Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKCU\SOFTWARE\MicROsoft\WINDOWS\CurrentVersion\RUN] 'gxybddw' = '<SYSTEM32>\CMD.EXE /C START %WINDIR%\mhxayoarweeg.exe'
Modifies file system
Creates the following files
- %WINDIR%\mhxayoarweeg.exe
- %CommonProgramFiles%\microsoft shared\translat\frar\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\translat\frar\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\fren\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\fren\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\translat\fren\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\triedit\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\triedit\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\triedit\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\triedit\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\triedit\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\esen\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\triedit\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\frar\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\esen\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\esen\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\enfr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\sumipntg\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\sumipntg\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\water\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\water\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\water\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\watermar\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\watermar\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\watermar\_recovery_+qhhqn.html
- %CommonProgramFiles%\speechengines\microsoft\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\translat\arfr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\arfr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\translat\arfr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\enes\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\translat\enes\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\translat\enes\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\enfr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\studio\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\translat\enfr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\sumipntg\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\studio\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vba\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\web server extensions\14\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web server extensions\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vba\vba7\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\_recovery_+qhhqn.html
- %CommonProgramFiles%\services\_recovery_+qhhqn.png
- %CommonProgramFiles%\services\_recovery_+qhhqn.txt
- %CommonProgramFiles%\services\_recovery_+qhhqn.html
- %CommonProgramFiles%\speechengines\microsoft\_recovery_+qhhqn.png
- %CommonProgramFiles%\speechengines\microsoft\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\web server extensions\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web folders\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web folders\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vc\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vc\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vc\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vgx\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vgx\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vgx\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vsto\10.0\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vba\vba7\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vsto\10.0\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vba\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vsto\10.0\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vsto\10.0\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vsto\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vsto\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\vsto\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\web folders\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\web folders\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web folders\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\vba\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\web folders\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vsto\10.0\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\vsto\10.0\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\strtedge\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\studio\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\strtedge\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\sky\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\sky\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\sky\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\slate\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\slate\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\sonora\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\sonora\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\sonora\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\spring\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\spring\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\spring\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\strtedge\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\slate\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+qhhqn.html
- %CommonProgramFiles%\speechengines\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\ado\en-us\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\bin\server\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\bin\server\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\server\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\bin\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\bin\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\amd64\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\amd64\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\applet\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\applet\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\applet\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\plugin2\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\amd64\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\bin\plugin2\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\bin\plugin2\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\dtplugin\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\bin\dtplugin\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\_recovery_+qhhqn.png
- %ProgramFiles%\internet explorer\en-us\_recovery_+qhhqn.png
- %ProgramFiles%\internet explorer\en-us\_recovery_+qhhqn.html
- %ProgramFiles%\internet explorer\signup\_recovery_+qhhqn.png
- %ProgramFiles%\internet explorer\signup\_recovery_+qhhqn.txt
- %ProgramFiles%\internet explorer\signup\_recovery_+qhhqn.html
- %ProgramFiles%\internet explorer\_recovery_+qhhqn.png
- %ProgramFiles%\internet explorer\_recovery_+qhhqn.txt
- %ProgramFiles%\internet explorer\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\dtplugin\_recovery_+qhhqn.png
- %ProgramFiles%\internet explorer\en-us\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\_recovery_+qhhqn.txt
- %ProgramFiles%\java\_recovery_+qhhqn.txt
- %ProgramFiles%\java\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\_recovery_+qhhqn.txt
- %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\_recovery_+qhhqn.txt
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\as oledb\10\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\_recovery_+qhhqn.txt
- %ProgramFiles%\microsoft analysis services\as oledb\10\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\as oledb\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\_recovery_+qhhqn.txt
- %ProgramFiles%\microsoft analysis services\as oledb\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\_recovery_+qhhqn.html
- %ProgramFiles%\java\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\images\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\images\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\images\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\jfr\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\management\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\management\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\security\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\security\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\security\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\_recovery_+qhhqn.png
- %ProgramFiles%\java\jre1.8.0_45\lib\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\jfr\_recovery_+qhhqn.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\jfr\_recovery_+qhhqn.html
- %ProgramFiles%\java\jre1.8.0_45\lib\management\_recovery_+qhhqn.png
- %CommonProgramFiles%\speechengines\_recovery_+qhhqn.html
- %CommonProgramFiles%\speechengines\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\_recovery_+qhhqn.html
- %CommonProgramFiles%\_recovery_+qhhqn.png
- %CommonProgramFiles%\_recovery_+qhhqn.txt
- %CommonProgramFiles%\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\en-us\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\en-us\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\ole db\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\ole db\en-us\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\ole db\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\ole db\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\ole db\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msmapi\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\ado\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\ado\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\ado\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\en-us\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\msadc\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msadc\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\ole db\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msadc\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msadc\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\msmapi\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msmapi\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\msmapi\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\system\msmapi\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msmapi\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\msadc\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\ado\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\system\ado\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\system\msadc\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\full\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\sports\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\sports\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\travel\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\travel\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\travel\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\sports\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\push\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\push\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\memories\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\memories\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\full\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\memories\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\performance\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\performance\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\pets\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\pets\_recovery_+qhhqn.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\pets\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\push\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\_recovery_+qhhqn.png
- %ProgramFiles%\dvd maker\shared\dvdstyles\full\_recovery_+qhhqn.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\performance\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\euro\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\filters\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\filters\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\grphflt\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\grphflt\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\grphflt\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\help\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\help\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\help\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\filters\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\euro\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\equation\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\dw\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\euro\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- %HOMEPATH%\documents\recover_file_mitxftmxc.txt
- C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\_recovery_+qhhqn.txt
- C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\_recovery_+qhhqn.html
- C:\$recycle.bin\_recovery_+qhhqn.png
- C:\$recycle.bin\_recovery_+qhhqn.txt
- C:\$recycle.bin\_recovery_+qhhqn.html
- C:\documents and settings\_recovery_+qhhqn.png
- C:\documents and settings\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\documents and settings\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+qhhqn.txt
- C:\kms\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\kms\_recovery_+qhhqn.png
- C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\_recovery_+qhhqn.png
- C:\kms\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\_recovery_+qhhqn.txt
- C:\perflogs\admin\_recovery_+qhhqn.png
- C:\perflogs\admin\_recovery_+qhhqn.txt
- C:\perflogs\admin\_recovery_+qhhqn.html
- C:\perflogs\_recovery_+qhhqn.png
- C:\perflogs\_recovery_+qhhqn.txt
- C:\perflogs\_recovery_+qhhqn.html
- %CommonProgramFiles%\designer\_recovery_+qhhqn.png
- %CommonProgramFiles%\designer\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- %CommonProgramFiles%\designer\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\dw\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\dw\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\equation\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\equation\_recovery_+qhhqn.txt
- C:\msocache\_recovery_+qhhqn.png
- C:\msocache\all users\_recovery_+qhhqn.html
- C:\msocache\_recovery_+qhhqn.html
- C:\msocache\all users\_recovery_+qhhqn.txt
- C:\msocache\all users\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.png
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.html
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\proof\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\proof\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\proof\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\smart tag\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\source engine\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\source engine\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\source engine\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\stationery\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\stationery\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\stationery\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\textconv\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\textconv\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\smart tag\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\textconv\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+qhhqn.png
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\_recovery_+qhhqn.txt
- %ProgramFiles%\microsoft analysis services\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\ink\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\ink\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\msinfo\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\msinfo\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\msinfo\_recovery_+qhhqn.html
- %CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+qhhqn.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+qhhqn.png
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+qhhqn.html
- %ProgramFiles%\microsoft analysis services\_recovery_+qhhqn.html
Sets the 'hidden' attribute to the following files
- %WINDIR%\mhxayoarweeg.exe
Moves the following files
- from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.mp3
- from %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.mp3
- from %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.mp3
- from %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.mp3
- from %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.mp3
- from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\prottpln.doc to %ProgramFiles%\microsoft office\office14\1033\prottpln.doc.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.mp3
- from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.mp3
- from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.mp3
- from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.mp3
- from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.mp3
- from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.mp3
- from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.mp3
- from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css.mp3
Modifies the following files
- %CommonProgramFiles%\microsoft shared\grphflt\ms.eps
- %CommonProgramFiles%\microsoft shared\themes14\layers\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\journal\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\iris\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\indust\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\ice\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\edge\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\echo\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\concrete\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\compass\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\cascade\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\capsules\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\canyon\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\breeze\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\blends\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\axis\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\arctic\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\thmbnail.png
- %CommonProgramFiles%\microsoft shared\smart tag\metconv.txt
- %CommonProgramFiles%\microsoft shared\grphflt\ms.png
- %CommonProgramFiles%\microsoft shared\grphflt\ms.jpg
- %CommonProgramFiles%\microsoft shared\themes14\level\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\network\thmbnail.png
Modifies multiple files.
Deletes itself.
Changes user data files extensions (Trojan.Encoder).
Network activity
Connects to
- 'in####aticauno.net':80
TCP
HTTP POST requests
- http://www.in####aticauno.net/gamma/tmp/bstr.php
- http://www.in####aticauno.net/gamma/tmp/wstr.php
UDP
- DNS ASK ah#####dicalcentre.com
- DNS ASK sp#####izedaccess.co.uk
- DNS ASK ed####nstitut.org
- DNS ASK in####aticauno.net
- DNS ASK ca###tour.info
Miscellaneous
Creates and executes the following
- '%WINDIR%\mhxayoarweeg.exe'
- '%WINDIR%\syswow64\cmd.exe' /c DEL <Full path to file>' (with hidden window)
- '<SYSTEM32>\wbem\wmic.exe' shadowcopy delete /nointeractive' (with hidden window)
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /c DEL <Full path to file>
- '<SYSTEM32>\wbem\wmic.exe' shadowcopy delete /nointeractive
