Trojan.Encoder.30969

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'WindowsUpdateCheck' = '<Full path to file>'

Infects the following executable files

%ProgramFiles%\internet explorer\ieproxy.dll.system32x

Creates the following files on removable media

<Drive name for removable media>:\!!instructions!!.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\sdszfo.docx
<Drive name for removable media>:\adhd_and_obesity.docx
<Drive name for removable media>:\glidescope_review_rev_010.docx
<Drive name for removable media>:\fi51.doc
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\hanni_umami_chapter.doc
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\testee.cer
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\toolbar.bmp
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe

Modifies file system

Creates the following files

%PROGRAMDATA%\!!instructions!!.exe
%ProgramFiles%\swagent\!!instructions!!.exe
%ProgramFiles%\swdoctor\!!instructions!!.exe
%ProgramFiles%\swdsvc\!!instructions!!.exe
%ProgramFiles%\sweb\!!instructions!!.exe
%ProgramFiles%\swriter\!!instructions!!.exe
%ProgramFiles%\symantecrootinstaller\!!instructions!!.exe
%ProgramFiles%\symlcsvc\!!instructions!!.exe
%ProgramFiles%\symproxysvc\!!instructions!!.exe
%ProgramFiles%\symsport\!!instructions!!.exe
%ProgramFiles%\so3d\!!instructions!!.exe
%ProgramFiles%\symwsc\!!instructions!!.exe
%ProgramFiles%\tbmon\!!instructions!!.exe
%ProgramFiles%\tca\!!instructions!!.exe
%ProgramFiles%\teatimer\!!instructions!!.exe
%ProgramFiles%\tgsvcstp\!!instructions!!.exe
%ProgramFiles%\thebat\!!instructions!!.exe
%ProgramFiles%\thgnard\!!instructions!!.exe
%ProgramFiles%\thunderbird\!!instructions!!.exe
%ProgramFiles%\tmas\!!instructions!!.exe
%ProgramFiles%\tmlisten\!!instructions!!.exe
%ProgramFiles%\submitfiles\!!instructions!!.exe
%ProgramFiles%\svcntaux\!!instructions!!.exe
%ProgramFiles%\streetsolkshim\!!instructions!!.exe
%ProgramFiles%\stopsignav\!!instructions!!.exe
%ProgramFiles%\start_diag\!!instructions!!.exe
%ProgramFiles%\sigtool\!!instructions!!.exe
%ProgramFiles%\simpress\!!instructions!!.exe
%ProgramFiles%\sitecli\!!instructions!!.exe
%ProgramFiles%\skype\!!instructions!!.exe
%ProgramFiles%\skypepm\!!instructions!!.exe
%ProgramFiles%\smartftp\!!instructions!!.exe
%ProgramFiles%\smath\!!instructions!!.exe
%ProgramFiles%\smc\!!instructions!!.exe
%ProgramFiles%\sndsrvc\!!instructions!!.exe
%ProgramFiles%\tmntsrv\!!instructions!!.exe
%ProgramFiles%\sysinfo\!!instructions!!.exe
%ProgramFiles%\sniffer\!!instructions!!.exe
%ProgramFiles%\spamcfg\!!instructions!!.exe
%ProgramFiles%\spbbcsvc\!!instructions!!.exe
%ProgramFiles%\spider\!!instructions!!.exe
%ProgramFiles%\spiderml\!!instructions!!.exe
%ProgramFiles%\spidernt\!!instructions!!.exe
%ProgramFiles%\spiderui\!!instructions!!.exe
%ProgramFiles%\sporder\!!instructions!!.exe
%ProgramFiles%\spybotsd\!!instructions!!.exe
%ProgramFiles%\sro_client\!!instructions!!.exe
%ProgramFiles%\sfagent\!!instructions!!.exe
%ProgramFiles%\soffice\!!instructions!!.exe
%ProgramFiles%\uninstallcavs\!!instructions!!.exe
%ProgramFiles%\wclose\!!instructions!!.exe
%ProgramFiles%\tnbutil\!!instructions!!.exe
%ProgramFiles%\vba32ldr\!!instructions!!.exe
%ProgramFiles%\vba32pp3\!!instructions!!.exe
%ProgramFiles%\vbsntw\!!instructions!!.exe
%ProgramFiles%\vchk\!!instructions!!.exe
%ProgramFiles%\vcrmon\!!instructions!!.exe
%ProgramFiles%\vettray\!!instructions!!.exe
%ProgramFiles%\viritexp\!!instructions!!.exe
%ProgramFiles%\viritsvc\!!instructions!!.exe
%ProgramFiles%\viruskeeper\!!instructions!!.exe
%ProgramFiles%\tmpfw\!!instructions!!.exe
%ProgramFiles%\virusnews\!!instructions!!.exe
%ProgramFiles%\visthlic\!!instructions!!.exe
%ProgramFiles%\visthupd\!!instructions!!.exe
%ProgramFiles%\vrfwsvc\!!instructions!!.exe
%ProgramFiles%\vrmonsvc\!!instructions!!.exe
%ProgramFiles%\vrrw32\!!instructions!!.exe
%ProgramFiles%\vshwin32\!!instructions!!.exe
%ProgramFiles%\vsmon\!!instructions!!.exe
%ProgramFiles%\vsserv\!!instructions!!.exe
%ProgramFiles%\vsstat\!!instructions!!.exe
%ProgramFiles%\vba32ecm\!!instructions!!.exe
%ProgramFiles%\vba32ifs\!!instructions!!.exe
%ProgramFiles%\uupd\!!instructions!!.exe
%ProgramFiles%\usdownloader\!!instructions!!.exe
%ProgramFiles%\upsobmaker\!!instructions!!.exe
%ProgramFiles%\tracelog\!!instructions!!.exe
%ProgramFiles%\traymon\!!instructions!!.exe
%ProgramFiles%\trillian\!!instructions!!.exe
%ProgramFiles%\trojanguarder\!!instructions!!.exe
%ProgramFiles%\trojanhunter\!!instructions!!.exe
%ProgramFiles%\trtddptr\!!instructions!!.exe
%ProgramFiles%\twelvesky2\!!instructions!!.exe
%ProgramFiles%\uiscan\!!instructions!!.exe
%ProgramFiles%\una\!!instructions!!.exe
%ProgramFiles%\tmproxy\!!instructions!!.exe
%ProgramFiles%\seccenter\!!instructions!!.exe
%ProgramFiles%\uninstall information\!!instructions!!.exe
%ProgramFiles%\uninstalllsp\!!instructions!!.exe
%ProgramFiles%\unoinfo\!!instructions!!.exe
%ProgramFiles%\unopkg\!!instructions!!.exe
%ProgramFiles%\unp_test\!!instructions!!.exe
%ProgramFiles%\up2date\!!instructions!!.exe
%ProgramFiles%\updater\!!instructions!!.exe
%ProgramFiles%\updaterui\!!instructions!!.exe
%ProgramFiles%\updclient\!!instructions!!.exe
%ProgramFiles%\upgrepl\!!instructions!!.exe
%ProgramFiles%\totalcmd\!!instructions!!.exe
%ProgramFiles%\uninstaller\!!instructions!!.exe
%ProgramFiles%\vistaux\!!instructions!!.exe
%ProgramFiles%\seamonkey\!!instructions!!.exe
%ProgramFiles%\savprogress\!!instructions!!.exe
%ProgramFiles%\pm\!!instructions!!.exe
%ProgramFiles%\pm8flash\!!instructions!!.exe
%ProgramFiles%\pmagic\!!instructions!!.exe
%ProgramFiles%\pmagic9x\!!instructions!!.exe
%ProgramFiles%\pmagicbt\!!instructions!!.exe
%ProgramFiles%\pmagicnt\!!instructions!!.exe
%ProgramFiles%\polutil\!!instructions!!.exe
%ProgramFiles%\postinstall\!!instructions!!.exe
%ProgramFiles%\ppfw\!!instructions!!.exe
%ProgramFiles%\partinfo\!!instructions!!.exe
%ProgramFiles%\pqboot32\!!instructions!!.exe
%ProgramFiles%\pqpe\!!instructions!!.exe
%ProgramFiles%\pqpe9x\!!instructions!!.exe
%ProgramFiles%\pqpent\!!instructions!!.exe
%ProgramFiles%\preconfig\!!instructions!!.exe
%ProgramFiles%\preupd\!!instructions!!.exe
%ProgramFiles%\prevsrv\!!instructions!!.exe
%ProgramFiles%\prevxsetup\!!instructions!!.exe
%ProgramFiles%\privatebrowser\!!instructions!!.exe
%ProgramFiles%\processviewer\!!instructions!!.exe
%ProgramFiles%\pertsk\!!instructions!!.exe
%ProgramFiles%\pidgin\!!instructions!!.exe
%ProgramFiles%\pctav\!!instructions!!.exe
%ProgramFiles%\pcctlcom\!!instructions!!.exe
%ProgramFiles%\pccpfw\!!instructions!!.exe
%ProgramFiles%\ofcpfwsvc\!!instructions!!.exe
%ProgramFiles%\oget\!!instructions!!.exe
%ProgramFiles%\oladdin\!!instructions!!.exe
%ProgramFiles%\onaccessinstaller\!!instructions!!.exe
%ProgramFiles%\opera\!!instructions!!.exe
%ProgramFiles%\oscheck\!!instructions!!.exe
%ProgramFiles%\outlook\!!instructions!!.exe
%ProgramFiles%\outpost\!!instructions!!.exe
%ProgramFiles%\partin\!!instructions!!.exe
%ProgramFiles%\protect\!!instructions!!.exe
%ProgramFiles%\pqbw\!!instructions!!.exe
%ProgramFiles%\partin9x\!!instructions!!.exe
%ProgramFiles%\pavfires\!!instructions!!.exe
%ProgramFiles%\pavfnsvr\!!instructions!!.exe
%ProgramFiles%\pavkre\!!instructions!!.exe
%ProgramFiles%\pavprot\!!instructions!!.exe
%ProgramFiles%\pavproxy\!!instructions!!.exe
%ProgramFiles%\pavprsrv\!!instructions!!.exe
%ProgramFiles%\pavsrv51\!!instructions!!.exe
%ProgramFiles%\pccguide\!!instructions!!.exe
%ProgramFiles%\pccntmon\!!instructions!!.exe
%ProgramFiles%\oaui\!!instructions!!.exe
%ProgramFiles%\partinnt\!!instructions!!.exe
%ProgramFiles%\qrtfix\!!instructions!!.exe
%ProgramFiles%\sdraw\!!instructions!!.exe
%ProgramFiles%\pshost\!!instructions!!.exe
%ProgramFiles%\rfwmain\!!instructions!!.exe
%ProgramFiles%\rq\!!instructions!!.exe
%ProgramFiles%\rtvscan\!!instructions!!.exe
%ProgramFiles%\rulaunch\!!instructions!!.exe
%ProgramFiles%\runsetup\!!instructions!!.exe
%ProgramFiles%\safari\!!instructions!!.exe
%ProgramFiles%\sarcli\!!instructions!!.exe
%ProgramFiles%\sargui\!!instructions!!.exe
%ProgramFiles%\savadminservice\!!instructions!!.exe
%ProgramFiles%\ps\!!instructions!!.exe
%ProgramFiles%\savmain\!!instructions!!.exe
%ProgramFiles%\savscan\!!instructions!!.exe
%ProgramFiles%\sbase\!!instructions!!.exe
%ProgramFiles%\scalc\!!instructions!!.exe
%ProgramFiles%\scanner\!!instructions!!.exe
%ProgramFiles%\scanningprocess\!!instructions!!.exe
%ProgramFiles%\sched\!!instructions!!.exe
%ProgramFiles%\sdhelp\!!instructions!!.exe
%ProgramFiles%\sdinvoker\!!instructions!!.exe
%ProgramFiles%\sdloader\!!instructions!!.exe
%ProgramFiles%\remover\!!instructions!!.exe
%ProgramFiles%\rescue\!!instructions!!.exe
%ProgramFiles%\removeit\!!instructions!!.exe
%ProgramFiles%\register\!!instructions!!.exe
%ProgramFiles%\reference assemblies\!!instructions!!.exe
%ProgramFiles%\pxagent\!!instructions!!.exe
%ProgramFiles%\pxconsole\!!instructions!!.exe
%ProgramFiles%\pxl\!!instructions!!.exe
%ProgramFiles%\pxl1\!!instructions!!.exe
%ProgramFiles%\pxreset\!!instructions!!.exe
%ProgramFiles%\pxsupport\!!instructions!!.exe
%ProgramFiles%\python\!!instructions!!.exe
%ProgramFiles%\qhwscsvc\!!instructions!!.exe
%ProgramFiles%\qip\!!instructions!!.exe
%ProgramFiles%\psctrls\!!instructions!!.exe
%ProgramFiles%\sdtrayapp\!!instructions!!.exe
%ProgramFiles%\qklez\!!instructions!!.exe
%ProgramFiles%\quickstart\!!instructions!!.exe
%ProgramFiles%\ragexe\!!instructions!!.exe
%ProgramFiles%\ragfree\!!instructions!!.exe
%ProgramFiles%\rapget\!!instructions!!.exe
%ProgramFiles%\rat\!!instructions!!.exe
%ProgramFiles%\ravmon\!!instructions!!.exe
%ProgramFiles%\ravtimer\!!instructions!!.exe
%ProgramFiles%\rcimlby\!!instructions!!.exe
%ProgramFiles%\realmon\!!instructions!!.exe
%ProgramFiles%\psimsvc\!!instructions!!.exe
%ProgramFiles%\quaranti\!!instructions!!.exe
%ProgramFiles%\webfiltr\!!instructions!!.exe
%ProgramFiles%\webmoney\!!instructions!!.exe
%ProgramFiles%\webproxy\!!instructions!!.exe
C:\documents and settings\user\pictures\!!instructions!!.exe
C:\documents and settings\user\printhood\!!instructions!!.exe
C:\documents and settings\user\recent\!!instructions!!.exe
C:\documents and settings\user\saved games\!!instructions!!.exe
C:\documents and settings\user\searches\!!instructions!!.exe
C:\documents and settings\user\sendto\!!instructions!!.exe
C:\documents and settings\user\start menu\!!instructions!!.exe
C:\documents and settings\user\templates\!!instructions!!.exe
C:\documents and settings\public\pictures\!!instructions!!.exe
C:\documents and settings\user\videos\!!instructions!!.exe
C:\far2\addons\colors\!!instructions!!.exe
C:\far2\addons\macros\!!instructions!!.exe
C:\far2\addons\setup\!!instructions!!.exe
C:\far2\addons\shell\!!instructions!!.exe
C:\far2\addons\xlat\!!instructions!!.exe
C:\far2\documentation\eng\!!instructions!!.exe
C:\far2\documentation\rus\!!instructions!!.exe
C:\far2\encyclopedia\tap\!!instructions!!.exe
C:\far2\plugins\align\!!instructions!!.exe
C:\documents and settings\user\nethood\!!instructions!!.exe
C:\documents and settings\user\voip\!!instructions!!.exe
C:\documents and settings\user\ntuser.pol.system32x
C:\documents and settings\user\ntuser.ini.system32x
C:\documents and settings\user\music\!!instructions!!.exe
C:\documents and settings\user\local settings\!!instructions!!.exe
C:\documents and settings\default\saved games\!!instructions!!.exe
C:\documents and settings\default\sendto\!!instructions!!.exe
C:\documents and settings\default\start menu\!!instructions!!.exe
C:\documents and settings\default\templates\!!instructions!!.exe
C:\documents and settings\default\videos\!!instructions!!.exe
C:\documents and settings\public\desktop.ini.system32x
C:\documents and settings\public\downloads\!!instructions!!.exe
C:\documents and settings\public\libraries\!!instructions!!.exe
C:\far2\plugins\arclite\!!instructions!!.exe
C:\documents and settings\public\music\!!instructions!!.exe
C:\documents and settings\default\pictures\!!instructions!!.exe
C:\documents and settings\public\recorded tv\!!instructions!!.exe
C:\documents and settings\user\appdata\!!instructions!!.exe
C:\documents and settings\user\application data\!!instructions!!.exe
C:\documents and settings\user\contacts\!!instructions!!.exe
C:\documents and settings\user\cookies\!!instructions!!.exe
C:\documents and settings\user\desktop\!!instructions!!.exe
C:\documents and settings\user\documents\!!instructions!!.exe
C:\documents and settings\user\downloads\!!instructions!!.exe
C:\documents and settings\user\favorites\!!instructions!!.exe
C:\documents and settings\default\printhood\!!instructions!!.exe
C:\documents and settings\user\links\!!instructions!!.exe
C:\documents and settings\public\videos\!!instructions!!.exe
C:\documents and settings\default\recent\!!instructions!!.exe
C:\far2\plugins\autowrap\!!instructions!!.exe
C:\far2\plugins\editcase\!!instructions!!.exe
%CommonProgramFiles%\microsoft shared\!!instructions!!.exe
%CommonProgramFiles%\services\!!instructions!!.exe
%CommonProgramFiles%\speechengines\!!instructions!!.exe
%CommonProgramFiles%\system\!!instructions!!.exe
%ProgramFiles%\dvd maker\en-us\!!instructions!!.exe
%ProgramFiles%\dvd maker\shared\!!instructions!!.exe
%ProgramFiles%\firefox\chrome\!!instructions!!.exe
%ProgramFiles%\firefox\components\!!instructions!!.exe
%ProgramFiles%\internet explorer\en-us\!!instructions!!.exe
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%ProgramFiles%\internet explorer\signup\!!instructions!!.exe
%ProgramFiles%\microsoft analysis services\as oledb\!!instructions!!.exe
%ProgramFiles%\microsoft office\clipart\!!instructions!!.exe
%ProgramFiles%\microsoft office\document themes 14\!!instructions!!.exe
%ProgramFiles%\microsoft office\media\!!instructions!!.exe
%ProgramFiles%\microsoft office\office14\!!instructions!!.exe
%ProgramFiles%\microsoft office\stationery\!!instructions!!.exe
%ProgramFiles%\microsoft office\templates\!!instructions!!.exe
%ProgramFiles%\microsoft sql server compact edition\v3.5\!!instructions!!.exe
%ProgramFiles%\microsoft sync framework\v1.0\!!instructions!!.exe
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%CommonProgramFiles%\designer\!!instructions!!.exe
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%ProgramFiles%\microsoft synchronization services\ado.net\!!instructions!!.exe
C:\far2\plugins\emenu\!!instructions!!.exe
C:\far2\plugins\farcmds\!!instructions!!.exe
C:\far2\plugins\filecase\!!instructions!!.exe
C:\far2\plugins\ftp\!!instructions!!.exe
C:\far2\plugins\hlfviewer\!!instructions!!.exe
C:\far2\plugins\macroview\!!instructions!!.exe
C:\far2\plugins\network\!!instructions!!.exe
C:\far2\plugins\proclist\!!instructions!!.exe
C:\far2\plugins\brackets\!!instructions!!.exe
C:\far2\plugins\drawline\!!instructions!!.exe
C:\far2\plugins\compare\!!instructions!!.exe
C:\far2\plugins\tmppanel\!!instructions!!.exe
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\far2\pluginsdk\headers.c\!!instructions!!.exe
C:\far2\pluginsdk\headers.pas\!!instructions!!.exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.system32x
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.system32x
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.system32x
%ProgramFiles%\writespid\!!instructions!!.exe
%ProgramFiles%\wsctool\!!instructions!!.exe
%ProgramFiles%\wsftpgui\!!instructions!!.exe
%ProgramFiles%\wsm\!!instructions!!.exe
%ProgramFiles%\xcommsvr\!!instructions!!.exe
%ProgramFiles%\yahoomessenger\!!instructions!!.exe
%ProgramFiles%\yahoosync\!!instructions!!.exe
%ProgramFiles%\ybclient\!!instructions!!.exe
%ProgramFiles%\ymsgr_tray\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft office\!!instructions!!.exe
%ProgramFiles%\zapro\!!instructions!!.exe
%ProgramFiles%\zauninst\!!instructions!!.exe
%ProgramFiles%\zlclient\!!instructions!!.exe
%ProgramFiles%\zonealarm\!!instructions!!.exe
%ProgramFiles(x86)%\adobe\!!instructions!!.exe
%CommonProgramFiles(x86)%\!!instructions!!.exe
%ProgramFiles(x86)%\google\!!instructions!!.exe
%ProgramFiles(x86)%\internet explorer\!!instructions!!.exe
%ProgramFiles(x86)%\k-lite codec pack\!!instructions!!.exe
%ProgramFiles%\wow\!!instructions!!.exe
%ProgramFiles%\woool\!!instructions!!.exe
%ProgramFiles%\wrctrl\!!instructions!!.exe
%ProgramFiles%\wltuser\!!instructions!!.exe
%ProgramFiles%\wlmail\!!instructions!!.exe
%ProgramFiles%\webscanx\!!instructions!!.exe
%ProgramFiles%\winaw32\!!instructions!!.exe
%ProgramFiles%\winbaram\!!instructions!!.exe
%ProgramFiles%\wincmd32\!!instructions!!.exe
%ProgramFiles%\windowlist\!!instructions!!.exe
%ProgramFiles%\windows defender\!!instructions!!.exe
%ProgramFiles%\windows journal\!!instructions!!.exe
%ProgramFiles%\windows mail\!!instructions!!.exe
%ProgramFiles%\windows media player\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft analysis services\!!instructions!!.exe
%ProgramFiles%\windows nt\!!instructions!!.exe
%ProgramFiles%\zatutor\!!instructions!!.exe
%ProgramFiles%\windows portable devices\!!instructions!!.exe
%ProgramFiles%\windump\!!instructions!!.exe
%ProgramFiles%\winmail\!!instructions!!.exe
%ProgramFiles%\winrar\!!instructions!!.exe
%ProgramFiles%\winroute\!!instructions!!.exe
%ProgramFiles%\winss\!!instructions!!.exe
%ProgramFiles%\winssnotify\!!instructions!!.exe
%ProgramFiles%\wish\!!instructions!!.exe
%ProgramFiles%\wlloginproxy\!!instructions!!.exe
%ProgramFiles%\windows photo viewer\!!instructions!!.exe
%ProgramFiles%\wil\!!instructions!!.exe
%ProgramFiles%\windows sidebar\!!instructions!!.exe
%ProgramFiles%\wradmin\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft visual studio .net 2003\!!instructions!!.exe
%PROGRAMDATA%\mozilla\!!instructions!!.exe
%PROGRAMDATA%\package cache\!!instructions!!.exe
%PROGRAMDATA%\start menu\!!instructions!!.exe
%PROGRAMDATA%\sun\!!instructions!!.exe
%PROGRAMDATA%\templates\!!instructions!!.exe
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\!!instructions!!.exe
C:\system volume information\spp\!!instructions!!.exe
C:\totalcmd\language\!!instructions!!.exe
C:\documents and settings\default\appdata\!!instructions!!.exe
%PROGRAMDATA%\microsoft toolkit\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft visual studio 8\!!instructions!!.exe
%PROGRAMDATA%\oracle\!!instructions!!.exe
C:\documents and settings\default\application data\!!instructions!!.exe
C:\documents and settings\default\downloads\!!instructions!!.exe
C:\documents and settings\default\favorites\!!instructions!!.exe
C:\documents and settings\default\links\!!instructions!!.exe
C:\documents and settings\default\local settings\!!instructions!!.exe
C:\documents and settings\default\music\!!instructions!!.exe
C:\documents and settings\default\nethood\!!instructions!!.exe
C:\documents and settings\default\ntuser.dat.log.system32x
C:\documents and settings\default\ntuser.dat.log1.system32x
C:\documents and settings\default\cookies\!!instructions!!.exe
C:\documents and settings\default\desktop\!!instructions!!.exe
C:\documents and settings\default\documents\!!instructions!!.exe
%ProgramFiles(x86)%\winamp\!!instructions!!.exe
%ProgramFiles%\oasrv\!!instructions!!.exe
%PROGRAMDATA%\favorites\!!instructions!!.exe
%ProgramFiles(x86)%\mirc\!!instructions!!.exe
%ProgramFiles(x86)%\mozilla firefox\!!instructions!!.exe
%ProgramFiles(x86)%\mozilla thunderbird\!!instructions!!.exe
%ProgramFiles(x86)%\msbuild\!!instructions!!.exe
%ProgramFiles(x86)%\opera\!!instructions!!.exe
%ProgramFiles(x86)%\pidgin\!!instructions!!.exe
%ProgramFiles(x86)%\qip 2012\!!instructions!!.exe
%ProgramFiles(x86)%\reference assemblies\!!instructions!!.exe
%ProgramFiles(x86)%\steam\!!instructions!!.exe
%PROGRAMDATA%\microsoft\!!instructions!!.exe
%PROGRAMDATA%\microsoft help\!!instructions!!.exe
%ProgramFiles(x86)%\uninstall information\!!instructions!!.exe
%ProgramFiles(x86)%\windows mail\!!instructions!!.exe
%ProgramFiles(x86)%\windows media player\!!instructions!!.exe
%ProgramFiles(x86)%\windows nt\!!instructions!!.exe
%ProgramFiles(x86)%\windows photo viewer\!!instructions!!.exe
%ProgramFiles(x86)%\windows portable devices\!!instructions!!.exe
%ProgramFiles(x86)%\windows sidebar\!!instructions!!.exe
%PROGRAMDATA%\adobe\!!instructions!!.exe
%PROGRAMDATA%\desktop\!!instructions!!.exe
%PROGRAMDATA%\documents\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft.net\!!instructions!!.exe
%ProgramFiles(x86)%\windows defender\!!instructions!!.exe
%ProgramFiles%\java\jre1.8.0_45\!!instructions!!.exe
%ProgramFiles%\nwservice\!!instructions!!.exe
%ProgramFiles%\npavtray\!!instructions!!.exe
%ProgramFiles%\cavmud\!!instructions!!.exe
%ProgramFiles%\cavoar\!!instructions!!.exe
%ProgramFiles%\cavq\!!instructions!!.exe
%ProgramFiles%\cavscons\!!instructions!!.exe
%ProgramFiles%\cavse\!!instructions!!.exe
%ProgramFiles%\cavsn\!!instructions!!.exe
%ProgramFiles%\cavsub\!!instructions!!.exe
%ProgramFiles%\cavsubmit\!!instructions!!.exe
%ProgramFiles%\cavumas\!!instructions!!.exe
%ProgramFiles%\bdsubmitwiz\!!instructions!!.exe
%ProgramFiles%\cavuserupd\!!instructions!!.exe
%ProgramFiles%\ccapp\!!instructions!!.exe
%ProgramFiles%\ccevtmgr\!!instructions!!.exe
%ProgramFiles%\ccleaner\!!instructions!!.exe
%ProgramFiles%\ccproxy\!!instructions!!.exe
%ProgramFiles%\ccsetmgr\!!instructions!!.exe
%ProgramFiles%\cemrep\!!instructions!!.exe
%ProgramFiles%\chrome\!!instructions!!.exe
%ProgramFiles%\clamscan\!!instructions!!.exe
%ProgramFiles%\clamtray\!!instructions!!.exe
%ProgramFiles%\cavemsrv\!!instructions!!.exe
%ProgramFiles%\cavmr\!!instructions!!.exe
%ProgramFiles%\cavaud\!!instructions!!.exe
%ProgramFiles%\cavasm\!!instructions!!.exe
%ProgramFiles%\cavapp\!!instructions!!.exe
%ProgramFiles%\avscan\!!instructions!!.exe
%ProgramFiles%\avsynmgr\!!instructions!!.exe
%ProgramFiles%\b2\!!instructions!!.exe
%ProgramFiles%\backweb-4476822\!!instructions!!.exe
%ProgramFiles%\bdagent\!!instructions!!.exe
%ProgramFiles%\bdmcon\!!instructions!!.exe
%ProgramFiles%\bdnews\!!instructions!!.exe
%ProgramFiles%\bdoesrv\!!instructions!!.exe
%ProgramFiles%\bdss\!!instructions!!.exe
%ProgramFiles%\clamwin\!!instructions!!.exe
%ProgramFiles%\cavvl\!!instructions!!.exe
%ProgramFiles%\bdsubmit\!!instructions!!.exe
%ProgramFiles%\bdswitch\!!instructions!!.exe
%ProgramFiles%\bdwizreg\!!instructions!!.exe
%ProgramFiles%\blackd\!!instructions!!.exe
%ProgramFiles%\blackice\!!instructions!!.exe
%ProgramFiles%\blindman\!!instructions!!.exe
%ProgramFiles%\btini\!!instructions!!.exe
%ProgramFiles%\btinint\!!instructions!!.exe
%ProgramFiles%\cabalmain\!!instructions!!.exe
%ProgramFiles%\cafix\!!instructions!!.exe
%ProgramFiles%\avpm\!!instructions!!.exe
%ProgramFiles%\bdsurvey\!!instructions!!.exe
%ProgramFiles%\custinstall\!!instructions!!.exe
%ProgramFiles%\f-sched\!!instructions!!.exe
%ProgramFiles%\cleaner\!!instructions!!.exe
%ProgramFiles%\drvmap\!!instructions!!.exe
%ProgramFiles%\drwadins\!!instructions!!.exe
%ProgramFiles%\drweb\!!instructions!!.exe
%ProgramFiles%\drweb32w\!!instructions!!.exe
%ProgramFiles%\drweb386\!!instructions!!.exe
%ProgramFiles%\drwebscd\!!instructions!!.exe
%ProgramFiles%\drwebupw\!!instructions!!.exe
%ProgramFiles%\drwebwcl\!!instructions!!.exe
%ProgramFiles%\drwreg\!!instructions!!.exe
%ProgramFiles%\claw95\!!instructions!!.exe
%ProgramFiles%\dvd maker\!!instructions!!.exe
%ProgramFiles%\egni\!!instructions!!.exe
%ProgramFiles%\ehsniffer\!!instructions!!.exe
%ProgramFiles%\ekrn\!!instructions!!.exe
%ProgramFiles%\elementclient\!!instructions!!.exe
%ProgramFiles%\etherd\!!instructions!!.exe
%ProgramFiles%\eudora\!!instructions!!.exe
%ProgramFiles%\ewidoctrl\!!instructions!!.exe
%ProgramFiles%\exit_av\!!instructions!!.exe
%ProgramFiles%\ezantivirusregistrationcheck\!!instructions!!.exe
%ProgramFiles%\drvctl\!!instructions!!.exe
%ProgramFiles%\drvirus\!!instructions!!.exe
%ProgramFiles%\dpatrolq\!!instructions!!.exe
%ProgramFiles%\dnf\!!instructions!!.exe
%ProgramFiles%\dislite\!!instructions!!.exe
%ProgramFiles%\clisvc\!!instructions!!.exe
%ProgramFiles%\clrcche\!!instructions!!.exe
%ProgramFiles%\cmain\!!instructions!!.exe
%ProgramFiles%\cmgrdian\!!instructions!!.exe
%CommonProgramFiles%\!!instructions!!.exe
%ProgramFiles%\copyx64\!!instructions!!.exe
%ProgramFiles%\courier\!!instructions!!.exe
%ProgramFiles%\cpd\!!instructions!!.exe
%ProgramFiles%\csendto\!!instructions!!.exe
%ProgramFiles%\claw95cf\!!instructions!!.exe
%ProgramFiles%\avpcc\!!instructions!!.exe
%ProgramFiles%\cssexc\!!instructions!!.exe
%ProgramFiles%\cuteftp\!!instructions!!.exe
%ProgramFiles%\dbconvert\!!instructions!!.exe
%ProgramFiles%\dbtool\!!instructions!!.exe
%ProgramFiles%\defensewall\!!instructions!!.exe
%ProgramFiles%\defwatch\!!instructions!!.exe
%ProgramFiles%\dekaron\!!instructions!!.exe
%ProgramFiles%\digsby\!!instructions!!.exe
%ProgramFiles%\digsby-app\!!instructions!!.exe
%ProgramFiles%\directftp\!!instructions!!.exe
%ProgramFiles%\cleaner3\!!instructions!!.exe
%ProgramFiles%\custsetup\!!instructions!!.exe
%ProgramFiles%\ecmd\!!instructions!!.exe
%ProgramFiles%\avnotify\!!instructions!!.exe
%ProgramFiles%\avgnpsvc\!!instructions!!.exe
%ProgramFiles%\a2scan\!!instructions!!.exe
%ProgramFiles%\a2service\!!instructions!!.exe
%ProgramFiles%\a2start\!!instructions!!.exe
%ProgramFiles%\a2upd\!!instructions!!.exe
%ProgramFiles%\a2wizard\!!instructions!!.exe
%ProgramFiles%\aavshield\!!instructions!!.exe
%ProgramFiles%\about\!!instructions!!.exe
%ProgramFiles%\ackwin32\!!instructions!!.exe
%ProgramFiles%\admunch\!!instructions!!.exe
C:\totalcmd\!!instructions!!.exe
%ProgramFiles%\agb5\!!instructions!!.exe
%ProgramFiles%\ahnsd\!!instructions!!.exe
%ProgramFiles%\aim6\!!instructions!!.exe
%ProgramFiles%\aimpro\!!instructions!!.exe
%ProgramFiles%\airdefense\!!instructions!!.exe
%ProgramFiles%\almon\!!instructions!!.exe
%ProgramFiles%\alsvc\!!instructions!!.exe
%ProgramFiles%\amon\!!instructions!!.exe
%ProgramFiles%\amsn\!!instructions!!.exe
%ProgramFiles%\anti-trojan\!!instructions!!.exe
%ProgramFiles%\a2guard\!!instructions!!.exe
%ProgramFiles%\a2hijackfree\!!instructions!!.exe
%ProgramFiles%\a2cmd\!!instructions!!.exe
%ProgramFiles%\360tray\!!instructions!!.exe
C:\msocache\all users\!!instructions!!.exe
D:\!!instructions!!.exe
C:\!!instructions!!.exe
C:\documents and settings\!!instructions!!.exe
z:\!!instructions!!.exe
C:\far2\!!instructions!!.exe
<Current directory>\!!instructions!!.exe
C:\msocache\!!instructions!!.exe
%ProgramFiles%\!!instructions!!.exe
%ProgramFiles(x86)%\!!instructions!!.exe
%ProgramFiles%\antivirus\!!instructions!!.exe
%ProgramFiles%\ageofconan\!!instructions!!.exe
C:\recovery\!!instructions!!.exe
C:\documents and settings\desktop.ini.system32x
C:\documents and settings\public\!!instructions!!.exe
C:\documents and settings\user\!!instructions!!.exe
C:\far2\addons\!!instructions!!.exe
C:\far2\documentation\!!instructions!!.exe
C:\far2\encyclopedia\!!instructions!!.exe
C:\far2\fexcept\!!instructions!!.exe
C:\far2\plugins\!!instructions!!.exe
C:\far2\pluginsdk\!!instructions!!.exe
<Current directory>\ids.txt
C:\documents and settings\default\!!instructions!!.exe
%ProgramFiles%\ashserv\!!instructions!!.exe
%ProgramFiles%\avkservice\!!instructions!!.exe
%ProgramFiles%\armorsurf\!!instructions!!.exe
%ProgramFiles%\avcmd\!!instructions!!.exe
%ProgramFiles%\avconfig\!!instructions!!.exe
%ProgramFiles%\avconsol\!!instructions!!.exe
%ProgramFiles%\avgamsvr\!!instructions!!.exe
%ProgramFiles%\avgcc\!!instructions!!.exe
%ProgramFiles%\avgdiag\!!instructions!!.exe
%ProgramFiles%\avgemc\!!instructions!!.exe
%ProgramFiles%\avgfwsrv\!!instructions!!.exe
%ProgramFiles%\avginet\!!instructions!!.exe
%ProgramFiles%\aoltbserver\!!instructions!!.exe
%ProgramFiles%\avgnpdln\!!instructions!!.exe
%ProgramFiles%\avgrssvc\!!instructions!!.exe
%ProgramFiles%\avgscan\!!instructions!!.exe
%ProgramFiles%\avgupden\!!instructions!!.exe
%ProgramFiles%\avgupsvc\!!instructions!!.exe
%ProgramFiles%\avgvv\!!instructions!!.exe
%ProgramFiles%\avgw\!!instructions!!.exe
%ProgramFiles%\avgwizfw\!!instructions!!.exe
%ProgramFiles%\avinitnt\!!instructions!!.exe
%ProgramFiles%\avkserv\!!instructions!!.exe
%ProgramFiles%\avcenter\!!instructions!!.exe
%ProgramFiles%\avciman\!!instructions!!.exe
%ProgramFiles%\avadmin\!!instructions!!.exe
%ProgramFiles%\autotrace\!!instructions!!.exe
%ProgramFiles%\autostartexplorer\!!instructions!!.exe
%ProgramFiles%\ashavast\!!instructions!!.exe
%ProgramFiles%\ashavsrv\!!instructions!!.exe
%ProgramFiles%\ashchest\!!instructions!!.exe
%ProgramFiles%\ashdisp\!!instructions!!.exe
%ProgramFiles%\ashdug\!!instructions!!.exe
%ProgramFiles%\ashenhcd\!!instructions!!.exe
%ProgramFiles%\ashlogv\!!instructions!!.exe
%ProgramFiles%\ashmaisv\!!instructions!!.exe
%ProgramFiles%\ashpopwz\!!instructions!!.exe
%ProgramFiles%\armor2net\!!instructions!!.exe
%ProgramFiles%\avkwctl\!!instructions!!.exe
%ProgramFiles%\ashquick\!!instructions!!.exe
%ProgramFiles%\ashsimpl\!!instructions!!.exe
%ProgramFiles%\ashskpcc\!!instructions!!.exe
%ProgramFiles%\ashskpck\!!instructions!!.exe
%ProgramFiles%\ashupd\!!instructions!!.exe
%ProgramFiles%\ashwebsv\!!instructions!!.exe
%ProgramFiles%\ash_updatemediator\!!instructions!!.exe
%ProgramFiles%\aswregsvr\!!instructions!!.exe
%ProgramFiles%\aswupdsv\!!instructions!!.exe
%ProgramFiles%\autodown\!!instructions!!.exe
%ProgramFiles%\ash\!!instructions!!.exe
%ProgramFiles%\ashsimp2\!!instructions!!.exe
%ProgramFiles%\fameh32\!!instructions!!.exe
%ProgramFiles%\far\!!instructions!!.exe
%ProgramFiles%\fch32\!!instructions!!.exe
%ProgramFiles%\lpfw\!!instructions!!.exe
%ProgramFiles%\lucallbackproxy\!!instructions!!.exe
%ProgramFiles%\lucheck\!!instructions!!.exe
%ProgramFiles%\luconfig\!!instructions!!.exe
%ProgramFiles%\luinit\!!instructions!!.exe
%ProgramFiles%\luna\!!instructions!!.exe
%ProgramFiles%\luupdate\!!instructions!!.exe
%ProgramFiles%\magent\!!instructions!!.exe
%ProgramFiles%\isuac\!!instructions!!.exe
%ProgramFiles%\malwareremoval\!!instructions!!.exe
%ProgramFiles%\maxthon\!!instructions!!.exe
%ProgramFiles%\mcmnhdlr\!!instructions!!.exe
%ProgramFiles%\mcregwiz\!!instructions!!.exe
%ProgramFiles%\mcshield\!!instructions!!.exe
%ProgramFiles%\mcupdmgr\!!instructions!!.exe
%ProgramFiles%\mcvsshld\!!instructions!!.exe
%ProgramFiles%\memstring\!!instructions!!.exe
%ProgramFiles%\mfpmp\!!instructions!!.exe
%ProgramFiles%\microsoft analysis services\!!instructions!!.exe
%ProgramFiles%\liveupdate\!!instructions!!.exe
%ProgramFiles%\maplestory\!!instructions!!.exe
%ProgramFiles%\lotroclient\!!instructions!!.exe
%ProgramFiles%\logwatnt\!!instructions!!.exe
%ProgramFiles%\livesrv\!!instructions!!.exe
%ProgramFiles%\licmgr\!!instructions!!.exe
%ProgramFiles%\installlsp\!!instructions!!.exe
%ProgramFiles%\instlsp\!!instructions!!.exe
%ProgramFiles%\internet explorer\!!instructions!!.exe
%ProgramFiles%\iris\!!instructions!!.exe
%ProgramFiles%\iron\!!instructions!!.exe
%ProgramFiles%\isafe\!!instructions!!.exe
%ProgramFiles%\ispnews\!!instructions!!.exe
%ProgramFiles%\ispwdsvc\!!instructions!!.exe
%ProgramFiles%\microsoft office\!!instructions!!.exe
%ProgramFiles%\issvc\!!instructions!!.exe
%ProgramFiles%\inphasenxd\!!instructions!!.exe
%ProgramFiles%\itunes\!!instructions!!.exe
%ProgramFiles%\k-meleon\!!instructions!!.exe
%ProgramFiles%\kav\!!instructions!!.exe
%ProgramFiles%\kavmm\!!instructions!!.exe
%ProgramFiles%\kavpf\!!instructions!!.exe
%ProgramFiles%\kavpfw\!!instructions!!.exe
%ProgramFiles%\kavstart\!!instructions!!.exe
%ProgramFiles%\kavsvc\!!instructions!!.exe
%ProgramFiles%\konnekt\!!instructions!!.exe
%ProgramFiles%\installcavs\!!instructions!!.exe
%ProgramFiles%\launcher\!!instructions!!.exe
%ProgramFiles%\java\!!instructions!!.exe
%ProgramFiles%\installlicense\!!instructions!!.exe
%ProgramFiles%\microsoft sql server compact edition\!!instructions!!.exe
%ProgramFiles%\miranda32\!!instructions!!.exe
%ProgramFiles%\neowatchtray\!!instructions!!.exe
%ProgramFiles%\netstatviewer\!!instructions!!.exe
%ProgramFiles%\netxray\!!instructions!!.exe
%ProgramFiles%\nisoptui\!!instructions!!.exe
%ProgramFiles%\nod\!!instructions!!.exe
%ProgramFiles%\nod32\!!instructions!!.exe
%ProgramFiles%\nod32krn\!!instructions!!.exe
%ProgramFiles%\nod32kui\!!instructions!!.exe
%ProgramFiles%\notifyha\!!instructions!!.exe
%ProgramFiles%\navstub\!!instructions!!.exe
%ProgramFiles%\notstart\!!instructions!!.exe
%ProgramFiles%\npfmsg\!!instructions!!.exe
%ProgramFiles%\nsmdtr\!!instructions!!.exe
%ProgramFiles%\nssserv\!!instructions!!.exe
%ProgramFiles%\nsstray\!!instructions!!.exe
%ProgramFiles%\ntoskrnl\!!instructions!!.exe
%ProgramFiles%\ntrtscan\!!instructions!!.exe
%ProgramFiles%\ntxconfig\!!instructions!!.exe
%ProgramFiles%\nupgrade\!!instructions!!.exe
%ProgramFiles%\nvcod\!!instructions!!.exe
%ProgramFiles%\navwnt\!!instructions!!.exe
%ProgramFiles%\neowatchlog\!!instructions!!.exe
%ProgramFiles%\navw32\!!instructions!!.exe
%ProgramFiles%\navlu32\!!instructions!!.exe
%ProgramFiles%\nvcte\!!instructions!!.exe
%ProgramFiles%\miro\!!instructions!!.exe
%ProgramFiles%\monlite\!!instructions!!.exe
%ProgramFiles%\monsysnt\!!instructions!!.exe
%ProgramFiles%\mp3theater\!!instructions!!.exe
%ProgramFiles%\mp3toys\!!instructions!!.exe
%ProgramFiles%\mp3toystray\!!instructions!!.exe
%ProgramFiles%\mp3tray\!!instructions!!.exe
%ProgramFiles%\mpeng\!!instructions!!.exe
%ProgramFiles%\microsoft sync framework\!!instructions!!.exe
%ProgramFiles%\mir3game\!!instructions!!.exe
%ProgramFiles%\microsoft synchronization services\!!instructions!!.exe
%ProgramFiles%\mpftray\!!instructions!!.exe
%ProgramFiles%\msmpsvc\!!instructions!!.exe
%ProgramFiles%\msn6\!!instructions!!.exe
%ProgramFiles%\msnmsgr\!!instructions!!.exe
%ProgramFiles%\mva\!!instructions!!.exe
%ProgramFiles%\mvc\!!instructions!!.exe
%ProgramFiles%\myagtsvc\!!instructions!!.exe
%ProgramFiles%\myagttry\!!instructions!!.exe
%ProgramFiles%\navapsvc\!!instructions!!.exe
%ProgramFiles%\mpssvc\!!instructions!!.exe
%ProgramFiles%\msbuild\!!instructions!!.exe
%ProgramFiles%\msimn\!!instructions!!.exe
%ProgramFiles%\inouptng\!!instructions!!.exe
%ProgramFiles%\inotask\!!instructions!!.exe
%ProgramFiles%\inort\!!instructions!!.exe
%ProgramFiles%\fsbwsys\!!instructions!!.exe
%ProgramFiles%\fsdbuh\!!instructions!!.exe
%ProgramFiles%\fsdc\!!instructions!!.exe
%ProgramFiles%\fsdfwd\!!instructions!!.exe
%ProgramFiles%\fsdiag\!!instructions!!.exe
%ProgramFiles%\fsdiagui\!!instructions!!.exe
%ProgramFiles%\fsfwwsch\!!instructions!!.exe
%ProgramFiles%\fsfwwscr\!!instructions!!.exe
%ProgramFiles%\fsgetwab\!!instructions!!.exe
%ProgramFiles%\fsma32\!!instructions!!.exe
%ProgramFiles%\fsgk32\!!instructions!!.exe
%ProgramFiles%\fsguidll\!!instructions!!.exe
%ProgramFiles%\fsguiexe\!!instructions!!.exe
%ProgramFiles%\fshdll32\!!instructions!!.exe
%ProgramFiles%\fshelp\!!instructions!!.exe
%ProgramFiles%\fshotfix\!!instructions!!.exe
%ProgramFiles%\fsihcomp\!!instructions!!.exe
%ProgramFiles%\fsihs\!!instructions!!.exe
%ProgramFiles%\fslaunch\!!instructions!!.exe
%ProgramFiles%\fsavstrt\!!instructions!!.exe
%ProgramFiles%\fsavgui\!!instructions!!.exe
%ProgramFiles%\fsavwscr\!!instructions!!.exe
%ProgramFiles%\fsavaui\!!instructions!!.exe
%ProgramFiles%\fsav32\!!instructions!!.exe
%ProgramFiles%\fdm\!!instructions!!.exe
%ProgramFiles%\filezilla\!!instructions!!.exe
%ProgramFiles%\firebird\!!instructions!!.exe
%ProgramFiles%\firefox\!!instructions!!.exe
%ProgramFiles%\firesvc\!!instructions!!.exe
%ProgramFiles%\firetray\!!instructions!!.exe
%ProgramFiles%\flashfxp\!!instructions!!.exe
%ProgramFiles%\flashgot\!!instructions!!.exe
%ProgramFiles%\flock\!!instructions!!.exe
%ProgramFiles%\fsm32\!!instructions!!.exe
%ProgramFiles%\foxit\!!instructions!!.exe
%ProgramFiles%\fsgk32st\!!instructions!!.exe
%ProgramFiles%\fpavupdm\!!instructions!!.exe
%ProgramFiles%\fpscan\!!instructions!!.exe
%ProgramFiles%\fptrayproc\!!instructions!!.exe
%ProgramFiles%\fpwin\!!instructions!!.exe
%ProgramFiles%\freshclam\!!instructions!!.exe
%ProgramFiles%\fsample\!!instructions!!.exe
%ProgramFiles%\fsaua\!!instructions!!.exe
%ProgramFiles%\fsauach\!!instructions!!.exe
%ProgramFiles%\fsav\!!instructions!!.exe
%ProgramFiles%\fpavserver\!!instructions!!.exe
%ProgramFiles%\fdmwi\!!instructions!!.exe
%ProgramFiles%\fprottray\!!instructions!!.exe
%ProgramFiles%\fsavwsch\!!instructions!!.exe
%ProgramFiles%\fsmb32\!!instructions!!.exe
%ProgramFiles%\helper\!!instructions!!.exe
%ProgramFiles%\hregmon\!!instructions!!.exe
%ProgramFiles%\hrres\!!instructions!!.exe
%ProgramFiles%\hsockpe\!!instructions!!.exe
%ProgramFiles%\httplook\!!instructions!!.exe
%ProgramFiles%\iamapp\!!instructions!!.exe
%ProgramFiles%\iamserv\!!instructions!!.exe
%ProgramFiles%\icq\!!instructions!!.exe
%ProgramFiles%\icqlite\!!instructions!!.exe
%ProgramFiles%\helpctr\!!instructions!!.exe
%ProgramFiles%\fspc\!!instructions!!.exe
%ProgramFiles%\hipsdiag\!!instructions!!.exe
%ProgramFiles%\ieregfix\!!instructions!!.exe
%ProgramFiles%\ih8run\!!instructions!!.exe
%ProgramFiles%\ilaunchr\!!instructions!!.exe
%ProgramFiles%\imapp\!!instructions!!.exe
%ProgramFiles%\imnotfy\!!instructions!!.exe
%ProgramFiles%\impcnt\!!instructions!!.exe
%ProgramFiles%\incmail\!!instructions!!.exe
%ProgramFiles%\inocit\!!instructions!!.exe
%ProgramFiles%\inorpc\!!instructions!!.exe
%ProgramFiles%\ieuser\!!instructions!!.exe
%ProgramFiles%\iexplore\!!instructions!!.exe
%ProgramFiles%\ih8\!!instructions!!.exe
%ProgramFiles%\gc\!!instructions!!.exe
%ProgramFiles%\nvcut\!!instructions!!.exe
%ProgramFiles%\guardgni\!!instructions!!.exe
%ProgramFiles%\fsqh\!!instructions!!.exe
%ProgramFiles%\fssf\!!instructions!!.exe
%ProgramFiles%\fssg\!!instructions!!.exe
%ProgramFiles%\fssm32\!!instructions!!.exe
%ProgramFiles%\fsstm\!!instructions!!.exe
%ProgramFiles%\fssw\!!instructions!!.exe
%ProgramFiles%\fstlui\!!instructions!!.exe
%ProgramFiles%\fsuninst\!!instructions!!.exe
%ProgramFiles%\fsus\!!instructions!!.exe
%ProgramFiles%\guardnt\!!instructions!!.exe
%ProgramFiles%\gw\!!instructions!!.exe
%ProgramFiles%\ftpte\!!instructions!!.exe
%ProgramFiles%\gcasserv\!!instructions!!.exe
%ProgramFiles%\ge\!!instructions!!.exe
%ProgramFiles%\gg\!!instructions!!.exe
%ProgramFiles%\giantantispywaremain\!!instructions!!.exe
%ProgramFiles%\giantantispywareupdater\!!instructions!!.exe
%ProgramFiles%\gnotify\!!instructions!!.exe
%ProgramFiles%\googledesktop\!!instructions!!.exe
%ProgramFiles%\googletalk\!!instructions!!.exe
%ProgramFiles%\googleupdate\!!instructions!!.exe
%ProgramFiles%\fspex\!!instructions!!.exe
%ProgramFiles%\gcasdtserv\!!instructions!!.exe
%ProgramFiles%\msbuild\microsoft\!!instructions!!.exe

Moves the following files

from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini.system32x
from %ProgramFiles%\fstlui\fstlui.exe to %ProgramFiles%\fstlui\fstlui.exe.system32x
from %ProgramFiles%\fssw\fssw.exe to %ProgramFiles%\fssw\fssw.exe.system32x
from %ProgramFiles%\fsstm\fsstm.exe to %ProgramFiles%\fsstm\fsstm.exe.system32x
from %ProgramFiles%\fssm32\fssm32.exe to %ProgramFiles%\fssm32\fssm32.exe.system32x
from %ProgramFiles%\fssg\fssg.exe to %ProgramFiles%\fssg\fssg.exe.system32x
from %ProgramFiles%\fssf\fssf.exe to %ProgramFiles%\fssf\fssf.exe.system32x
from %ProgramFiles%\fsqh\fsqh.exe to %ProgramFiles%\fsqh\fsqh.exe.system32x
from %ProgramFiles%\fspex\fspex.exe to %ProgramFiles%\fspex\fspex.exe.system32x
from %ProgramFiles%\fspc\fspc.exe to %ProgramFiles%\fspc\fspc.exe.system32x
from %ProgramFiles%\fsmb32\fsmb32.exe to %ProgramFiles%\fsmb32\fsmb32.exe.system32x
from %ProgramFiles%\fsma32\fsma32.exe to %ProgramFiles%\fsma32\fsma32.exe.system32x
from %ProgramFiles%\fsm32\fsm32.exe to %ProgramFiles%\fsm32\fsm32.exe.system32x
from %ProgramFiles%\fslaunch\fslaunch.exe to %ProgramFiles%\fslaunch\fslaunch.exe.system32x
from %ProgramFiles%\fsihs\fsihs.exe to %ProgramFiles%\fsihs\fsihs.exe.system32x
from %ProgramFiles%\fsihcomp\fsihcomp.exe to %ProgramFiles%\fsihcomp\fsihcomp.exe.system32x
from %ProgramFiles%\fshotfix\fshotfix.exe to %ProgramFiles%\fshotfix\fshotfix.exe.system32x
from %ProgramFiles%\fshelp\fshelp.exe to %ProgramFiles%\fshelp\fshelp.exe.system32x
from %ProgramFiles%\fshdll32\fshdll32.exe to %ProgramFiles%\fshdll32\fshdll32.exe.system32x
from %ProgramFiles%\fsguiexe\fsguiexe.exe to %ProgramFiles%\fsguiexe\fsguiexe.exe.system32x
from %ProgramFiles%\fsguidll\fsguidll.exe to %ProgramFiles%\fsguidll\fsguidll.exe.system32x
from %ProgramFiles%\fsgk32st\fsgk32st.exe to %ProgramFiles%\fsgk32st\fsgk32st.exe.system32x
from %ProgramFiles%\fsgk32\fsgk32.exe to %ProgramFiles%\fsgk32\fsgk32.exe.system32x
from %ProgramFiles%\fsgetwab\fsgetwab.exe to %ProgramFiles%\fsgetwab\fsgetwab.exe.system32x
from %ProgramFiles%\fsuninst\fsuninst.exe to %ProgramFiles%\fsuninst\fsuninst.exe.system32x
from %ProgramFiles%\fsus\fsus.exe to %ProgramFiles%\fsus\fsus.exe.system32x
from %ProgramFiles%\ftpte\ftpte.exe to %ProgramFiles%\ftpte\ftpte.exe.system32x
from %ProgramFiles%\gc\gc.exe to %ProgramFiles%\gc\gc.exe.system32x
from %ProgramFiles%\fsfwwsch\fsfwwsch.exe to %ProgramFiles%\fsfwwsch\fsfwwsch.exe.system32x
from %ProgramFiles%\icq\icq.exe to %ProgramFiles%\icq\icq.exe.system32x
from %ProgramFiles%\iamserv\iamserv.exe to %ProgramFiles%\iamserv\iamserv.exe.system32x
from %ProgramFiles%\iamapp\iamapp.exe to %ProgramFiles%\iamapp\iamapp.exe.system32x
from %ProgramFiles%\httplook\httplook.exe to %ProgramFiles%\httplook\httplook.exe.system32x
from %ProgramFiles%\hsockpe\hsockpe.exe to %ProgramFiles%\hsockpe\hsockpe.exe.system32x
from %ProgramFiles%\hrres\hrres.exe to %ProgramFiles%\hrres\hrres.exe.system32x
from %ProgramFiles%\hregmon\hregmon.exe to %ProgramFiles%\hregmon\hregmon.exe.system32x
from %ProgramFiles%\hipsdiag\hipsdiag.exe to %ProgramFiles%\hipsdiag\hipsdiag.exe.system32x
from %ProgramFiles%\helper\helper.exe to %ProgramFiles%\helper\helper.exe.system32x
from %ProgramFiles%\helpctr\helpctr.exe to %ProgramFiles%\helpctr\helpctr.exe.system32x
from %ProgramFiles%\fsfwwscr\fsfwwscr.exe to %ProgramFiles%\fsfwwscr\fsfwwscr.exe.system32x
from %ProgramFiles%\gw\gw.exe to %ProgramFiles%\gw\gw.exe.system32x
from %ProgramFiles%\icqlite\icqlite.exe to %ProgramFiles%\icqlite\icqlite.exe.system32x
from %ProgramFiles%\googleupdate\googleupdate.exe to %ProgramFiles%\googleupdate\googleupdate.exe.system32x
from %ProgramFiles%\googletalk\googletalk.exe to %ProgramFiles%\googletalk\googletalk.exe.system32x
from %ProgramFiles%\googledesktop\googledesktop.exe to %ProgramFiles%\googledesktop\googledesktop.exe.system32x
from %ProgramFiles%\gnotify\gnotify.exe to %ProgramFiles%\gnotify\gnotify.exe.system32x
from %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe to %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe.system32x
from %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe to %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe.system32x
from %ProgramFiles%\gg\gg.exe to %ProgramFiles%\gg\gg.exe.system32x
from %ProgramFiles%\ge\ge.exe to %ProgramFiles%\ge\ge.exe.system32x
from %ProgramFiles%\gcasserv\gcasserv.exe to %ProgramFiles%\gcasserv\gcasserv.exe.system32x
from %ProgramFiles%\gcasdtserv\gcasdtserv.exe to %ProgramFiles%\gcasdtserv\gcasdtserv.exe.system32x
from %ProgramFiles%\guardnt\guardnt.exe to %ProgramFiles%\guardnt\guardnt.exe.system32x
from %ProgramFiles%\firefox\nsinstall.exe to %ProgramFiles%\firefox\nsinstall.exe.system32x
from %ProgramFiles%\guardgni\guardgni.exe to %ProgramFiles%\guardgni\guardgni.exe.system32x
from %ProgramFiles%\fsample\fsample.exe to %ProgramFiles%\fsample\fsample.exe.system32x
from %ProgramFiles%\firefox\xpt_link.exe to %ProgramFiles%\firefox\xpt_link.exe.system32x
from %ProgramFiles%\firefox\xpt_dump.exe to %ProgramFiles%\firefox\xpt_dump.exe.system32x
from %ProgramFiles%\firefox\xpidl.exe to %ProgramFiles%\firefox\xpidl.exe.system32x
from %ProgramFiles%\firefox\xpcshell.exe to %ProgramFiles%\firefox\xpcshell.exe.system32x
from %ProgramFiles%\firefox\xpcom.dll to %ProgramFiles%\firefox\xpcom.dll.system32x
from %ProgramFiles%\firefox\updater.ini to %ProgramFiles%\firefox\updater.ini.system32x
from %ProgramFiles%\firefox\updater.exe to %ProgramFiles%\firefox\updater.exe.system32x
from %ProgramFiles%\firefox\update.locale to %ProgramFiles%\firefox\update.locale.system32x
from %ProgramFiles%\firefox\ssl3.dll to %ProgramFiles%\firefox\ssl3.dll.system32x
from %ProgramFiles%\firefox\softokn3.dll to %ProgramFiles%\firefox\softokn3.dll.system32x
from %ProgramFiles%\firefox\softokn3.chk to %ProgramFiles%\firefox\softokn3.chk.system32x
from %ProgramFiles%\firefox\smime3.dll to %ProgramFiles%\firefox\smime3.dll.system32x
from %ProgramFiles%\firefox\shlibsign.exe to %ProgramFiles%\firefox\shlibsign.exe.system32x
from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\readme.txt.system32x
from %ProgramFiles%\firefox\plugin_container.exe to %ProgramFiles%\firefox\plugin_container.exe.system32x
from %ProgramFiles%\firefox\plds4.dll to %ProgramFiles%\firefox\plds4.dll.system32x
from %ProgramFiles%\firefox\plc4.dll to %ProgramFiles%\firefox\plc4.dll.system32x
from %ProgramFiles%\firefox\platform.ini to %ProgramFiles%\firefox\platform.ini.system32x
from %ProgramFiles%\firefox\nssutil3.dll to %ProgramFiles%\firefox\nssutil3.dll.system32x
from %ProgramFiles%\firefox\nssdbm3.dll to %ProgramFiles%\firefox\nssdbm3.dll.system32x
from %ProgramFiles%\firefox\nssdbm3.chk to %ProgramFiles%\firefox\nssdbm3.chk.system32x
from %ProgramFiles%\firefox\nssckbi.dll to %ProgramFiles%\firefox\nssckbi.dll.system32x
from %ProgramFiles%\firefox\nss3.dll to %ProgramFiles%\firefox\nss3.dll.system32x
from %ProgramFiles%\firefox\xul.dll to %ProgramFiles%\firefox\xul.dll.system32x
from %ProgramFiles%\firesvc\firesvc.exe to %ProgramFiles%\firesvc\firesvc.exe.system32x
from %ProgramFiles%\firetray\firetray.exe to %ProgramFiles%\firetray\firetray.exe.system32x
from %ProgramFiles%\flashfxp\flashfxp.exe to %ProgramFiles%\flashfxp\flashfxp.exe.system32x
from %ProgramFiles%\fsdiag\fsdiag.exe to %ProgramFiles%\fsdiag\fsdiag.exe.system32x
from %ProgramFiles%\fsdc\fsdc.exe to %ProgramFiles%\fsdc\fsdc.exe.system32x
from %ProgramFiles%\fsdbuh\fsdbuh.exe to %ProgramFiles%\fsdbuh\fsdbuh.exe.system32x
from %ProgramFiles%\fsbwsys\fsbwsys.exe to %ProgramFiles%\fsbwsys\fsbwsys.exe.system32x
from %ProgramFiles%\fsavwscr\fsavwscr.exe to %ProgramFiles%\fsavwscr\fsavwscr.exe.system32x
from %ProgramFiles%\fsavwsch\fsavwsch.exe to %ProgramFiles%\fsavwsch\fsavwsch.exe.system32x
from %ProgramFiles%\fsavstrt\fsavstrt.exe to %ProgramFiles%\fsavstrt\fsavstrt.exe.system32x
from %ProgramFiles%\fsavgui\fsavgui.exe to %ProgramFiles%\fsavgui\fsavgui.exe.system32x
from %ProgramFiles%\fsavaui\fsavaui.exe to %ProgramFiles%\fsavaui\fsavaui.exe.system32x
from %ProgramFiles%\fsav32\fsav32.exe to %ProgramFiles%\fsav32\fsav32.exe.system32x
from %ProgramFiles%\fsav\fsav.exe to %ProgramFiles%\fsav\fsav.exe.system32x
from %ProgramFiles%\fsdiagui\fsdiagui.exe to %ProgramFiles%\fsdiagui\fsdiagui.exe.system32x
from %ProgramFiles%\fsauach\fsauach.exe to %ProgramFiles%\fsauach\fsauach.exe.system32x
from %ProgramFiles%\fsdfwd\fsdfwd.exe to %ProgramFiles%\fsdfwd\fsdfwd.exe.system32x
from %ProgramFiles%\freshclam\freshclam.exe to %ProgramFiles%\freshclam\freshclam.exe.system32x
from %ProgramFiles%\fpwin\fpwin.exe to %ProgramFiles%\fpwin\fpwin.exe.system32x
from %ProgramFiles%\fptrayproc\fptrayproc.exe to %ProgramFiles%\fptrayproc\fptrayproc.exe.system32x
from %ProgramFiles%\fpscan\fpscan.exe to %ProgramFiles%\fpscan\fpscan.exe.system32x
from %ProgramFiles%\fprottray\fprottray.exe to %ProgramFiles%\fprottray\fprottray.exe.system32x
from %ProgramFiles%\fpavupdm\fpavupdm.exe to %ProgramFiles%\fpavupdm\fpavupdm.exe.system32x
from %ProgramFiles%\fpavserver\fpavserver.exe to %ProgramFiles%\fpavserver\fpavserver.exe.system32x
from %ProgramFiles%\foxit\foxit to %ProgramFiles%\foxit\foxit.system32x
from %ProgramFiles%\flock\flock.exe to %ProgramFiles%\flock\flock.exe.system32x
from %ProgramFiles%\flashgot\flashgot.exe to %ProgramFiles%\flashgot\flashgot.exe.system32x
from %ProgramFiles%\fsaua\fsaua.exe to %ProgramFiles%\fsaua\fsaua.exe.system32x
from %ProgramFiles%\firefox\nspr4.dll to %ProgramFiles%\firefox\nspr4.dll.system32x
from %ProgramFiles%\ieregfix\ieregfix.exe to %ProgramFiles%\ieregfix\ieregfix.exe.system32x
from %ProgramFiles%\internet explorer\ieproxy.dll to %ProgramFiles%\internet explorer\ieproxy.dll.system32x
from %ProgramFiles%\monsysnt\monsysnt.exe to %ProgramFiles%\monsysnt\monsysnt.exe.system32x
from %ProgramFiles%\monlite\monlite.exe to %ProgramFiles%\monlite\monlite.exe.system32x
from %ProgramFiles%\miro\miro.exe to %ProgramFiles%\miro\miro.exe.system32x
from %ProgramFiles%\miranda32\miranda32.exe to %ProgramFiles%\miranda32\miranda32.exe.system32x
from %ProgramFiles%\mir3game\mir3game.exe to %ProgramFiles%\mir3game\mir3game.exe.system32x
from %ProgramFiles%\mfpmp\mfpmp.exe to %ProgramFiles%\mfpmp\mfpmp.exe.system32x
from %ProgramFiles%\memstring\memstring.exe to %ProgramFiles%\memstring\memstring.exe.system32x
from %ProgramFiles%\mcvsshld\mcvsshld.exe to %ProgramFiles%\mcvsshld\mcvsshld.exe.system32x
from %ProgramFiles%\mcupdmgr\mcupdmgr.exe to %ProgramFiles%\mcupdmgr\mcupdmgr.exe.system32x
from %ProgramFiles%\mcshield\mcshield.exe to %ProgramFiles%\mcshield\mcshield.exe.system32x
from %ProgramFiles%\mcregwiz\mcregwiz.exe to %ProgramFiles%\mcregwiz\mcregwiz.exe.system32x
from %ProgramFiles%\maxthon\maxthon.exe to %ProgramFiles%\maxthon\maxthon.exe.system32x
from %ProgramFiles%\mp3toys\mp3toys.exe to %ProgramFiles%\mp3toys\mp3toys.exe.system32x
from %ProgramFiles%\maplestory\maplestory.exe to %ProgramFiles%\maplestory\maplestory.exe.system32x
from %ProgramFiles%\malwareremoval\malwareremoval.exe to %ProgramFiles%\malwareremoval\malwareremoval.exe.system32x
from %ProgramFiles%\magent\magent.exe to %ProgramFiles%\magent\magent.exe.system32x
from %ProgramFiles%\luupdate\luupdate.exe to %ProgramFiles%\luupdate\luupdate.exe.system32x
from %ProgramFiles%\luna\luna.exe to %ProgramFiles%\luna\luna.exe.system32x
from %ProgramFiles%\luinit\luinit.exe to %ProgramFiles%\luinit\luinit.exe.system32x
from %ProgramFiles%\luconfig\luconfig.exe to %ProgramFiles%\luconfig\luconfig.exe.system32x
from %ProgramFiles%\lucheck\lucheck.exe to %ProgramFiles%\lucheck\lucheck.exe.system32x
from %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe to %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe.system32x
from %ProgramFiles%\lpfw\lpfw.exe to %ProgramFiles%\lpfw\lpfw.exe.system32x
from %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe to %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe.system32x
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe.system32x
from %ProgramFiles%\mp3toystray\mp3toystray.exe to %ProgramFiles%\mp3toystray\mp3toystray.exe.system32x
from %ProgramFiles%\nod32krn\nod32krn.exe to %ProgramFiles%\nod32krn\nod32krn.exe.system32x
from %ProgramFiles%\nod32\nod32.exe to %ProgramFiles%\nod32\nod32.exe.system32x
from %ProgramFiles%\nod\nod.exe to %ProgramFiles%\nod\nod.exe.system32x
from %ProgramFiles%\nisoptui\nisoptui.exe to %ProgramFiles%\nisoptui\nisoptui.exe.system32x
from %ProgramFiles%\netxray\netxray.exe to %ProgramFiles%\netxray\netxray.exe.system32x
from %ProgramFiles%\netstatviewer\netstatviewer.exe to %ProgramFiles%\netstatviewer\netstatviewer.exe.system32x
from %ProgramFiles%\neowatchtray\neowatchtray.exe to %ProgramFiles%\neowatchtray\neowatchtray.exe.system32x
from %ProgramFiles%\neowatchlog\neowatchlog.exe to %ProgramFiles%\neowatchlog\neowatchlog.exe.system32x
from %ProgramFiles%\navwnt\navwnt.exe to %ProgramFiles%\navwnt\navwnt.exe.system32x
from %ProgramFiles%\navw32\navw32.exe to %ProgramFiles%\navw32\navw32.exe.system32x
from %ProgramFiles%\navstub\navstub.exe to %ProgramFiles%\navstub\navstub.exe.system32x
from %ProgramFiles%\lotroclient\lotroclient.exe to %ProgramFiles%\lotroclient\lotroclient.exe.system32x
from %ProgramFiles%\mp3theater\mp3theater.exe to %ProgramFiles%\mp3theater\mp3theater.exe.system32x
from %ProgramFiles%\myagttry\myagttry.exe to %ProgramFiles%\myagttry\myagttry.exe.system32x
from %ProgramFiles%\myagtsvc\myagtsvc.exe to %ProgramFiles%\myagtsvc\myagtsvc.exe.system32x
from %ProgramFiles%\mvc\mvc.exe to %ProgramFiles%\mvc\mvc.exe.system32x
from %ProgramFiles%\mva\mva.exe to %ProgramFiles%\mva\mva.exe.system32x
from %ProgramFiles%\msnmsgr\msnmsgr.exe to %ProgramFiles%\msnmsgr\msnmsgr.exe.system32x
from %ProgramFiles%\msn6\msn6.exe to %ProgramFiles%\msn6\msn6.exe.system32x
from %ProgramFiles%\msmpsvc\msmpsvc.exe to %ProgramFiles%\msmpsvc\msmpsvc.exe.system32x
from %ProgramFiles%\msimn\msimn.exe to %ProgramFiles%\msimn\msimn.exe.system32x
from %ProgramFiles%\mpssvc\mpssvc.exe to %ProgramFiles%\mpssvc\mpssvc.exe.system32x
from %ProgramFiles%\mpftray\mpftray.exe to %ProgramFiles%\mpftray\mpftray.exe.system32x
from %ProgramFiles%\mpeng\mpeng.exe to %ProgramFiles%\mpeng\mpeng.exe.system32x
from %ProgramFiles%\navapsvc\navapsvc.exe to %ProgramFiles%\navapsvc\navapsvc.exe.system32x
from %ProgramFiles%\mp3tray\mp3tray.exe to %ProgramFiles%\mp3tray\mp3tray.exe.system32x
from %ProgramFiles%\iexplore\iexplore.exe to %ProgramFiles%\iexplore\iexplore.exe.system32x
from %ProgramFiles%\ieuser\ieuser.exe to %ProgramFiles%\ieuser\ieuser.exe.system32x
from %ProgramFiles%\livesrv\livesrv.exe to %ProgramFiles%\livesrv\livesrv.exe.system32x
from %ProgramFiles%\internet explorer\ieshims.dll to %ProgramFiles%\internet explorer\ieshims.dll.system32x
from %ProgramFiles%\internet explorer\ieinstal.exe to %ProgramFiles%\internet explorer\ieinstal.exe.system32x
from %ProgramFiles%\internet explorer\iedvtool.dll to %ProgramFiles%\internet explorer\iedvtool.dll.system32x
from %ProgramFiles%\internet explorer\iecompat.dll to %ProgramFiles%\internet explorer\iecompat.dll.system32x
from %ProgramFiles%\internet explorer\ie8props.propdesc to %ProgramFiles%\internet explorer\ie8props.propdesc.system32x
from %ProgramFiles%\internet explorer\hmmapi.dll to %ProgramFiles%\internet explorer\hmmapi.dll.system32x
from %ProgramFiles%\instlsp\instlsp.exe to %ProgramFiles%\instlsp\instlsp.exe.system32x
from %ProgramFiles%\installlsp\installlsp.exe to %ProgramFiles%\installlsp\installlsp.exe.system32x
from %ProgramFiles%\installlicense\installlicense.exe to %ProgramFiles%\installlicense\installlicense.exe.system32x
from %ProgramFiles%\installcavs\installcavs.exe to %ProgramFiles%\installcavs\installcavs.exe.system32x
from %ProgramFiles%\inphasenxd\inphasenxd.exe to %ProgramFiles%\inphasenxd\inphasenxd.exe.system32x
from %ProgramFiles%\inouptng\inouptng.exe to %ProgramFiles%\inouptng\inouptng.exe.system32x
from %ProgramFiles%\inotask\inotask.exe to %ProgramFiles%\inotask\inotask.exe.system32x
from %ProgramFiles%\inort\inort.exe to %ProgramFiles%\inort\inort.exe.system32x
from %ProgramFiles%\inorpc\inorpc.exe to %ProgramFiles%\inorpc\inorpc.exe.system32x
from %ProgramFiles%\inocit\inocit.exe to %ProgramFiles%\inocit\inocit.exe.system32x
from %ProgramFiles%\incmail\incmail.exe to %ProgramFiles%\incmail\incmail.exe.system32x
from %ProgramFiles%\impcnt\impcnt.exe to %ProgramFiles%\impcnt\impcnt.exe.system32x
from %ProgramFiles%\imnotfy\imnotfy.exe to %ProgramFiles%\imnotfy\imnotfy.exe.system32x
from %ProgramFiles%\imapp\imapp.exe to %ProgramFiles%\imapp\imapp.exe.system32x
from %ProgramFiles%\ilaunchr\ilaunchr.exe to %ProgramFiles%\ilaunchr\ilaunchr.exe.system32x
from %ProgramFiles%\ih8run\ih8run.exe to %ProgramFiles%\ih8run\ih8run.exe.system32x
from %ProgramFiles%\ih8\ih8.exe to %ProgramFiles%\ih8\ih8.exe.system32x
from %ProgramFiles%\internet explorer\iexplore.exe to %ProgramFiles%\internet explorer\iexplore.exe.system32x
from %ProgramFiles%\internet explorer\jsdbgui.dll to %ProgramFiles%\internet explorer\jsdbgui.dll.system32x
from %ProgramFiles%\licmgr\licmgr.exe to %ProgramFiles%\licmgr\licmgr.exe.system32x
from %ProgramFiles%\issvc\issvc.exe to %ProgramFiles%\issvc\issvc.exe.system32x
from %ProgramFiles%\isuac\isuac.exe to %ProgramFiles%\isuac\isuac.exe.system32x
from %ProgramFiles%\launcher\launcher.exe to %ProgramFiles%\launcher\launcher.exe.system32x
from %ProgramFiles%\konnekt\konnekt.exe to %ProgramFiles%\konnekt\konnekt.exe.system32x
from %ProgramFiles%\kavsvc\kavsvc.exe to %ProgramFiles%\kavsvc\kavsvc.exe.system32x
from %ProgramFiles%\kavstart\kavstart.exe to %ProgramFiles%\kavstart\kavstart.exe.system32x
from %ProgramFiles%\kavpfw\kavpfw.exe to %ProgramFiles%\kavpfw\kavpfw.exe.system32x
from %ProgramFiles%\kavpf\kavpf.exe to %ProgramFiles%\kavpf\kavpf.exe.system32x
from %ProgramFiles%\kavmm\kavmm.exe to %ProgramFiles%\kavmm\kavmm.exe.system32x
from %ProgramFiles%\kav\kav.exe to %ProgramFiles%\kav\kav.exe.system32x
from %ProgramFiles%\k-meleon\k-meleon.exe to %ProgramFiles%\k-meleon\k-meleon.exe.system32x
from %ProgramFiles%\itunes\itunes.exe to %ProgramFiles%\itunes\itunes.exe.system32x
from %ProgramFiles%\logwatnt\logwatnt.exe to %ProgramFiles%\logwatnt\logwatnt.exe.system32x
from %ProgramFiles%\liveupdate\liveupdate.exe to %ProgramFiles%\liveupdate\liveupdate.exe.system32x
from %ProgramFiles%\internet explorer\ielowutil.exe to %ProgramFiles%\internet explorer\ielowutil.exe.system32x
from %ProgramFiles%\ispnews\ispnews.exe to %ProgramFiles%\ispnews\ispnews.exe.system32x
from %ProgramFiles%\isafe\isafe.exe to %ProgramFiles%\isafe\isafe.exe.system32x
from %ProgramFiles%\iron\iron.exe to %ProgramFiles%\iron\iron.exe.system32x
from %ProgramFiles%\iris\iris.exe to %ProgramFiles%\iris\iris.exe.system32x
from %ProgramFiles%\internet explorer\sqmapi.dll to %ProgramFiles%\internet explorer\sqmapi.dll.system32x
from %ProgramFiles%\internet explorer\pdm.dll to %ProgramFiles%\internet explorer\pdm.dll.system32x
from %ProgramFiles%\internet explorer\msdbg2.dll to %ProgramFiles%\internet explorer\msdbg2.dll.system32x
from %ProgramFiles%\internet explorer\jsprofilerui.dll to %ProgramFiles%\internet explorer\jsprofilerui.dll.system32x
from %ProgramFiles%\internet explorer\jsprofilercore.dll to %ProgramFiles%\internet explorer\jsprofilercore.dll.system32x
from %ProgramFiles%\internet explorer\jsdebuggeride.dll to %ProgramFiles%\internet explorer\jsdebuggeride.dll.system32x
from %ProgramFiles%\ispwdsvc\ispwdsvc.exe to %ProgramFiles%\ispwdsvc\ispwdsvc.exe.system32x
from %ProgramFiles%\firefox\mozsqlite3.dll to %ProgramFiles%\firefox\mozsqlite3.dll.system32x
from %ProgramFiles%\firefox\mozjs.dll to %ProgramFiles%\firefox\mozjs.dll.system32x
from %ProgramFiles%\firefox\mozalloc.dll to %ProgramFiles%\firefox\mozalloc.dll.system32x
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe.system32x
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe.system32x
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe.system32x
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe.system32x
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe.system32x
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe.system32x
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe.system32x
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe.system32x
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe.system32x
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe.system32x
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe.system32x
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe.system32x
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe.system32x
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe.system32x
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe.system32x
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe.system32x
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe.system32x
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe.system32x
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe.system32x
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe.system32x
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe.system32x
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe.system32x
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe.system32x
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe.system32x
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe.system32x
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe.system32x
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe.system32x
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe.system32x
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe.system32x
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe.system32x
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe.system32x
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe.system32x
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe.system32x
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe.system32x
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe.system32x
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe.system32x
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe.system32x
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe.system32x
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe.system32x
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe.system32x
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.system32x
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe.system32x
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe.system32x
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe.system32x
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe.system32x
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe.system32x
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe.system32x
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe.system32x
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe.system32x
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe.system32x
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe.system32x
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe.system32x
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe.system32x
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe.system32x
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe.system32x
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe.system32x
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe.system32x
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe.system32x
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe.system32x
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe.system32x
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe.system32x
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe.system32x
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe.system32x
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe.system32x
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe.system32x
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe.system32x
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe.system32x
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe.system32x
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe.system32x
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe.system32x
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe.system32x
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe.system32x
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe.system32x
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe.system32x
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe.system32x
from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe.system32x
from %ProgramFiles(x86)%\desktop.ini to %ProgramFiles(x86)%\desktop.ini.system32x
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe.system32x
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe.system32x
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe.system32x
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe.system32x
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe.system32x
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe.system32x
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe.system32x
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe.system32x
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe.system32x
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe.system32x
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe.system32x
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe.system32x
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe.system32x
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe.system32x
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe.system32x
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe.system32x
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe.system32x
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe.system32x
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe.system32x
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe.system32x
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe.system32x
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe.system32x
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe.system32x
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe.system32x
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe.system32x
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe.system32x
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe.system32x
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe.system32x
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe.system32x
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe.system32x
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe.system32x
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe.system32x
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe.system32x
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe.system32x
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe.system32x
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe.system32x
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe.system32x
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe.system32x
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe.system32x
from %ProgramFiles%\dvd maker\wmm2clip.dll to %ProgramFiles%\dvd maker\wmm2clip.dll.system32x
from %ProgramFiles%\dvd maker\sonicsptransform.ax to %ProgramFiles%\dvd maker\sonicsptransform.ax.system32x
from %ProgramFiles%\dvd maker\soniccolorconverter.ax to %ProgramFiles%\dvd maker\soniccolorconverter.ax.system32x
from %ProgramFiles%\dvd maker\secretst.ttf to %ProgramFiles%\dvd maker\secretst.ttf.system32x
from %ProgramFiles%\dvd maker\rtstreamsource.ax to %ProgramFiles%\dvd maker\rtstreamsource.ax.system32x
from %ProgramFiles%\dvd maker\rtstreamsink.ax to %ProgramFiles%\dvd maker\rtstreamsink.ax.system32x
from %ProgramFiles%\dvd maker\pipetran.dll to %ProgramFiles%\dvd maker\pipetran.dll.system32x
from %ProgramFiles%\dvd maker\pipeline.dll to %ProgramFiles%\dvd maker\pipeline.dll.system32x
from %ProgramFiles%\dvd maker\omdproject.dll to %ProgramFiles%\dvd maker\omdproject.dll.system32x
from %ProgramFiles%\dvd maker\omdbase.dll to %ProgramFiles%\dvd maker\omdbase.dll.system32x
from %ProgramFiles%\dvd maker\offset.ax to %ProgramFiles%\dvd maker\offset.ax.system32x
from %ProgramFiles%\dvd maker\fieldswitch.ax to %ProgramFiles%\dvd maker\fieldswitch.ax.system32x
from %ProgramFiles%\dvd maker\eurosti.ttf to %ProgramFiles%\dvd maker\eurosti.ttf.system32x
from %ProgramFiles%\dvd maker\dvdmaker.exe to %ProgramFiles%\dvd maker\dvdmaker.exe.system32x
from %ProgramFiles%\dvd maker\directshowtap.ax to %ProgramFiles%\dvd maker\directshowtap.ax.system32x
from %ProgramFiles%\dvd maker\bod_r.ttf to %ProgramFiles%\dvd maker\bod_r.ttf.system32x
from %ProgramFiles%\dvd maker\audiodepthconverter.ax to %ProgramFiles%\dvd maker\audiodepthconverter.ax.system32x
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe.system32x
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe.system32x
from %ProgramFiles%\firefox\mangle.exe to %ProgramFiles%\firefox\mangle.exe.system32x
from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\chrome.manifest.system32x
from %ProgramFiles%\firefox\crashreporter.exe to %ProgramFiles%\firefox\crashreporter.exe.system32x
from %ProgramFiles%\firefox\js.log to %ProgramFiles%\firefox\js.log.system32x
from %ProgramFiles%\firefox\js.exe to %ProgramFiles%\firefox\js.exe.system32x
from %ProgramFiles%\firefox\ia2marshal.dll to %ProgramFiles%\firefox\ia2marshal.dll.system32x
from %ProgramFiles%\firefox\greprefs.js to %ProgramFiles%\firefox\greprefs.js.system32x
from %ProgramFiles%\firefox\freebl3.dll to %ProgramFiles%\firefox\freebl3.dll.system32x
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\freebl3.chk.system32x
from %ProgramFiles%\firefox\firefox.exe to %ProgramFiles%\firefox\firefox.exe.system32x
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\dependentlibs.list.system32x
from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\crashreporter_override.ini.system32x
from %ProgramFiles%\firefox\crashreporter.ini to %ProgramFiles%\firefox\crashreporter.ini.system32x
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe.system32x
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe.system32x
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe.system32x
from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\application.ini.system32x
from %ProgramFiles%\firefox\accessiblemarshal.dll to %ProgramFiles%\firefox\accessiblemarshal.dll.system32x
from %ProgramFiles%\firebird\firebird.exe to %ProgramFiles%\firebird\firebird.exe.system32x
from %ProgramFiles%\filezilla\filezilla.exe to %ProgramFiles%\filezilla\filezilla.exe.system32x
from %ProgramFiles%\fdmwi\fdmwi.exe to %ProgramFiles%\fdmwi\fdmwi.exe.system32x
from %ProgramFiles%\fdm\fdm.exe to %ProgramFiles%\fdm\fdm.exe.system32x
from %ProgramFiles%\fch32\fch32.exe to %ProgramFiles%\fch32\fch32.exe.system32x
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe.system32x
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe.system32x
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe.system32x
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\blocklist.xml.system32x
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe.system32x
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe.system32x
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe.system32x
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe.system32x
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe.system32x
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe.system32x
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe.system32x
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe.system32x
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe.system32x
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe.system32x
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe.system32x
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe.system32x
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\chrome.exe.system32x
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe.system32x
from %ProgramFiles%\nod32kui\nod32kui.exe to %ProgramFiles%\nod32kui\nod32kui.exe.system32x
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe.system32x
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe.system32x
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe.system32x
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe.system32x
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe.system32x
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe.system32x
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe.system32x
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe.system32x
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe.system32x
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe.system32x
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe.system32x
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe.system32x
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe.system32x
from %ProgramFiles%\navlu32\navlu32.exe to %ProgramFiles%\navlu32\navlu32.exe.system32x
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe.system32x
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe.system32x
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe.system32x
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe.system32x
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe.system32x
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe.system32x
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe.system32x
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe.system32x
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe.system32x
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe.system32x
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe.system32x
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe.system32x
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe.system32x
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe.system32x
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe.system32x
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe.system32x
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe.system32x
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe.system32x
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe.system32x
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe.system32x
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe.system32x
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe.system32x
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe.system32x
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe.system32x
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe.system32x
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe.system32x
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe.system32x
from %ProgramFiles%\notifyha\notifyha.exe to %ProgramFiles%\notifyha\notifyha.exe.system32x

Substitutes the following executable files

%ProgramFiles%\Internet Explorer\ieproxy.dll

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c @echo off vssadmin delete shadows /all /quiet sc config browser sc config browser start=enabled sc stop vss sc config vss start=disabled sc stop MongoDB sc config MongoDB start=disabl...

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial