Trojan.Encoder.13207

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\README.txt

Infects the following executable files:

C:\Far2\Plugins\ExtSearch\esearch.dll
C:\Far2\Plugins\EMenu\EMenu.dll
C:\Far2\Plugins\FileCase\FileCase.dll
C:\Far2\Plugins\FarCmds\FARCmds.dll
C:\Far2\Plugins\Compare\Compare.dll
C:\Far2\Plugins\Colorer\bin\colorer.dll
C:\Far2\Plugins\EditCase\EditCase.dll
C:\Far2\Plugins\DrawLine\DrawLine.dll
C:\Far2\Plugins\FTP\FarFtp.dll
C:\Far2\Plugins\ProcList\Proclist.dll
C:\Far2\Plugins\Network\Network.dll
C:\Far2\Plugins\WinSCP\WinSCP.dll
C:\Far2\Plugins\TmpPanel\TmpPanel.dll
C:\Far2\Plugins\FTP\lib\ftpProgress.fll
C:\Far2\Plugins\FTP\lib\ftpDirList.fll
C:\Far2\Plugins\MacroView\MacroView.dll
C:\Far2\Plugins\HlfViewer\HlfViewer.dll
C:\Far2\Plugins\7-Zip\7-ZipFar64.dll
C:\Far2\Plugins\7-Zip\7-ZipFar.dll
C:\Far2\Plugins\Align\Align.dll
C:\Far2\Plugins\7-Zip\7z.dll
C:\Far2\FExcept\demangle32.dll
C:\Far2\Far.exe
C:\Far2\FExcept\FExcept.dll
C:\Far2\FExcept\ExcDump.dll
C:\Far2\Plugins\arclite\7z.dll
C:\Far2\Plugins\arclite\arclite.dll
C:\Far2\Plugins\arclite\7zSD.sfx
C:\Far2\Plugins\Brackets\Brackets.dll
C:\Far2\Plugins\AutoWrap\AutoWrap.dll
C:\Far2\Plugins\arclite\7zCon.sfx
C:\Far2\Plugins\arclite\7z.sfx
C:\Far2\Plugins\arclite\7zS2con.sfx
C:\Far2\Plugins\arclite\7zS2.sfx

Malicious functions:

To complicate detection of its presence in the operating system,

blocks execution of the following system utilities:

Windows Task Manager (Taskmgr)

Modifies file system:

Creates the following files:

C:\Muldrop\EyuSfbsdi.dqq_0
C:\Muldrop\EyuRfhEyq.dqq_0
C:\Muldrop\EyuSfbsdiMjy.dqq_0
C:\Muldrop\EyuSfbsdi.iqq_0
C:\Muldrop\EyuMfov.dqq_0
C:\Muldrop\Eyfdvups.CMD.sfh_0
C:\Muldrop\Eyfdvups.4NT.sfh_0
C:\Muldrop\EyuCmjqBpbse.dqq_0
C:\Muldrop\EyuCiCbtf.dqq_0
C:\Muldrop\FARCnetEoh.img_0
C:\Muldrop\FARCnet.nbq_0
C:\Muldrop\FARCnetRvt.img_0
C:\Muldrop\FARCnetEoh.moh_0
C:\Muldrop\FARCnet.emm_0
C:\Muldrop\F3.sfh_0
C:\Muldrop\EyuSfbsdiRfh.dqq_0
C:\Muldrop\F9Tbcmf.sfh_0
C:\Muldrop\F9DfbdujwbufMfov.sfh_0
C:\Muldrop\EydDvnq.emm_0
C:\Muldrop\ENG_READ.TXT_0
C:\Muldrop\ENG_NEWS.TXT_0
C:\Muldrop\eo_mjlf.sfh_0
C:\Muldrop\eomjlf.ise_0
C:\Muldrop\EMfovRvt.moh_0
C:\Muldrop\EMfovEoh.img_0
C:\Muldrop\EMfovDfm.sfh_0
C:\Muldrop\EMfovRvt.img_0
C:\Muldrop\EMfovEoh.moh_0
C:\Muldrop\ES_RUS.HLF_0
C:\Muldrop\ES_ENG.REG_0
C:\Muldrop\ES_RUS.REG_0
C:\Muldrop\ES_RUS.LNG_0
C:\Muldrop\ES_ENG.LNG_0
C:\Muldrop\epxompbet.trmjuf_0
C:\Muldrop\eo_mjlf.sfh_1
C:\Muldrop\ES_ENG.HLF_0
C:\Muldrop\ESEARCH.BAT_0
C:\Muldrop\FARCnetRvt.moh_0
C:\Muldrop\FpouCbdif3.0.0.0.ebu_0
C:\Muldrop\Fjmf_je.eja_0
C:\Muldrop\ftfbsdi.emm_0
C:\Muldrop\Fsff Hpunbjm.vsm_0
C:\Muldrop\FjmfCbtf.nbq_0
C:\Muldrop\FbsSqb.moh_0
C:\Muldrop\FbsRvt.moh_0
C:\Muldrop\FjmfCbtf.emm_0
C:\Muldrop\FEydfqu.emm_0
C:\Muldrop\FuqRvt.moh_0
C:\Muldrop\FuqRvt.img_0
C:\Muldrop\fyufotjpot.joj_0
C:\Muldrop\fyqpsu_dpmpst.cbu_0
C:\Muldrop\FuqEoh.moh_0
C:\Muldrop\FuqCnet.uyu_0
C:\Muldrop\ftfbsdi_efcvh.cbu_0
C:\Muldrop\FuqEoh.img_0
C:\Muldrop\FuqCnet_svt.uyu_0
C:\Muldrop\FbsRvt.img_0
C:\Muldrop\FbsCaf.moh_0
C:\Muldrop\Fbs.fyf_0
C:\Muldrop\FbsEodzdmpqfejb.sv.din_0
C:\Muldrop\FbsCpmpsW.qbt_0
C:\Muldrop\Fbs.FAQ.uyu_1
C:\Muldrop\FARCpmpst242.sfh_1
C:\Muldrop\FARCpmpst242.sfh_0
C:\Muldrop\Fbs.FAQ.uyu_0
C:\Muldrop\FARHfsf.jog_0
C:\Muldrop\FbsHvo.moh_0
C:\Muldrop\FbsHvo.img_0
C:\Muldrop\FbsPpm.moh_0
C:\Muldrop\FbsKfztW.qbt_0
C:\Muldrop\FbsGfs.moh_0
C:\Muldrop\FbsEoh.moh_0
C:\Muldrop\FbsEoh.img_0
C:\Muldrop\FbsFuq.nbq_0
C:\Muldrop\FbsFuq.emm_0
C:\Muldrop\dibohfmph_13
C:\Muldrop\dibohfmph_12
C:\Muldrop\dibohfmph_15
C:\Muldrop\dibohfmph_14
C:\Muldrop\dibohfmph_11
C:\Muldrop\dibohfmph_0
C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_1
C:\Muldrop\dibohfmph_10
C:\Muldrop\dibohfmph_1
C:\Muldrop\dibohfmph_6
C:\Muldrop\dibohfmph_5
C:\Muldrop\dibohfmph_8
C:\Muldrop\dibohfmph_7
C:\Muldrop\dibohfmph_4
C:\Muldrop\dibohfmph_17
C:\Muldrop\dibohfmph_16
C:\Muldrop\dibohfmph_3
C:\Muldrop\dibohfmph_2
C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_0
C:\Muldrop\ddtrm.isd_0
C:\Muldrop\dbubmph.ynm_0
C:\Muldrop\dfsu8.ec_0
C:\Muldrop\Dfgbvmu165.sfh_0
C:\Muldrop\dbubmph-ufyu.ynm_0
C:\Muldrop\Cvtupnjaf Ljolt.vsm_0
C:\Muldrop\CusmSijguX.sfh_0
C:\Muldrop\dbubmph-shc.ynm_0
C:\Muldrop\dbubmph-dpotpmf.ynm_0
C:\Muldrop\Dftdsjqu.jpo_6
C:\Muldrop\Dftdsjqu.jpo_5
C:\Muldrop\Dftdsjqu.jpo_8
C:\Muldrop\Dftdsjqu.jpo_7
C:\Muldrop\Dftdsjqu.jpo_4
C:\Muldrop\Dftdsjqu.jpo_1
C:\Muldrop\Dftdsjqu.jpo_0
C:\Muldrop\Dftdsjqu.jpo_3
C:\Muldrop\Dftdsjqu.jpo_2
C:\Muldrop\dibohfmph_9
C:\Muldrop\ECbtfRvt.moh_0
C:\Muldrop\ECbtfRvt.img_0
C:\Muldrop\Eeju.SbwfAoeEyju.sfh_0
C:\Muldrop\Eeju.Npufqbe.sfh_0
C:\Muldrop\ECbtfEoh.moh_0
C:\Muldrop\DsbxRvt.moh_0
C:\Muldrop\DsbxRvt.img_0
C:\Muldrop\ECbtfEoh.img_0
C:\Muldrop\dzcfsqvol.ise_0
C:\Muldrop\ejtlt.svt.ufnq_0
C:\Muldrop\ejtlt.foh.ufnq_0
C:\Muldrop\EMfov.nbq_0
C:\Muldrop\EMfov.emm_0
C:\Muldrop\efnbohmf32.emm_0
C:\Muldrop\EejuCbtf.emm_0
C:\Muldrop\Eeju.SbwfFjmf.sfh_0
C:\Muldrop\efgbvmu.ise_0
C:\Muldrop\EejuCbtf.nbq_0
C:\Muldrop\DsbxLjof.nbq_0
C:\Muldrop\dpmpsff.moh_0
C:\Muldrop\dpmpsff.img_0
C:\Muldrop\dpmpsfs.fou.isd_0
C:\Muldrop\dpmpsfs.emm_0
C:\Muldrop\dmbttjd.ise_0
C:\Muldrop\dibohft.uyu_0
C:\Muldrop\dibohfmph_foh_0
C:\Muldrop\Djbmph.AmuDpxo.sfh_0
C:\Muldrop\dispnfbqqttupsf.trmjuf_0
C:\Muldrop\DsbxEoh.img_0
C:\Muldrop\dppljft.trmjuf_0
C:\Muldrop\DsbxLjof.emm_0
C:\Muldrop\DsbxEoh.moh_0
C:\Muldrop\dpoufou-qsfgt.trmjuf_0
C:\Muldrop\dpmpsfs.moh_0
C:\Muldrop\dpmpsfs.img_0
C:\Muldrop\dpnqbujcjmjuz.joj_0
C:\Muldrop\dpnnpo.kbs_0
C:\Muldrop\Pmzmtu14.xqm_0
C:\Muldrop\Pmzmtu13.xqm_0
C:\Muldrop\Pmzmtu2.xqm_0
C:\Muldrop\Pmzmtu15.xqm_0
C:\Muldrop\Pmzmtu12.xqm_0
C:\Muldrop\Pmzmtu1.xqm_0
C:\Muldrop\PmvhjoW.qbt_0
C:\Muldrop\Pmzmtu11.xqm_0
C:\Muldrop\Pmzmtu10.xqm_0
C:\Muldrop\Pmzmtu9.xqm_0
C:\Muldrop\Pmzmtu8.xqm_0
C:\Muldrop\PspdEoh.moh_0
C:\Muldrop\PspdEoh.img_0
C:\Muldrop\Pmzmtu7.xqm_0
C:\Muldrop\Pmzmtu4.xqm_0
C:\Muldrop\Pmzmtu3.xqm_0
C:\Muldrop\Pmzmtu6.xqm_0
C:\Muldrop\Pmzmtu5.xqm_0
C:\Muldrop\Pmvhjot.Rfwjfx.uyu_1
C:\Muldrop\Pbofm.Etd.sfh_0
C:\Muldrop\Pbofm.Dfm.sfh_0
C:\Muldrop\Pbofm.Lzoy-npu.sfh_0
C:\Muldrop\Pbofm.JvnqTpSfmfdufeFjmf.sfh_0
C:\Muldrop\Pbofm.CusmSijguPhUqDo.sfh_0
C:\Muldrop\Pbofm.CusmQ.sfh_0
C:\Muldrop\Pbofm.CusmLfgu.sfh_0
C:\Muldrop\Pbofm.CusmSijguBbdlSmbti.sfh_0
C:\Muldrop\Pbofm.CusmRjhiu.sfh_0
C:\Muldrop\Pmvhjot.Iotubmm.uyu_0
C:\Muldrop\PLUGIN.HPP_0
C:\Muldrop\Pmvhjot.Rfwjfx.uyu_0
C:\Muldrop\Pmvhjot.Iotubmm.uyu_1
C:\Muldrop\pdfbo.ise_0
C:\Muldrop\Pbofm.Nvnqbe.sfh_0
C:\Muldrop\Pbofm.MpvtfWiffmTjmu.sfh_0
C:\Muldrop\Pbofm.SqbdfTpSfmfdu.sfh_0
C:\Muldrop\Pbofm.SfmfduFspnCmjqcpbse.sfh_0
C:\Muldrop\Pspdmjtu.emm_0
C:\Muldrop\SbwfSfuujoht.dne_0
C:\Muldrop\sbsf-tdsjqut.isd_0
C:\Muldrop\SfuFbsEydfqujpoHboemfs.sfh_0
C:\Muldrop\sfbenf_0
C:\Muldrop\RUS_READ.TXT_0
C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_1
C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_0
C:\Muldrop\RUS_NEWS.TXT_0
C:\Muldrop\rsn.isd_0
C:\Muldrop\TfdiIogp.sfh_0
C:\Muldrop\tfbsdi.trmjuf_0
C:\Muldrop\TfdiIogp.uyu_1
C:\Muldrop\TfdiIogp.uyu_0
C:\Muldrop\tfbsdi.ktpo_0
C:\Muldrop\SijguF1.sfh_0
C:\Muldrop\SijguBS.sfh_0
C:\Muldrop\Svotfu.kqh_0
C:\Muldrop\SijguTbc.sfh_0
C:\Muldrop\RftupsfSfuujoht.dne_0
C:\Muldrop\Psphsftt_ZfMA.sfh_0
C:\Muldrop\Psphsftt_Wftib.sfh_0
C:\Muldrop\qiq-qspu.fou.isd_0
C:\Muldrop\qfsnjttjpot.trmjuf_0
C:\Muldrop\Psphsftt_JM.sfh_0
C:\Muldrop\PspdRvt.img_0
C:\Muldrop\Pspdmjtu.nbq_0
C:\Muldrop\Psphsftt_FbsCpqz.sfh_0
C:\Muldrop\PspdRvt.moh_0
C:\Muldrop\Qxfsuz.sfh_0
C:\Muldrop\qspup.isd_0
C:\Muldrop\REGEXPS.TXT_0
C:\Muldrop\Rbejp Subujpo Gvjef.vsm_0
C:\Muldrop\qspgjmft.joj_0
C:\Muldrop\qmvhjo.iqq_0
C:\Muldrop\qmbdft.trmjuf_0
C:\Muldrop\qsfgt.kt_0
C:\Muldrop\qmvhjosfh.ebu_0
C:\Muldrop\HpulfzPspqfsujft.sfh_0
C:\Muldrop\HpulfzCmjqcpbse.sfh_0
C:\Muldrop\hsbz_qvmu.ise_0
C:\Muldrop\hsbz.ise_0
C:\Muldrop\Hpulfz.sfh_0
C:\Muldrop\HmgVjfxfsEoh.moh_0
C:\Muldrop\HmgVjfxfsEoh.img_0
C:\Muldrop\HmgVjfxfsRvt.moh_0
C:\Muldrop\HmgVjfxfsRvt.img_0
C:\Muldrop\jnqpsu_dpmpst.cbu_2
C:\Muldrop\jnqpsu_dpmpst.cbu_1
C:\Muldrop\joefy.ebu_1
C:\Muldrop\joefy.ebu_0
C:\Muldrop\jnqpsu_dpmpst.cbu_0
C:\Muldrop\IdpoCbdif.ec_0
C:\Muldrop\ibdl.ise_0
C:\Muldrop\ifmm.sfh_1
C:\Muldrop\ifmm.sfh_0
C:\Muldrop\HmgVjfxfs.nbq_0
C:\Muldrop\gbsuzqft.isd_0
C:\Muldrop\gbslfzt.iqq_0
C:\Muldrop\gpsnijtupsz.trmjuf_0
C:\Muldrop\GDIPFONTCACHEV1.DAT_0
C:\Muldrop\gbsdpmps.iqq_0
C:\Muldrop\gbs.nbq_0
C:\Muldrop\fyufotjpot.trmjuf_0
C:\Muldrop\gbs7a.uyu_0
C:\Muldrop\gbs7a.sfh_0
C:\Muldrop\hfo.isd_0
C:\Muldrop\guqPsphsftt.nbq_0
C:\Muldrop\HmgVjfxfs.emm_0
C:\Muldrop\hfo.k2ff.isd_0
C:\Muldrop\guqPsphsftt.gmm_0
C:\Muldrop\GsffoMjmf.sfh_1
C:\Muldrop\GsffoMjmf.sfh_0
C:\Muldrop\guqDjsLjtu.nbq_0
C:\Muldrop\guqDjsLjtu.gmm_0
C:\Muldrop\joefy.ebu_2
C:\Muldrop\njssps.ise_0
C:\Muldrop\njnfTzqft.seg_0
C:\Muldrop\Npuft_svt.uyu_0
C:\Muldrop\Npuft.uyu_0
C:\Muldrop\Nfx Supsjft (Hjhixbz Bmvft).xnb_0
C:\Muldrop\NfuRvt.moh_0
C:\Muldrop\NfuRvt.img_0
C:\Muldrop\Nfuxpsl.nbq_0
C:\Muldrop\Nfuxpsl.emm_0
C:\Muldrop\Pbofm.Aqqt.sfh_0
C:\Muldrop\Pbofm.AmuBS.sfh_0
C:\Muldrop\Pbofm.CusmIot...sfh_0
C:\Muldrop\Pbofm.BS.sfh_0
C:\Muldrop\OqfojohLbtuFjmf.sfh_0
C:\Muldrop\od.ise_0
C:\Muldrop\nth.fou.isd_0
C:\Muldrop\od5qbm2.sfh_1
C:\Muldrop\od5qbm2.sfh_0
C:\Muldrop\NfuEoh.moh_0
C:\Muldrop\MbdspRvt.img_0
C:\Muldrop\MbdspEoh.moh_0
C:\Muldrop\MbdspVjfx.emm_0
C:\Muldrop\MbdspRvt.moh_0
C:\Muldrop\MbdspEoh.img_0
C:\Muldrop\lfz3.ec_0
C:\Muldrop\joj.fou.isd_0
C:\Muldrop\MbdspCpotut.sfh_0
C:\Muldrop\LICENSE_0
C:\Muldrop\MSN.dpn.vsm_0
C:\Muldrop\mpdbmtupsf.seg_0
C:\Muldrop\NfuEoh.img_0
C:\Muldrop\Mz Dpdvnfout.nzepdt_0
C:\Muldrop\mjuftufq.isd_0
C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_0
C:\Muldrop\MbdspVjfx.nbq_0
C:\Muldrop\mjdfodf_0
C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_1
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\README.txt
%APPDATA%\Mozilla\Firefox\README.txt
%APPDATA%\Mozilla\Firefox\Profiles\README.txt
%APPDATA%\README.txt
%APPDATA%\Mozilla\README.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\README.txt
%APPDATA%\Mozilla\Extensions\README.txt
%APPDATA%\Microsoft\README.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\README.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\README.txt
<LS_APPDATA>\Identities\README.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\README.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\README.txt
<LS_APPDATA>\Microsoft\README.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\README.txt
%HOMEPATH%\Desktop\README.txt
%HOMEPATH%\Cookies\README.txt
%HOMEPATH%\Favorites\README.txt
%HOMEPATH%\Favorites\Links\README.txt
<LS_APPDATA>\Mozilla\Firefox\README.txt
C:\Documents and Settings\README.txt
%HOMEPATH%\README.txt
C:\Far2\Addons\Colors\Default Highlighting\README.txt
C:\Far2\Addons\Colors\Custom Highlighting\README.txt
%HOMEPATH%\Templates\README.txt
%HOMEPATH%\Start Menu\Programs\Accessories\README.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\README.txt
%HOMEPATH%\Start Menu\README.txt
%HOMEPATH%\Start Menu\Programs\README.txt
C:\Far2\Documentation\eng\README.txt
C:\Far2\Addons\XLat\README.txt
C:\Far2\Documentation\README.txt
C:\Far2\Documentation\rus\README.txt
C:\Far2\Addons\XLat\Russian\README.txt
C:\Far2\Addons\Macros\README.txt
C:\Far2\Addons\Colors\README.txt
C:\Far2\Addons\Shell\README.txt
C:\Far2\Addons\SetUp\README.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\README.txt
%TEMP%\README.txt
%HOMEPATH%\Local Settings\History\README.txt
%HOMEPATH%\Local Settings\README.txt
%HOMEPATH%\Local Settings\<INETFILES>\README.txt
%HOMEPATH%\Local Settings\History\History.IE5\README.txt
<LS_APPDATA>\VMware\README.txt
<LS_APPDATA>\Mozilla\README.txt
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\README.txt
<LS_APPDATA>\README.txt
%HOMEPATH%\PrintHood\README.txt
%HOMEPATH%\NetHood\README.txt
%HOMEPATH%\SendTo\README.txt
%HOMEPATH%\Recent\README.txt
%HOMEPATH%\My Documents\README.txt
%HOMEPATH%\My Documents\My Music\README.txt
%HOMEPATH%\My Documents\Downloads\README.txt
%HOMEPATH%\My Documents\My Received Files\README.txt
%HOMEPATH%\My Documents\My Pictures\README.txt
%ALLUSERSPROFILE%\README.txt
%ALLUSERSPROFILE%\Templates\README.txt
C:\Documents and Settings\Default User\Application Data\README.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\README.txt
%ALLUSERSPROFILE%\Start Menu\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\README.txt
C:\Documents and Settings\Default User\Local Settings\History\README.txt
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\README.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\README.txt
C:\Documents and Settings\Default User\Local Settings\Temp\README.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\README.txt
C:\Documents and Settings\Default User\Desktop\README.txt
C:\Documents and Settings\Default User\Cookies\README.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\README.txt
C:\Documents and Settings\Default User\Favorites\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\README.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\README.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\README.txt
%ALLUSERSPROFILE%\Documents\My Music\README.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\README.txt
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\README.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\README.txt
<Current directory>\README.txt
%ALLUSERSPROFILE%\Desktop\README.txt
%ALLUSERSPROFILE%\Application Data\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\README.txt
%ALLUSERSPROFILE%\Favorites\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\README.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\README.txt
%ALLUSERSPROFILE%\DRM\README.txt
%ALLUSERSPROFILE%\Documents\My Pictures\README.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\README.txt
%ALLUSERSPROFILE%\Documents\README.txt
%ALLUSERSPROFILE%\Documents\My Videos\README.txt
C:\Documents and Settings\Default User\Local Settings\README.txt
C:\Documents and Settings\NetworkService\Application Data\README.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\README.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\README.txt
C:\Documents and Settings\NetworkService\Cookies\README.txt
C:\Documents and Settings\LocalService\README.txt
C:\Documents and Settings\LocalService\Local Settings\Temp\README.txt
C:\Documents and Settings\LocalService\Local Settings\History\README.txt
C:\Documents and Settings\LocalService\Local Settings\README.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\README.txt
C:\Documents and Settings\NetworkService\README.txt
C:\Documents and Settings\NetworkService\Local Settings\README.txt
%APPDATA%\Identities\README.txt
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\README.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\README.txt
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\README.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\README.txt
C:\Documents and Settings\NetworkService\Local Settings\Temp\README.txt
C:\Documents and Settings\NetworkService\Local Settings\History\README.txt
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\README.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\README.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\README.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\README.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\README.txt
C:\Documents and Settings\Default User\SendTo\README.txt
C:\Documents and Settings\Default User\NetHood\README.txt
C:\Documents and Settings\Default User\My Documents\README.txt
C:\Documents and Settings\Default User\Recent\README.txt
C:\Documents and Settings\Default User\PrintHood\README.txt
C:\Documents and Settings\LocalService\Cookies\README.txt
C:\Documents and Settings\LocalService\Application Data\README.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\README.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\README.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\README.txt
C:\Documents and Settings\Default User\Start Menu\README.txt
C:\Documents and Settings\Default User\Start Menu\Programs\README.txt
C:\Documents and Settings\Default User\README.txt
C:\Documents and Settings\Default User\Templates\README.txt
C:\Muldrop\BsbdlRvt.moh_0
C:\Muldrop\BsbdlRvt.img_0
C:\Muldrop\bsdmjuf.emm_0
C:\Muldrop\BsbdlRvt.sfh_0
C:\Muldrop\Bsbdlfut.nbq_0
C:\Muldrop\BsbdlEoh.moh_0
C:\Muldrop\BsbdlEoh.img_0
C:\Muldrop\Bsbdlfut.emm_0
C:\Muldrop\BsbdlEoh.sfh_0
C:\Muldrop\Bvh.Rfqpsu.uyu_1
C:\Muldrop\Bvh.Rfqpsu.uyu_0
C:\Muldrop\CbtfEoh.img_0
C:\Muldrop\bvup.kbs_0
C:\Muldrop\bsdmjuf_svt.moh_0
C:\Muldrop\bsdmjuf_foh.img_0
C:\Muldrop\bsdmjuf.nbq_0
C:\Muldrop\bsdmjuf_svt.img_0
C:\Muldrop\bsdmjuf_foh.moh_0
C:\Muldrop\BsbdlDfm.sfh_0
C:\Muldrop\AmuR.sfh_0
C:\Muldrop\AmuMfov.sfh_0
C:\Muldrop\AmuSfbsdi.sfh_0
C:\Muldrop\AmuSdsffot.sfh_0
C:\Muldrop\AmjhoRvt.moh_0
C:\Muldrop\Amjho.emm_0
C:\Muldrop\7aTpFbs.joj_0
C:\Muldrop\AmjhoEoh.moh_0
C:\Muldrop\Amjho.nbq_0
C:\Muldrop\AvupWsbq.nbq_0
C:\Muldrop\AvupWsbq.emm_0
C:\Muldrop\Bmvf ijmmt.kqh_0
C:\Muldrop\Bffuipwfo't Sznqipoz Np. 9 (Sdifsap).xnb_0
C:\Muldrop\AUTOEXEC.BAT_0
C:\Muldrop\Aqqt.sfh_0
C:\Muldrop\AmuX.sfh_0
C:\Muldrop\Asd.Svqqpsu.uyu_1
C:\Muldrop\Asd.Svqqpsu.uyu_0
C:\Muldrop\CbtfEoh.moh_0
C:\Muldrop\Cpnqbsf.nbq_0
C:\Muldrop\Cpnqbsf.emm_0
C:\Muldrop\CpnqRvt.moh_0
C:\Muldrop\CpnqEoh.moh_0
C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_1
C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_0
C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_1
C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_0
C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_1
C:\Muldrop\CusmDfm.sfh_0
C:\Muldrop\CREGEXP.H_0
C:\Muldrop\CusmR.sfh_0
C:\Muldrop\CusmF10.sfh_0
C:\Muldrop\CREGEXP.CPP_0
C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_1
C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_0
C:\Muldrop\cpplnbslt.iunm_0
C:\Muldrop\cpplnbslt-2011-11-10.ktpo_0
C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_0
C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_0
C:\Muldrop\cmbdl_bz.ise_0
C:\Muldrop\cmbdl_gspn_kvmz.sfh_0
C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_1
C:\Muldrop\cmbdl.ise_0
C:\Muldrop\CbtfRvt.moh_0
C:\Muldrop\CbtfRvt.img_0
C:\Muldrop\CLOCALE.H_0
C:\Muldrop\CLOCALE.CPP_0
C:\Muldrop\CnqEoh.img_0
C:\Muldrop\cmvf.ise_0
C:\Muldrop\CONFIG.SYS_0
C:\Muldrop\CnqRvt.img_0
C:\Muldrop\CmfbsPmvhjotCbdif.dne_0
C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_0
C:\Muldrop\cmbdl_gspn_kvmz.sfh_1
C:\Muldrop\cmbdl_tfabm.ise_0
C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_1
C:\Far2\Plugins\FileCase\README.txt
C:\Far2\Plugins\FarCmds\README.txt
C:\Far2\Plugins\FTP\README.txt
C:\Far2\Plugins\FTP\lib\README.txt
C:\Far2\Plugins\ExtSearch\README.txt
C:\Far2\Plugins\ExtSearch\keys\README.txt
C:\Far2\Plugins\ExtSearch\doc\README.txt
C:\Far2\Plugins\ExtSearch\sources\README.txt
C:\Far2\Plugins\ExtSearch\sources\RegExp\README.txt
C:\Far2\Plugins\WinSCP\console\README.txt
C:\Far2\Plugins\WinSCP\components\README.txt
C:\Far2\Plugins\WinSCP\dragext\README.txt
C:\Far2\Plugins\WinSCP\core\README.txt
C:\Far2\Plugins\TmpPanel\README.txt
C:\Far2\Plugins\MacroView\README.txt
C:\Far2\Plugins\HlfViewer\README.txt
C:\Far2\Plugins\ProcList\README.txt
C:\Far2\Plugins\Network\README.txt
C:\Far2\Plugins\EMenu\README.txt
C:\Far2\Plugins\Brackets\README.txt
C:\Far2\Plugins\AutoWrap\README.txt
C:\Far2\Plugins\Colorer\hrc\auto\types\README.txt
C:\Far2\Plugins\Colorer\bin\README.txt
C:\Far2\Plugins\arclite\README.txt
C:\Far2\FExcept\README.txt
C:\Far2\Encyclopedia\README.txt
C:\Far2\Plugins\Align\README.txt
C:\Far2\Plugins\7-Zip\README.txt
C:\Far2\Plugins\Compare\README.txt
C:\Far2\Plugins\Colorer\README.txt
C:\Far2\Plugins\EditCase\README.txt
C:\Far2\Plugins\DrawLine\README.txt
C:\Far2\Plugins\Colorer\hrd\README.txt
C:\Far2\Plugins\Colorer\hrc\README.txt
C:\Far2\Plugins\Colorer\hrc\auto\README.txt
C:\Far2\Plugins\Colorer\hrd\console\README.txt
C:\Far2\Plugins\Colorer\hrd\console\contrib\README.txt
C:\Far2\Plugins\WinSCP\far\README.txt
C:\Muldrop\7-ZjqEoh.moh_0
C:\Muldrop\7-ZjqEoh.img_0
C:\Muldrop\7-ZjqFbs64.emm_0
C:\Muldrop\7-ZjqFbs.emm_0
C:\Far2\README.txt
C:\Far2\PluginSDK\Headers.c\README.txt
C:\Far2\Plugins\README.txt
C:\Far2\PluginSDK\README.txt
C:\Far2\PluginSDK\Headers.pas\README.txt
C:\Muldrop\7aS2.tgy_0
C:\Muldrop\7aCpo.tgy_0
C:\Muldrop\7aSD.tgy_0
C:\Muldrop\7aS2dpo.tgy_0
C:\Muldrop\7a.tgy_0
C:\Muldrop\7-ZjqRvt.moh_0
C:\Muldrop\7-ZjqRvt.img_0
C:\Muldrop\7a.emm_1
C:\Muldrop\7a.emm_0
C:\Far2\Plugins\WinSCP\README.txt
C:\Far2\Plugins\WinSCP\packages\filemng\README.txt
C:\Far2\Plugins\WinSCP\packages\dragndrop\README.txt
C:\Far2\Plugins\WinSCP\packages\tb2k\README.txt
C:\Far2\Plugins\WinSCP\packages\my\README.txt
C:\Far2\Plugins\WinSCP\lib\README.txt
C:\Far2\Plugins\WinSCP\filezilla\misc\README.txt
C:\Far2\Plugins\WinSCP\fari\README.txt
C:\Far2\Plugins\WinSCP\forms\README.txt
C:\Far2\Plugins\WinSCP\filezilla\README.txt
C:\Far2\Plugins\WinSCP\release\README.txt
C:\Far2\Plugins\WinSCP\putty\README.txt
C:\Far2\Plugins\WinSCP\windows\README.txt
C:\Far2\Plugins\WinSCP\resource\README.txt
C:\Far2\Plugins\WinSCP\putty\windows\README.txt
C:\Far2\Plugins\WinSCP\packages\theme\README.txt
C:\Far2\Plugins\WinSCP\packages\tbx\README.txt
C:\Far2\Plugins\WinSCP\putty\charset\README.txt
C:\Far2\Plugins\WinSCP\packages\README.txt

Moves the following files:

from C:\Muldrop\GsffoMjmf.sfh_1 to C:\Muldrop\R3NmZm9Nam1mLnNmaF8x.fantom
from C:\Muldrop\guqDjsLjtu.gmm_0 to C:\Muldrop\Z3VxRGpzTGp0dS5nbW1fMA==.fantom
from C:\Muldrop\guqDjsLjtu.nbq_0 to C:\Muldrop\Z3VxRGpzTGp0dS5uYnFfMA==.fantom
from C:\Muldrop\GDIPFONTCACHEV1.DAT_0 to C:\Muldrop\R0RJUEZPTlRDQUNIRVYxLkRBVF8w.fantom
from C:\Muldrop\gpsnijtupsz.trmjuf_0 to C:\Muldrop\Z3BzbmlqdHVwc3oudHJtanVmXzA=.fantom
from C:\Muldrop\GsffoMjmf.sfh_0 to C:\Muldrop\R3NmZm9Nam1mLnNmaF8w.fantom
from C:\Muldrop\guqPsphsftt.gmm_0 to C:\Muldrop\Z3VxUHNwaHNmdHQuZ21tXzA=.fantom
from C:\Muldrop\HmgVjfxfs.emm_0 to C:\Muldrop\SG1nVmpmeGZzLmVtbV8w.fantom
from C:\Muldrop\HmgVjfxfs.nbq_0 to C:\Muldrop\SG1nVmpmeGZzLm5icV8w.fantom
from C:\Muldrop\HmgVjfxfsEoh.img_0 to C:\Muldrop\SG1nVmpmeGZzRW9oLmltZ18w.fantom
from C:\Muldrop\guqPsphsftt.nbq_0 to C:\Muldrop\Z3VxUHNwaHNmdHQubmJxXzA=.fantom
from C:\Muldrop\hfo.isd_0 to C:\Muldrop\aGZvLmlzZF8w.fantom
from C:\Muldrop\hfo.k2ff.isd_0 to C:\Muldrop\aGZvLmsyZmYuaXNkXzA=.fantom
from C:\Muldrop\FuqRvt.moh_0 to C:\Muldrop\RnVxUnZ0Lm1vaF8w.fantom
from C:\Muldrop\fyqpsu_dpmpst.cbu_0 to C:\Muldrop\ZnlxcHN1X2RwbXBzdC5jYnVfMA==.fantom
from C:\Muldrop\fyufotjpot.joj_0 to C:\Muldrop\Znl1Zm90anBvdC5qb2pfMA==.fantom
from C:\Muldrop\FuqEoh.img_0 to C:\Muldrop\RnVxRW9oLmltZ18w.fantom
from C:\Muldrop\FuqEoh.moh_0 to C:\Muldrop\RnVxRW9oLm1vaF8w.fantom
from C:\Muldrop\FuqRvt.img_0 to C:\Muldrop\RnVxUnZ0LmltZ18w.fantom
from C:\Muldrop\fyufotjpot.trmjuf_0 to C:\Muldrop\Znl1Zm90anBvdC50cm1qdWZfMA==.fantom
from C:\Muldrop\gbsdpmps.iqq_0 to C:\Muldrop\Z2JzZHBtcHMuaXFxXzA=.fantom
from C:\Muldrop\gbslfzt.iqq_0 to C:\Muldrop\Z2JzbGZ6dC5pcXFfMA==.fantom
from C:\Muldrop\gbsuzqft.isd_0 to C:\Muldrop\Z2JzdXpxZnQuaXNkXzA=.fantom
from C:\Muldrop\gbs.nbq_0 to C:\Muldrop\Z2JzLm5icV8w.fantom
from C:\Muldrop\gbs7a.sfh_0 to C:\Muldrop\Z2JzN2Euc2ZoXzA=.fantom
from C:\Muldrop\gbs7a.uyu_0 to C:\Muldrop\Z2JzN2EudXl1XzA=.fantom
from C:\Muldrop\joefy.ebu_1 to C:\Muldrop\am9lZnkuZWJ1XzE=.fantom
from C:\Muldrop\joefy.ebu_2 to C:\Muldrop\am9lZnkuZWJ1XzI=.fantom
from C:\Muldrop\joj.fou.isd_0 to C:\Muldrop\am9qLmZvdS5pc2RfMA==.fantom
from C:\Muldrop\jnqpsu_dpmpst.cbu_1 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMQ==.fantom
from C:\Muldrop\jnqpsu_dpmpst.cbu_2 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMg==.fantom
from C:\Muldrop\joefy.ebu_0 to C:\Muldrop\am9lZnkuZWJ1XzA=.fantom
from C:\Muldrop\lfz3.ec_0 to C:\Muldrop\bGZ6My5lY18w.fantom
from C:\Muldrop\MbdspEoh.moh_0 to C:\Muldrop\TWJkc3BFb2gubW9oXzA=.fantom
from C:\Muldrop\MbdspRvt.img_0 to C:\Muldrop\TWJkc3BSdnQuaW1nXzA=.fantom
from C:\Muldrop\MbdspRvt.moh_0 to C:\Muldrop\TWJkc3BSdnQubW9oXzA=.fantom
from C:\Muldrop\LICENSE_0 to C:\Muldrop\TElDRU5TRV8w.fantom
from C:\Muldrop\MbdspCpotut.sfh_0 to C:\Muldrop\TWJkc3BDcG90dXQuc2ZoXzA=.fantom
from C:\Muldrop\MbdspEoh.img_0 to C:\Muldrop\TWJkc3BFb2guaW1nXzA=.fantom
from C:\Muldrop\Hpulfz.sfh_0 to C:\Muldrop\SHB1bGZ6LnNmaF8w.fantom
from C:\Muldrop\HpulfzCmjqcpbse.sfh_0 to C:\Muldrop\SHB1bGZ6Q21qcWNwYnNlLnNmaF8w.fantom
from C:\Muldrop\HpulfzPspqfsujft.sfh_0 to C:\Muldrop\SHB1bGZ6UHNwcWZzdWpmdC5zZmhfMA==.fantom
from C:\Muldrop\HmgVjfxfsEoh.moh_0 to C:\Muldrop\SG1nVmpmeGZzRW9oLm1vaF8w.fantom
from C:\Muldrop\HmgVjfxfsRvt.img_0 to C:\Muldrop\SG1nVmpmeGZzUnZ0LmltZ18w.fantom
from C:\Muldrop\HmgVjfxfsRvt.moh_0 to C:\Muldrop\SG1nVmpmeGZzUnZ0Lm1vaF8w.fantom
from C:\Muldrop\hsbz.ise_0 to C:\Muldrop\aHNiei5pc2VfMA==.fantom
from C:\Muldrop\ifmm.sfh_0 to C:\Muldrop\aWZtbS5zZmhfMA==.fantom
from C:\Muldrop\ifmm.sfh_1 to C:\Muldrop\aWZtbS5zZmhfMQ==.fantom
from C:\Muldrop\jnqpsu_dpmpst.cbu_0 to C:\Muldrop\am5xcHN1X2RwbXBzdC5jYnVfMA==.fantom
from C:\Muldrop\hsbz_qvmu.ise_0 to C:\Muldrop\aHNiel9xdm11LmlzZV8w.fantom
from C:\Muldrop\ibdl.ise_0 to C:\Muldrop\aWJkbC5pc2VfMA==.fantom
from C:\Muldrop\IdpoCbdif.ec_0 to C:\Muldrop\SWRwb0NiZGlmLmVjXzA=.fantom
from C:\Muldrop\FARCnet.nbq_0 to C:\Muldrop\RkFSQ25ldC5uYnFfMA==.fantom
from C:\Muldrop\FARCnetEoh.img_0 to C:\Muldrop\RkFSQ25ldEVvaC5pbWdfMA==.fantom
from C:\Muldrop\FARCnetEoh.moh_0 to C:\Muldrop\RkFSQ25ldEVvaC5tb2hfMA==.fantom
from C:\Muldrop\F9DfbdujwbufMfov.sfh_0 to C:\Muldrop\RjlEZmJkdWp3YnVmTWZvdi5zZmhfMA==.fantom
from C:\Muldrop\F9Tbcmf.sfh_0 to C:\Muldrop\RjlUYmNtZi5zZmhfMA==.fantom
from C:\Muldrop\FARCnet.emm_0 to C:\Muldrop\RkFSQ25ldC5lbW1fMA==.fantom
from C:\Muldrop\FARCnetRvt.img_0 to C:\Muldrop\RkFSQ25ldFJ2dC5pbWdfMA==.fantom
from C:\Muldrop\FARHfsf.jog_0 to C:\Muldrop\RkFSSGZzZi5qb2dfMA==.fantom
from C:\Muldrop\Fbs.FAQ.uyu_0 to C:\Muldrop\RmJzLkZBUS51eXVfMA==.fantom
from C:\Muldrop\Fbs.FAQ.uyu_1 to C:\Muldrop\RmJzLkZBUS51eXVfMQ==.fantom
from C:\Muldrop\FARCnetRvt.moh_0 to C:\Muldrop\RkFSQ25ldFJ2dC5tb2hfMA==.fantom
from C:\Muldrop\FARCpmpst242.sfh_0 to C:\Muldrop\RkFSQ3BtcHN0MjQyLnNmaF8w.fantom
from C:\Muldrop\FARCpmpst242.sfh_1 to C:\Muldrop\RkFSQ3BtcHN0MjQyLnNmaF8x.fantom
from C:\Muldrop\Eyfdvups.CMD.sfh_0 to C:\Muldrop\RXlmZHZ1cHMuQ01ELnNmaF8w.fantom
from C:\Muldrop\EyuCiCbtf.dqq_0 to C:\Muldrop\RXl1Q2lDYnRmLmRxcV8w.fantom
from C:\Muldrop\EyuCmjqBpbse.dqq_0 to C:\Muldrop\RXl1Q21qcUJwYnNlLmRxcV8w.fantom
from C:\Muldrop\ES_RUS.REG_0 to C:\Muldrop\RVNfUlVTLlJFR18w.fantom
from C:\Muldrop\EydDvnq.emm_0 to C:\Muldrop\RXlkRHZucS5lbW1fMA==.fantom
from C:\Muldrop\Eyfdvups.4NT.sfh_0 to C:\Muldrop\RXlmZHZ1cHMuNE5ULnNmaF8w.fantom
from C:\Muldrop\EyuMfov.dqq_0 to C:\Muldrop\RXl1TWZvdi5kcXFfMA==.fantom
from C:\Muldrop\EyuSfbsdiMjy.dqq_0 to C:\Muldrop\RXl1U2Zic2RpTWp5LmRxcV8w.fantom
from C:\Muldrop\EyuSfbsdiRfh.dqq_0 to C:\Muldrop\RXl1U2Zic2RpUmZoLmRxcV8w.fantom
from C:\Muldrop\F3.sfh_0 to C:\Muldrop\RjMuc2ZoXzA=.fantom
from C:\Muldrop\EyuRfhEyq.dqq_0 to C:\Muldrop\RXl1UmZoRXlxLmRxcV8w.fantom
from C:\Muldrop\EyuSfbsdi.dqq_0 to C:\Muldrop\RXl1U2Zic2RpLmRxcV8w.fantom
from C:\Muldrop\EyuSfbsdi.iqq_0 to C:\Muldrop\RXl1U2Zic2RpLmlxcV8w.fantom
from C:\Muldrop\FEydfqu.emm_0 to C:\Muldrop\RkV5ZGZxdS5lbW1fMA==.fantom
from C:\Muldrop\FjmfCbtf.emm_0 to C:\Muldrop\RmptZkNidGYuZW1tXzA=.fantom
from C:\Muldrop\FjmfCbtf.nbq_0 to C:\Muldrop\RmptZkNidGYubmJxXzA=.fantom
from C:\Muldrop\FbsRvt.img_0 to C:\Muldrop\RmJzUnZ0LmltZ18w.fantom
from C:\Muldrop\FbsRvt.moh_0 to C:\Muldrop\RmJzUnZ0Lm1vaF8w.fantom
from C:\Muldrop\FbsSqb.moh_0 to C:\Muldrop\RmJzU3FiLm1vaF8w.fantom
from C:\Muldrop\Fjmf_je.eja_0 to C:\Muldrop\RmptZl9qZS5lamFfMA==.fantom
from C:\Muldrop\ftfbsdi_efcvh.cbu_0 to C:\Muldrop\ZnRmYnNkaV9lZmN2aC5jYnVfMA==.fantom
from C:\Muldrop\FuqCnet.uyu_0 to C:\Muldrop\RnVxQ25ldC51eXVfMA==.fantom
from C:\Muldrop\FuqCnet_svt.uyu_0 to C:\Muldrop\RnVxQ25ldF9zdnQudXl1XzA=.fantom
from C:\Muldrop\FpouCbdif3.0.0.0.ebu_0 to C:\Muldrop\RnBvdUNiZGlmMy4wLjAuMC5lYnVfMA==.fantom
from C:\Muldrop\Fsff Hpunbjm.vsm_0 to C:\Muldrop\RnNmZiBIcHVuYmptLnZzbV8w.fantom
from C:\Muldrop\ftfbsdi.emm_0 to C:\Muldrop\ZnRmYnNkaS5lbW1fMA==.fantom
from C:\Muldrop\FbsEodzdmpqfejb.sv.din_0 to C:\Muldrop\RmJzRW9kemRtcHFmZWpiLnN2LmRpbl8w.fantom
from C:\Muldrop\FbsEoh.img_0 to C:\Muldrop\RmJzRW9oLmltZ18w.fantom
from C:\Muldrop\FbsEoh.moh_0 to C:\Muldrop\RmJzRW9oLm1vaF8w.fantom
from C:\Muldrop\Fbs.fyf_0 to C:\Muldrop\RmJzLmZ5Zl8w.fantom
from C:\Muldrop\FbsCaf.moh_0 to C:\Muldrop\RmJzQ2FmLm1vaF8w.fantom
from C:\Muldrop\FbsCpmpsW.qbt_0 to C:\Muldrop\RmJzQ3BtcHNXLnFidF8w.fantom
from C:\Muldrop\FbsFuq.emm_0 to C:\Muldrop\RmJzRnVxLmVtbV8w.fantom
from C:\Muldrop\FbsHvo.moh_0 to C:\Muldrop\RmJzSHZvLm1vaF8w.fantom
from C:\Muldrop\FbsKfztW.qbt_0 to C:\Muldrop\RmJzS2Z6dFcucWJ0XzA=.fantom
from C:\Muldrop\FbsPpm.moh_0 to C:\Muldrop\RmJzUHBtLm1vaF8w.fantom
from C:\Muldrop\FbsFuq.nbq_0 to C:\Muldrop\RmJzRnVxLm5icV8w.fantom
from C:\Muldrop\FbsGfs.moh_0 to C:\Muldrop\RmJzR2ZzLm1vaF8w.fantom
from C:\Muldrop\FbsHvo.img_0 to C:\Muldrop\RmJzSHZvLmltZ18w.fantom
from C:\Muldrop\PspdRvt.img_0 to C:\Muldrop\UHNwZFJ2dC5pbWdfMA==.fantom
from C:\Muldrop\PspdRvt.moh_0 to C:\Muldrop\UHNwZFJ2dC5tb2hfMA==.fantom
from C:\Muldrop\Psphsftt_FbsCpqz.sfh_0 to C:\Muldrop\UHNwaHNmdHRfRmJzQ3Bxei5zZmhfMA==.fantom
from C:\Muldrop\PspdEoh.moh_0 to C:\Muldrop\UHNwZEVvaC5tb2hfMA==.fantom
from C:\Muldrop\Pspdmjtu.emm_0 to C:\Muldrop\UHNwZG1qdHUuZW1tXzA=.fantom
from C:\Muldrop\Pspdmjtu.nbq_0 to C:\Muldrop\UHNwZG1qdHUubmJxXzA=.fantom
from C:\Muldrop\Psphsftt_JM.sfh_0 to C:\Muldrop\UHNwaHNmdHRfSk0uc2ZoXzA=.fantom
from C:\Muldrop\qiq-qspu.fou.isd_0 to C:\Muldrop\cWlxLXFzcHUuZm91LmlzZF8w.fantom
from C:\Muldrop\qmbdft.trmjuf_0 to C:\Muldrop\cW1iZGZ0LnRybWp1Zl8w.fantom
from C:\Muldrop\qmvhjo.iqq_0 to C:\Muldrop\cW12aGpvLmlxcV8w.fantom
from C:\Muldrop\Psphsftt_Wftib.sfh_0 to C:\Muldrop\UHNwaHNmdHRfV2Z0aWIuc2ZoXzA=.fantom
from C:\Muldrop\Psphsftt_ZfMA.sfh_0 to C:\Muldrop\UHNwaHNmdHRfWmZNQS5zZmhfMA==.fantom
from C:\Muldrop\qfsnjttjpot.trmjuf_0 to C:\Muldrop\cWZzbmp0dGpwb3QudHJtanVmXzA=.fantom
from C:\Muldrop\Pmzmtu15.xqm_0 to C:\Muldrop\UG16bXR1MTUueHFtXzA=.fantom
from C:\Muldrop\Pmzmtu2.xqm_0 to C:\Muldrop\UG16bXR1Mi54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu3.xqm_0 to C:\Muldrop\UG16bXR1My54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu12.xqm_0 to C:\Muldrop\UG16bXR1MTIueHFtXzA=.fantom
from C:\Muldrop\Pmzmtu13.xqm_0 to C:\Muldrop\UG16bXR1MTMueHFtXzA=.fantom
from C:\Muldrop\Pmzmtu14.xqm_0 to C:\Muldrop\UG16bXR1MTQueHFtXzA=.fantom
from C:\Muldrop\Pmzmtu4.xqm_0 to C:\Muldrop\UG16bXR1NC54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu8.xqm_0 to C:\Muldrop\UG16bXR1OC54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu9.xqm_0 to C:\Muldrop\UG16bXR1OS54cW1fMA==.fantom
from C:\Muldrop\PspdEoh.img_0 to C:\Muldrop\UHNwZEVvaC5pbWdfMA==.fantom
from C:\Muldrop\Pmzmtu5.xqm_0 to C:\Muldrop\UG16bXR1NS54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu6.xqm_0 to C:\Muldrop\UG16bXR1Ni54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu7.xqm_0 to C:\Muldrop\UG16bXR1Ny54cW1fMA==.fantom
from C:\Muldrop\SfuFbsEydfqujpoHboemfs.sfh_0 to C:\Muldrop\U2Z1RmJzRXlkZnF1anBvSGJvZW1mcy5zZmhfMA==.fantom
from C:\Muldrop\SijguBS.sfh_0 to C:\Muldrop\U2lqZ3VCUy5zZmhfMA==.fantom
from C:\Muldrop\SijguF1.sfh_0 to C:\Muldrop\U2lqZ3VGMS5zZmhfMA==.fantom
from C:\Muldrop\sbsf-tdsjqut.isd_0 to C:\Muldrop\c2JzZi10ZHNqcXV0LmlzZF8w.fantom
from C:\Muldrop\SbwfSfuujoht.dne_0 to C:\Muldrop\U2J3ZlNmdXVqb2h0LmRuZV8w.fantom
from C:\Muldrop\sfbenf_0 to C:\Muldrop\c2ZiZW5mXzA=.fantom
from C:\Muldrop\SijguTbc.sfh_0 to C:\Muldrop\U2lqZ3VUYmMuc2ZoXzA=.fantom
from C:\Muldrop\TfdiIogp.sfh_0 to C:\Muldrop\VGZkaUlvZ3Auc2ZoXzA=.fantom
from C:\Muldrop\TfdiIogp.uyu_0 to C:\Muldrop\VGZkaUlvZ3AudXl1XzA=.fantom
from C:\Muldrop\TfdiIogp.uyu_1 to C:\Muldrop\VGZkaUlvZ3AudXl1XzE=.fantom
from C:\Muldrop\Svotfu.kqh_0 to C:\Muldrop\U3ZvdGZ1LmtxaF8w.fantom
from C:\Muldrop\tfbsdi.ktpo_0 to C:\Muldrop\dGZic2RpLmt0cG9fMA==.fantom
from C:\Muldrop\tfbsdi.trmjuf_0 to C:\Muldrop\dGZic2RpLnRybWp1Zl8w.fantom
from C:\Muldrop\qspup.isd_0 to C:\Muldrop\cXNwdXAuaXNkXzA=.fantom
from C:\Muldrop\Qxfsuz.sfh_0 to C:\Muldrop\UXhmc3V6LnNmaF8w.fantom
from C:\Muldrop\Rbejp Subujpo Gvjef.vsm_0 to C:\Muldrop\UmJlanAgU3VidWpwbyBHdmplZi52c21fMA==.fantom
from C:\Muldrop\qmvhjosfh.ebu_0 to C:\Muldrop\cW12aGpvc2ZoLmVidV8w.fantom
from C:\Muldrop\qsfgt.kt_0 to C:\Muldrop\cXNmZ3Qua3RfMA==.fantom
from C:\Muldrop\qspgjmft.joj_0 to C:\Muldrop\cXNwZ2ptZnQuam9qXzA=.fantom
from C:\Muldrop\REGEXPS.TXT_0 to C:\Muldrop\UkVHRVhQUy5UWFRfMA==.fantom
from C:\Muldrop\rsn.isd_0 to C:\Muldrop\cnNuLmlzZF8w.fantom
from C:\Muldrop\RUS_NEWS.TXT_0 to C:\Muldrop\UlVTX05FV1MuVFhUXzA=.fantom
from C:\Muldrop\RUS_READ.TXT_0 to C:\Muldrop\UlVTX1JFQUQuVFhUXzA=.fantom
from C:\Muldrop\RftupsfSfuujoht.dne_0 to C:\Muldrop\UmZ0dXBzZlNmdXVqb2h0LmRuZV8w.fantom
from C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_0 to C:\Muldrop\UnBlanBvX0Rwc3B0aWxmd2pkaS5zZmhfMA==.fantom
from C:\Muldrop\Rpejpo_Dpsptilfwjdi.sfh_1 to C:\Muldrop\UnBlanBvX0Rwc3B0aWxmd2pkaS5zZmhfMQ==.fantom
from C:\Muldrop\njnfTzqft.seg_0 to C:\Muldrop\bmpuZlR6cWZ0LnNlZ18w.fantom
from C:\Muldrop\njssps.ise_0 to C:\Muldrop\bmpzc3BzLmlzZV8w.fantom
from C:\Muldrop\Npuft.uyu_0 to C:\Muldrop\TnB1ZnQudXl1XzA=.fantom
from C:\Muldrop\Nfuxpsl.emm_0 to C:\Muldrop\TmZ1eHBzbC5lbW1fMA==.fantom
from C:\Muldrop\Nfuxpsl.nbq_0 to C:\Muldrop\TmZ1eHBzbC5uYnFfMA==.fantom
from C:\Muldrop\Nfx Supsjft (Hjhixbz Bmvft).xnb_0 to C:\Muldrop\TmZ4IFN1cHNqZnQgKEhqaGl4YnogQm12ZnQpLnhuYl8w.fantom
from C:\Muldrop\Npuft_svt.uyu_0 to C:\Muldrop\TnB1ZnRfc3Z0LnV5dV8w.fantom
from C:\Muldrop\od5qbm2.sfh_1 to C:\Muldrop\b2Q1cWJtMi5zZmhfMQ==.fantom
from C:\Muldrop\OqfojohLbtuFjmf.sfh_0 to C:\Muldrop\T3Fmb2pvaExidHVGam1mLnNmaF8w.fantom
from C:\Muldrop\Pbofm.AmuBS.sfh_0 to C:\Muldrop\UGJvZm0uQW11QlMuc2ZoXzA=.fantom
from C:\Muldrop\nth.fou.isd_0 to C:\Muldrop\bnRoLmZvdS5pc2RfMA==.fantom
from C:\Muldrop\od.ise_0 to C:\Muldrop\b2QuaXNlXzA=.fantom
from C:\Muldrop\od5qbm2.sfh_0 to C:\Muldrop\b2Q1cWJtMi5zZmhfMA==.fantom
from C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_1 to C:\Muldrop\TWJqbSBSZmRqcWpmb3UuTUFQSU1iam1fMQ==.fantom
from C:\Muldrop\mjdfodf_0 to C:\Muldrop\bWpkZm9kZl8w.fantom
from C:\Muldrop\mjuftufq.isd_0 to C:\Muldrop\bWp1ZnR1ZnEuaXNkXzA=.fantom
from C:\Muldrop\MbdspVjfx.emm_0 to C:\Muldrop\TWJkc3BWamZ4LmVtbV8w.fantom
from C:\Muldrop\MbdspVjfx.nbq_0 to C:\Muldrop\TWJkc3BWamZ4Lm5icV8w.fantom
from C:\Muldrop\Mbjm Rfdjqjfou.MAPIMbjm_0 to C:\Muldrop\TWJqbSBSZmRqcWpmb3UuTUFQSU1iam1fMA==.fantom
from C:\Muldrop\mpdbmtupsf.seg_0 to C:\Muldrop\bXBkYm10dXBzZi5zZWdfMA==.fantom
from C:\Muldrop\NfuEoh.moh_0 to C:\Muldrop\TmZ1RW9oLm1vaF8w.fantom
from C:\Muldrop\NfuRvt.img_0 to C:\Muldrop\TmZ1UnZ0LmltZ18w.fantom
from C:\Muldrop\NfuRvt.moh_0 to C:\Muldrop\TmZ1UnZ0Lm1vaF8w.fantom
from C:\Muldrop\MSN.dpn.vsm_0 to C:\Muldrop\TVNOLmRwbi52c21fMA==.fantom
from C:\Muldrop\Mz Dpdvnfout.nzepdt_0 to C:\Muldrop\TXogRHBkdm5mb3V0Lm56ZXBkdF8w.fantom
from C:\Muldrop\NfuEoh.img_0 to C:\Muldrop\TmZ1RW9oLmltZ18w.fantom
from C:\Muldrop\pdfbo.ise_0 to C:\Muldrop\cGRmYm8uaXNlXzA=.fantom
from C:\Muldrop\PLUGIN.HPP_0 to C:\Muldrop\UExVR0lOLkhQUF8w.fantom
from C:\Muldrop\Pmvhjot.Iotubmm.uyu_0 to C:\Muldrop\UG12aGpvdC5Jb3R1Ym1tLnV5dV8w.fantom
from C:\Muldrop\Pbofm.Nvnqbe.sfh_0 to C:\Muldrop\UGJvZm0uTnZucWJlLnNmaF8w.fantom
from C:\Muldrop\Pbofm.SfmfduFspnCmjqcpbse.sfh_0 to C:\Muldrop\UGJvZm0uU2ZtZmR1RnNwbkNtanFjcGJzZS5zZmhfMA==.fantom
from C:\Muldrop\Pbofm.SqbdfTpSfmfdu.sfh_0 to C:\Muldrop\UGJvZm0uU3FiZGZUcFNmbWZkdS5zZmhfMA==.fantom
from C:\Muldrop\Pmvhjot.Iotubmm.uyu_1 to C:\Muldrop\UG12aGpvdC5Jb3R1Ym1tLnV5dV8x.fantom
from C:\Muldrop\Pmzmtu1.xqm_0 to C:\Muldrop\UG16bXR1MS54cW1fMA==.fantom
from C:\Muldrop\Pmzmtu10.xqm_0 to C:\Muldrop\UG16bXR1MTAueHFtXzA=.fantom
from C:\Muldrop\Pmzmtu11.xqm_0 to C:\Muldrop\UG16bXR1MTEueHFtXzA=.fantom
from C:\Muldrop\Pmvhjot.Rfwjfx.uyu_0 to C:\Muldrop\UG12aGpvdC5SZndqZngudXl1XzA=.fantom
from C:\Muldrop\Pmvhjot.Rfwjfx.uyu_1 to C:\Muldrop\UG12aGpvdC5SZndqZngudXl1XzE=.fantom
from C:\Muldrop\PmvhjoW.qbt_0 to C:\Muldrop\UG12aGpvVy5xYnRfMA==.fantom
from C:\Muldrop\Pbofm.CusmLfgu.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbUxmZ3Uuc2ZoXzA=.fantom
from C:\Muldrop\Pbofm.CusmQ.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVEuc2ZoXzA=.fantom
from C:\Muldrop\Pbofm.CusmRjhiu.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVJqaGl1LnNmaF8w.fantom
from C:\Muldrop\Pbofm.Aqqt.sfh_0 to C:\Muldrop\UGJvZm0uQXFxdC5zZmhfMA==.fantom
from C:\Muldrop\Pbofm.BS.sfh_0 to C:\Muldrop\UGJvZm0uQlMuc2ZoXzA=.fantom
from C:\Muldrop\Pbofm.CusmIot...sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbUlvdC4uLnNmaF8w.fantom
from C:\Muldrop\Pbofm.CusmSijguBbdlSmbti.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVNpamd1QmJkbFNtYnRpLnNmaF8w.fantom
from C:\Muldrop\Pbofm.JvnqTpSfmfdufeFjmf.sfh_0 to C:\Muldrop\UGJvZm0uSnZucVRwU2ZtZmR1ZmVGam1mLnNmaF8w.fantom
from C:\Muldrop\Pbofm.Lzoy-npu.sfh_0 to C:\Muldrop\UGJvZm0uTHpveS1ucHUuc2ZoXzA=.fantom
from C:\Muldrop\Pbofm.MpvtfWiffmTjmu.sfh_0 to C:\Muldrop\UGJvZm0uTXB2dGZXaWZmbVRqbXUuc2ZoXzA=.fantom
from C:\Muldrop\Pbofm.CusmSijguPhUqDo.sfh_0 to C:\Muldrop\UGJvZm0uQ3VzbVNpamd1UGhVcURvLnNmaF8w.fantom
from C:\Muldrop\Pbofm.Dfm.sfh_0 to C:\Muldrop\UGJvZm0uRGZtLnNmaF8w.fantom
from C:\Muldrop\Pbofm.Etd.sfh_0 to C:\Muldrop\UGJvZm0uRXRkLnNmaF8w.fantom
from C:\Muldrop\ES_RUS.LNG_0 to C:\Muldrop\RVNfUlVTLkxOR18w.fantom
from C:\Muldrop\BsbdlRvt.sfh_0 to C:\Muldrop\QnNiZGxSdnQuc2ZoXzA=.fantom
from C:\Muldrop\bsdmjuf.emm_0 to C:\Muldrop\YnNkbWp1Zi5lbW1fMA==.fantom
from C:\Muldrop\bsdmjuf.nbq_0 to C:\Muldrop\YnNkbWp1Zi5uYnFfMA==.fantom
from C:\Muldrop\Bsbdlfut.nbq_0 to C:\Muldrop\QnNiZGxmdXQubmJxXzA=.fantom
from C:\Muldrop\BsbdlRvt.img_0 to C:\Muldrop\QnNiZGxSdnQuaW1nXzA=.fantom
from C:\Muldrop\BsbdlRvt.moh_0 to C:\Muldrop\QnNiZGxSdnQubW9oXzA=.fantom
from C:\Muldrop\bsdmjuf_foh.img_0 to C:\Muldrop\YnNkbWp1Zl9mb2guaW1nXzA=.fantom
from C:\Muldrop\Bvh.Rfqpsu.uyu_0 to C:\Muldrop\QnZoLlJmcXBzdS51eXVfMA==.fantom
from C:\Muldrop\Bvh.Rfqpsu.uyu_1 to C:\Muldrop\QnZoLlJmcXBzdS51eXVfMQ==.fantom
from C:\Muldrop\bvup.kbs_0 to C:\Muldrop\YnZ1cC5rYnNfMA==.fantom
from C:\Muldrop\bsdmjuf_foh.moh_0 to C:\Muldrop\YnNkbWp1Zl9mb2gubW9oXzA=.fantom
from C:\Muldrop\bsdmjuf_svt.img_0 to C:\Muldrop\YnNkbWp1Zl9zdnQuaW1nXzA=.fantom
from C:\Muldrop\bsdmjuf_svt.moh_0 to C:\Muldrop\YnNkbWp1Zl9zdnQubW9oXzA=.fantom
from C:\Muldrop\AUTOEXEC.BAT_0 to C:\Muldrop\QVVUT0VYRUMuQkFUXzA=.fantom
from C:\Muldrop\AvupWsbq.emm_0 to C:\Muldrop\QXZ1cFdzYnEuZW1tXzA=.fantom
from C:\Muldrop\AvupWsbq.nbq_0 to C:\Muldrop\QXZ1cFdzYnEubmJxXzA=.fantom
from C:\Muldrop\Aqqt.sfh_0 to C:\Muldrop\QXFxdC5zZmhfMA==.fantom
from C:\Muldrop\Asd.Svqqpsu.uyu_0 to C:\Muldrop\QXNkLlN2cXFwc3UudXl1XzA=.fantom
from C:\Muldrop\Asd.Svqqpsu.uyu_1 to C:\Muldrop\QXNkLlN2cXFwc3UudXl1XzE=.fantom
from C:\Muldrop\Bffuipwfo't Sznqipoz Np. 9 (Sdifsap).xnb_0 to C:\Muldrop\QmZmdWlwd2ZvJ3QgU3pucWlwb3ogTnAuIDkgKFNkaWZzYXApLnhuYl8w.fantom
from C:\Muldrop\BsbdlEoh.moh_0 to C:\Muldrop\QnNiZGxFb2gubW9oXzA=.fantom
from C:\Muldrop\BsbdlEoh.sfh_0 to C:\Muldrop\QnNiZGxFb2guc2ZoXzA=.fantom
from C:\Muldrop\Bsbdlfut.emm_0 to C:\Muldrop\QnNiZGxmdXQuZW1tXzA=.fantom
from C:\Muldrop\Bmvf ijmmt.kqh_0 to C:\Muldrop\Qm12ZiBpam1tdC5rcWhfMA==.fantom
from C:\Muldrop\BsbdlDfm.sfh_0 to C:\Muldrop\QnNiZGxEZm0uc2ZoXzA=.fantom
from C:\Muldrop\BsbdlEoh.img_0 to C:\Muldrop\QnNiZGxFb2guaW1nXzA=.fantom
from C:\Muldrop\cmvf.ise_0 to C:\Muldrop\Y212Zi5pc2VfMA==.fantom
from C:\Muldrop\CnqEoh.img_0 to C:\Muldrop\Q25xRW9oLmltZ18w.fantom
from C:\Muldrop\CnqRvt.img_0 to C:\Muldrop\Q25xUnZ0LmltZ18w.fantom
from C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9NenBlcHcuc2ZoXzE=.fantom
from C:\Muldrop\cmbdl_tfabm.ise_0 to C:\Muldrop\Y21iZGxfdGZhYm0uaXNlXzA=.fantom
from C:\Muldrop\CmfbsPmvhjotCbdif.dne_0 to C:\Muldrop\Q21mYnNQbXZoam90Q2JkaWYuZG5lXzA=.fantom
from C:\Muldrop\CONFIG.SYS_0 to C:\Muldrop\Q09ORklHLlNZU18w.fantom
from C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fR2Zzb2pkaWZvbHAuc2ZoXzE=.fantom
from C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fU2JlcHdway5zZmhfMA==.fantom
from C:\Muldrop\Cpmpst_gspn_Sbepwpk.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fU2JlcHdway5zZmhfMQ==.fantom
from C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fYmVuam9fZnR0cV9zdi5zZmhfMA==.fantom
from C:\Muldrop\Cpmpst_gspn_benjo_fttq_sv.sfh_1 to C:\Muldrop\Q3BtcHN0X2dzcG5fYmVuam9fZnR0cV9zdi5zZmhfMQ==.fantom
from C:\Muldrop\Cpmpst_gspn_Gfsojdifolp.sfh_0 to C:\Muldrop\Q3BtcHN0X2dzcG5fR2Zzb2pkaWZvbHAuc2ZoXzA=.fantom
from C:\Muldrop\CbtfRvt.moh_0 to C:\Muldrop\Q2J0ZlJ2dC5tb2hfMA==.fantom
from C:\Muldrop\CLOCALE.CPP_0 to C:\Muldrop\Q0xPQ0FMRS5DUFBfMA==.fantom
from C:\Muldrop\CLOCALE.H_0 to C:\Muldrop\Q0xPQ0FMRS5IXzA=.fantom
from C:\Muldrop\CbtfEoh.img_0 to C:\Muldrop\Q2J0ZkVvaC5pbWdfMA==.fantom
from C:\Muldrop\CbtfEoh.moh_0 to C:\Muldrop\Q2J0ZkVvaC5tb2hfMA==.fantom
from C:\Muldrop\CbtfRvt.img_0 to C:\Muldrop\Q2J0ZlJ2dC5pbWdfMA==.fantom
from C:\Muldrop\cmbdl.ise_0 to C:\Muldrop\Y21iZGwuaXNlXzA=.fantom
from C:\Muldrop\cmbdl_gspn_kvmz.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9rdm16LnNmaF8w.fantom
from C:\Muldrop\cmbdl_gspn_kvmz.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9rdm16LnNmaF8x.fantom
from C:\Muldrop\cmbdl_gspn_Mzpepw.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9NenBlcHcuc2ZoXzA=.fantom
from C:\Muldrop\cmbdl_bz.ise_0 to C:\Muldrop\Y21iZGxfYnouaXNlXzA=.fantom
from C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_0 to C:\Muldrop\Y21iZGxfZ3Nwbl9GcG9ic2Z3LnNmaF8w.fantom
from C:\Muldrop\cmbdl_gspn_Fpobsfw.sfh_1 to C:\Muldrop\Y21iZGxfZ3Nwbl9GcG9ic2Z3LnNmaF8x.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGxhY2VzLnNxbGl0ZQ==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pluginreg.dat to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGx1Z2lucmVnLmRhdA==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cHJlZnMuanM=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\localstore.rdf to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bG9jYWxzdG9yZS5yZGY=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\mimeTypes.rdf to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bWltZVR5cGVzLnJkZg==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cGVybWlzc2lvbnMuc3FsaXRl.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.json to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VhcmNoLmpzb24=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2Vzc2lvbnN0b3JlLmpz.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2lnbm9ucy5zcWxpdGU=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\d2ViYXBwc3N0b3JlLnNxbGl0ZQ==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VhcmNoLnNxbGl0ZQ==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2VjbW9kLmRi.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\c2Vzc2lvbnN0b3JlLmJhaw==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y2VydDguZGI=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y2hyb21lYXBwc3N0b3JlLnNxbGl0ZQ==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\compatibility.ini to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29tcGF0aWJpbGl0eS5pbmk=.fantom
from %APPDATA%\winscp.rnd to %APPDATA%\d2luc2NwLnJuZA==.fantom
from %APPDATA%\Mozilla\Firefox\profiles.ini to %APPDATA%\Mozilla\Firefox\cHJvZmlsZXMuaW5p.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Ym9va21hcmtzLmh0bWw=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29udGVudC1wcmVmcy5zcWxpdGU=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZXh0ZW5zaW9ucy5zcWxpdGU=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Zm9ybWhpc3Rvcnkuc3FsaXRl.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\a2V5My5kYg==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\Y29va2llcy5zcWxpdGU=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.sqlite to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZG93bmxvYWRzLnNxbGl0ZQ==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ini to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\ZXh0ZW5zaW9ucy5pbmk=.fantom
from C:\Muldrop\7aTpFbs.joj_0 to C:\Muldrop\N2FUcEZicy5qb2pfMA==.fantom
from C:\Muldrop\Amjho.emm_0 to C:\Muldrop\QW1qaG8uZW1tXzA=.fantom
from C:\Muldrop\Amjho.nbq_0 to C:\Muldrop\QW1qaG8ubmJxXzA=.fantom
from C:\Muldrop\7aS2.tgy_0 to C:\Muldrop\N2FTMi50Z3lfMA==.fantom
from C:\Muldrop\7aS2dpo.tgy_0 to C:\Muldrop\N2FTMmRwby50Z3lfMA==.fantom
from C:\Muldrop\7aSD.tgy_0 to C:\Muldrop\N2FTRC50Z3lfMA==.fantom
from C:\Muldrop\AmjhoEoh.moh_0 to C:\Muldrop\QW1qaG9Fb2gubW9oXzA=.fantom
from C:\Muldrop\AmuSdsffot.sfh_0 to C:\Muldrop\QW11U2RzZmZvdC5zZmhfMA==.fantom
from C:\Muldrop\AmuSfbsdi.sfh_0 to C:\Muldrop\QW11U2Zic2RpLnNmaF8w.fantom
from C:\Muldrop\AmuX.sfh_0 to C:\Muldrop\QW11WC5zZmhfMA==.fantom
from C:\Muldrop\AmjhoRvt.moh_0 to C:\Muldrop\QW1qaG9SdnQubW9oXzA=.fantom
from C:\Muldrop\AmuMfov.sfh_0 to C:\Muldrop\QW11TWZvdi5zZmhfMA==.fantom
from C:\Muldrop\AmuR.sfh_0 to C:\Muldrop\QW11Ui5zZmhfMA==.fantom
from C:\Muldrop\7-ZjqEoh.img_0 to C:\Muldrop\Ny1aanFFb2guaW1nXzA=.fantom
from C:\Muldrop\7-ZjqEoh.moh_0 to C:\Muldrop\Ny1aanFFb2gubW9oXzA=.fantom
from C:\Muldrop\7-ZjqFbs.emm_0 to C:\Muldrop\Ny1aanFGYnMuZW1tXzA=.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\bookmarks-2011-11-10.json to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\Ym9va21hcmtzLTIwMTEtMTEtMTAuanNvbg==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\dXNlckNocm9tZS1leGFtcGxlLmNzcw==.fantom
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\dXNlckNvbnRlbnQtZXhhbXBsZS5jc3M=.fantom
from C:\Muldrop\7-ZjqFbs64.emm_0 to C:\Muldrop\Ny1aanFGYnM2NC5lbW1fMA==.fantom
from C:\Muldrop\7a.emm_1 to C:\Muldrop\N2EuZW1tXzE=.fantom
from C:\Muldrop\7a.tgy_0 to C:\Muldrop\N2EudGd5XzA=.fantom
from C:\Muldrop\7aCpo.tgy_0 to C:\Muldrop\N2FDcG8udGd5XzA=.fantom
from C:\Muldrop\7-ZjqRvt.img_0 to C:\Muldrop\Ny1aanFSdnQuaW1nXzA=.fantom
from C:\Muldrop\7-ZjqRvt.moh_0 to C:\Muldrop\Ny1aanFSdnQubW9oXzA=.fantom
from C:\Muldrop\7a.emm_0 to C:\Muldrop\N2EuZW1tXzA=.fantom
from C:\Muldrop\DsbxLjof.emm_0 to C:\Muldrop\RHNieExqb2YuZW1tXzA=.fantom
from C:\Muldrop\DsbxLjof.nbq_0 to C:\Muldrop\RHNieExqb2YubmJxXzA=.fantom
from C:\Muldrop\DsbxRvt.img_0 to C:\Muldrop\RHNieFJ2dC5pbWdfMA==.fantom
from C:\Muldrop\dppljft.trmjuf_0 to C:\Muldrop\ZHBwbGpmdC50cm1qdWZfMA==.fantom
from C:\Muldrop\DsbxEoh.img_0 to C:\Muldrop\RHNieEVvaC5pbWdfMA==.fantom
from C:\Muldrop\DsbxEoh.moh_0 to C:\Muldrop\RHNieEVvaC5tb2hfMA==.fantom
from C:\Muldrop\DsbxRvt.moh_0 to C:\Muldrop\RHNieFJ2dC5tb2hfMA==.fantom
from C:\Muldrop\ECbtfRvt.img_0 to C:\Muldrop\RUNidGZSdnQuaW1nXzA=.fantom
from C:\Muldrop\ECbtfRvt.moh_0 to C:\Muldrop\RUNidGZSdnQubW9oXzA=.fantom
from C:\Muldrop\Eeju.Npufqbe.sfh_0 to C:\Muldrop\RWVqdS5OcHVmcWJlLnNmaF8w.fantom
from C:\Muldrop\dzcfsqvol.ise_0 to C:\Muldrop\ZHpjZnNxdm9sLmlzZV8w.fantom
from C:\Muldrop\ECbtfEoh.img_0 to C:\Muldrop\RUNidGZFb2guaW1nXzA=.fantom
from C:\Muldrop\ECbtfEoh.moh_0 to C:\Muldrop\RUNidGZFb2gubW9oXzA=.fantom
from C:\Muldrop\dmbttjd.ise_0 to C:\Muldrop\ZG1idHRqZC5pc2VfMA==.fantom
from C:\Muldrop\dpmpsff.img_0 to C:\Muldrop\ZHBtcHNmZi5pbWdfMA==.fantom
from C:\Muldrop\dpmpsff.moh_0 to C:\Muldrop\ZHBtcHNmZi5tb2hfMA==.fantom
from C:\Muldrop\dibohft.uyu_0 to C:\Muldrop\ZGlib2hmdC51eXVfMA==.fantom
from C:\Muldrop\dispnfbqqttupsf.trmjuf_0 to C:\Muldrop\ZGlzcG5mYnFxdHR1cHNmLnRybWp1Zl8w.fantom
from C:\Muldrop\Djbmph.AmuDpxo.sfh_0 to C:\Muldrop\RGpibXBoLkFtdURweG8uc2ZoXzA=.fantom
from C:\Muldrop\dpmpsfs.emm_0 to C:\Muldrop\ZHBtcHNmcy5lbW1fMA==.fantom
from C:\Muldrop\dpnnpo.kbs_0 to C:\Muldrop\ZHBubnBvLmtic18w.fantom
from C:\Muldrop\dpnqbujcjmjuz.joj_0 to C:\Muldrop\ZHBucWJ1amNqbWp1ei5qb2pfMA==.fantom
from C:\Muldrop\dpoufou-qsfgt.trmjuf_0 to C:\Muldrop\ZHBvdWZvdS1xc2ZndC50cm1qdWZfMA==.fantom
from C:\Muldrop\dpmpsfs.fou.isd_0 to C:\Muldrop\ZHBtcHNmcy5mb3UuaXNkXzA=.fantom
from C:\Muldrop\dpmpsfs.img_0 to C:\Muldrop\ZHBtcHNmcy5pbWdfMA==.fantom
from C:\Muldrop\dpmpsfs.moh_0 to C:\Muldrop\ZHBtcHNmcy5tb2hfMA==.fantom
from C:\Muldrop\ENG_READ.TXT_0 to C:\Muldrop\RU5HX1JFQUQuVFhUXzA=.fantom
from C:\Muldrop\eomjlf.ise_0 to C:\Muldrop\ZW9tamxmLmlzZV8w.fantom
from C:\Muldrop\eo_mjlf.sfh_0 to C:\Muldrop\ZW9fbWpsZi5zZmhfMA==.fantom
from C:\Muldrop\EMfovRvt.img_0 to C:\Muldrop\RU1mb3ZSdnQuaW1nXzA=.fantom
from C:\Muldrop\EMfovRvt.moh_0 to C:\Muldrop\RU1mb3ZSdnQubW9oXzA=.fantom
from C:\Muldrop\ENG_NEWS.TXT_0 to C:\Muldrop\RU5HX05FV1MuVFhUXzA=.fantom
from C:\Muldrop\eo_mjlf.sfh_1 to C:\Muldrop\ZW9fbWpsZi5zZmhfMQ==.fantom
from C:\Muldrop\ES_ENG.LNG_0 to C:\Muldrop\RVNfRU5HLkxOR18w.fantom
from C:\Muldrop\ES_ENG.REG_0 to C:\Muldrop\RVNfRU5HLlJFR18w.fantom
from C:\Muldrop\ES_RUS.HLF_0 to C:\Muldrop\RVNfUlVTLkhMRl8w.fantom
from C:\Muldrop\epxompbet.trmjuf_0 to C:\Muldrop\ZXB4b21wYmV0LnRybWp1Zl8w.fantom
from C:\Muldrop\ESEARCH.BAT_0 to C:\Muldrop\RVNFQVJDSC5CQVRfMA==.fantom
from C:\Muldrop\ES_ENG.HLF_0 to C:\Muldrop\RVNfRU5HLkhMRl8w.fantom
from C:\Muldrop\EejuCbtf.nbq_0 to C:\Muldrop\RWVqdUNidGYubmJxXzA=.fantom
from C:\Muldrop\efgbvmu.ise_0 to C:\Muldrop\ZWZnYnZtdS5pc2VfMA==.fantom
from C:\Muldrop\efnbohmf32.emm_0 to C:\Muldrop\ZWZuYm9obWYzMi5lbW1fMA==.fantom
from C:\Muldrop\Eeju.SbwfAoeEyju.sfh_0 to C:\Muldrop\RWVqdS5TYndmQW9lRXlqdS5zZmhfMA==.fantom
from C:\Muldrop\Eeju.SbwfFjmf.sfh_0 to C:\Muldrop\RWVqdS5TYndmRmptZi5zZmhfMA==.fantom
from C:\Muldrop\EejuCbtf.emm_0 to C:\Muldrop\RWVqdUNidGYuZW1tXzA=.fantom
from C:\Muldrop\ejtlt.foh.ufnq_0 to C:\Muldrop\ZWp0bHQuZm9oLnVmbnFfMA==.fantom
from C:\Muldrop\EMfovDfm.sfh_0 to C:\Muldrop\RU1mb3ZEZm0uc2ZoXzA=.fantom
from C:\Muldrop\EMfovEoh.img_0 to C:\Muldrop\RU1mb3ZFb2guaW1nXzA=.fantom
from C:\Muldrop\EMfovEoh.moh_0 to C:\Muldrop\RU1mb3ZFb2gubW9oXzA=.fantom
from C:\Muldrop\ejtlt.svt.ufnq_0 to C:\Muldrop\ZWp0bHQuc3Z0LnVmbnFfMA==.fantom
from C:\Muldrop\EMfov.emm_0 to C:\Muldrop\RU1mb3YuZW1tXzA=.fantom
from C:\Muldrop\EMfov.nbq_0 to C:\Muldrop\RU1mb3YubmJxXzA=.fantom
from C:\Muldrop\dbubmph-shc.ynm_0 to C:\Muldrop\ZGJ1Ym1waC1zaGMueW5tXzA=.fantom
from C:\Muldrop\dbubmph-ufyu.ynm_0 to C:\Muldrop\ZGJ1Ym1waC11Znl1LnlubV8w.fantom
from C:\Muldrop\dbubmph.ynm_0 to C:\Muldrop\ZGJ1Ym1waC55bm1fMA==.fantom
from C:\Muldrop\CusmSijguX.sfh_0 to C:\Muldrop\Q3VzbVNpamd1WC5zZmhfMA==.fantom
from C:\Muldrop\Cvtupnjaf Ljolt.vsm_0 to C:\Muldrop\Q3Z0dXBuamFmIExqb2x0LnZzbV8w.fantom
from C:\Muldrop\dbubmph-dpotpmf.ynm_0 to C:\Muldrop\ZGJ1Ym1waC1kcG90cG1mLnlubV8w.fantom
from C:\Muldrop\ddtrm.isd_0 to C:\Muldrop\ZGR0cm0uaXNkXzA=.fantom
from C:\Muldrop\Dftdsjqu.jpo_1 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzE=.fantom
from C:\Muldrop\Dftdsjqu.jpo_2 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzI=.fantom
from C:\Muldrop\Dftdsjqu.jpo_3 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzM=.fantom
from C:\Muldrop\Dfgbvmu165.sfh_0 to C:\Muldrop\RGZnYnZtdTE2NS5zZmhfMA==.fantom
from C:\Muldrop\dfsu8.ec_0 to C:\Muldrop\ZGZzdTguZWNfMA==.fantom
from C:\Muldrop\Dftdsjqu.jpo_0 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzA=.fantom
from C:\Muldrop\CpnqRvt.moh_0 to C:\Muldrop\Q3BucVJ2dC5tb2hfMA==.fantom
from C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_0 to C:\Muldrop\Q3BucXNmdHRmZSAoYWpxcWZlKSBGcG1lZnMuWkZTZm9lVHBUYnNoZnVfMA==.fantom
from C:\Muldrop\Cpnqsfttfe (ajqqfe) Fpmefs.ZFSfoeTpTbshfu_1 to C:\Muldrop\Q3BucXNmdHRmZSAoYWpxcWZlKSBGcG1lZnMuWkZTZm9lVHBUYnNoZnVfMQ==.fantom
from C:\Muldrop\Cpnqbsf.emm_0 to C:\Muldrop\Q3BucWJzZi5lbW1fMA==.fantom
from C:\Muldrop\Cpnqbsf.nbq_0 to C:\Muldrop\Q3BucWJzZi5uYnFfMA==.fantom
from C:\Muldrop\CpnqEoh.moh_0 to C:\Muldrop\Q3BucUVvaC5tb2hfMA==.fantom
from C:\Muldrop\cpplnbslt-2011-11-10.ktpo_0 to C:\Muldrop\Y3BwbG5ic2x0LTIwMTEtMTEtMTAua3Rwb18w.fantom
from C:\Muldrop\CusmDfm.sfh_0 to C:\Muldrop\Q3VzbURmbS5zZmhfMA==.fantom
from C:\Muldrop\CusmF10.sfh_0 to C:\Muldrop\Q3VzbUYxMC5zZmhfMA==.fantom
from C:\Muldrop\CusmR.sfh_0 to C:\Muldrop\Q3VzbVIuc2ZoXzA=.fantom
from C:\Muldrop\cpplnbslt.iunm_0 to C:\Muldrop\Y3BwbG5ic2x0Lml1bm1fMA==.fantom
from C:\Muldrop\CREGEXP.CPP_0 to C:\Muldrop\Q1JFR0VYUC5DUFBfMA==.fantom
from C:\Muldrop\CREGEXP.H_0 to C:\Muldrop\Q1JFR0VYUC5IXzA=.fantom
from C:\Muldrop\dibohfmph_17 to C:\Muldrop\ZGlib2hmbXBoXzE3.fantom
from C:\Muldrop\dibohfmph_2 to C:\Muldrop\ZGlib2hmbXBoXzI=.fantom
from C:\Muldrop\dibohfmph_3 to C:\Muldrop\ZGlib2hmbXBoXzM=.fantom
from C:\Muldrop\dibohfmph_14 to C:\Muldrop\ZGlib2hmbXBoXzE0.fantom
from C:\Muldrop\dibohfmph_15 to C:\Muldrop\ZGlib2hmbXBoXzE1.fantom
from C:\Muldrop\dibohfmph_16 to C:\Muldrop\ZGlib2hmbXBoXzE2.fantom
from C:\Muldrop\dibohfmph_4 to C:\Muldrop\ZGlib2hmbXBoXzQ=.fantom
from C:\Muldrop\dibohfmph_8 to C:\Muldrop\ZGlib2hmbXBoXzg=.fantom
from C:\Muldrop\dibohfmph_9 to C:\Muldrop\ZGlib2hmbXBoXzk=.fantom
from C:\Muldrop\dibohfmph_foh_0 to C:\Muldrop\ZGlib2hmbXBoX2ZvaF8w.fantom
from C:\Muldrop\dibohfmph_5 to C:\Muldrop\ZGlib2hmbXBoXzU=.fantom
from C:\Muldrop\dibohfmph_6 to C:\Muldrop\ZGlib2hmbXBoXzY=.fantom
from C:\Muldrop\dibohfmph_7 to C:\Muldrop\ZGlib2hmbXBoXzc=.fantom
from C:\Muldrop\Dftdsjqu.jpo_7 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzc=.fantom
from C:\Muldrop\Dftdsjqu.jpo_8 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzg=.fantom
from C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_0 to C:\Muldrop\RGZ0bHVwcSAoZHNmYnVmIHRpcHN1ZHZ1KS5EZnRsTGpvbF8w.fantom
from C:\Muldrop\Dftdsjqu.jpo_4 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzQ=.fantom
from C:\Muldrop\Dftdsjqu.jpo_5 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzU=.fantom
from C:\Muldrop\Dftdsjqu.jpo_6 to C:\Muldrop\RGZ0ZHNqcXUuanBvXzY=.fantom
from C:\Muldrop\Dftlupq (dsfbuf tipsudvu).DftlLjol_1 to C:\Muldrop\RGZ0bHVwcSAoZHNmYnVmIHRpcHN1ZHZ1KS5EZnRsTGpvbF8x.fantom
from C:\Muldrop\dibohfmph_11 to C:\Muldrop\ZGlib2hmbXBoXzEx.fantom
from C:\Muldrop\dibohfmph_12 to C:\Muldrop\ZGlib2hmbXBoXzEy.fantom
from C:\Muldrop\dibohfmph_13 to C:\Muldrop\ZGlib2hmbXBoXzEz.fantom
from C:\Muldrop\dibohfmph_0 to C:\Muldrop\ZGlib2hmbXBoXzA=.fantom
from C:\Muldrop\dibohfmph_1 to C:\Muldrop\ZGlib2hmbXBoXzE=.fantom
from C:\Muldrop\dibohfmph_10 to C:\Muldrop\ZGlib2hmbXBoXzEw.fantom

Network activity:

Connects to:

'go#.gl':80
'wp#d':80

TCP:

HTTP GET requests:

http://go#.gl/5Z2NSx
http://11#.#11.111.1/wpad.dat via wp#d

UDP:

DNS ASK go#.gl
DNS ASK wp#d

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial