Trojan.PWS.Steam.16052

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%ALLUSERSPROFILE%\Start Menu\Programs\Startup\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Startup\DotNetZip-iezsk13w.tmp
%HOMEPATH%\Start Menu\Programs\Startup\key.vl
%HOMEPATH%\Start Menu\Programs\Startup\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\Programs\Startup\DotNetZip-mw0ehrz5.tmp

Modifies file system:

Creates the following files:

<Current directory>\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\DotNetZip-znjaxuyd.tmp
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\DotNetZip-bylr4e5b.tmp
%APPDATA%\Microsoft\Windows\key.vl
%APPDATA%\Microsoft\Windows\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Windows\DotNetZip-iuadsz0l.tmp
%APPDATA%\Microsoft\Windows\Themes\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Windows\Themes\DotNetZip-hinajnnx.tmp
%APPDATA%\Mozilla\key.vl
%APPDATA%\Mozilla\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\DotNetZip-b3y0wxup.tmp
%APPDATA%\Mozilla\Extensions\key.vl
%APPDATA%\Mozilla\Extensions\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Extensions\DotNetZip-z5vr4heb.tmp
%APPDATA%\Mozilla\Firefox\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\key.vl
%APPDATA%\Microsoft\Windows\Themes\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\DotNetZip-tmiyuj35.tmp
%APPDATA%\Microsoft\Media Player\DotNetZip-znyy0hxr.tmp
%APPDATA%\Microsoft\Internet Explorer\key.vl
%APPDATA%\Microsoft\Internet Explorer\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Internet Explorer\DotNetZip-siagqsuo.tmp
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\key.vl
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\DotNetZip-p3pbcwvq.tmp
%APPDATA%\Microsoft\Media Player\key.vl
%APPDATA%\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\MMC\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\key.vl
%APPDATA%\Microsoft\MMC\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\MMC\DotNetZip-xvsssack.tmp
%APPDATA%\Microsoft\SystemCertificates\key.vl
%APPDATA%\Microsoft\SystemCertificates\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\SystemCertificates\DotNetZip-jpdtv21n.tmp
%APPDATA%\Microsoft\SystemCertificates\My\key.vl
%APPDATA%\Microsoft\SystemCertificates\My\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\SystemCertificates\My\DotNetZip-2shhnz41.tmp
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\DotNetZip-1os132va.tmp
<LS_APPDATA>\Microsoft\key.vl
%APPDATA%\Mozilla\Firefox\Profiles\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\key.vl
%HOMEPATH%\Local Settings\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\DotNetZip-ntveg12h.tmp
<LS_APPDATA>\key.vl
<LS_APPDATA>\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\DotNetZip-kujc1ywl.tmp
<LS_APPDATA>\Identities\key.vl
<LS_APPDATA>\Identities\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\key.vl
%APPDATA%\Mozilla\Firefox\Profiles\key.vl
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\DotNetZip-5r4vgxgh.tmp
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\key.vl
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\DotNetZip-gxe5h55h.tmp
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\key.vl
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\DotNetZip-4h1pvsvf.tmp
%HOMEPATH%\Favorites\Links\DotNetZip-owguf5uq.tmp
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\DotNetZip-ggt1o22s.tmp
%HOMEPATH%\Favorites\Links\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\Profiles\DotNetZip-esrpuzcz.tmp
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key.vl
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\DotNetZip-2w3fjayq.tmp
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\key.vl
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\DotNetZip-fyxqme3h.tmp
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\key.vl
%APPDATA%\Mozilla\Firefox\DotNetZip-xdqstw1y.tmp
%HOMEPATH%\Favorites\DotNetZip-2dy3rhjn.tmp
%HOMEPATH%\Cookies\key.vl
%HOMEPATH%\Cookies\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Cookies\DotNetZip-udyrp2qt.tmp
%HOMEPATH%\Desktop\key.vl
%HOMEPATH%\Desktop\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Desktop\DotNetZip-jk0mw01w.tmp
%HOMEPATH%\Favorites\key.vl
%HOMEPATH%\Favorites\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Favorites\Links\key.vl
<LS_APPDATA>\Identities\DotNetZip-djanel4z.tmp
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\DotNetZip-b3tb4lax.tmp
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\DotNetZip-4fqbgwak.tmp
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\key.vl
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\DotNetZip-2jccljem.tmp
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\DotNetZip-gfb05plq.tmp
C:\Documents and Settings\NetworkService\Local Settings\History\key.vl
C:\Documents and Settings\NetworkService\Local Settings\History\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\History\DotNetZip-g2hhcgqn.tmp
C:\Documents and Settings\NetworkService\Local Settings\DotNetZip-jmf1nerl.tmp
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\DotNetZip-lgclwt3d.tmp
C:\Documents and Settings\NetworkService\Local Settings\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\DotNetZip-y3qq01ag.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\DotNetZip-oiwnfk4k.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\DotNetZip-4qi0wqoz.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-qfu50me5.tmp
C:\Documents and Settings\NetworkService\Cookies\DotNetZip-zmdw1gzn.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-2jj30med.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-ixek1u4q.tmp
C:\Documents and Settings\NetworkService\Cookies\key.vl
C:\Documents and Settings\NetworkService\Cookies\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Credentials\DotNetZip-emv4j4so.tmp
C:\Documents and Settings\NetworkService\Local Settings\Temp\key.vl
%HOMEPATH%\DotNetZip-vqihuf0j.tmp
%APPDATA%\key.vl
%APPDATA%\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\DotNetZip-ybdpnh4f.tmp
%APPDATA%\Identities\key.vl
%APPDATA%\Identities\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Identities\DotNetZip-lcvoox5w.tmp
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\key.vl
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\DotNetZip-opli0aem.tmp
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\DotNetZip-43prdx3n.tmp
%APPDATA%\Microsoft\key.vl
%APPDATA%\Microsoft\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\DotNetZip-xzgznd44.tmp
%APPDATA%\Microsoft\Address Book\key.vl
%APPDATA%\Microsoft\Address Book\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Address Book\DotNetZip-tmsjboux.tmp
%APPDATA%\Microsoft\Credentials\key.vl
%APPDATA%\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\gusjfybwvkbsgwhlbatp.txt
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\key.vl
%HOMEPATH%\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\key.vl
C:\Documents and Settings\NetworkService\Local Settings\Temp\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\Temp\DotNetZip-prlarztw.tmp
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\DotNetZip-kyuevjtk.tmp
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\DotNetZip-m3mzhbvn.tmp
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\DotNetZip-gcszkxka.tmp
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\DotNetZip-5z3isj0w.tmp
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\DotNetZip-em2v3jhd.tmp
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\key.vl
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\DotNetZip-rigjyf1w.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\key.vl
C:\Far2\Addons\Shell\DotNetZip-br5gwfv1.tmp
<LS_APPDATA>\Microsoft\CD Burning\key.vl
%HOMEPATH%\My Documents\My Music\key.vl
%HOMEPATH%\My Documents\My Music\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\My Documents\My Music\DotNetZip-hhprwj2r.tmp
%HOMEPATH%\My Documents\My Pictures\key.vl
%HOMEPATH%\My Documents\My Pictures\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\My Documents\My Pictures\DotNetZip-dul14ofd.tmp
%HOMEPATH%\My Documents\My Received Files\key.vl
%HOMEPATH%\My Documents\My Received Files\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\NetHood\key.vl
%HOMEPATH%\SendTo\key.vl
%HOMEPATH%\NetHood\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\NetHood\DotNetZip-wr2ap4dd.tmp
%HOMEPATH%\PrintHood\key.vl
%HOMEPATH%\PrintHood\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\PrintHood\DotNetZip-2h5fxid2.tmp
%HOMEPATH%\Recent\key.vl
%HOMEPATH%\Recent\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Recent\DotNetZip-gx1hxo23.tmp
%HOMEPATH%\My Documents\Downloads\DotNetZip-2tbukamu.tmp
%HOMEPATH%\My Documents\My Received Files\DotNetZip-2nopgyak.tmp
%HOMEPATH%\My Documents\Downloads\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\VMware\DotNetZip-3wgvpbaq.tmp
%HOMEPATH%\Local Settings\History\key.vl
%HOMEPATH%\Local Settings\History\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\History\DotNetZip-ubd1hnry.tmp
%HOMEPATH%\Local Settings\History\History.IE5\key.vl
%HOMEPATH%\Local Settings\History\History.IE5\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\History\History.IE5\DotNetZip-zqtgam0b.tmp
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\key.vl
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\DotNetZip-y0rovkdj.tmp
%HOMEPATH%\My Documents\DotNetZip-zwfbi1wh.tmp
%TEMP%\key.vl
%TEMP%\gusjfybwvkbsgwhlbatp.txt
%TEMP%\DotNetZip-kgs010ug.tmp
%HOMEPATH%\Local Settings\<INETFILES>\key.vl
%HOMEPATH%\Local Settings\<INETFILES>\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Local Settings\<INETFILES>\DotNetZip-pktc3dte.tmp
%HOMEPATH%\My Documents\key.vl
%HOMEPATH%\My Documents\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\My Documents\Downloads\key.vl
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\DotNetZip-ap0yrscb.tmp
%HOMEPATH%\Start Menu\key.vl
C:\Far2\Addons\DotNetZip-wxmptphd.tmp
C:\Far2\Addons\Colors\key.vl
C:\Far2\Addons\Colors\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\Colors\DotNetZip-ov3scrjt.tmp
C:\Far2\Addons\Colors\Custom Highlighting\key.vl
C:\Far2\Addons\Colors\Custom Highlighting\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\Colors\Custom Highlighting\DotNetZip-2sxkbq0z.tmp
C:\Far2\Addons\Colors\Default Highlighting\key.vl
C:\Far2\Addons\Colors\Default Highlighting\DotNetZip-z0adjgjh.tmp
%HOMEPATH%\SendTo\DotNetZip-3dl3umuw.tmp
C:\Far2\Addons\Macros\key.vl
C:\Far2\Addons\Macros\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\Macros\DotNetZip-vtwcgef2.tmp
C:\Far2\Addons\SetUp\key.vl
C:\Far2\Addons\SetUp\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\SetUp\DotNetZip-ehfwi41m.tmp
C:\Far2\Addons\Shell\key.vl
C:\Far2\Addons\Shell\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\VMware\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\key.vl
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\key.vl
%HOMEPATH%\Start Menu\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\DotNetZip-pwa20phv.tmp
%HOMEPATH%\Start Menu\Programs\key.vl
%HOMEPATH%\Start Menu\Programs\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\Programs\DotNetZip-yovq43bq.tmp
%HOMEPATH%\Start Menu\Programs\Accessories\key.vl
%HOMEPATH%\Start Menu\Programs\Accessories\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\Programs\Accessories\DotNetZip-zkxb1tda.tmp
%HOMEPATH%\SendTo\gusjfybwvkbsgwhlbatp.txt
C:\Far2\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\DotNetZip-3ixnteoq.tmp
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\key.vl
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\DotNetZip-nvpugiyh.tmp
%HOMEPATH%\Templates\key.vl
%HOMEPATH%\Templates\gusjfybwvkbsgwhlbatp.txt
%HOMEPATH%\Templates\DotNetZip-hhethict.tmp
C:\Far2\key.vl
C:\Far2\DotNetZip-c5gmhmg4.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\VMware\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\key.vl
<LS_APPDATA>\Mozilla\DotNetZip-vyl4gdib.tmp
<LS_APPDATA>\Mozilla\Firefox\key.vl
<LS_APPDATA>\Mozilla\Firefox\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\DotNetZip-wy5qkb5t.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\DotNetZip-qhbmr35e.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\DotNetZip-1kqeqtuo.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\DotNetZip-r5xphkak.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\DotNetZip-gkazx0qe.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\DotNetZip-33fwvulq.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\key.vl
<LS_APPDATA>\Microsoft\Media Player\key.vl
<LS_APPDATA>\Microsoft\CD Burning\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\CD Burning\DotNetZip-g15getkb.tmp
<LS_APPDATA>\Microsoft\Credentials\key.vl
<LS_APPDATA>\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Credentials\DotNetZip-hhccd3x1.tmp
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\key.vl
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\DotNetZip-m1a3r20h.tmp
<LS_APPDATA>\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Windows Media\9.0\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Media Player\DotNetZip-r5nea34b.tmp
<LS_APPDATA>\Microsoft\Windows\key.vl
<LS_APPDATA>\Microsoft\Windows\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Windows\DotNetZip-vyezcw5v.tmp
<LS_APPDATA>\Microsoft\Windows Media\key.vl
<LS_APPDATA>\Microsoft\Windows Media\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Microsoft\Windows Media\DotNetZip-qybjdzir.tmp
<LS_APPDATA>\Microsoft\Windows Media\9.0\key.vl
<LS_APPDATA>\Microsoft\Windows Media\9.0\DotNetZip-1tl143qm.tmp
<LS_APPDATA>\Microsoft\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\DotNetZip-v1uoe3ww.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\DotNetZip-xfngojjs.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\DotNetZip-zbrgdxgd.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\DotNetZip-3j2hbr4z.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\DotNetZip-hune2djy.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\DotNetZip-ui5eetpl.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\DotNetZip-wgsnnczx.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\DotNetZip-js2mfwpr.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\DotNetZip-qya131rt.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\DotNetZip-zzlqkpvv.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\DotNetZip-x1iysxj1.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\DotNetZip-qq2ofjgl.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\DotNetZip-5u5mkbcc.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\DotNetZip-skdiq0wn.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\key.vl
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\gusjfybwvkbsgwhlbatp.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\DotNetZip-25g2qlc5.tmp
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\gusjfybwvkbsgwhlbatp.txt
C:\Far2\Addons\Colors\Default Highlighting\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\DotNetZip-jlghj501.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\DotNetZip-s5m14zhk.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\key.vl
C:\Documents and Settings\Default User\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\DotNetZip-ilenfufb.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Games\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Games\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Games\DotNetZip-2rz2stpe.tmp
%ALLUSERSPROFILE%\Templates\key.vl
%ALLUSERSPROFILE%\Templates\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Templates\DotNetZip-kqczkm5n.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\DotNetZip-ebpojr0g.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\DotNetZip-1ckp03vf.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Favorites\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\DotNetZip-he53ft2i.tmp
%ALLUSERSPROFILE%\Documents\My Videos\key.vl
%ALLUSERSPROFILE%\Documents\My Videos\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Videos\DotNetZip-hvod1rss.tmp
%ALLUSERSPROFILE%\DRM\key.vl
%ALLUSERSPROFILE%\DRM\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\DRM\DotNetZip-j4iuqoij.tmp
%ALLUSERSPROFILE%\Favorites\key.vl
%ALLUSERSPROFILE%\Favorites\DotNetZip-kplekek1.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\DotNetZip-ljvc5yaz.tmp
%ALLUSERSPROFILE%\Start Menu\key.vl
%ALLUSERSPROFILE%\Start Menu\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\DotNetZip-taszoeyu.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\DotNetZip-va30nazi.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\key.vl
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\DotNetZip-htk4yu0j.tmp
C:\Documents and Settings\Default User\Application Data\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-johwieug.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-j0eg5wpb.tmp
C:\Documents and Settings\Default User\Cookies\key.vl
C:\Documents and Settings\Default User\Cookies\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Cookies\DotNetZip-j35yzqmi.tmp
C:\Documents and Settings\Default User\Desktop\key.vl
C:\Documents and Settings\Default User\Desktop\DotNetZip-3hopg4z4.tmp
C:\Documents and Settings\Default User\DotNetZip-i5rhgkln.tmp
C:\Documents and Settings\Default User\Favorites\key.vl
C:\Documents and Settings\Default User\Favorites\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Favorites\DotNetZip-1e0iojiy.tmp
C:\Documents and Settings\Default User\Local Settings\key.vl
C:\Documents and Settings\Default User\Local Settings\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\DotNetZip-o2istel5.tmp
C:\Documents and Settings\Default User\Local Settings\Application Data\key.vl
C:\Documents and Settings\Default User\Local Settings\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\key.vl
C:\Documents and Settings\Default User\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\DotNetZip-bssmxrid.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\DotNetZip-evvf2o3s.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\DotNetZip-e2zklntk.tmp
C:\Documents and Settings\Default User\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\DotNetZip-qpkxqpg3.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\DotNetZip-0w2vxma1.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\DotNetZip-jafoi2ll.tmp
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\key.vl
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-zejdnuru.tmp
C:\Documents and Settings\Default User\Desktop\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\key.vl
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\DotNetZip-q4ragx1k.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\DotNetZip-qgfwsh0a.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\DotNetZip-kgb53e4o.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\DotNetZip-05420wsd.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\DotNetZip-35tqblxk.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\DotNetZip-nemsador.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\DotNetZip-1ssg4x12.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\key.vl
%ALLUSERSPROFILE%\Application Data\key.vl
<Current directory>\gusjfybwvkbsgwhlbatp.txt
<Current directory>\DotNetZip-4kbd1fr0.tmp
C:\Documents and Settings\key.vl
C:\Documents and Settings\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\DotNetZip-xdfrqeau.tmp
%ALLUSERSPROFILE%\key.vl
%ALLUSERSPROFILE%\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\DotNetZip-gcjthw1u.tmp
%ALLUSERSPROFILE%\Application Data\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\DotNetZip-w2vummcx.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\DotNetZip-3aiqkn1g.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DotNetZip-2wbxefg4.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\DotNetZip-2qjicm3k.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\key.vl
%ALLUSERSPROFILE%\Documents\My Pictures\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\DotNetZip-oi0150vp.tmp
%ALLUSERSPROFILE%\Documents\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\DotNetZip-whn31gb5.tmp
%ALLUSERSPROFILE%\Documents\My Music\key.vl
%ALLUSERSPROFILE%\Documents\My Music\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Music\DotNetZip-jojt0lvz.tmp
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\key.vl
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\DotNetZip-ur5qpgq2.tmp
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\DotNetZip-1cx1zkcl.tmp
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\key.vl
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\DotNetZip-00xtwmkq.tmp
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\key.vl
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\DotNetZip-qsaipjx3.tmp
%ALLUSERSPROFILE%\Documents\My Pictures\key.vl
%ALLUSERSPROFILE%\Documents\key.vl
%ALLUSERSPROFILE%\Documents\My Pictures\DotNetZip-wpdcbvnf.tmp
%ALLUSERSPROFILE%\Desktop\DotNetZip-mawtnj2e.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\DotNetZip-wojhtqjy.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\DotNetZip-pwrm00pn.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\DotNetZip-5tvgd4yz.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\key.vl
%ALLUSERSPROFILE%\Desktop\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\DotNetZip-ntrphnml.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\DotNetZip-ohuz15jf.tmp
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\key.vl
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\gusjfybwvkbsgwhlbatp.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\DotNetZip-xqihorqa.tmp
%ALLUSERSPROFILE%\Desktop\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\DotNetZip-4bj2jmii.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\DotNetZip-2dk3suq0.tmp
C:\Documents and Settings\LocalService\Cookies\DotNetZip-arrkczn1.tmp
C:\Documents and Settings\LocalService\Local Settings\key.vl
C:\Documents and Settings\LocalService\Local Settings\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\DotNetZip-plkfinm5.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\key.vl
C:\Documents and Settings\LocalService\Local Settings\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\DotNetZip-gpdontjv.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\key.vl
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\DotNetZip-ulust514.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\DotNetZip-3kcvmds0.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\key.vl
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\DotNetZip-liiv3bgg.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\key.vl
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\DotNetZip-3z1pr54g.tmp
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\key.vl
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Cookies\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Cookies\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\DotNetZip-w10y55yp.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\DotNetZip-s3mmye1g.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\DotNetZip-ec2x21cr.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\DotNetZip-srvao2yd.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-1ls5if0q.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-yhfkn4i5.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-uhpthw2a.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\key.vl
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\History\DotNetZip-sx4rzrjo.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\DotNetZip-icikwtqo.tmp
C:\Documents and Settings\NetworkService\key.vl
C:\Documents and Settings\NetworkService\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\DotNetZip-5iayjda4.tmp
C:\Documents and Settings\NetworkService\Application Data\key.vl
C:\Documents and Settings\NetworkService\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\DotNetZip-oqyiht0p.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\History\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\DotNetZip-rxohtidh.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\DotNetZip-nqxxqi2q.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\key.vl
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\DotNetZip-hglttn2e.tmp
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\DotNetZip-stztc11d.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\DotNetZip-ps5ly5qe.tmp
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\key.vl
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\DotNetZip-lmy4dejk.tmp
C:\Documents and Settings\LocalService\Local Settings\Temp\key.vl
C:\Documents and Settings\LocalService\Local Settings\Temp\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\Temp\DotNetZip-nqwev1yq.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\History\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\DotNetZip-ri0bnzbn.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\DotNetZip-3hqgslrj.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\key.vl
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\DotNetZip-cnd1piqn.tmp
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\DotNetZip-noeji3gt.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\DotNetZip-oiukuxk2.tmp
C:\Documents and Settings\LocalService\DotNetZip-x0h4aro4.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\DotNetZip-sd10lbfs.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\DotNetZip-mcvlsse5.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\DotNetZip-13ud4g24.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\NetHood\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\DotNetZip-ylbfpdao.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\DotNetZip-youlmgys.tmp
C:\Documents and Settings\Default User\My Documents\key.vl
C:\Documents and Settings\Default User\My Documents\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\My Documents\DotNetZip-3ysqqlat.tmp
C:\Documents and Settings\Default User\NetHood\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\DotNetZip-dh23gnpg.tmp
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\DotNetZip-eqxchlzb.tmp
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\key.vl
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\DotNetZip-va34qe5q.tmp
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\key.vl
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\DotNetZip-e3ry4pgw.tmp
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\key.vl
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\History\key.vl
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\key.vl
C:\Documents and Settings\Default User\Local Settings\History\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\History\DotNetZip-5r2hincz.tmp
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\key.vl
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\DotNetZip-3nnibkyw.tmp
C:\Documents and Settings\Default User\Local Settings\Temp\key.vl
C:\Documents and Settings\Default User\Local Settings\Temp\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Temp\DotNetZip-0lqlqg2r.tmp
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\key.vl
C:\Documents and Settings\Default User\PrintHood\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\key.vl
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\DotNetZip-omdkouxn.tmp
C:\Documents and Settings\Default User\Templates\key.vl
C:\Documents and Settings\Default User\Templates\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Templates\DotNetZip-oh4gn2j2.tmp
C:\Documents and Settings\LocalService\key.vl
C:\Documents and Settings\LocalService\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\key.vl
C:\Documents and Settings\Default User\PrintHood\key.vl
C:\Documents and Settings\LocalService\Application Data\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\DotNetZip-hgx4szkh.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\DotNetZip-beqwpjdb.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\key.vl
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\DotNetZip-zogtjgag.tmp
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\DotNetZip-1n4f54e1.tmp
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\PrintHood\DotNetZip-smjwshmo.tmp
C:\Documents and Settings\Default User\Recent\key.vl
C:\Documents and Settings\Default User\Recent\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Recent\DotNetZip-uacuryf1.tmp
C:\Documents and Settings\Default User\SendTo\key.vl
C:\Documents and Settings\Default User\SendTo\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\SendTo\DotNetZip-zpukte3p.tmp
C:\Documents and Settings\Default User\Start Menu\key.vl
C:\Documents and Settings\Default User\NetHood\DotNetZip-irwhw1e0.tmp
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\DotNetZip-rqj3ggxq.tmp
C:\Documents and Settings\Default User\Start Menu\Programs\key.vl
C:\Documents and Settings\Default User\Start Menu\Programs\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\DotNetZip-gklku34u.tmp
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\key.vl
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\DotNetZip-2mwfignp.tmp
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\key.vl
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\gusjfybwvkbsgwhlbatp.txt
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\key.vl
C:\Far2\Addons\XLat\key.vl

Moves the following files:

from <Current directory>\DotNetZip-4kbd1fr0.tmp to <Current directory>\bf32d3b0-gusjf.zip
from %APPDATA%\Microsoft\SystemCertificates\DotNetZip-jpdtv21n.tmp to %APPDATA%\Microsoft\SystemCertificates\SystemCertificates-gusjf.zip
from %APPDATA%\Microsoft\SystemCertificates\My\DotNetZip-2shhnz41.tmp to %APPDATA%\Microsoft\SystemCertificates\My\My-gusjf.zip
from %APPDATA%\Microsoft\SystemCertificates\My\Certificates\DotNetZip-tmiyuj35.tmp to %APPDATA%\Microsoft\SystemCertificates\My\Certificates\Certificates-gusjf.zip
from %APPDATA%\Microsoft\SystemCertificates\My\CRLs\DotNetZip-znjaxuyd.tmp to %APPDATA%\Microsoft\SystemCertificates\My\CRLs\CRLs-gusjf.zip
from %APPDATA%\Microsoft\SystemCertificates\My\CTLs\DotNetZip-bylr4e5b.tmp to %APPDATA%\Microsoft\SystemCertificates\My\CTLs\CTLs-gusjf.zip
from %APPDATA%\Microsoft\Windows\DotNetZip-iuadsz0l.tmp to %APPDATA%\Microsoft\Windows\Windows-gusjf.zip
from %APPDATA%\Microsoft\Windows\Themes\DotNetZip-hinajnnx.tmp to %APPDATA%\Microsoft\Windows\Themes\Themes-gusjf.zip
from %APPDATA%\Mozilla\DotNetZip-b3y0wxup.tmp to %APPDATA%\Mozilla\Mozilla-gusjf.zip
from %APPDATA%\Mozilla\Extensions\DotNetZip-z5vr4heb.tmp to %APPDATA%\Mozilla\Extensions\Extensions-gusjf.zip
from %APPDATA%\Mozilla\Firefox\DotNetZip-xdqstw1y.tmp to %APPDATA%\Mozilla\Firefox\Firefox-gusjf.zip
from %APPDATA%\Mozilla\Firefox\Profiles\DotNetZip-esrpuzcz.tmp to %APPDATA%\Mozilla\Firefox\Profiles\Profiles-gusjf.zip
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\DotNetZip-2w3fjayq.tmp to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cwdgt0y8.default-gusjf.zip
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\DotNetZip-1os132va.tmp to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\chrome-gusjf.zip
from <LS_APPDATA>\Microsoft\Credentials\DotNetZip-hhccd3x1.tmp to <LS_APPDATA>\Microsoft\Credentials\Credentials-gusjf.zip
from %HOMEPATH%\Cookies\DotNetZip-udyrp2qt.tmp to %HOMEPATH%\Cookies\Cookies-gusjf.zip
from %HOMEPATH%\Desktop\DotNetZip-jk0mw01w.tmp to %HOMEPATH%\Desktop\Desktop-gusjf.zip
from %HOMEPATH%\Favorites\DotNetZip-2dy3rhjn.tmp to %HOMEPATH%\Favorites\Favorites-gusjf.zip
from %HOMEPATH%\Favorites\Links\DotNetZip-owguf5uq.tmp to %HOMEPATH%\Favorites\Links\Links-gusjf.zip
from %HOMEPATH%\Local Settings\DotNetZip-ntveg12h.tmp to %HOMEPATH%\Local Settings\Local Settings-gusjf.zip
from <LS_APPDATA>\DotNetZip-kujc1ywl.tmp to <LS_APPDATA>\Application Data-gusjf.zip
from <LS_APPDATA>\Identities\DotNetZip-djanel4z.tmp to <LS_APPDATA>\Identities\Identities-gusjf.zip
from <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\DotNetZip-5r4vgxgh.tmp to <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}-gusjf.zip
from <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\DotNetZip-gxe5h55h.tmp to <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Microsoft-gusjf.zip
from <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\DotNetZip-4h1pvsvf.tmp to <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\Outlook Express-gusjf.zip
from <LS_APPDATA>\Microsoft\DotNetZip-ap0yrscb.tmp to <LS_APPDATA>\Microsoft\Microsoft-gusjf.zip
from <LS_APPDATA>\Microsoft\CD Burning\DotNetZip-g15getkb.tmp to <LS_APPDATA>\Microsoft\CD Burning\CD Burning-gusjf.zip
from %APPDATA%\Microsoft\MMC\DotNetZip-xvsssack.tmp to %APPDATA%\Microsoft\MMC\MMC-gusjf.zip
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\DotNetZip-fyxqme3h.tmp to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\bookmarkbackups-gusjf.zip
from %APPDATA%\Microsoft\Media Player\DotNetZip-znyy0hxr.tmp to %APPDATA%\Microsoft\Media Player\Media Player-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\DotNetZip-kyuevjtk.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\<INETFILES>-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-2jj30med.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-ixek1u4q.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs-gusjf.zip
from C:\Documents and Settings\NetworkService\Cookies\DotNetZip-zmdw1gzn.tmp to C:\Documents and Settings\NetworkService\Cookies\Cookies-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\DotNetZip-jmf1nerl.tmp to C:\Documents and Settings\NetworkService\Local Settings\Local Settings-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Application Data\DotNetZip-b3tb4lax.tmp to C:\Documents and Settings\NetworkService\Local Settings\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\DotNetZip-4fqbgwak.tmp to C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\DotNetZip-lgclwt3d.tmp to C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\Credentials-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\DotNetZip-2jccljem.tmp to C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\S-1-5-20-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\DotNetZip-gfb05plq.tmp to C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\Windows-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\History\DotNetZip-g2hhcgqn.tmp to C:\Documents and Settings\NetworkService\Local Settings\History\History-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\DotNetZip-43prdx3n.tmp to C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\History.IE5-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\Temp\DotNetZip-prlarztw.tmp to C:\Documents and Settings\NetworkService\Local Settings\Temp\Temp-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\DotNetZip-m3mzhbvn.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\Content.IE5-gusjf.zip
from %APPDATA%\Microsoft\Internet Explorer\DotNetZip-siagqsuo.tmp to %APPDATA%\Microsoft\Internet Explorer\Internet Explorer-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\DotNetZip-gcszkxka.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\2VAZY7AN-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\DotNetZip-5z3isj0w.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\KHMHGZ4F-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\DotNetZip-em2v3jhd.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\U98D4X8H-gusjf.zip
from C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\DotNetZip-rigjyf1w.tmp to C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\YPORKZYZ-gusjf.zip
from %HOMEPATH%\DotNetZip-vqihuf0j.tmp to %HOMEPATH%\%USERNAME%-gusjf.zip
from %APPDATA%\DotNetZip-ybdpnh4f.tmp to %APPDATA%\Application Data-gusjf.zip
from %APPDATA%\Identities\DotNetZip-lcvoox5w.tmp to %APPDATA%\Identities\Identities-gusjf.zip
from %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\DotNetZip-opli0aem.tmp to %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}-gusjf.zip
from %APPDATA%\Microsoft\DotNetZip-xzgznd44.tmp to %APPDATA%\Microsoft\Microsoft-gusjf.zip
from %APPDATA%\Microsoft\Address Book\DotNetZip-tmsjboux.tmp to %APPDATA%\Microsoft\Address Book\Address Book-gusjf.zip
from %APPDATA%\Microsoft\Credentials\DotNetZip-emv4j4so.tmp to %APPDATA%\Microsoft\Credentials\Credentials-gusjf.zip
from %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\DotNetZip-ggt1o22s.tmp to %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\S-1-5-21-2052111302-484763869-725345543-1003-gusjf.zip
from %APPDATA%\Microsoft\Internet Explorer\Quick Launch\DotNetZip-p3pbcwvq.tmp to %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Quick Launch-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\DotNetZip-5u5mkbcc.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\6-gusjf.zip
from C:\Far2\Addons\SetUp\DotNetZip-ehfwi41m.tmp to C:\Far2\Addons\SetUp\SetUp-gusjf.zip
from <LS_APPDATA>\Microsoft\Windows\DotNetZip-vyezcw5v.tmp to <LS_APPDATA>\Microsoft\Windows\Windows-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\DotNetZip-bzqtkm0o.tmp to %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\Content.IE5-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\DotNetZip-e2taqspm.tmp to %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\2VAZY7AN-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\DotNetZip-24xrpn2o.tmp to %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\KHMHGZ4F-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\DotNetZip-ivaibrub.tmp to %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\U98D4X8H-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\DotNetZip-1yjreiyo.tmp to %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\YPORKZYZ-gusjf.zip
from %HOMEPATH%\My Documents\DotNetZip-zwfbi1wh.tmp to %HOMEPATH%\My Documents\My Documents-gusjf.zip
from %HOMEPATH%\My Documents\Downloads\DotNetZip-2tbukamu.tmp to %HOMEPATH%\My Documents\Downloads\Downloads-gusjf.zip
from %HOMEPATH%\My Documents\My Music\DotNetZip-hhprwj2r.tmp to %HOMEPATH%\My Documents\My Music\My Music-gusjf.zip
from %HOMEPATH%\My Documents\My Pictures\DotNetZip-dul14ofd.tmp to %HOMEPATH%\My Documents\My Pictures\My Pictures-gusjf.zip
from %HOMEPATH%\My Documents\My Received Files\DotNetZip-2nopgyak.tmp to %HOMEPATH%\My Documents\My Received Files\My Received Files-gusjf.zip
from %HOMEPATH%\NetHood\DotNetZip-wr2ap4dd.tmp to %HOMEPATH%\NetHood\NetHood-gusjf.zip
from %HOMEPATH%\PrintHood\DotNetZip-2h5fxid2.tmp to %HOMEPATH%\PrintHood\PrintHood-gusjf.zip
from %HOMEPATH%\SendTo\DotNetZip-3dl3umuw.tmp to %HOMEPATH%\SendTo\SendTo-gusjf.zip
from <LS_APPDATA>\Microsoft\Media Player\DotNetZip-r5nea34b.tmp to <LS_APPDATA>\Microsoft\Media Player\Media Player-gusjf.zip
from %HOMEPATH%\Start Menu\DotNetZip-pwa20phv.tmp to %HOMEPATH%\Start Menu\Start Menu-gusjf.zip
from %HOMEPATH%\Start Menu\Programs\DotNetZip-yovq43bq.tmp to %HOMEPATH%\Start Menu\Programs\Programs-gusjf.zip
from %HOMEPATH%\Start Menu\Programs\Accessories\DotNetZip-zkxb1tda.tmp to %HOMEPATH%\Start Menu\Programs\Accessories\Accessories-gusjf.zip
from %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\DotNetZip-3ixnteoq.tmp to %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\Accessibility-gusjf.zip
from %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\DotNetZip-nvpugiyh.tmp to %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\Entertainment-gusjf.zip
from %HOMEPATH%\Templates\DotNetZip-hhethict.tmp to %HOMEPATH%\Templates\Templates-gusjf.zip
from C:\Far2\DotNetZip-c5gmhmg4.tmp to C:\Far2\Far2-gusjf.zip
from C:\Far2\Addons\DotNetZip-wxmptphd.tmp to C:\Far2\Addons\Addons-gusjf.zip
from C:\Far2\Addons\Colors\DotNetZip-ov3scrjt.tmp to C:\Far2\Addons\Colors\Colors-gusjf.zip
from C:\Far2\Addons\Colors\Custom Highlighting\DotNetZip-2sxkbq0z.tmp to C:\Far2\Addons\Colors\Custom Highlighting\Custom Highlighting-gusjf.zip
from C:\Far2\Addons\Colors\Default Highlighting\DotNetZip-z0adjgjh.tmp to C:\Far2\Addons\Colors\Default Highlighting\Default Highlighting-gusjf.zip
from C:\Far2\Addons\Macros\DotNetZip-vtwcgef2.tmp to C:\Far2\Addons\Macros\Macros-gusjf.zip
from %HOMEPATH%\Local Settings\<INETFILES>\DotNetZip-pktc3dte.tmp to %HOMEPATH%\Local Settings\<INETFILES>\<INETFILES>-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-qfu50me5.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates-gusjf.zip
from %TEMP%\DotNetZip-kgs010ug.tmp to %TEMP%\Temp-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\DotNetZip-zzlqkpvv.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\5-gusjf.zip
from <LS_APPDATA>\Microsoft\Windows Media\DotNetZip-qybjdzir.tmp to <LS_APPDATA>\Microsoft\Windows Media\Windows Media-gusjf.zip
from <LS_APPDATA>\Microsoft\Windows Media\9.0\DotNetZip-1tl143qm.tmp to <LS_APPDATA>\Microsoft\Windows Media\9.0\9.0-gusjf.zip
from <LS_APPDATA>\Mozilla\DotNetZip-vyl4gdib.tmp to <LS_APPDATA>\Mozilla\Mozilla-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\DotNetZip-wy5qkb5t.tmp to <LS_APPDATA>\Mozilla\Firefox\Firefox-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\DotNetZip-qhbmr35e.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\Profiles-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\DotNetZip-1kqeqtuo.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\cwdgt0y8.default-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\DotNetZip-gkazx0qe.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\Cache-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\DotNetZip-33fwvulq.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\0-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\DotNetZip-r5xphkak.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\1-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\DotNetZip-v1uoe3ww.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\2-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\DotNetZip-x1iysxj1.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\3-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\DotNetZip-qq2ofjgl.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\4-gusjf.zip
from <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\DotNetZip-m1a3r20h.tmp to <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\S-1-5-21-2052111302-484763869-725345543-1003-gusjf.zip
from %HOMEPATH%\Local Settings\History\History.IE5\DotNetZip-zqtgam0b.tmp to %HOMEPATH%\Local Settings\History\History.IE5\History.IE5-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\DotNetZip-skdiq0wn.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\7-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\DotNetZip-25g2qlc5.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\8-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\DotNetZip-qya131rt.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\9-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\DotNetZip-xfngojjs.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\A-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\DotNetZip-zbrgdxgd.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\B-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\DotNetZip-3j2hbr4z.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\C-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\DotNetZip-hune2djy.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\D-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\DotNetZip-ui5eetpl.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\E-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\DotNetZip-wgsnnczx.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\F-gusjf.zip
from <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\DotNetZip-js2mfwpr.tmp to <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\startupCache-gusjf.zip
from <LS_APPDATA>\VMware\DotNetZip-3wgvpbaq.tmp to <LS_APPDATA>\VMware\VMware-gusjf.zip
from %HOMEPATH%\Local Settings\History\DotNetZip-ubd1hnry.tmp to %HOMEPATH%\Local Settings\History\History-gusjf.zip
from %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\DotNetZip-y0rovkdj.tmp to %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\MSHist012011111020111111-gusjf.zip
from %HOMEPATH%\Recent\DotNetZip-gx1hxo23.tmp to %HOMEPATH%\Recent\Recent-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\DotNetZip-4qi0wqoz.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\My-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\DotNetZip-lmy4dejk.tmp to C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\History.IE5-gusjf.zip
from %ALLUSERSPROFILE%\DRM\DotNetZip-j4iuqoij.tmp to %ALLUSERSPROFILE%\DRM\DRM-gusjf.zip
from %ALLUSERSPROFILE%\Favorites\DotNetZip-kplekek1.tmp to %ALLUSERSPROFILE%\Favorites\Favorites-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\DotNetZip-taszoeyu.tmp to %ALLUSERSPROFILE%\Start Menu\Start Menu-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\DotNetZip-va30nazi.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Programs-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\DotNetZip-ljvc5yaz.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessories-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\DotNetZip-ebpojr0g.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\Accessibility-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\DotNetZip-jlghj501.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\Communications-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\DotNetZip-s5m14zhk.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\Entertainment-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\DotNetZip-1ckp03vf.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\System Tools-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\DotNetZip-ilenfufb.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Administrative Tools-gusjf.zip
from %ALLUSERSPROFILE%\Start Menu\Programs\Games\DotNetZip-2rz2stpe.tmp to %ALLUSERSPROFILE%\Start Menu\Programs\Games\Games-gusjf.zip
from %ALLUSERSPROFILE%\Templates\DotNetZip-kqczkm5n.tmp to %ALLUSERSPROFILE%\Templates\Templates-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\DotNetZip-bssmxrid.tmp to C:\Documents and Settings\Default User\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Application Data\DotNetZip-htk4yu0j.tmp to C:\Documents and Settings\Default User\Local Settings\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\DotNetZip-evvf2o3s.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\DotNetZip-e2zklntk.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Internet Explorer-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\DotNetZip-qpkxqpg3.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\Media Player-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\DotNetZip-0w2vxma1.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\SystemCertificates-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\DotNetZip-jafoi2ll.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\My-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-zejdnuru.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-johwieug.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs-gusjf.zip
from C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-j0eg5wpb.tmp to C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs-gusjf.zip
from C:\Documents and Settings\Default User\Cookies\DotNetZip-j35yzqmi.tmp to C:\Documents and Settings\Default User\Cookies\Cookies-gusjf.zip
from C:\Documents and Settings\Default User\Desktop\DotNetZip-3hopg4z4.tmp to C:\Documents and Settings\Default User\Desktop\Desktop-gusjf.zip
from C:\Documents and Settings\Default User\Favorites\DotNetZip-1e0iojiy.tmp to C:\Documents and Settings\Default User\Favorites\Favorites-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\DotNetZip-o2istel5.tmp to C:\Documents and Settings\Default User\Local Settings\Local Settings-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Videos\DotNetZip-hvod1rss.tmp to %ALLUSERSPROFILE%\Documents\My Videos\My Videos-gusjf.zip
from C:\Documents and Settings\Default User\DotNetZip-i5rhgkln.tmp to C:\Documents and Settings\Default User\Default User-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\DotNetZip-he53ft2i.tmp to %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sample Pictures-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\DotNetZip-35tqblxk.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\Media Index-gusjf.zip
from C:\Documents and Settings\DotNetZip-xdfrqeau.tmp to C:\Documents and Settings\Documents and Settings-gusjf.zip
from %ALLUSERSPROFILE%\DotNetZip-gcjthw1u.tmp to %ALLUSERSPROFILE%\All Users-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\DotNetZip-w2vummcx.tmp to %ALLUSERSPROFILE%\Application Data\Application Data-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\DotNetZip-3aiqkn1g.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Microsoft-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DotNetZip-2wbxefg4.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\Crypto-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\DotNetZip-2qjicm3k.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\DSS-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\DotNetZip-q4ragx1k.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\MachineKeys-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\DotNetZip-qgfwsh0a.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\RSA-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\DotNetZip-kgb53e4o.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\MachineKeys-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\DotNetZip-05420wsd.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\S-1-5-18-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\DotNetZip-nemsador.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\Dr Watson-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\DotNetZip-1ssg4x12.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\HTML Help-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\DotNetZip-oi0150vp.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\Media Player-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\DotNetZip-qsaipjx3.tmp to %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\0338E140-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Network\DotNetZip-pwrm00pn.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Network-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\DotNetZip-5tvgd4yz.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Connections-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\DotNetZip-wojhtqjy.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\Cm-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\DotNetZip-ntrphnml.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\Pbk-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\DotNetZip-ohuz15jf.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\User Account Pictures-gusjf.zip
from %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\DotNetZip-xqihorqa.tmp to %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\Default Pictures-gusjf.zip
from %ALLUSERSPROFILE%\Desktop\DotNetZip-mawtnj2e.tmp to %ALLUSERSPROFILE%\Desktop\Desktop-gusjf.zip
from %ALLUSERSPROFILE%\Documents\DotNetZip-whn31gb5.tmp to %ALLUSERSPROFILE%\Documents\Documents-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Music\DotNetZip-jojt0lvz.tmp to %ALLUSERSPROFILE%\Documents\My Music\My Music-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Music\My Playlists\DotNetZip-ur5qpgq2.tmp to %ALLUSERSPROFILE%\Documents\My Music\My Playlists\My Playlists-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Music\Sample Music\DotNetZip-1cx1zkcl.tmp to %ALLUSERSPROFILE%\Documents\My Music\Sample Music\Sample Music-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\DotNetZip-00xtwmkq.tmp to %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\Sample Playlists-gusjf.zip
from %ALLUSERSPROFILE%\Documents\My Pictures\DotNetZip-wpdcbvnf.tmp to %ALLUSERSPROFILE%\Documents\My Pictures\My Pictures-gusjf.zip
from C:\Documents and Settings\Default User\Recent\DotNetZip-uacuryf1.tmp to C:\Documents and Settings\Default User\Recent\Recent-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\DotNetZip-y3qq01ag.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\Media Player-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\DotNetZip-e3ry4pgw.tmp to C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\Windows Media-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\DotNetZip-srvao2yd.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\My-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\DotNetZip-1ls5if0q.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\DotNetZip-yhfkn4i5.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\DotNetZip-uhpthw2a.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs-gusjf.zip
from C:\Documents and Settings\LocalService\Cookies\DotNetZip-arrkczn1.tmp to C:\Documents and Settings\LocalService\Cookies\Cookies-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\DotNetZip-plkfinm5.tmp to C:\Documents and Settings\LocalService\Local Settings\Local Settings-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Application Data\DotNetZip-gpdontjv.tmp to C:\Documents and Settings\LocalService\Local Settings\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\DotNetZip-ulust514.tmp to C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\DotNetZip-liiv3bgg.tmp to C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\Credentials-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\DotNetZip-3z1pr54g.tmp to C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\S-1-5-19-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\DotNetZip-3kcvmds0.tmp to C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\Windows-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\History\DotNetZip-sx4rzrjo.tmp to C:\Documents and Settings\LocalService\Local Settings\History\History-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\Temp\DotNetZip-nqwev1yq.tmp to C:\Documents and Settings\LocalService\Local Settings\Temp\Temp-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\DotNetZip-va34qe5q.tmp to C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\Media Player-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\DotNetZip-ps5ly5qe.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\<INETFILES>-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\DotNetZip-ri0bnzbn.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\Content.IE5-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\DotNetZip-3hqgslrj.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\BGGTYMH1-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\DotNetZip-cnd1piqn.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\CJCTQ25G-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\DotNetZip-stztc11d.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\LBMMC3H3-gusjf.zip
from C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\DotNetZip-icikwtqo.tmp to C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\MOE00UY1-gusjf.zip
from C:\Documents and Settings\NetworkService\DotNetZip-5iayjda4.tmp to C:\Documents and Settings\NetworkService\NetworkService-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\DotNetZip-oqyiht0p.tmp to C:\Documents and Settings\NetworkService\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\DotNetZip-rxohtidh.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\DotNetZip-nqxxqi2q.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\Credentials-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\DotNetZip-hglttn2e.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\S-1-5-20-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\DotNetZip-noeji3gt.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\Internet Explorer-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\DotNetZip-ec2x21cr.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\SystemCertificates-gusjf.zip
from C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\DotNetZip-oiwnfk4k.tmp to C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\SystemCertificates-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\DotNetZip-s3mmye1g.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\Media Player-gusjf.zip
from C:\Documents and Settings\Default User\PrintHood\DotNetZip-smjwshmo.tmp to C:\Documents and Settings\Default User\PrintHood\PrintHood-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\DotNetZip-eqxchlzb.tmp to C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\9.0-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\History\DotNetZip-5r2hincz.tmp to C:\Documents and Settings\Default User\Local Settings\History\History-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\History\History.IE5\DotNetZip-3nnibkyw.tmp to C:\Documents and Settings\Default User\Local Settings\History\History.IE5\History.IE5-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Temp\DotNetZip-0lqlqg2r.tmp to C:\Documents and Settings\Default User\Local Settings\Temp\Temp-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\DotNetZip-dh23gnpg.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\<INETFILES>-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\DotNetZip-sd10lbfs.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\Content.IE5-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\DotNetZip-mcvlsse5.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\2VAZY7AN-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\DotNetZip-13ud4g24.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\KHMHGZ4F-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\DotNetZip-ylbfpdao.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\U98D4X8H-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\DotNetZip-youlmgys.tmp to C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\YPORKZYZ-gusjf.zip
from C:\Documents and Settings\Default User\My Documents\DotNetZip-3ysqqlat.tmp to C:\Documents and Settings\Default User\My Documents\My Documents-gusjf.zip
from C:\Documents and Settings\Default User\NetHood\DotNetZip-irwhw1e0.tmp to C:\Documents and Settings\Default User\NetHood\NetHood-gusjf.zip
from C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\DotNetZip-2dk3suq0.tmp to C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\DotNetZip-oiukuxk2.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\S-1-5-19-gusjf.zip
from C:\Documents and Settings\Default User\SendTo\DotNetZip-zpukte3p.tmp to C:\Documents and Settings\Default User\SendTo\SendTo-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\DotNetZip-4bj2jmii.tmp to C:\Documents and Settings\Default User\Start Menu\Start Menu-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\Programs\DotNetZip-gklku34u.tmp to C:\Documents and Settings\Default User\Start Menu\Programs\Programs-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\DotNetZip-2mwfignp.tmp to C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessories-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\DotNetZip-rqj3ggxq.tmp to C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\Accessibility-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\DotNetZip-1n4f54e1.tmp to C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\Entertainment-gusjf.zip
from C:\Documents and Settings\Default User\Start Menu\Programs\Startup\DotNetZip-omdkouxn.tmp to C:\Documents and Settings\Default User\Start Menu\Programs\Startup\Startup-gusjf.zip
from C:\Documents and Settings\Default User\Templates\DotNetZip-oh4gn2j2.tmp to C:\Documents and Settings\Default User\Templates\Templates-gusjf.zip
from C:\Documents and Settings\LocalService\DotNetZip-x0h4aro4.tmp to C:\Documents and Settings\LocalService\LocalService-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\DotNetZip-hgx4szkh.tmp to C:\Documents and Settings\LocalService\Application Data\Application Data-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\DotNetZip-beqwpjdb.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\Microsoft-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\DotNetZip-zogtjgag.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\Credentials-gusjf.zip
from C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\DotNetZip-w10y55yp.tmp to C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\Internet Explorer-gusjf.zip
from C:\Far2\Addons\Shell\DotNetZip-br5gwfv1.tmp to C:\Far2\Addons\Shell\Shell-gusjf.zip

Modifies user data files (Trojan.Encoder).

Miscellaneous:

Executes the following:

'<SYSTEM32>\cmd.exe' /C net view
'<SYSTEM32>\net.exe' view

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial