Trojan.Encoder.6696

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\Shortcut to startup_local.lnk
%HOMEPATH%\Start Menu\Programs\Startup\Shortcut to startup_local.lnk.dCrypt

Modifies file system:

Creates the following files:

%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\linkTree.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\groupbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\global.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\menulist.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\menu.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\listbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\findBar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dropmarker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\datetimepicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\filepicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\filefield.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\expander.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\progressmeter.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printPreview.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scale.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\richlistbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\resizer.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printPageSetup.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\numberbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\notification.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\netError.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\preferences.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\popup.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\passwordmgr.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\customizeToolbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\profileSelection.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\pluginProblem.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\pluginInstallerWizard.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\xpinstallConfirm.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\viewsource.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\updates.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\handling.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\blocklist.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\about.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\unknownContentType.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\update.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\extensions.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\eula.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\button.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\autocomplete.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\config.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\commonDialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\colorpicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutCacheEntry.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutCache.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\about.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\appPicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutSupport.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\aboutMemory.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbars.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dirListing\dirListing.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-dash.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Restore.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Minimize.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Close.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-caret.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree\columnpicker.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\chevron.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-top.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\about.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\unknownContentType.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\downloads.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-right.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\videocontrols.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-left.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-bottom.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\slider.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\webConsole.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbarbutton.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\alerts\alert.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\wizard.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\webConsole_networkPanel.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\spinbuttons.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\textbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tabprompts.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tabbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp-end.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp-end.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\global.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\findBar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\filepicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\listbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\linkTree.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\groupbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\filefield.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\datetimepicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\customizeToolbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\config.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\expander.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dropmarker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printPreview.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printPageSetup.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\preferences.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\resizer.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\progressmeter.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\popup.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\netError.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\menulist.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\menu.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\passwordmgr.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\numberbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\notification.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\commonDialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\forms.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\arrowd.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\arrow.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\quirk.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\mathml.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\html.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\xbl-marquee.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallConfirm.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallConfirm.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\satchel\formSubmitListener.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManagerExceptions.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\passwordManagerCommon.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\autocomplete.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\appPicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\colorpicker.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\button.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutSupport.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\about.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\viewsource.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\res\ua.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutMemory.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutCacheEntry.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\aboutCache.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\richlistbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-dash.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-caret.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Close.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\dirListing.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-top.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-right.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-left.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\downloads.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\columnpicker.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\chevron.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-bottom.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\videocontrols.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Restore.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Minimize.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\slider.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp-end.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbarbutton.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\textbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\webConsole_networkPanel.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\webConsole.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tabprompts.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbars.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scale.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tabbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\spinbuttons.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp-end.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-dis.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\alert.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\wizard.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-sharp.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-hov.gif.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\blocklist.css.dCrypt
%ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi.dCrypt
%ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi.dCrypt
%ProgramFiles%\MSN\MSNCoreFiles\Install\msnms.ico.dCrypt
%ProgramFiles%\NetMeeting\TestSnd.wav.dCrypt
%ProgramFiles%\NetMeeting\Blip.wav.dCrypt
%ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\msnmsgs.msi.dCrypt
%ProgramFiles%\Movie Maker\MUI\0409\moviemk.chm.dCrypt
%ProgramFiles%\Messenger\newemail.wav.dCrypt
%ProgramFiles%\Messenger\newalert.wav.dCrypt
%ProgramFiles%\Messenger\lvback.gif.dCrypt
%ProgramFiles%\Messenger\xpmsgr.chm.dCrypt
%ProgramFiles%\Messenger\type.wav.dCrypt
%ProgramFiles%\Messenger\online.wav.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND112.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND111.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND108.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND131.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND13.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND12.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND105.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\PINBALL.MID.dCrypt
%ProgramFiles%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk.dCrypt
%ProgramFiles%\Online Services\Refer me to more Internet Service Providers.lnk.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND104.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND1.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\PINBALL2.MID.dCrypt
%ProgramFiles%\Messenger\logowin.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-after-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-after-active.gif.dCrypt
%ProgramFiles%\FireFox\res\svg.css.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-before-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-before-active.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-after.gif.dCrypt
%ProgramFiles%\FireFox\res\grabber.gif.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\ext\StringBundle.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\ext\Preferences.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\ext\Observers.js.dCrypt
%ProgramFiles%\FireFox\res\EditorOverride.css.dCrypt
%ProgramFiles%\FireFox\res\designmode.css.dCrypt
%ProgramFiles%\FireFox\res\contenteditable.css.dCrypt
%ProgramFiles%\FireFox\res\table-remove-column.gif.dCrypt
%ProgramFiles%\FireFox\res\table-remove-column-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-remove-column-active.gif.dCrypt
%ProgramFiles%\FireFox\res\table-remove-row.gif.dCrypt
%ProgramFiles%\FireFox\res\table-remove-row-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-remove-row-active.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-before.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-after-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-after-active.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-column-before.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-before-hover.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-before-active.gif.dCrypt
%ProgramFiles%\FireFox\res\table-add-row-after.gif.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND136.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND560.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND55.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND54.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND58.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND57.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND563.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND53.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND49D.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND49.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND45.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND528.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND50.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND5.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND999.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND9.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND827.WAV.dCrypt
%WINDIR%\Driver Cache\i386\driver.cab.dCrypt
%WINDIR%\imsins.BAK.dCrypt
<STUBS_DIR>\runall.bat.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND8.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND68.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND65.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND6.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND735.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND713.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND7.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND43.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND24.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND22.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND21.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND25.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND243.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND240.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND20.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND17.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND16.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND14.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND19.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND181.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND18.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND38.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND36.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND35.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND42.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND4.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND39.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND34.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND28.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND27.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND26.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND30.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND3.WAV.dCrypt
%ProgramFiles%\Windows NT\Pinball\SOUND29.WAV.dCrypt
%ProgramFiles%\FireFox\components\nsHelperAppDlg.js.dCrypt
%ProgramFiles%\FireFox\components\nsHandlerService.js.dCrypt
%ProgramFiles%\FireFox\components\nsFormHistory.js.dCrypt
%ProgramFiles%\FireFox\components\nsLivemarkService.js.dCrypt
%ProgramFiles%\FireFox\components\nsInputListAutoComplete.js.dCrypt
%ProgramFiles%\FireFox\components\nsINIProcessor.js.dCrypt
%ProgramFiles%\FireFox\components\nsFormAutoComplete.js.dCrypt
%ProgramFiles%\FireFox\components\nsContentDispatchChooser.js.dCrypt
%ProgramFiles%\FireFox\components\nsBrowserGlue.js.dCrypt
%ProgramFiles%\FireFox\components\nsBrowserContentHandler.js.dCrypt
%ProgramFiles%\FireFox\components\nsDownloadManagerUI.js.dCrypt
%ProgramFiles%\FireFox\components\nsDefaultCLH.js.dCrypt
%ProgramFiles%\FireFox\components\nsContentPrefService.js.dCrypt
%ProgramFiles%\FireFox\components\nsSafebrowsingApplication.js.dCrypt
%ProgramFiles%\FireFox\components\nsProxyAutoConfig.js.dCrypt
%ProgramFiles%\FireFox\components\nsPrompter.js.dCrypt
%ProgramFiles%\FireFox\components\nsSessionStartup.js.dCrypt
%ProgramFiles%\FireFox\components\nsSearchSuggestions.js.dCrypt
%ProgramFiles%\FireFox\components\nsSearchService.js.dCrypt
%ProgramFiles%\FireFox\components\nsPrivateBrowsingService.js.dCrypt
%ProgramFiles%\FireFox\components\nsLoginManagerPrompter.js.dCrypt
%ProgramFiles%\FireFox\components\nsLoginManager.js.dCrypt
%ProgramFiles%\FireFox\components\nsLoginInfo.js.dCrypt
%ProgramFiles%\FireFox\components\nsPlacesExpiration.js.dCrypt
%ProgramFiles%\FireFox\components\nsPlacesAutoComplete.js.dCrypt
%ProgramFiles%\FireFox\components\nsMicrosummaryService.js.dCrypt
%ProgramFiles%\FireFox\components\nsBlocklistService.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\xpinstallConfirm.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource\viewsource.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\update\updates.css.dCrypt
%ProgramFiles%\FireFox\components\amWebInstallListener.js.dCrypt
%ProgramFiles%\FireFox\components\amContentHandler.js.dCrypt
%ProgramFiles%\FireFox\components\addonManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\profileSelection.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\update.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\extensions.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\eula.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\pluginProblem.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\pluginInstallerWizard.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\handling\handling.css.dCrypt
%ProgramFiles%\FireFox\components\jsconsole-clhandler.js.dCrypt
%ProgramFiles%\FireFox\components\GPSDGeolocationProvider.js.dCrypt
%ProgramFiles%\FireFox\components\fuelApplication.js.dCrypt
%ProgramFiles%\FireFox\components\nsBadCertHandler.js.dCrypt
%ProgramFiles%\FireFox\components\NetworkGeolocationProvider.js.dCrypt
%ProgramFiles%\FireFox\components\messageWakeupService.js.dCrypt
%ProgramFiles%\FireFox\components\FeedWriter.js.dCrypt
%ProgramFiles%\FireFox\components\contentSecurityPolicy.js.dCrypt
%ProgramFiles%\FireFox\components\contentAreaDropListener.js.dCrypt
%ProgramFiles%\FireFox\components\ConsoleAPI.js.dCrypt
%ProgramFiles%\FireFox\components\FeedProcessor.js.dCrypt
%ProgramFiles%\FireFox\components\FeedConverter.js.dCrypt
%ProgramFiles%\FireFox\components\crypto-SDR.js.dCrypt
%ProgramFiles%\FireFox\components\nsSessionStore.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\identity.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\constants.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\main.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\log4moz.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\jpakeclient.js.dCrypt
%ProgramFiles%\FireFox\modules\services-crypto\WeaveCrypto.js.dCrypt
%ProgramFiles%\FireFox\modules\distribution.js.dCrypt
%ProgramFiles%\FireFox\modules\debug.js.dCrypt
%ProgramFiles%\FireFox\defaults\profile\chrome\userContent-example.css.dCrypt
%ProgramFiles%\FireFox\modules\utils.js.dCrypt
%ProgramFiles%\FireFox\modules\SpatialNavigation.js.dCrypt
%ProgramFiles%\FireFox\modules\Microformats.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\history.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\forms.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\clients.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\tabs.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\prefs.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\passwords.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\engines\bookmarks.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\resource.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\record.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\notifications.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\util.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\status.js.dCrypt
%ProgramFiles%\FireFox\modules\services-sync\service.js.dCrypt
%ProgramFiles%\FireFox\defaults\profile\chrome\userChrome-example.css.dCrypt
%ProgramFiles%\FireFox\components\nsURLFormatter.js.dCrypt
%ProgramFiles%\FireFox\components\nsUrlClassifierListManager.js.dCrypt
%ProgramFiles%\FireFox\components\nsUrlClassifierLib.js.dCrypt
%ProgramFiles%\FireFox\components\PlacesProtocolHandler.js.dCrypt
%ProgramFiles%\FireFox\components\PlacesCategoriesStarter.js.dCrypt
%ProgramFiles%\FireFox\components\nsWebHandlerApp.js.dCrypt
%ProgramFiles%\FireFox\components\nsUpdateTimerManager.js.dCrypt
%ProgramFiles%\FireFox\components\nsTaggingService.js.dCrypt
%ProgramFiles%\FireFox\components\nsSidebar.js.dCrypt
%ProgramFiles%\FireFox\components\nsSetDefaultBrowser.js.dCrypt
%ProgramFiles%\FireFox\components\nsUpdateServiceStub.js.dCrypt
%ProgramFiles%\FireFox\components\nsUpdateService.js.dCrypt
%ProgramFiles%\FireFox\components\nsTryToClose.js.dCrypt
%ProgramFiles%\FireFox\defaults\pref\firefox-l10n.js.dCrypt
%ProgramFiles%\FireFox\defaults\pref\firefox-branding.js.dCrypt
%ProgramFiles%\FireFox\defaults\pref\channel-prefs.js.dCrypt
%ProgramFiles%\FireFox\defaults\profile\prefs.js.dCrypt
%ProgramFiles%\FireFox\defaults\pref\services-sync.js.dCrypt
%ProgramFiles%\FireFox\defaults\pref\firefox.js.dCrypt
%ProgramFiles%\FireFox\defaults\autoconfig\prefcalls.js.dCrypt
%ProgramFiles%\FireFox\components\txEXSLTRegExFunctions.js.dCrypt
%ProgramFiles%\FireFox\components\storage-mozStorage.js.dCrypt
%ProgramFiles%\FireFox\components\storage-Legacy.js.dCrypt
%ProgramFiles%\FireFox\defaults\autoconfig\platform.js.dCrypt
%ProgramFiles%\FireFox\components\WebContentConverter.js.dCrypt
%ProgramFiles%\FireFox\components\Weave.js.dCrypt
C:\Far2\far.map.dCrypt
%HOMEPATH%\Templates\sndrec.wav.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk.dCrypt
C:\Far2\Addons\Colors\Custom Highlighting\import_colors.bat.dCrypt
C:\Far2\Addons\Colors\import_colors.bat.dCrypt
C:\Far2\Addons\Colors\export_colors.bat.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Windows Explorer.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Tour Windows XP.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Synchronize.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk.dCrypt
C:\Far2\Plugins\DrawLine\DrawLine.map.dCrypt
C:\Far2\Plugins\Compare\Compare.map.dCrypt
C:\Far2\Plugins\Colorer\hrc\auto\types\auto.jar.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ESEARCH.BAT.dCrypt
C:\Far2\Plugins\EMenu\EMenu.map.dCrypt
C:\Far2\Plugins\EditCase\EditCase.map.dCrypt
C:\Far2\Plugins\Colorer\hrc\common.jar.dCrypt
C:\Far2\Plugins\Align\Align.map.dCrypt
C:\Far2\Encyclopedia\FarEncyclopedia.ru.chm.dCrypt
C:\Far2\Addons\Colors\Default Highlighting\import_colors.bat.dCrypt
C:\Far2\Plugins\Brackets\Brackets.map.dCrypt
C:\Far2\Plugins\AutoWrap\AutoWrap.map.dCrypt
C:\Far2\Plugins\arclite\arclite.map.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk.dCrypt
%HOMEPATH%\My Documents\My Pictures\Sample Pictures.lnk.dCrypt
%HOMEPATH%\My Documents\My Music\Sample Music.lnk.dCrypt
<LS_APPDATA>\IconCache.db.dCrypt
%HOMEPATH%\Recent\scoopy.lnk.dCrypt
%HOMEPATH%\Recent\Local Disk (C).lnk.dCrypt
%HOMEPATH%\Recent\DrWebVirtNet.lnk.dCrypt
%HOMEPATH%\Favorites\Links\Windows.url.dCrypt
%HOMEPATH%\Favorites\Links\Customize Links.url.dCrypt
%HOMEPATH%\Favorites\Radio Station Guide.url.dCrypt
%HOMEPATH%\Favorites\MSN.com.url.dCrypt
%HOMEPATH%\Favorites\Links\Windows Media.url.dCrypt
%HOMEPATH%\Favorites\Links\Windows Marketplace.url.dCrypt
%HOMEPATH%\Favorites\Links\Free Hotmail.url.dCrypt
%HOMEPATH%\Start Menu\Programs\Windows Media Player.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Remote Assistance.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Outlook Express.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Notepad.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Command Prompt.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Accessories\Address Book.lnk.dCrypt
%HOMEPATH%\Start Menu\Programs\Internet Explorer.lnk.dCrypt
%HOMEPATH%\Recent\vm_shara on '.hostShared Folders' (Z).lnk.dCrypt
%HOMEPATH%\Recent\video7.0.lnk.dCrypt
%HOMEPATH%\Recent\scsi.lnk.dCrypt
%HOMEPATH%\Start Menu\Far.lnk.dCrypt
%HOMEPATH%\Recent\xxx_svga.lnk.dCrypt
%HOMEPATH%\Recent\xxscsi.lnk.dCrypt
C:\Far2\Plugins\ExtSearch\sources\esearch_debug.bat.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Citrus Punch Bkgrd.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\citbannA.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Btzhsepa.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Network Blitz Bkgrd.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Ivy.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\fieruled.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Blank Bkgrd.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\aleabanr.gif.dCrypt
C:\Far2\PluginSDK\Headers.pas\PluginW.pas.dCrypt
C:\Far2\PluginSDK\Headers.pas\FarKeysW.pas.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\aswrule.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\anabnr2.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\amaizrul.gif.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.css.dCrypt
%ProgramFiles%\FireFox\softokn3.chk.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.css.dCrypt
%ProgramFiles%\FireFox\nssdbm3.chk.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\tech.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\Sweets Bkgrd.gif.dCrypt
%CommonProgramFiles%\Microsoft Shared\Stationery\sunbannA.gif.dCrypt
%ProgramFiles%\FireFox\greprefs.js.dCrypt
%ProgramFiles%\FireFox\freebl3.chk.dCrypt
%CommonProgramFiles%\System\Ole DB\sqlsoldb.chm.dCrypt
C:\Far2\PluginSDK\Headers.pas\FarColorW.pas.dCrypt
C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.CPP.dCrypt
C:\Far2\Plugins\ExtSearch\sources\PLUGIN.HPP.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.H.dCrypt
C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.CPP.dCrypt
C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.H.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtMenu.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtChCase.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtSearch.hpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtSearch.cpp.dCrypt
C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.cpp.dCrypt
C:\Far2\Plugins\TmpPanel\TmpPanel.map.dCrypt
C:\Far2\Plugins\ProcList\Proclist.map.dCrypt
C:\Far2\Plugins\Network\Network.map.dCrypt
C:\Far2\PluginSDK\Headers.c\plugin.hpp.dCrypt
C:\Far2\PluginSDK\Headers.c\farkeys.hpp.dCrypt
C:\Far2\PluginSDK\Headers.c\farcolor.hpp.dCrypt
C:\Far2\Plugins\MacroView\MacroView.map.dCrypt
C:\Far2\Plugins\FTP\FarFtp.map.dCrypt
C:\Far2\Plugins\FileCase\FileCase.map.dCrypt
C:\Far2\Plugins\FarCmds\FARCmds.map.dCrypt
C:\Far2\Plugins\HlfViewer\HlfViewer.map.dCrypt
C:\Far2\Plugins\FTP\lib\ftpProgress.map.dCrypt
C:\Far2\Plugins\FTP\lib\ftpDirList.map.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Windows Movie Maker.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Windows Messenger.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\MSN.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\WordPad.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Paint.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Calculator.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Windows Update.lnk.dCrypt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg.dCrypt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg.dCrypt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg.dCrypt
%ALLUSERSPROFILE%\Start Menu\Windows Catalog.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Set Program Access and Defaults.lnk.dCrypt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Backup.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\Volume Control.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\Sound Recorder.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Disk Defragmenter.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Disk Cleanup.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Character Map.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\Wireless Network Setup Wizard.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\Network Connections.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\HyperTerminal.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\Accessibility Wizard.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\Remote Desktop Connection.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\New Connection Wizard.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\Network Setup Wizard.lnk.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\snowflake.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\car.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\butterfly.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\beach.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\dirt bike.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\chess.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\cat.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\ball.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\guest.bmp.dCrypt
C:\startup_local.bat.dCrypt
C:\AUTOEXEC.BAT.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\astronaut.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\airplane.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\%USERNAME%.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\palm tree.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\lift-off.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\kick.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\skater.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\red flower.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\pink flower.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\horses.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\duck.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\drip.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\dog.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\guitar.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\frog.bmp.dCrypt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\fish.bmp.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Files and Settings Transfer Wizard.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk.dCrypt
C:\Documents and Settings\Default User\Templates\excel4.xls.dCrypt
C:\Documents and Settings\Default User\Templates\excel.xls.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Notepad.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Command Prompt.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Windows Explorer.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Tour Windows XP.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Synchronize.lnk.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db.dCrypt
%APPDATA%\Microsoft\Internet Explorer\brndlog.bak.dCrypt
C:\Documents and Settings\Default User\Templates\sndrec.wav.dCrypt
C:\Documents and Settings\Default User\Templates\powerpnt.ppt.dCrypt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db.dCrypt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk.dCrypt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Windows Media Player.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Local Security Policy.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Event Viewer.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Services.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Performance.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Data Sources (ODBC).lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\System Information.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Security Center.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\Scheduled Tasks.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Computer Management.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Component Services.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\System Restore.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Solitaire.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Pinball.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Minesweeper.lnk.dCrypt
C:\Documents and Settings\Default User\Start Menu\Programs\Remote Assistance.lnk.dCrypt
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.bak.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Spider Solitaire.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Internet Spades.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Internet Backgammon.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Hearts.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Freecell.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Internet Reversi.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Internet Hearts.lnk.dCrypt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\Internet Checkers.lnk.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\crashes.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\contentAreaUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\console.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeToolbar.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeToolbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\customizeCharset.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\console.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\charsetOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\appPicker.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutSupport.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\config.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\commonDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\commonDialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsClipboard.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\notfound.wav.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\menulist.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\plugins.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsUserSettings.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\nsDragAndDrop.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\inlineSpellCheckUI.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\filepicker.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\editMenuOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\dialogOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\globalOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\findUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\finddialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutMemory.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\crlImportDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\createCertInfo.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\downloadcert.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\device_manager.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\deletecert.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\clientauthask.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certerror.js.dCrypt
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\intl.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\communicator.css.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\choosetoken.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certpicker.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\certManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\serverCrlNextupdate.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\resetpassword.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\protectedAuth.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\aboutMemory.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\cookie\cookieAcceptDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\viewCertDetails.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pref-crlupdate.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\exceptionDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\escrowWarn.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\editcerts.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pippki.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\password.js.dCrypt
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\formsigning.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printdialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\handler.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\dialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\update.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerService.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerDatasource.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginFinderBinding.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\list.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\eula.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions-content.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\profileSelection.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\createProfileWizard.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\removemp.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\history.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\ocsp.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblemBinding.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerWizard.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginInstallerWizard.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\fontbuilder.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\changemp.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblemContent.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\about.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipcbrowser-content.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\test-ipcbrowser-chrome.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\tabprompts.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSource.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewPartialSource.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\textbox.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\strres.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printProgress.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewProgress.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printPageSetup.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\selectDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\remote-test-ipc.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\printUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\DownloadProgressListener.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLMonoPrint.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\helperApps.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\downloads.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\downloads.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\videocontrols.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewZoomOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSourceUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\viewSource.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\alerts\alert.js.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xul.css.dCrypt
%ProgramFiles%\FireFox\chrome\toolkit\content\global\XPCNativeWrapper.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\browser.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\fullscreen-video.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\engineManager.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\browser.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sanitizeDialog.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\pageInfo.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\inspector.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutSyncTabs.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\tabview.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutSessionRestore.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutPrivateBrowsing.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\aboutCertError.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\places.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\organizer.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\editBookmarkOverlay.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\tabview.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\preferences.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\applications.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\subscribe.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncCommon.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\setDesktopBackground.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\searchbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\subscribe-ui.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncSetup.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\syncQuota.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.js.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncSetup.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncQuota.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\syncCommon.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\setDesktopBackground.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.css.dCrypt
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.css.dCrypt

Deletes the following files:

%WINDIR%\Santa Fe Stucco.bmp
%WINDIR%\River Sumida.bmp
%WINDIR%\Rhododendron.bmp
%WINDIR%\Soap Bubbles.bmp
%WINDIR%\Zapotec.bmp
%WINDIR%\winnt256.bmp
%WINDIR%\winnt.bmp
%WINDIR%\Prairie Wind.bmp
%WINDIR%\clock.avi
%WINDIR%\Coffee Bean.bmp
%WINDIR%\Blue Lace 16.bmp
%WINDIR%\FeatherTexture.bmp
%WINDIR%\imsins.BAK
%WINDIR%\Greenstone.bmp
%WINDIR%\Gone Fishing.bmp

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial