fshdll32.exe to %ProgramFiles%\fshdll32\fshdll32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsmb32\fsmb32.exe to %ProgramFiles%\fsmb32\fsmb32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsma32\fsma32.exe to %ProgramFiles%\fsma32\fsma32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsgk32st\fsgk32st.exe to %ProgramFiles%\fsgk32st\fsgk32st.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsgk32\fsgk32.exe to %ProgramFiles%\fsgk32\fsgk32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsgetwab\fsgetwab.exe to %ProgramFiles%\fsgetwab\fsgetwab.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsfwwscr\fsfwwscr.exe to %ProgramFiles%\fsfwwscr\fsfwwscr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsfwwsch\fsfwwsch.exe to %ProgramFiles%\fsfwwsch\fsfwwsch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsdiagui\fsdiagui.exe to %ProgramFiles%\fsdiagui\fsdiagui.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsdiag\fsdiag.exe to %ProgramFiles%\fsdiag\fsdiag.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsguiexe\fsguiexe.exe to %ProgramFiles%\fsguiexe\fsguiexe.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\flock\flock.exe to %ProgramFiles%\flock\flock.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fspc\fspc.exe to %ProgramFiles%\fspc\fspc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe to %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe to %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gg\gg.exe to %ProgramFiles%\gg\gg.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ge\ge.exe to %ProgramFiles%\ge\ge.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gcasserv\gcasserv.exe to %ProgramFiles%\gcasserv\gcasserv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gcasdtserv\gcasdtserv.exe to %ProgramFiles%\gcasdtserv\gcasdtserv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gc\gc.exe to %ProgramFiles%\gc\gc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ftpte\ftpte.exe to %ProgramFiles%\ftpte\ftpte.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsus\fsus.exe to %ProgramFiles%\fsus\fsus.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsuninst\fsuninst.exe to %ProgramFiles%\fsuninst\fsuninst.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fstlui\fstlui.exe to %ProgramFiles%\fstlui\fstlui.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fssw\fssw.exe to %ProgramFiles%\fssw\fssw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsstm\fsstm.exe to %ProgramFiles%\fsstm\fsstm.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fssm32\fssm32.exe to %ProgramFiles%\fssm32\fssm32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fssg\fssg.exe to %ProgramFiles%\fssg\fssg.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fssf\fssf.exe to %ProgramFiles%\fssf\fssf.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsqh\fsqh.exe to %ProgramFiles%\fsqh\fsqh.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsdfwd\fsdfwd.exe to %ProgramFiles%\fsdfwd\fsdfwd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsguidll\fsguidll.exe to %ProgramFiles%\fsguidll\fsguidll.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsdc\fsdc.exe to %ProgramFiles%\fsdc\fsdc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsdbuh\fsdbuh.exe to %ProgramFiles%\fsdbuh\fsdbuh.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsbwsys\fsbwsys.exe to %ProgramFiles%\fsbwsys\fsbwsys.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\firesvc\firesvc.exe to %ProgramFiles%\firesvc\firesvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\firebird\firebird.exe to %ProgramFiles%\firebird\firebird.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\filezilla\filezilla.exe to %ProgramFiles%\filezilla\filezilla.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fdmwi\fdmwi.exe to %ProgramFiles%\fdmwi\fdmwi.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fdm\fdm.exe to %ProgramFiles%\fdm\fdm.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fch32\fch32.exe to %ProgramFiles%\fch32\fch32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\flashfxp\flashfxp.exe to %ProgramFiles%\flashfxp\flashfxp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gnotify\gnotify.exe to %ProgramFiles%\gnotify\gnotify.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fspex\fspex.exe to %ProgramFiles%\fspex\fspex.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\flashgot\flashgot.exe to %ProgramFiles%\flashgot\flashgot.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fpavserver\fpavserver.exe to %ProgramFiles%\fpavserver\fpavserver.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\firetray\firetray.exe to %ProgramFiles%\firetray\firetray.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsavwscr\fsavwscr.exe to %ProgramFiles%\fsavwscr\fsavwscr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsavwsch\fsavwsch.exe to %ProgramFiles%\fsavwsch\fsavwsch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsavstrt\fsavstrt.exe to %ProgramFiles%\fsavstrt\fsavstrt.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsavgui\fsavgui.exe to %ProgramFiles%\fsavgui\fsavgui.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsavaui\fsavaui.exe to %ProgramFiles%\fsavaui\fsavaui.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsav32\fsav32.exe to %ProgramFiles%\fsav32\fsav32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsav\fsav.exe to %ProgramFiles%\fsav\fsav.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsauach\fsauach.exe to %ProgramFiles%\fsauach\fsauach.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsaua\fsaua.exe to %ProgramFiles%\fsaua\fsaua.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fsample\fsample.exe to %ProgramFiles%\fsample\fsample.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\freshclam\freshclam.exe to %ProgramFiles%\freshclam\freshclam.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fpwin\fpwin.exe to %ProgramFiles%\fpwin\fpwin.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fptrayproc\fptrayproc.exe to %ProgramFiles%\fptrayproc\fptrayproc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fpscan\fpscan.exe to %ProgramFiles%\fpscan\fpscan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fprottray\fprottray.exe to %ProgramFiles%\fprottray\fprottray.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\fpavupdm\fpavupdm.exe to %ProgramFiles%\fpavupdm\fpavupdm.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\foxit\foxit to %ProgramFiles%\foxit\foxit[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\guardgni\guardgni.exe to %ProgramFiles%\guardgni\guardgni.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\guardnt\guardnt.exe to %ProgramFiles%\guardnt\guardnt.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\gw\gw.exe to %ProgramFiles%\gw\gw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\glib-lite.dll to %ProgramFiles%\java\jre1.8.0_45\bin\glib-lite.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\glass.dll to %ProgramFiles%\java\jre1.8.0_45\bin\glass.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\fxplugins.dll to %ProgramFiles%\java\jre1.8.0_45\bin\fxplugins.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\fontmanager.dll to %ProgramFiles%\java\jre1.8.0_45\bin\fontmanager.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\eula.dll to %ProgramFiles%\java\jre1.8.0_45\bin\eula.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\dt_socket.dll to %ProgramFiles%\java\jre1.8.0_45\bin\dt_socket.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\dt_shmem.dll to %ProgramFiles%\java\jre1.8.0_45\bin\dt_shmem.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\deploy.dll to %ProgramFiles%\java\jre1.8.0_45\bin\deploy.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\decora_sse.dll to %ProgramFiles%\java\jre1.8.0_45\bin\decora_sse.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\dcpr.dll to %ProgramFiles%\java\jre1.8.0_45\bin\dcpr.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\bci.dll to %ProgramFiles%\java\jre1.8.0_45\bin\bci.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\awt.dll to %ProgramFiles%\java\jre1.8.0_45\bin\awt.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\welcome.html to %ProgramFiles%\java\jre1.8.0_45\welcome.html[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\gstreamer-lite.dll to %ProgramFiles%\java\jre1.8.0_45\bin\gstreamer-lite.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\instrument.dll to %ProgramFiles%\java\jre1.8.0_45\bin\instrument.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\j2pcsc.dll to %ProgramFiles%\java\jre1.8.0_45\bin\j2pcsc.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jawtaccessbridge-64.dll to %ProgramFiles%\java\jre1.8.0_45\bin\jawtaccessbridge-64.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jawt.dll to %ProgramFiles%\java\jre1.8.0_45\bin\jawt.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\java_crw_demo.dll to %ProgramFiles%\java\jre1.8.0_45\bin\java_crw_demo.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javaws.exe to %ProgramFiles%\java\jre1.8.0_45\bin\javaws.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javaw.exe to %ProgramFiles%\java\jre1.8.0_45\bin\javaw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javafx_iio.dll to %ProgramFiles%\java\jre1.8.0_45\bin\javafx_iio.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javafx_font_t2k.dll to %ProgramFiles%\java\jre1.8.0_45\bin\javafx_font_t2k.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javafx_font.dll to %ProgramFiles%\java\jre1.8.0_45\bin\javafx_font.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.exe to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\javaaccessbridge-64.dll to %ProgramFiles%\java\jre1.8.0_45\bin\javaaccessbridge-64.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\java.exe to %ProgramFiles%\java\jre1.8.0_45\bin\java.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\java.dll to %ProgramFiles%\java\jre1.8.0_45\bin\java.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\java-rmi.exe to %ProgramFiles%\java\jre1.8.0_45\bin\java-rmi.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jabswitch.exe to %ProgramFiles%\java\jre1.8.0_45\bin\jabswitch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jaas_nt.dll to %ProgramFiles%\java\jre1.8.0_45\bin\jaas_nt.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\j2pkcs11.dll to %ProgramFiles%\java\jre1.8.0_45\bin\j2pkcs11.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\impcnt\impcnt.exe to %ProgramFiles%\impcnt\impcnt.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\imnotfy\imnotfy.exe to %ProgramFiles%\imnotfy\imnotfy.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ilaunchr\ilaunchr.exe to %ProgramFiles%\ilaunchr\ilaunchr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ih8run\ih8run.exe to %ProgramFiles%\ih8run\ih8run.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ih8\ih8.exe to %ProgramFiles%\ih8\ih8.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\iexplore\iexplore.exe to %ProgramFiles%\iexplore\iexplore.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ieuser\ieuser.exe to %ProgramFiles%\ieuser\ieuser.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ieregfix\ieregfix.exe to %ProgramFiles%\ieregfix\ieregfix.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\icqlite\icqlite.exe to %ProgramFiles%\icqlite\icqlite.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\icq\icq.exe to %ProgramFiles%\icq\icq.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\iamserv\iamserv.exe to %ProgramFiles%\iamserv\iamserv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\iamapp\iamapp.exe to %ProgramFiles%\iamapp\iamapp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\httplook\httplook.exe to %ProgramFiles%\httplook\httplook.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\hsockpe\hsockpe.exe to %ProgramFiles%\hsockpe\hsockpe.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\hrres\hrres.exe to %ProgramFiles%\hrres\hrres.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\hregmon\hregmon.exe to %ProgramFiles%\hregmon\hregmon.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\hipsdiag\hipsdiag.exe to %ProgramFiles%\hipsdiag\hipsdiag.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\helper\helper.exe to %ProgramFiles%\helper\helper.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\helpctr\helpctr.exe to %ProgramFiles%\helpctr\helpctr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\imapp\imapp.exe to %ProgramFiles%\imapp\imapp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jdwp.dll to %ProgramFiles%\java\jre1.8.0_45\bin\jdwp.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\isuac\isuac.exe to %ProgramFiles%\isuac\isuac.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\incmail\incmail.exe to %ProgramFiles%\incmail\incmail.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\issvc\issvc.exe to %ProgramFiles%\issvc\issvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ispwdsvc\ispwdsvc.exe to %ProgramFiles%\ispwdsvc\ispwdsvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ispnews\ispnews.exe to %ProgramFiles%\ispnews\ispnews.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\isafe\isafe.exe to %ProgramFiles%\isafe\isafe.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\iron\iron.exe to %ProgramFiles%\iron\iron.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\iris\iris.exe to %ProgramFiles%\iris\iris.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\instlsp\instlsp.exe to %ProgramFiles%\instlsp\instlsp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\installlsp\installlsp.exe to %ProgramFiles%\installlsp\installlsp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\installlicense\installlicense.exe to %ProgramFiles%\installlicense\installlicense.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\installcavs\installcavs.exe to %ProgramFiles%\installcavs\installcavs.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inphasenxd\inphasenxd.exe to %ProgramFiles%\inphasenxd\inphasenxd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inouptng\inouptng.exe to %ProgramFiles%\inouptng\inouptng.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inotask\inotask.exe to %ProgramFiles%\inotask\inotask.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inort\inort.exe to %ProgramFiles%\inort\inort.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inorpc\inorpc.exe to %ProgramFiles%\inorpc\inorpc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\inocit\inocit.exe to %ProgramFiles%\inocit\inocit.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\itunes\itunes.exe to %ProgramFiles%\itunes\itunes.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\hprof.dll to %ProgramFiles%\java\jre1.8.0_45\bin\hprof.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe[id-ktdsedr3].[asdasda@hotmail.com].xdddd
from %ProgramFiles%\java\jre1.8.0_45\bin\jfr.dll to %ProgramFiles%\java\jre1.8.0_45\bin\jfr.dll[id-ktdsedr3].[asdasda@hotmail.com].xdddd

Modifies user data files (Trojan.Encoder).

Miscellaneous

Executes the following

'<SYSTEM32>\cmd.exe' /C sc delete VSS
'<SYSTEM32>\sc.exe' delete VSS

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial