Trojan.Encoder.41236

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

<SYSTEM32>\tasks\windows update alphv

Creates the following files on removable media

<Drive name for removable media>:\#recover-files.txt

Modifies file system

Creates the following files

%WINDIR%\log123.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\#recover-files.txt
%ProgramFiles%\mozilla firefox\fonts\#recover-files.txt
%ProgramFiles%\mozilla firefox\distibution\#recover-files.txt
%ProgramFiles%\mozilla firefox\browser\visualelements\#recover-files.txt
%ProgramFiles%\mozilla firefox\browser\features\#recover-files.txt
%ProgramFiles%\mozilla firefox\browser\#recover-files.txt
%ProgramFiles%\mozilla firefox\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\management\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\jfr\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\ext\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\cmm\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\security\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\chrome\icons\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\locales\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\amd64\#recover-files.txt
%ProgramFiles%\mozilla firefox\uninstall\#recover-files.txt
%ProgramFiles%\winrar\#recover-files.txt
%ProgramFiles%\reference assemblies\#recover-files.txt
%ProgramFiles%\msbuild\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\visualelements\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\uninstall\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\isp\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\fonts\#recover-files.txt
%ProgramFiles(x86)%\#recover-files.txt
%ProgramFiles%\mozilla thunderbird\features\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\bin\server\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\bin\#recover-files.txt
%CommonProgramFiles%\system\msadc\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\#recover-files.txt
%ProgramFiles%\dvd maker\shared\#recover-files.txt
%ProgramFiles%\dvd maker\#recover-files.txt
%CommonProgramFiles%\system\ole db\en-us\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\en_us\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\#recover-files.txt
%CommonProgramFiles%\system\ado\#recover-files.txt
%CommonProgramFiles%\speechengines\#recover-files.txt
%CommonProgramFiles%\services\#recover-files.txt
%CommonProgramFiles%\#recover-files.txt
D:\#recover-files.txt
%ProgramFiles%\#recover-files.txt
C:\#recover-files.txt
%CommonProgramFiles%\system\ole db\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\#recover-files.txt
%ProgramFiles%\java\jre1.8.0_45\#recover-files.txt
%ProgramFiles%\internet explorer\signup\#recover-files.txt
%ProgramFiles%\internet explorer\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\#recover-files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\#recover-files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\#recover-files.txt

Moves the following files

from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\eula.ini to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\eula.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\defaultid.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\defaultid.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\adobeid.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\adobeid.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\locales\en-us.pak to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\locales\en-us.pak.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\icudtl.dat to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\icudtl.dat.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\viewer.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\viewer.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\trackedsend.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\trackedsend.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\stamp.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\stamp.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\measure.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\measure.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\license.html to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\license.html.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\accessibility.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\accessibility.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\reflow.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\reflow.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\search.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\search.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\saveasrtf.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\saveasrtf.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\readoutloud.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\readoutloud.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ppklite.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ppklite.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\pddom.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\pddom.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\makeaccessible.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\makeaccessible.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ia32.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ia32.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\escript.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\escript.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ebook.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ebook.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dva.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dva.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dropboxstorage.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dropboxstorage.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\digsig.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\digsig.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\checkers.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\checkers.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annots.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annots.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\home.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\home.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\en_us\stopwords.enu to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\en_us\stopwords.enu.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\fillsign.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\fillsign.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\zipnew.dat to %ProgramFiles%\winrar\zipnew.dat.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\rarnew.dat to %ProgramFiles%\winrar\rarnew.dat.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\order.htm to %ProgramFiles%\winrar\order.htm.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm to %ProgramFiles(x86)%\adobe\acrobat reader dc\readme.htm.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\epdf_full.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\epdf_full.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\edit_r_rhp.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\edit_r_rhp.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\edit_r_full.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\edit_r_full.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_rhp.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_rhp.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_full.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_full.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\comments.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\comments.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\combine_r_rhp.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\combine_r_rhp.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\collectsignatures.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\collectsignatures.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\certificates_r.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\certificates_r.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\appcenter_r.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\appcenter_r.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rtc.der to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\rtc.der.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pmd.cer to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pmd.cer.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.sig to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.sig.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\epdf_rhp.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\epdf_rhp.aapp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\prcr.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\prcr.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\weblink.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\weblink.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\tr.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\tr.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\tl.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\tl.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\submission_history.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\submission_history.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\stop_collection_data.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\stop_collection_data.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_ok.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_ok.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_lg.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_lg.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_issue.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\server_issue.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\rss.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\rss.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_shared.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_shared.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_same_reviewers.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_same_reviewers.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_email.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_email.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_browser.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\review_browser.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_super.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_super.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_sent.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_sent.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_joined.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviews_joined.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\trash.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\trash.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnoffnotificationintray.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnoffnotificationintray.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\updater.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\updater.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnonnotificationinacrobat.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnonnotificationinacrobat.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-high-contrast.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-high-contrast.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-win8.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-win8.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-win.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-win.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-mac.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-mac.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-high-contrast.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\main-cef-high-contrast.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\version.js.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\variant.js.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\plugins.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\plugins.js.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\init.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\init.js.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\index.html to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\index.html.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\base_uris.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\base_uris.js.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\warning.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\warning.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnonnotificationintray.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnonnotificationintray.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviewers.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\reviewers.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_70.png to %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_70.png.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\pdf.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\pdf.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\drvsoft.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\drvsoft.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\3difr.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\3difr.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\2d.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\2d.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\windowsmedia.mpp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\windowsmedia.mpp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\quicktime.mpp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\quicktime.mpp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\mcimpp.mpp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\mcimpp.mpp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\flash.mpp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\flash.mpp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\signhere.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\signhere.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\dynamic.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\dynamic.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\qrcode.pmp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\qrcode.pmp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\datamatrix.pmp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\datamatrix.pmp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\adobepdf417.pmp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\adobepdf417.pmp.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\adobepdf.xdc to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\adobepdf.xdc.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\sendmail.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\sendmail.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\drvdx9.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\drvdx9.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\spelling.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\spelling.api.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\main.css to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\main.css.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\tesselate.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\tesselate.x3d.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\info.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\info.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\form_responses.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\form_responses.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_super.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_super.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_received.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_received.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_distributed.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\forms_distributed.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\end_review.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\end_review.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\ended_review_or_form.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\ended_review_or_form.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\email_initiator.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\email_initiator.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\email_all.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\email_all.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\distribute_form.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\distribute_form.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\create_form.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\create_form.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\br.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\br.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\bl.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\bl.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\add_reviewer.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\add_reviewer.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\prc\myriadcad.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\prc\myriadcad.otf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\open_original_form.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\open_original_form.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnoffnotificationinacrobat.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\turnoffnotificationinacrobat.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_150.png to %ProgramFiles%\mozilla thunderbird\visualelements\visualelements_150.png.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\application.ini to %ProgramFiles%\mozilla thunderbird\application.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat to %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\welcome.html to %ProgramFiles%\java\jre1.8.0_45\welcome.html.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_70.png to %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_70.png.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_150.png to %ProgramFiles%\mozilla firefox\browser\visualelements\visualelements_150.png.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\override.ini to %ProgramFiles%\mozilla firefox\browser\override.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini to %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\crashreporter.ini to %ProgramFiles%\mozilla thunderbird\crashreporter.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\dependentlibs.list to %ProgramFiles%\mozilla thunderbird\dependentlibs.list.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd to %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd to %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd to %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd to %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd to %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi to %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\updater.ini to %ProgramFiles%\mozilla thunderbird\updater.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\update-settings.ini to %ProgramFiles%\mozilla thunderbird\update-settings.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\thunderbird.visualelementsmanifest.xml to %ProgramFiles%\mozilla thunderbird\thunderbird.visualelementsmanifest.xml.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\removed-files to %ProgramFiles%\mozilla thunderbird\removed-files.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\precomplete to %ProgramFiles%\mozilla thunderbird\precomplete.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\platform.ini to %ProgramFiles%\mozilla thunderbird\platform.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\omni.ja to %ProgramFiles%\mozilla thunderbird\omni.ja.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\install.log to %ProgramFiles%\mozilla thunderbird\install.log.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\updater.ini to %ProgramFiles%\mozilla firefox\updater.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log to %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\update-settings.ini to %ProgramFiles%\mozilla firefox\update-settings.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\platform.ini to %ProgramFiles%\mozilla firefox\platform.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\firefox.visualelementsmanifest.xml to %ProgramFiles%\mozilla firefox\firefox.visualelementsmanifest.xml.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\crashreporter.ini to %ProgramFiles%\mozilla firefox\crashreporter.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\application.ini to %ProgramFiles%\mozilla firefox\application.ini.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_2x.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_2x.gif.id[xx-73b251ef].[xdoct0@zohomail.eu].6aafdc46

Modifies the following files

<Drive name for removable media>:\archer.avi
%ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar
%ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar
%ProgramFiles%\java\jre1.8.0_45\lib\jce.jar
%ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar
%ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties
%ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties
%ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src
%ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc
%ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties
%ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar
%ProgramFiles%\java\jre1.8.0_45\lib\currency.data
%ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties
%ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar
%ProgramFiles%\java\jre1.8.0_45\lib\classlist
%ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties
%ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties
%ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt
%ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa
%ProgramFiles%\java\jre1.8.0_45\welcome.html
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt
%ProgramFiles%\java\jre1.8.0_45\release
%ProgramFiles%\java\jre1.8.0_45\readme.txt
%ProgramFiles%\java\jre1.8.0_45\license
%ProgramFiles%\java\jre1.8.0_45\copyright
%ProgramFiles%\internet explorer\signup\install.ins
%ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar
%ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Network activity

Connects to

'<LOCALNET>.46.0':445
'<LOCALNET>.46.161':445
'<LOCALNET>.46.162':445
'<LOCALNET>.46.163':445
'<LOCALNET>.46.164':445
'<LOCALNET>.46.165':445
'<LOCALNET>.46.166':445
'<LOCALNET>.46.167':445
'<LOCALNET>.46.168':445
'<LOCALNET>.46.169':445
'<LOCALNET>.46.170':445
'<LOCALNET>.46.171':445
'<LOCALNET>.46.172':445
'<LOCALNET>.46.173':445
'<LOCALNET>.46.175':445
'<LOCALNET>.46.189':445
'<LOCALNET>.46.176':445
'<LOCALNET>.46.177':445
'<LOCALNET>.46.178':445
'<LOCALNET>.46.179':445
'<LOCALNET>.46.180':445
'<LOCALNET>.46.181':445
'<LOCALNET>.46.182':445
'<LOCALNET>.46.183':445
'<LOCALNET>.46.184':445
'<LOCALNET>.46.185':445
'<LOCALNET>.46.186':445
'<LOCALNET>.46.187':445
'<LOCALNET>.46.188':445
'<LOCALNET>.46.160':445
'<LOCALNET>.46.174':445
'<LOCALNET>.46.159':445
'<LOCALNET>.46.142':445
'<LOCALNET>.46.129':445
'<LOCALNET>.46.130':445
'<LOCALNET>.46.131':445
'<LOCALNET>.46.132':445
'<LOCALNET>.46.133':445
'<LOCALNET>.46.134':445
'<LOCALNET>.46.135':445
'<LOCALNET>.46.136':445
'<LOCALNET>.46.137':445
'<LOCALNET>.46.138':445
'<LOCALNET>.46.139':445
'<LOCALNET>.46.140':445
'<LOCALNET>.46.141':445
'<LOCALNET>.46.143':445
'<LOCALNET>.46.157':445
'<LOCALNET>.46.144':445
'<LOCALNET>.46.145':445
'<LOCALNET>.46.146':445
'<LOCALNET>.46.147':445
'<LOCALNET>.46.148':445
'<LOCALNET>.46.149':445
'<LOCALNET>.46.150':445
'<LOCALNET>.46.151':445
'<LOCALNET>.46.152':445
'<LOCALNET>.46.153':445
'<LOCALNET>.46.154':445
'<LOCALNET>.46.155':445
'<LOCALNET>.46.156':445
'<LOCALNET>.46.158':445
'<LOCALNET>.46.207':445
'<LOCALNET>.46.253':445
'<LOCALNET>.46.192':445
'<LOCALNET>.46.225':445
'<LOCALNET>.46.226':445
'<LOCALNET>.46.227':445
'<LOCALNET>.46.228':445
'<LOCALNET>.46.229':445
'<LOCALNET>.46.230':445
'<LOCALNET>.46.231':445
'<LOCALNET>.46.232':445
'<LOCALNET>.46.233':445
'<LOCALNET>.46.234':445
'<LOCALNET>.46.235':445
'<LOCALNET>.46.236':445
'<LOCALNET>.46.237':445
'<LOCALNET>.46.239':445
'<LOCALNET>.46.191':445
'<LOCALNET>.46.240':445
'<LOCALNET>.46.241':445
'<LOCALNET>.46.242':445
'<LOCALNET>.46.243':445
'<LOCALNET>.46.244':445
'<LOCALNET>.46.245':445
'<LOCALNET>.46.246':445
'<LOCALNET>.46.247':445
'<LOCALNET>.46.248':445
'<LOCALNET>.46.249':445
'<LOCALNET>.46.250':445
'<LOCALNET>.46.251':445
'<LOCALNET>.46.252':445
'<LOCALNET>.46.224':445
'<LOCALNET>.46.128':445
'<LOCALNET>.46.223':445
'<LOCALNET>.46.206':445
'<LOCALNET>.46.193':445
'<LOCALNET>.46.194':445
'<LOCALNET>.46.195':445
'<LOCALNET>.46.196':445
'<LOCALNET>.46.197':445
'<LOCALNET>.46.198':445
'<LOCALNET>.46.199':445
'<LOCALNET>.46.200':445
'<LOCALNET>.46.201':445
'<LOCALNET>.46.202':445
'<LOCALNET>.46.203':445
'<LOCALNET>.46.204':445
'<LOCALNET>.46.205':445
'<LOCALNET>.46.190':445
'<LOCALNET>.46.221':445
'<LOCALNET>.46.208':445
'<LOCALNET>.46.209':445
'<LOCALNET>.46.210':445
'<LOCALNET>.46.211':445
'<LOCALNET>.46.212':445
'<LOCALNET>.46.213':445
'<LOCALNET>.46.214':445
'<LOCALNET>.46.215':445
'<LOCALNET>.46.216':445
'<LOCALNET>.46.217':445
'<LOCALNET>.46.218':445
'<LOCALNET>.46.219':445
'<LOCALNET>.46.220':445
'<LOCALNET>.46.222':445
'<LOCALNET>.46.238':445
'<LOCALNET>.46.127':445
'<LOCALNET>.46.110':445
'<LOCALNET>.46.33':445
'<LOCALNET>.46.34':445
'<LOCALNET>.46.35':445
'<LOCALNET>.46.36':445
'<LOCALNET>.46.37':445
'<LOCALNET>.46.38':445
'<LOCALNET>.46.39':445
'<LOCALNET>.46.40':445
'<LOCALNET>.46.41':445
'<LOCALNET>.46.42':445
'<LOCALNET>.46.43':445
'<LOCALNET>.46.44':445
'<LOCALNET>.46.45':445
'<LOCALNET>.46.47':445
'<LOCALNET>.46.61':445
'<LOCALNET>.46.48':445
'<LOCALNET>.46.49':445
'<LOCALNET>.46.50':445
'<LOCALNET>.46.51':445
'<LOCALNET>.46.52':445
'<LOCALNET>.46.53':445
'<LOCALNET>.46.54':445
'<LOCALNET>.46.55':445
'<LOCALNET>.46.56':445
'<LOCALNET>.46.57':445
'<LOCALNET>.46.58':445
'<LOCALNET>.46.59':445
'<LOCALNET>.46.60':445
'<LOCALNET>.46.32':445
'<LOCALNET>.46.46':445
'<LOCALNET>.46.31':445
'<LOCALNET>.46.14':445
'<LOCALNET>.46.1':445
'<LOCALNET>.46.2':445
'<LOCALNET>.46.3':445
'<LOCALNET>.46.4':445
'<LOCALNET>.46.5':445
'<LOCALNET>.46.6':445
'<LOCALNET>.46.7':445
'<LOCALNET>.46.8':445
'<LOCALNET>.46.9':445
'<LOCALNET>.46.10':445
'<LOCALNET>.46.11':445
'<LOCALNET>.46.12':445
'<LOCALNET>.46.13':445
'<LOCALNET>.46.15':445
'<LOCALNET>.46.29':445
'<LOCALNET>.46.16':445
'<LOCALNET>.46.17':445
'<LOCALNET>.46.18':445
'<LOCALNET>.46.19':445
'<LOCALNET>.46.20':445
'<LOCALNET>.46.21':445
'<LOCALNET>.46.22':445
'<LOCALNET>.46.23':445
'<LOCALNET>.46.24':445
'<LOCALNET>.46.25':445
'<LOCALNET>.46.26':445
'<LOCALNET>.46.27':445
'<LOCALNET>.46.28':445
'<LOCALNET>.46.30':445
'<LOCALNET>.46.79':445
'<LOCALNET>.46.125':445
'<LOCALNET>.46.64':445
'<LOCALNET>.46.97':445
'<LOCALNET>.46.98':445
'<LOCALNET>.46.99':445
'<LOCALNET>.46.100':445
'<LOCALNET>.46.101':445
'<LOCALNET>.46.102':445
'<LOCALNET>.46.103':445
'<LOCALNET>.46.104':445
'<LOCALNET>.46.105':445
'<LOCALNET>.46.106':445
'<LOCALNET>.46.107':445
'<LOCALNET>.46.108':445
'<LOCALNET>.46.109':445
'<LOCALNET>.46.111':445
'<LOCALNET>.46.63':445
'<LOCALNET>.46.112':445
'<LOCALNET>.46.113':445
'<LOCALNET>.46.114':445
'<LOCALNET>.46.115':445
'<LOCALNET>.46.116':445
'<LOCALNET>.46.117':445
'<LOCALNET>.46.118':445
'<LOCALNET>.46.119':445
'<LOCALNET>.46.120':445
'<LOCALNET>.46.121':445
'<LOCALNET>.46.122':445
'<LOCALNET>.46.123':445
'<LOCALNET>.46.124':445
'<LOCALNET>.46.96':445
'<LOCALNET>.46.126':445
'<LOCALNET>.46.95':445
'<LOCALNET>.46.78':445
'<LOCALNET>.46.65':445
'<LOCALNET>.46.66':445
'<LOCALNET>.46.67':445
'<LOCALNET>.46.68':445
'<LOCALNET>.46.69':445
'<LOCALNET>.46.70':445
'<LOCALNET>.46.71':445
'<LOCALNET>.46.72':445
'<LOCALNET>.46.73':445
'<LOCALNET>.46.74':445
'<LOCALNET>.46.75':445
'<LOCALNET>.46.76':445
'<LOCALNET>.46.77':445
'<LOCALNET>.46.62':445
'<LOCALNET>.46.93':445
'<LOCALNET>.46.80':445
'<LOCALNET>.46.81':445
'<LOCALNET>.46.82':445
'<LOCALNET>.46.83':445
'<LOCALNET>.46.84':445
'<LOCALNET>.46.85':445
'<LOCALNET>.46.86':445
'<LOCALNET>.46.87':445
'<LOCALNET>.46.88':445
'<LOCALNET>.46.89':445
'<LOCALNET>.46.90':445
'<LOCALNET>.46.91':445
'<LOCALNET>.46.92':445
'<LOCALNET>.46.94':445
'<LOCALNET>.46.254':445

Miscellaneous

Executes the following

'<SYSTEM32>\cmd.exe' /c SCHTASKS.exe /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F
'<SYSTEM32>\schtasks.exe' /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F
'<SYSTEM32>\cmd.exe' /c SCHTASKS.exe /Create /RU "NT AUTHORITY\SYSTEM" /sc onstart /TN "Windows Update ALPHV" /TR "<Full path to file>" /F' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial