Trojan.Click3.12425

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'svchost' = 'C:\scrlk\svchost.exe'

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\fdPHosts] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\fdPHosts] 'ImagePath' = '%WINDIR%\SysWOW64\svschost.exe'

Creates the following services

'fdPHosts' %WINDIR%\SysWOW64\svschost.exe

Creates the following files on removable media

<Drive name for removable media>:\how to decrypt files.lnk

Modifies master boot record (MBR).

Malicious functions

Launches a large number of processes

Modifies file system

Creates the following files

%WINDIR%\syswow64\nsf.exe
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
C:\decrypterpv\dcfilelist.list
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe
%WINDIR%\syswow64\uwnmspwks.rrr
D:\how to decrypt files.lnk
C:\how to decrypt files.lnk
C:\users\public\desktop\how to decrypt files.lnk
C:\users\public\desktop\rvid1000.txt
%ALLUSERSPROFILE%\vnmexc\msdadiags.dll
%ALLUSERSPROFILE%\msvkp\svchost.exe
C:\decrypterpv\dc.exe
C:\scrlk\svchost.exe
%WINDIR%\syswow64\default2.sfx
%WINDIR%\syswow64\nosafemode.dll
%WINDIR%\syswow64\csrss64.dll
%WINDIR%\syswow64\csrss32.dll
%WINDIR%\syswow64\cfwin32.dll
%WINDIR%\syswow64\svschost.exe
%ALLUSERSPROFILE%\stfls\dkpslqhnsoa.dll
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!).exe

Sets the 'hidden' attribute to the following files

C:\scrlk\svchost.exe
%ALLUSERSPROFILE%\msvkp\svchost.exe

Miscellaneous

Searches for the following windows

ClassName: 'EDIT' WindowName: ''

Creates and executes the following

'%WINDIR%\syswow64\svschost.exe' -i
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME.txt" -sf...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME-JAVAFX.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME-J...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\README.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\README.txt" -sfx<SYSTEM32>\default2.sfx -dh -ep2 ...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\tzdb.dat(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\tzdb.dat" -sfx<SYSTEM32>\default2.sfx -dh -...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\jvm.hprof.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\jvm.hprof.txt" -sfx<SYSTEM32>\default2...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\deploy\ffjcext.zip(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\deploy\ffjcext.zip" -sfx<SYSTEM32...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\bin\server\Xusage.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\bin\server\Xusage.txt" -sfx<SYSTEM32>\...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0117-0409-10...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-011...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001A-0409-1000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0019-0409-10...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0018-0409-1...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0016-0409-1000-0...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001B-0409-1000-00...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\ProPlusWW.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000...
'%WINDIR%\syswow64\svschost.exe'
'%WINDIR%\syswow64\svschost.exe' -s
'%WINDIR%\syswow64\nsf.exe' /nobootpass /lock Yrs5S2z1
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG"...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-1000-0...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-01...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-10...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-0...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00BA-0409-1000-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00A1-0409-1000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0044-0409-100...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0043-0409-100...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP"...

Executes the following

'%WINDIR%\syswow64\ping.exe' -n 1 -w 1000 11.#1.11.11 >nul
'%WINDIR%\syswow64\reg.exe' ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "svchost" /t REG_SZ /d "C:\scrlk\svchost.exe" /f
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099148.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099157.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099156.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099155.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099154.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099152.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099150.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099147.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099160.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099145.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME.txt" -sf...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME-JAVAFX.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\THIRDPARTYLICENSEREADME-J...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\README.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\README.txt" -sfx<SYSTEM32>\default2.sfx -dh -ep2 ...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\tzdb.dat(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\tzdb.dat" -sfx<SYSTEM32>\default2.sfx -dh -...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099161.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099162.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099165.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099188.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101859.BMP"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101858.BMP"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101857.BMP"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101856.BMP"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099191.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099190.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\jvm.hprof.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\jvm.hprof.txt" -sfx<SYSTEM32>\default2...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\lib\deploy\ffjcext.zip(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\lib\deploy\ffjcext.zip" -sfx<SYSTEM32...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099187.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099186.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099185.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099168.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099167.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099166.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0099189.JPG"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Java\jre1.8.0_45\bin\server\Xusage.txt(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Java\jre1.8.0_45\bin\server\Xusage.txt" -sfx<SYSTEM32>\...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\AccessMUISet.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0117-0409-10...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001A-0409-1000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0019-0409-10...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0016-0409-1000-0...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\ProPlusWW.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0011-0000-1000-0000000FF1CE}-C\Office32WW.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0011-0000-1000...' (with hidden window)
'%WINDIR%\syswow64\reg.exe' ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "svchost" /t REG_SZ /d "C:\scrlk\svchost.exe" /f' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0018-0409-1...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0016-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-1000-0...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\branding.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-011...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\GrooveMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00BA-0409-1000-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us\AccessMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-01...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUISet.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-10...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\OfficeMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\branding.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0115-0409-1000-0...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-001B-0409-1000-00...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C\OneNoteMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-00A1-0409-1000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0044-0409-100...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-0043-0409-100...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "C:\MSOCache\All Users\{90140000-002C-0409-1000-0000...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101860.BMP"...' (with hidden window)
'%ALLUSERSPROFILE%\msvkp\svchost.exe' a "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP(!! to decrypt email id 664336716 to security31820@gmail.com !!)" "%ProgramFiles%\Microsoft Office\CLIPART\PUB60COR\J0101861.BMP"...' (with hidden window)

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial