Technical Information
- %HOMEPATH%\desktop\contoso.cer
- %HOMEPATH%\desktop\correct.avi
- %HOMEPATH%\desktop\dashborder_120.bmp
- %HOMEPATH%\desktop\dashborder_192.bmp
- %HOMEPATH%\desktop\dashborder_96.bmp
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\dial.bmp
- %HOMEPATH%\desktop\fi51.doc
- %HOMEPATH%\desktop\file_p_00000000_1371597592.docx
- %HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
- %HOMEPATH%\desktop\holycrosschurchinstructions.docx
- %HOMEPATH%\desktop\iisstart.htm
- %HOMEPATH%\desktop\split.avi
- %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
- %HOMEPATH%\desktop\tree_view.htm
- %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
- %HOMEPATH%\desktop\chromesetup.exe.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\tablet pc\windows journal.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\tablet pc\tabtip.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\tablet pc\shapecollector.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\tablet pc\desktop.ini.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\windows easy transfer.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\windows easy transfer reports.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\task scheduler.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\system restore.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\windows powershell\windows powershell (x86).lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\system information.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\disk cleanup.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\dfrgui.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\desktop.ini.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\character map.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\accessibility\speech recognition.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\accessibility\desktop.ini.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\wordpad.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\welcome center.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\system tools\resource monitor.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\performance monitor.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\java\about java.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\windows powershell\windows powershell.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\google chrome\google chrome.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\games\gameexplorer.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\windows powershell modules.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\windows firewall with advanced security.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\task scheduler.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\system configuration.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\services.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\security configuration management.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\sync center.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\print management.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\microsoft .net framework 1.1 wizards.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\microsoft .net framework 1.1 configuration.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\memory diagnostics tool.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\iscsi initiator.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\event viewer.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\data sources (odbc).lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\computer management.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\administrative tools\component services.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\windows powershell\windows powershell ise (x86).lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\windows powershell\windows powershell ise.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\sticky notes.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\windows update.lnk.crap
- %APPDATA%\microsoft\windows\libraries\pictures.library-ms.crap
- %APPDATA%\microsoft\windows\libraries\music.library-ms.crap
- %APPDATA%\microsoft\windows\libraries\documents.library-ms.crap
- %HOMEPATH%\desktop\total commander 64 bit.lnk.crap
- %HOMEPATH%\desktop\telegram.lnk.crap
- %HOMEPATH%\desktop\tcm851ax32.exe.crap
- %HOMEPATH%\desktop\skypesetup.exe.crap
- %HOMEPATH%\desktop\qip 2012.lnk.crap
- %APPDATA%\microsoft\windows\libraries\videos.library-ms.crap
- %HOMEPATH%\desktop\mail.ru agent.lnk.crap
- %HOMEPATH%\desktop\fi51.doc.crap
- %HOMEPATH%\desktop\dial.bmp.crap
- %HOMEPATH%\desktop\delete.avi.crap
- %HOMEPATH%\desktop\dashborder_96.bmp.crap
- %HOMEPATH%\desktop\dashborder_192.bmp.crap
- %HOMEPATH%\desktop\dashborder_120.bmp.crap
- %HOMEPATH%\desktop\correct.avi.crap
- %HOMEPATH%\desktop\contoso.cer.crap
- %HOMEPATH%\desktop\icq.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows media player.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\snipping tool.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\acrobat reader dc.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\remote desktop connection.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\paint.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\networkprojection.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\mobility center.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\math input panel.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\displayswitch.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\desktop.ini.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\calculator.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\accessories\sound recorder.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\xps viewer.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows fax and scan.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows dvd maker.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sidebar.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\pidgin.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\opera.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\mozilla thunderbird.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\mozilla firefox.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\media center.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\default programs.lnk.crap
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\java\check for updates.lnk.crap
- %HOMEPATH%\desktop\contoso.cer
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows fax and scan.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows dvd maker.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\sidebar.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\pidgin.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\opera.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\mozilla thunderbird.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\mozilla firefox.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\media center.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\acrobat reader dc.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\windows update.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\default programs.lnk
- %APPDATA%\microsoft\windows\libraries\videos.library-ms
- %APPDATA%\microsoft\windows\libraries\pictures.library-ms
- %APPDATA%\microsoft\windows\libraries\music.library-ms
- %APPDATA%\microsoft\windows\libraries\documents.library-ms
- %HOMEPATH%\desktop\total commander 64 bit.lnk
- %HOMEPATH%\desktop\telegram.lnk
- %HOMEPATH%\desktop\qip 2012.lnk
- %HOMEPATH%\desktop\mail.ru agent.lnk
- %HOMEPATH%\desktop\icq.lnk
- %HOMEPATH%\desktop\fi51.doc
- %HOMEPATH%\desktop\dial.bmp
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\dashborder_96.bmp
- %HOMEPATH%\desktop\dashborder_192.bmp
- %HOMEPATH%\desktop\dashborder_120.bmp
- %HOMEPATH%\desktop\correct.avi
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\windows media player.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\xps viewer.lnk
- from <Full path to file> to %TEMP%\tmp50ae.tmp