Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Program.Zona.42

Added to the Dr.Web virus database: 2015-05-04

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKLM>\SOFTWARE\CLASSES\jarfile\shell\open\command] '' = '"%ProgramFiles(x86)%\Java\jre7\bin\javaw.exe" -jar "%1" %*'
  • [<HKLM>\Software\Classes\jarfile\shell\open\command] '' = '"%ProgramFiles%\Java\jre1.8.0_45\bin\javaw.exe" -jar "%1" %*'
  • [<HKLM>\SOFTWARE\Classes\JNLPFile\Shell\Open\Command] '' = '"%ProgramFiles%\Java\jre1.8.0_45\bin\javaws.exe" "%1"'
  • [<HKLM>\SOFTWARE\Classes\Wow6432Node\CLSID\{4299124F-F2C3-41b4-9C73-9236B2AD0E8F}\Shell\Open\Command] '' = '%ProgramFiles(x86)%\Java\jre7\bin\javacpl.exe'
Modifies file system
Creates the following files
  • %TEMP%\zonainstall.log
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\nicosia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\novokuznetsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\novosibirsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\omsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\oral
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\pontianak
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kabul
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\pyongyang
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\qyzylorda
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\rangoon
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh87
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh88
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\riyadh89
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\makassar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\manila
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\magadan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\macau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kuching
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\hong_kong
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\hovd
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\ho_chi_minh
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\irkutsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\jakarta
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\jayapura
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\sakhalin
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\qatar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\jerusalem
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\karachi
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kathmandu
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\khandyga
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kolkata
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\krasnoyarsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kuala_lumpur
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\hebron
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\kamchatka
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\ulaanbaatar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\sydney
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\shanghai
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\reykjavik
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\south_georgia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\stanley
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\adelaide
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\brisbane
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\broken_hill
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\samarkand
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\currie
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\eucla
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\hobart
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\lindeman
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\lord_howe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\melbourne
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\perth
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\faroe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\madeira
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\cape_verde
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\canary
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\bermuda
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\srednekolymsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\taipei
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\tashkent
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\tbilisi
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\tehran
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\thimphu
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\seoul
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\gaza
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\tokyo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\ust-nera
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\vladivostok
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\yakutsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\yekaterinburg
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\yerevan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\atlantic\azores
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\singapore
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\urumqi
  • %ProgramFiles(x86)%\java\jre7\lib\zi\australia\darwin
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\dushanbe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\bishkek
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\puerto_rico
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\rainy_river
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\rankin_inlet
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\recife
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\regina
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\resolute
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\nome
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\rio_branco
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\santa_isabel
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\santiago
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\santo_domingo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\sao_paulo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\scoresbysund
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\sitka
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\porto_velho
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\port_of_spain
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\port-au-prince
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\phoenix
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\paramaribo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\moncton
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\monterrey
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\montevideo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\montreal
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\nassau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\new_york
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\st_johns
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\santarem
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\nipigon
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\beulah
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\center
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\north_dakota\new_salem
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\ojinaga
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\panama
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\pangnirtung
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\miquelon
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\noronha
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\casey
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\dili
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\thule
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\aqtau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\aqtobe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\ashgabat
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\baghdad
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\baku
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\bangkok
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\swift_current
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\beirut
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\brunei
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\chita
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\choibalsan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\colombo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\damascus
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\dhaka
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\amman
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\anadyr
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\almaty
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\vostok
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\troll
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\tijuana
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\toronto
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\vancouver
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\whitehorse
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\winnipeg
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\yakutat
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\tegucigalpa
  • %ProgramFiles(x86)%\java\jre7\lib\zi\asia\dubai
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\yellowknife
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\dumontdurville
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\macquarie
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\mawson
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\palmer
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\rothera
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\syowa
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\thunder_bay
  • %ProgramFiles(x86)%\java\jre7\lib\zi\antarctica\davis
  • %ProgramFiles(x86)%\java\jre7\lib\zi\cet
  • %ProgramFiles(x86)%\java\jre7\lib\zi\cst6cdt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\eet
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\honolulu
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kiritimati
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kosrae
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\kwajalein
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\majuro
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\auckland
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\marquesas
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\nauru
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\niue
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\norfolk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\noumea
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pago_pago
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\palau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\gambier
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\midway
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\guam
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\guadalcanal
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\galapagos
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\funafuti
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\mauritius
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\reunion
  • %ProgramFiles(x86)%\java\jre7\lib\zi\met
  • %ProgramFiles(x86)%\java\jre7\lib\zi\mst
  • %ProgramFiles(x86)%\java\jre7\lib\zi\mst7mdt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pitcairn
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\apia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\kerguelen
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\bougainville
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\chuuk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\easter
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\efate
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\enderbury
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\fakaofo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\mahe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\fiji
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\chatham
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\maldives
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\pohnpei
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tahiti
  • %ProgramFiles(x86)%\java\jre7\lib\zi\zoneinfomappings
  • %ProgramFiles(x86)%\java\jre7\release
  • %ProgramFiles(x86)%\java\jre7\lib\rt.jar
  • %ProgramFiles(x86)%\java\jre7\lib\charsets.jar
  • %ProgramFiles(x86)%\java\jre7\lib\deploy.jar
  • %ProgramFiles(x86)%\java\jre7\lib\javaws.jar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\pst8pdt
  • %ProgramFiles(x86)%\java\jre7\lib\plugin.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\localedata.jar
  • %ProgramFiles(x86)%\java\jre7\lib\jfxrt.jar
  • %WINDIR%\syswow64\java.exe
  • %WINDIR%\syswow64\javaw.exe
  • %WINDIR%\syswow64\windowsaccessbridge-32.dll
  • %ProgramFiles(x86)%\java\jre7\bin\client\classes.jsa
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\yst9ydt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\wet
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\yst9
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\pst8
  • %TEMP%\hsperfdata_user\1296
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tarawa
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\tongatapu
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\wake
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\wallis
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pst8pdt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\port_moresby
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\saipan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\pacific\rarotonga
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\ast4
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\est5
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\est5edt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\hst10
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\mst7
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\mst7mdt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\ast4adt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\cst6
  • %ProgramFiles(x86)%\java\jre7\lib\zi\systemv\cst6cdt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\cocos
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\christmas
  • %ProgramFiles(x86)%\java\jre7\lib\zi\indian\chagos
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-3
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-4
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-5
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-6
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-7
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-8
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\brussels
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-9
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\utc
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\amsterdam
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\andorra
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\athens
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\belgrade
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-13
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-12
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-2
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-11
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-10
  • %ProgramFiles(x86)%\java\jre7\lib\zi\est
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+1
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+10
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+11
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+12
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\berlin
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+2
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\uct
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+4
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+6
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+7
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+8
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+9
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-1
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+3
  • %ProgramFiles(x86)%\java\jre7\lib\zi\est5edt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt+5
  • %ProgramFiles(x86)%\java\jre7\lib\zi\etc\gmt-14
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\bucharest
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\rome
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\simferopol
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\sofia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\stockholm
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\tallinn
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\tirane
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\riga
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\budapest
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\samara
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\uzhgorod
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\warsaw
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\zaporozhye
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\zurich
  • %ProgramFiles(x86)%\java\jre7\lib\zi\gmt
  • %ProgramFiles(x86)%\java\jre7\lib\zi\hst
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\vienna
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\vilnius
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\volgograd
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\lisbon
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\mexico_city
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\oslo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\copenhagen
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\dublin
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\gibraltar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\helsinki
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\istanbul
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\kaliningrad
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\paris
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\prague
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\kiev
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\luxembourg
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\madrid
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\malta
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\minsk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\monaco
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\moscow
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\chisinau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\europe\london
  • %ProgramFiles(x86)%\java\jre7\lib\jsse.jar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\metlakatla
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\los_angeles
  • %ProgramFiles(x86)%\java\jre7\bin\prism-d3d.dll
  • %ProgramFiles(x86)%\java\jre7\bin\rmid.exe
  • %ProgramFiles(x86)%\java\jre7\bin\rmiregistry.exe
  • %ProgramFiles(x86)%\java\jre7\bin\servertool.exe
  • %ProgramFiles(x86)%\java\jre7\bin\splashscreen.dll
  • %ProgramFiles(x86)%\java\jre7\bin\ssv.dll
  • %ProgramFiles(x86)%\java\jre7\bin\management.dll
  • %ProgramFiles(x86)%\java\jre7\bin\ssvagent.exe
  • %ProgramFiles(x86)%\java\jre7\bin\sunmscapi.dll
  • %ProgramFiles(x86)%\java\jre7\bin\t2k.dll
  • %ProgramFiles(x86)%\java\jre7\bin\tnameserv.exe
  • %ProgramFiles(x86)%\java\jre7\bin\unpack.dll
  • %ProgramFiles(x86)%\java\jre7\bin\unpack200.exe
  • %ProgramFiles(x86)%\java\jre7\bin\verify.dll
  • %ProgramFiles(x86)%\java\jre7\bin\plugin2\npjp2.dll
  • %ProgramFiles(x86)%\java\jre7\bin\policytool.exe
  • %ProgramFiles(x86)%\java\jre7\bin\plugin2\msvcr100.dll
  • %ProgramFiles(x86)%\java\jre7\bin\pack200.exe
  • %ProgramFiles(x86)%\java\jre7\bin\orbd.exe
  • %ProgramFiles(x86)%\java\jre7\bin\kcms.dll
  • %ProgramFiles(x86)%\java\jre7\bin\keytool.exe
  • %ProgramFiles(x86)%\java\jre7\bin\kinit.exe
  • %ProgramFiles(x86)%\java\jre7\bin\klist.exe
  • %ProgramFiles(x86)%\java\jre7\bin\ktab.exe
  • %ProgramFiles(x86)%\java\jre7\bin\libxml2.dll
  • %ProgramFiles(x86)%\java\jre7\bin\w2k_lsa_auth.dll
  • %ProgramFiles(x86)%\java\jre7\bin\sunec.dll
  • %ProgramFiles(x86)%\java\jre7\bin\libxslt.dll
  • %ProgramFiles(x86)%\java\jre7\bin\msvcr100.dll
  • %ProgramFiles(x86)%\java\jre7\bin\net.dll
  • %ProgramFiles(x86)%\java\jre7\bin\nio.dll
  • %ProgramFiles(x86)%\java\jre7\bin\npjpi170_80.dll
  • %ProgramFiles(x86)%\java\jre7\bin\npoji610.dll
  • %ProgramFiles(x86)%\java\jre7\bin\npt.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jsoundds.dll
  • %ProgramFiles(x86)%\java\jre7\bin\mlib_image.dll
  • %ProgramFiles(x86)%\java\jre7\lib\cmm\linear_rgb.pf
  • %ProgramFiles(x86)%\java\jre7\lib\ext\meta-index
  • %ProgramFiles(x86)%\java\jre7\bin\wsdetect.dll
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_ja.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_ko.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_pt_br.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_sv.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_cn.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_hk.properties
  • %ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge-32.dll
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_zh_tw.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy.pack
  • %ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge-32.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\dnsns.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\jaccess.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\localedata.pack
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_fr.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_it.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_es.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages_de.properties
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\messages.properties
  • %ProgramFiles(x86)%\java\jre7\lib\accessibility.properties
  • %ProgramFiles(x86)%\java\jre7\lib\alt-rt.jar
  • %ProgramFiles(x86)%\java\jre7\lib\calendars.properties
  • %ProgramFiles(x86)%\java\jre7\lib\charsets.pack
  • %ProgramFiles(x86)%\java\jre7\lib\classlist
  • %ProgramFiles(x86)%\java\jre7\lib\cmm\ciexyz.pf
  • %ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jsound.dll
  • %ProgramFiles(x86)%\java\jre7\lib\cmm\gray.pf
  • %ProgramFiles(x86)%\java\jre7\lib\cmm\srgb.pf
  • %ProgramFiles(x86)%\java\jre7\lib\content-types.properties
  • %ProgramFiles(x86)%\java\jre7\lib\currency.data
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\ffjcext.zip
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\jqs\jqs.conf
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\jqs\jqsmessages.properties
  • %ProgramFiles(x86)%\java\jre7\bin\zip.dll
  • %ProgramFiles(x86)%\java\jre7\lib\cmm\pycc.pf
  • %ProgramFiles(x86)%\java\jre7\lib\deploy\splash.gif
  • %ProgramFiles(x86)%\java\jre7\bin\jsdt.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jp2native.dll
  • %ProgramFiles(x86)%\java\jre7\bin\axbridge.dll
  • %ProgramFiles(x86)%\java\jre7\bin\client\jvm.dll
  • %ProgramFiles(x86)%\java\jre7\bin\client\xusage.txt
  • %ProgramFiles(x86)%\java\jre7\bin\dcpr.dll
  • %ProgramFiles(x86)%\java\jre7\bin\decora-sse.dll
  • %ProgramFiles(x86)%\java\jre7\bin\deploy.dll
  • %LOCALAPPDATA%low\sun\java\jre1.7.0_80\data1.cab
  • %ProgramFiles(x86)%\java\jre7\bin\dtplugin\deployjava1.dll
  • %ProgramFiles(x86)%\java\jre7\bin\dt_shmem.dll
  • %ProgramFiles(x86)%\java\jre7\bin\dt_socket.dll
  • %ProgramFiles(x86)%\java\jre7\bin\eula.dll
  • %ProgramFiles(x86)%\java\jre7\bin\fontmanager.dll
  • %ProgramFiles(x86)%\java\jre7\bin\fxplugins.dll
  • %ProgramFiles(x86)%\java\jre7\bin\glass.dll
  • %ProgramFiles(x86)%\java\jre7\welcome.html
  • %ProgramFiles(x86)%\java\jre7\bin\awt.dll
  • %ProgramFiles(x86)%\java\jre7\thirdpartylicensereadme.txt
  • %ProgramFiles(x86)%\java\jre7\thirdpartylicensereadme-javafx.txt
  • %ProgramFiles(x86)%\java\jre7\readme.txt
  • %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\zona.ru\zona.sol
  • %ProgramFiles(x86)%\zona\utils.jar
  • %ProgramFiles(x86)%\zona\license_ru.rtf
  • %ProgramFiles(x86)%\zona\license_uk.rtf
  • %ProgramFiles(x86)%\zona\license_en.rtf
  • %TEMP%\hd.vbs
  • %ProgramFiles(x86)%\java\jre7\bin\glib-lite.dll
  • %ProgramFiles(x86)%\java\jre7\bin\dtplugin\npdeployjava1.dll
  • %TEMP%\javasetup.exe
  • %TEMP%\zonc110.tmp
  • %ProgramFiles(x86)%\java\jre7\core.zip
  • %TEMP%\java_install_reg.log
  • %TEMP%\java_install.log
  • %ProgramFiles(x86)%\java\jre7\copyright
  • %ProgramFiles(x86)%\java\jre7\license
  • %APPDATA%\zona\init.xml
  • %LOCALAPPDATA%low\sun\java\jre1.7.0_80\jre1.7.0_80.msi
  • %ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge-32.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpishare.dll
  • %ProgramFiles(x86)%\java\jre7\bin\installer.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jdwp.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jfr.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jfxmedia.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jfxwebkit.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jli.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jp2iexp.dll
  • %ProgramFiles(x86)%\java\jre7\bin\gstreamer-lite.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jp2launcher.exe
  • %ProgramFiles(x86)%\java\jre7\bin\jp2ssv.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpeg.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpicom.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpiexp.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpinscp.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jpioji.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jdbcodbc.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge-32.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jawt.dll
  • %ProgramFiles(x86)%\java\jre7\bin\java_crw_demo.dll
  • %ProgramFiles(x86)%\java\jre7\bin\j2pcsc.dll
  • %ProgramFiles(x86)%\java\jre7\bin\j2pkcs11.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jaas_nt.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jabswitch.exe
  • %ProgramFiles(x86)%\java\jre7\bin\java-rmi.exe
  • %ProgramFiles(x86)%\java\jre7\bin\java.dll
  • %ProgramFiles(x86)%\java\jre7\bin\hprof.dll
  • %ProgramFiles(x86)%\java\jre7\bin\jqs.exe
  • %ProgramFiles(x86)%\java\jre7\bin\java.exe
  • %ProgramFiles(x86)%\java\jre7\bin\javacpl.cpl
  • %ProgramFiles(x86)%\java\jre7\bin\javacpl.exe
  • %ProgramFiles(x86)%\java\jre7\bin\javafx-font.dll
  • %ProgramFiles(x86)%\java\jre7\bin\javafx-iio.dll
  • %ProgramFiles(x86)%\java\jre7\bin\javaw.exe
  • %ProgramFiles(x86)%\java\jre7\bin\javaws.exe
  • %ProgramFiles(x86)%\java\jre7\bin\instrument.dll
  • %ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\lib\ext\sunec.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\sunjce_provider.jar
  • %ProgramFiles(x86)%\java\jre7\lib\ext\sunmscapi.jar
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\cancun
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\caracas
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\cayenne
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\cayman
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\chicago
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\ushuaia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\chihuahua
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\creston
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\cuiaba
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\curacao
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\danmarkshavn
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\dawson
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\dawson_creek
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\boise
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\costa_rica
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\campo_grande
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\cambridge_bay
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\bogota
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\boa_vista
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\mendoza
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\rio_gallegos
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\salta
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\san_juan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\san_luis
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\denver
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\tucuman
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\cordoba
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\asuncion
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\bahia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\bahia_banderas
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\barbados
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\belem
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\belize
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\jujuy
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\blanc-sablon
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\atikokan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\la_rioja
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\detroit
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\fortaleza
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\iqaluit
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\jamaica
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\juneau
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\kentucky\louisville
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\kentucky\monticello
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\la_paz
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\vevay
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\lima
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\maceio
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\managua
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\manaus
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\martinique
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\matamoros
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\mazatlan
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\winamac
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\inuvik
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\vincennes
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\tell_city
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\menominee
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\glace_bay
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\godthab
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\goose_bay
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\grand_turk
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\guatemala
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\edmonton
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\el_salvador
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\eirunepe
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\guayaquil
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\hermosillo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\indianapolis
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\knox
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\marengo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\indiana\petersburg
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\guyana
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\halifax
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\havana
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\catamarca
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\argentina\buenos_aires
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\araguaina
  • %ProgramFiles(x86)%\java\jre7\lib\javafx.properties
  • %ProgramFiles(x86)%\java\jre7\lib\javaws.pack
  • %ProgramFiles(x86)%\java\jre7\lib\jce.jar
  • %ProgramFiles(x86)%\java\jre7\lib\jfr\default.jfc
  • %ProgramFiles(x86)%\java\jre7\lib\jfr\profile.jfc
  • %ProgramFiles(x86)%\java\jre7\lib\jfr.jar
  • %ProgramFiles(x86)%\java\jre7\lib\management-agent.jar
  • %ProgramFiles(x86)%\java\jre7\lib\jfxrt.pack
  • %ProgramFiles(x86)%\java\jre7\lib\jvm.hprof.txt
  • %ProgramFiles(x86)%\java\jre7\lib\logging.properties
  • %ProgramFiles(x86)%\java\jre7\lib\management\jmxremote.access
  • %ProgramFiles(x86)%\java\jre7\lib\management\jmxremote.password.template
  • %ProgramFiles(x86)%\java\jre7\lib\management\management.properties
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_linknodrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_linkdrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_movenodrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_copynodrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_copydrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\ext\sunpkcs11.jar
  • %ProgramFiles(x86)%\java\jre7\lib\flavormap.properties
  • %ProgramFiles(x86)%\java\jre7\lib\fontconfig.bfc
  • %ProgramFiles(x86)%\java\jre7\lib\fontconfig.properties.src
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightdemibold.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightdemiitalic.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\management\snmp.acl.template
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightitalic.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\jsse.pack
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidasansdemibold.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidatypewriterbold.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidatypewriterregular.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\i386\jvm.cfg
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\cursors.properties
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\invalid32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidabrightregular.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\ext\zipfs.jar
  • %ProgramFiles(x86)%\java\jre7\lib\fonts\lucidasansregular.ttf
  • %ProgramFiles(x86)%\java\jre7\lib\images\cursors\win32_movedrop32x32.gif
  • %ProgramFiles(x86)%\java\jre7\lib\meta-index
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\casablanca
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\el_aaiun
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\johannesburg
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\khartoum
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\lagos
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\maputo
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\cairo
  • %ProgramFiles(x86)%\java\jre7\lib\net.properties
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\ceuta
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\monrovia
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\tunis
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\windhoek
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\adak
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\anchorage
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\antigua
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\nairobi
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\ndjamena
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\tripoli
  • %ProgramFiles(x86)%\java\jre7\lib\security\java.security
  • %ProgramFiles(x86)%\java\jre7\lib\zi\america\merida
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\accra
  • %ProgramFiles(x86)%\java\jre7\lib\psfont.properties.ja
  • %ProgramFiles(x86)%\java\jre7\lib\psfontj2d.properties
  • %ProgramFiles(x86)%\java\jre7\lib\resources.jar
  • %ProgramFiles(x86)%\java\jre7\lib\rt.pack
  • %ProgramFiles(x86)%\java\jre7\lib\security\blacklist
  • %ProgramFiles(x86)%\java\jre7\lib\security\cacerts
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\algiers
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\bissau
  • %ProgramFiles(x86)%\java\jre7\lib\security\java.policy
  • %ProgramFiles(x86)%\java\jre7\lib\security\javaws.policy
  • %ProgramFiles(x86)%\java\jre7\lib\security\local_policy.jar
  • %ProgramFiles(x86)%\java\jre7\lib\security\us_export_policy.jar
  • %ProgramFiles(x86)%\java\jre7\lib\sound.properties
  • %ProgramFiles(x86)%\java\jre7\lib\tzmappings
  • %ProgramFiles(x86)%\java\jre7\lib\zi\africa\abidjan
  • %ProgramFiles(x86)%\java\jre7\lib\plugin.pack
  • %ProgramFiles(x86)%\java\jre7\lib\security\javafx.policy
  • %WINDIR%\syswow64\javaws.exe
Deletes the following files
  • %ProgramFiles(x86)%\java\jre7\lib\rt.pack
  • %ProgramFiles(x86)%\java\jre7\lib\charsets.pack
  • %ProgramFiles(x86)%\java\jre7\lib\deploy.pack
  • %ProgramFiles(x86)%\java\jre7\lib\javaws.pack
  • %ProgramFiles(x86)%\java\jre7\lib\plugin.pack
  • %ProgramFiles(x86)%\java\jre7\lib\jsse.pack
  • %ProgramFiles(x86)%\java\jre7\lib\ext\localedata.pack
  • %ProgramFiles(x86)%\java\jre7\lib\jfxrt.pack
  • %ProgramFiles(x86)%\java\jre7\lib\ext\access-bridge.jar
  • %ProgramFiles(x86)%\java\jre7\bin\jawtaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\bin\windowsaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\bin\javaaccessbridge.dll
  • %ProgramFiles(x86)%\java\jre7\core.zip
  • %ProgramFiles(x86)%\java\jre7\bin\javacpl.cpl
Network activity
TCP
HTTP GET requests
  • http://zo#a.ru/installer.html?pa#################################################################################################################################################################...
  • http://i0.#8.net/T/QwcN_X.jpeg
  • http://dl.#ona.ru/jre_latest.exe
  • http://st##.#iniload.org/installer.html?pa#######################################################################################################################################################...
  • http://ja####.oracle.com/webapps/download/GetFile/1.7.0_80-b15/windows-i586/Java3BillDevices_en.jpg
  • 'zo#a.ru':443
  • 'ja#######d-secure.oracle.com':443
  • 'ja####.oracle.com':443
  • 'sj#####rics.java.com':443
  • UDP
    • DNS ASK i0.#8.net
    • DNS ASK zo#a.ru
    • DNS ASK dl.#ona.ru
    • DNS ASK ja#######d-secure.oracle.com
    • DNS ASK st##.#iniload.org
    • DNS ASK rp####cs.sun.com
    • DNS ASK ja####.oracle.com
    • DNS ASK sj#####rics.java.com
    Miscellaneous
    Creates and executes the following
    • '%WINDIR%\syswow64\cscript.exe' //NoLogo %TEMP%\hd.vbs
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\jp2launcher.exe' -secure -javaws -jre "%ProgramFiles(x86)%\Java\jre7" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlN1xsaWJcZGVwbG95LmphcgAtRGphdmEuc2VjdXJpdHkucG9saWN5PWZpbGU6QzpcUHJvZ3JhbSBGaWx...
    • '%ProgramFiles(x86)%\java\jre7\bin\javaws.exe' -fix -permissions -silent
    • '%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -Xshare:dump
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.pack" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -classpath "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar" com.sun.deploy.panel.JreLocator
    • '%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -classpath "%ProgramFiles(x86)%\Zona\utils.jar" ru.megamakc.core.JavaVer
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.pack" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.pack" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.pack" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\rt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\rt.jar"
    • '%TEMP%\javasetup.exe' /s REBOOT=Suppress JAVAUPDATE=0 WEBSTARTICON=0
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.pack" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.jar"
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.pack" "%ProgramFiles(x86)%\Java\jre7\lib\deploy.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.pack" "%ProgramFiles(x86)%\Java\jre7\lib\javaws.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.pack" "%ProgramFiles(x86)%\Java\jre7\lib\charsets.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jsse.jar"' (with hidden window)
    • '%TEMP%\javasetup.exe' /s REBOOT=Suppress JAVAUPDATE=0 WEBSTARTICON=0' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\rt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\rt.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.pack" "%ProgramFiles(x86)%\Java\jre7\lib\jfxrt.jar"' (with hidden window)
    • '%WINDIR%\syswow64\cscript.exe' //NoLogo %TEMP%\hd.vbs' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.pack" "%ProgramFiles(x86)%\Java\jre7\lib\ext\localedata.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.pack" "%ProgramFiles(x86)%\Java\jre7\lib\plugin.jar"' (with hidden window)
    • '%ProgramFiles(x86)%\java\jre7\bin\javaw.exe' -classpath "%ProgramFiles(x86)%\Zona\utils.jar" ru.megamakc.core.JavaVer' (with hidden window)
    Executes the following
    • '%WINDIR%\syswow64\msiexec.exe' /i "%LOCALAPPDATA%Low\Sun\Java\jre1.7.0_80\jre1.7.0_80.msi" REBOOT=Suppress JAVAUPDATE=0 WEBSTARTICON=0 /qn METHOD=joff

    Curing recommendations

    1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
    2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
    Download Dr.Web

    Download by serial number

    Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

    After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

    Download Dr.Web

    Download by serial number

    1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
    2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
      • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
      • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
      • Switch off your device and turn it on as normal.

    Find out more about Dr.Web for Android