Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.Encoder.32738

Added to the Dr.Web virus database: 2020-10-03

Virus description added:

Technical Information

To ensure autorun and distribution
Creates the following files on removable media
  • <Drive name for removable media>:\join.avi
  • <Drive name for removable media>:\sioc.rdf
  • <Drive name for removable media>:\hypothyroidism_slides.pptx
  • <Drive name for removable media>:\stoc13_ml_quoc_le.pptx
  • <Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
  • <Drive name for removable media>:\asaprojectcompetition.pptx
  • <Drive name for removable media>:\waterresourcesag.pptx
  • <Drive name for removable media>:\samieee_obiee_presentation.pptx
  • <Drive name for removable media>:\roozenedowebinar.pptx
  • <Drive name for removable media>:\digest.rdf
  • <Drive name for removable media>:\taxus_baccata.rdf
  • <Drive name for removable media>:\accountsreceivable.ppt
  • <Drive name for removable media>:\ksearch_esa_talk.ppt
  • <Drive name for removable media>:\sim_gametheory_to_finance.ppt
  • <Drive name for removable media>:\mappingconcepthubberlin.ppt
  • <Drive name for removable media>:\metac.ppt
  • <Drive name for removable media>:\proposaltemplates.ppt
  • <Drive name for removable media>:\irgeek.pem
  • <Drive name for removable media>:\tunpersonalca1.pem
  • <Drive name for removable media>:\contenttypes.rdf
  • <Drive name for removable media>:\elvisimp.rdf
  • <Drive name for removable media>:\swc_2009-03-02.rdf
  • <Drive name for removable media>:\schema.rdf
  • <Drive name for removable media>:\subjectclassification.zip
  • <Drive name for removable media>:\fiche_inscription_2015.zip
  • <Drive name for removable media>:\applicant.xlsx
  • <Drive name for removable media>:\price030215.zip
  • <Drive name for removable media>:\2013_finalsummaryforweb.xlsx
  • <Drive name for removable media>:\national_autism_preparation_programs.xlsx
  • <Drive name for removable media>:\cee_mmsprogram_summary_public.xlsx
  • <Drive name for removable media>:\fiche_inscription_2015.xls
  • <Drive name for removable media>:\removedtitles_records.xls
  • <Drive name for removable media>:\calculatorworksheet.xls
  • <Drive name for removable media>:\price030215.xls
  • <Drive name for removable media>:\guide_reorganization_mapping.xls
  • <Drive name for removable media>:\excel_example.xls
  • <Drive name for removable media>:\fungalnameauthors.rtf
  • <Drive name for removable media>:\waterlandhealthkano.rtf
  • <Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
  • <Drive name for removable media>:\contractualdeadlines.xls
  • <Drive name for removable media>:\productos.xls
  • <Drive name for removable media>:\20140114.rdf
  • <Drive name for removable media>:\delongcacert.pem
  • <Drive name for removable media>:\1sm_price.zip
  • <Drive name for removable media>:\hhhlcert.pem
  • <Drive name for removable media>:\10thingscondoms.pdf
  • <Drive name for removable media>:\weeklysheet1215.doc
  • <Drive name for removable media>:\aoc_saq_d_v3_merchant.docx
  • <Drive name for removable media>:\cveuropeo.doc
  • <Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
  • <Drive name for removable media>:\hanni_umami_chapter.doc
  • <Drive name for removable media>:\sdksampleunprivdeveloper.cer
  • <Drive name for removable media>:\contosoroot.cer
  • <Drive name for removable media>:\testee.cer
  • <Drive name for removable media>:\lisp_success.doc
  • <Drive name for removable media>:\sdkfailsafeemulator.cer
  • <Drive name for removable media>:\dashborder_144.bmp
  • <Drive name for removable media>:\dashborder_96.bmp
  • <Drive name for removable media>:\tileimage.bmp
  • <Drive name for removable media>:\coffee.bmp
  • <Drive name for removable media>:\default.bmp
  • <Drive name for removable media>:\archer.avi
  • <Drive name for removable media>:\split.avi
  • <Drive name for removable media>:\380713-readme.txt
  • <Drive name for removable media>:\testcertificate.cer
  • <Drive name for removable media>:\ovp25012015.doc
  • <Drive name for removable media>:\about.htm
  • <Drive name for removable media>:\glidescope_review_rev_010.docx
  • <Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf
  • <Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf
  • <Drive name for removable media>:\7790_preview.pdf
  • <Drive name for removable media>:\firefly1.mov
  • <Drive name for removable media>:\video_1.mp4
  • <Drive name for removable media>:\fil_20060629111052.pdf
  • <Drive name for removable media>:\video.mp4
  • <Drive name for removable media>:\dag2_panel1_320_ref.mov
  • <Drive name for removable media>:\etc6_m_1.mov
  • <Drive name for removable media>:\168.jpeg
  • <Drive name for removable media>:\about.html
  • <Drive name for removable media>:\iisstart.html
  • <Drive name for removable media>:\alert.html
  • <Drive name for removable media>:\tree_view.htm
  • <Drive name for removable media>:\garden.htm
  • <Drive name for removable media>:\advice_process.htm
  • <Drive name for removable media>:\iisstart.htm
  • <Drive name for removable media>:\alert.htm
  • <Drive name for removable media>:\ituneshelpunavailable.htm
  • <Drive name for removable media>:\ck.pem
  • <Drive name for removable media>:\price.zip
Modifies file system
Creates the following files
  • %TEMP%\n7myqu1b.0.cs
  • C:\far2\documentation\eng\380713-readme.txt
  • C:\far2\addons\xlat\380713-readme.txt
  • C:\far2\addons\setup\380713-readme.txt
  • C:\far2\pluginsdk\headers.pas\380713-readme.txt
  • C:\far2\plugins\align\380713-readme.txt
  • C:\far2\plugins\editcase\380713-readme.txt
  • C:\far2\pluginsdk\headers.c\380713-readme.txt
  • C:\far2\plugins\macroview\380713-readme.txt
  • C:\far2\plugins\ftp\380713-readme.txt
  • C:\far2\plugins\farcmds\380713-readme.txt
  • C:\far2\plugins\emenu\380713-readme.txt
  • C:\far2\plugins\filecase\380713-readme.txt
  • C:\far2\documentation\rus\380713-readme.txt
  • C:\far2\encyclopedia\tap\380713-readme.txt
  • C:\far2\plugins\network\380713-readme.txt
  • %ProgramFiles(x86)%\microsoft office\office10\380713-readme.txt
  • C:\far2\plugins\tmppanel\380713-readme.txt
  • %ProgramFiles(x86)%\k-lite codec pack\icaros\380713-readme.txt
  • C:\far2\plugins\proclist\380713-readme.txt
  • %ProgramFiles(x86)%\opera\assets\380713-readme.txt
  • %ProgramFiles(x86)%\pidgin\plugins\380713-readme.txt
  • %ProgramFiles(x86)%\pidgin\gtk\380713-readme.txt
  • %ProgramFiles(x86)%\pidgin\ca-certs\380713-readme.txt
  • %ProgramFiles(x86)%\steam\bin\380713-readme.txt
  • %ProgramFiles(x86)%\pidgin\sounds\purple\380713-readme.txt
  • %ProgramFiles(x86)%\steam\controller_base\380713-readme.txt
  • %ProgramFiles(x86)%\steam\resource\380713-readme.txt
  • C:\far2\addons\macros\380713-readme.txt
  • C:\far2\plugins\compare\380713-readme.txt
  • C:\far2\addons\colors\380713-readme.txt
  • %ProgramFiles%\firefox\380713-readme.txt
  • %ALLUSERSPROFILE%\microsoft help\380713-readme.txt
  • %TEMP%\n7myqu1b.out
  • %TEMP%\csce32d.tmp
  • %TEMP%\rese33e.tmp
  • %TEMP%\n7myqu1b.dll
  • %TEMP%\br54pdon.0.cs
  • %TEMP%\br54pdon.cmdline
  • %TEMP%\br54pdon.out
  • %TEMP%\csce82c.tmp
  • %TEMP%\rese83d.tmp
  • %TEMP%\br54pdon.dll
  • D:\380713-readme.txt
  • C:\far2\380713-readme.txt
  • %ALLUSERSPROFILE%\380713-readme.txt
  • %TEMP%\n7myqu1b.cmdline
  • C:\far2\encyclopedia\380713-readme.txt
  • C:\far2\fexcept\380713-readme.txt
  • %ProgramFiles(x86)%\k-lite codec pack\380713-readme.txt
  • %ProgramFiles(x86)%\mirc\380713-readme.txt
  • %ProgramFiles(x86)%\msbuild\380713-readme.txt
  • %ProgramFiles(x86)%\opera\380713-readme.txt
  • %ProgramFiles(x86)%\qip 2012\380713-readme.txt
  • %ProgramFiles(x86)%\steam\380713-readme.txt
  • C:\totalcmd\380713-readme.txt
  • %ProgramFiles(x86)%\winamp\380713-readme.txt
  • C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\380713-readme.txt
  • %ALLUSERSPROFILE%\microsoft toolkit\380713-readme.txt
  • %HOMEPATH%\380713-readme.txt
  • C:\totalcmd\language\380713-readme.txt
  • C:\far2\addons\380713-readme.txt
  • %ProgramFiles(x86)%\steam\graphics\380713-readme.txt
  • %ProgramFiles(x86)%\steam\resource\fonts\380713-readme.txt
Deletes the following files
  • %TEMP%\rese33e.tmp
  • %TEMP%\csce32d.tmp
  • %TEMP%\n7myqu1b.dll
  • %TEMP%\n7myqu1b.cmdline
  • %TEMP%\n7myqu1b.pdb
  • %TEMP%\n7myqu1b.0.cs
  • %TEMP%\n7myqu1b.out
  • %TEMP%\rese83d.tmp
  • %TEMP%\csce82c.tmp
  • %TEMP%\br54pdon.0.cs
  • %TEMP%\br54pdon.pdb
  • %TEMP%\br54pdon.cmdline
  • %TEMP%\br54pdon.dll
  • %TEMP%\br54pdon.out
Moves the following files
  • from %ProgramFiles(x86)%\k-lite codec pack\unins000.dat to %ProgramFiles(x86)%\k-lite codec pack\cfc25cad271d.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.ttf to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\b484c1af44bcef8.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.txt to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\d0946968b70f40e.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\checkbox\checkbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\checkbox\9407b3cd1ff6.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\combobox\combobox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\combobox\8c6d0b20179f.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\dropdownlist\dropdownlist.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\dropdownlist\199956f89318dc47.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\guiobjects.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\4fd43ad67bc766.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\da53bfc14ed94564.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\4bc3b26b6c47e6a045f.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\c670d392350c1329d8.380713
  • from %ProgramFiles(x86)%\steam\graphics\broadcast\icon_close_default.tga to %ProgramFiles(x86)%\steam\graphics\broadcast\e97a119e0490c48a66ea57.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\bc2bdace5c01.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\79411f712259f7a.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\droidsansthai-regular.ttf to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\0288b7aa9044aae9845306be9.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\bedfce3f5f941a.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\pathpicker\pathpicker.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\pathpicker\7a4f29ab29f189.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupitem.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\d08558e197c.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupitem.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\614c1aaa98b14e.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupmenu.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\469b3b9dd939e.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\statusbar\statusbar.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\statusbar\aea06148dbb36.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tabsheet\tabsheet.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tabsheet\c36bc9a46a1b.380713
  • from %ProgramFiles(x86)%\steam\graphics\broadcast\icon_close_hover.tga to %ProgramFiles(x86)%\steam\graphics\broadcast\853e38a4b1b98d0b06af.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\titlebox\titlebox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\titlebox\c7e36c819611.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips-elements.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\dea093ffebbb7fe30ec15.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\06b64ebd41.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\87872facc488d.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\6c30540b1b7a.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\16b9cd8b0b.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\5f75feaef.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\msgbox\msgbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\msgbox\8cfda657b1.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\default_keybinds.cfg to %ProgramFiles(x86)%\steam\tenfoot\resource\0df6217022796df0867a.380713
  • from %ProgramFiles(x86)%\steam\public\ssa\eula_english_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\efefda5ae94b1404b56d6fdbed50.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\appdownloadpanel.layout to %ProgramFiles(x86)%\steam\resource\layout\379403bd065ae3eae19887e.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\app_validation_dialog.layout to %ProgramFiles(x86)%\steam\resource\layout\f0fcc9066589bcfd78f68a3c2576.380713
  • from %ProgramFiles(x86)%\steam\package\tenfoot_all.zip.bd1519d47a9aed716a567a0661bf80bddc2883c4 to %ProgramFiles(x86)%\steam\package\7db4e2d3cf7602fc00e4d854fca98f233447bcc3ae3d7721d74e6787.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\240\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\240\e48e874433a4e73598.380713
  • from %ProgramFiles(x86)%\steam\friends\achievementnotification.res to %ProgramFiles(x86)%\steam\friends\d0822f92527f386d40749e7e9d6.380713
  • from %ProgramFiles(x86)%\steam\public\appdownloadnotification.res to %ProgramFiles(x86)%\steam\public\7fa16651afe544d7347ac211a14.380713
  • from %ProgramFiles(x86)%\steam\public\account.html to %ProgramFiles(x86)%\steam\public\568b0f94fe38.380713
  • from %ProgramFiles(x86)%\steam\public\c11.tga to %ProgramFiles(x86)%\steam\public\bc6987a.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-pt-br.wlz to %ProgramFiles(x86)%\winamp\lang\e7f8081e37d1bcca.380713
  • from %ProgramFiles(x86)%\steam\public\ssasubpanel.res to %ProgramFiles(x86)%\steam\public\5679587035e1f9b.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-pl-pl.wlz to %ProgramFiles(x86)%\winamp\lang\61f9df6270a958ae.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-nl-nl.wlz to %ProgramFiles(x86)%\winamp\lang\1e6492c64b098516.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-ko-kr.wlz to %ProgramFiles(x86)%\winamp\lang\a1142a4007222a28.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-ja-jp.wlz to %ProgramFiles(x86)%\winamp\lang\f4727fef1b249d66.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\broadcast_chatbanner.layout to %ProgramFiles(x86)%\steam\resource\layout\9ee656b5509cf1b8d30b02318dc.380713
  • from %ProgramFiles(x86)%\steam\public\c1.tga to %ProgramFiles(x86)%\steam\public\90efd8.380713
  • from %ProgramFiles(x86)%\steam\public\ssadialog.res to %ProgramFiles(x86)%\steam\public\63d35bdfe0473.380713
  • from %ProgramFiles(x86)%\steam\public\screenshotnotification.res to %ProgramFiles(x86)%\steam\public\8b6595fede219a1647c634c69a.380713
  • from %ProgramFiles(x86)%\steam\public\screenshoterrornotification.res to %ProgramFiles(x86)%\steam\public\cf5652b9b66060738a49421b6d1885e.380713
  • from %ProgramFiles(x86)%\steam\public\c10.tga to %ProgramFiles(x86)%\steam\public\11c90a4.380713
  • from %ProgramFiles(x86)%\steam\public\psnaccountsetupdialog.res to %ProgramFiles(x86)%\steam\public\b909f764bfddbad0db55bae43.380713
  • from %ProgramFiles(x86)%\winamp\skins\big bento\about\about.xml to %ProgramFiles(x86)%\winamp\skins\big bento\about\b5f56e650.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt to %ProgramFiles(x86)%\steam\servers\459b4c96a3fc37bac1ecbf90.380713
  • from %ProgramFiles(x86)%\winamp\lang\winamp-ro-ro.wlz to %ProgramFiles(x86)%\winamp\lang\7390aa812bd943e5.380713
  • from %ProgramFiles(x86)%\steam\package\tenfoot_dicts_all.zip.c74a3a9beb77a280cfd8761b901a80ed0f6a3173 to %ProgramFiles(x86)%\steam\package\a4ecc37fca1f7eb35e72f03f35fdbf7811bd6381d9281d6a802d1e0e09ac6a.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\wacs\freetype\freetype.wac to %ProgramFiles(x86)%\winamp\plugins\freeform\wacs\freetype\3d83d4865adc.380713
  • from %ProgramFiles(x86)%\steam\resource\invite.tga to %ProgramFiles(x86)%\steam\resource\aeece37c4c.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\2b06c5a.380713
  • from %ProgramFiles(x86)%\steam\resource\filecopydialog.res to %ProgramFiles(x86)%\steam\resource\80ccbc5ad68facc9fb.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\240f5e6bd524a54.380713
  • from %ProgramFiles(x86)%\steam\servers\dialogserverpassword.res to %ProgramFiles(x86)%\steam\servers\5104f6e9659a650d6b1b54d9.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt to %ProgramFiles(x86)%\steam\servers\35ff72468162d397705455c6e.380713
  • from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_autoretry.res to %ProgramFiles(x86)%\steam\servers\e4985e25b538a0b4a78434d7f331.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt to %ProgramFiles(x86)%\steam\servers\e0a39bfdfa3effee7b78851eb.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt to %ProgramFiles(x86)%\steam\servers\b691011c19fc37273068f52d702b.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt to %ProgramFiles(x86)%\steam\servers\19730e58ac6eb6e2f9ed1436.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt to %ProgramFiles(x86)%\steam\servers\a490706ee91f7c16ea553f951.380713
  • from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel_success.res to %ProgramFiles(x86)%\steam\friends\94fe89810b97811f82d85f3a397229badfb.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\debug.sym to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\953135813.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt to %ProgramFiles(x86)%\steam\servers\531505592241e96d2f2775bcfbd.380713
  • from %ProgramFiles(x86)%\steam\servers\dialogaddserver.res to %ProgramFiles(x86)%\steam\servers\fe845c387e7ce8f3fb9.380713
  • from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_singleplayer.res to %ProgramFiles(x86)%\steam\servers\8e351d57ca47c4f4c123fa64c5b5831.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt to %ProgramFiles(x86)%\steam\servers\6642c079a92b1a1d7ac0639d13c.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\notosanscjkjp-regular.otf to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\7949c10e29e7ed878e2554892.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt to %ProgramFiles(x86)%\steam\servers\fc38ac1d280841e4dc490b2c0.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt to %ProgramFiles(x86)%\steam\servers\b694955f5bc603363622f271.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt to %ProgramFiles(x86)%\steam\servers\3000599f6733ff646f3b62017.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt to %ProgramFiles(x86)%\steam\servers\f7715bb7c8864e7a211d5fb7a.380713
  • from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_nonsteam.res to %ProgramFiles(x86)%\steam\servers\81650d37274cf7dc4853751b143.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\gamespage_grid.layout to %ProgramFiles(x86)%\steam\resource\layout\16a3d452c729e4142a7e1.380713
  • from %ProgramFiles(x86)%\steam\public\ssa\eula_italian_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\385fbb06028b34b3bb26d830902c.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt to %ProgramFiles(x86)%\steam\servers\c8c016c2360d2cf4cb1ed963832.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt to %ProgramFiles(x86)%\steam\servers\50b8c9d517fa81a5b2a7bdf4.380713
  • from %ProgramFiles(x86)%\steam\graphics\btndefbottomleft.tga to %ProgramFiles(x86)%\steam\graphics\c23e61a7ab11d4f80e03.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\2400\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\2400\f3ca6191579967ac83.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\standardframe.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\67a61cf884a1466ac2.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt to %ProgramFiles(x86)%\steam\servers\d73d28cf3bd16f299eec6d5c9f.380713
  • from %ProgramFiles(x86)%\steam\servers\vacbannedconnrefuseddialog.res to %ProgramFiles(x86)%\steam\servers\c95c339f6be1e81da1d463ddb5c844.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt to %ProgramFiles(x86)%\steam\servers\e747754deab89ffab3d0b2007.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt to %ProgramFiles(x86)%\steam\servers\4dae23dbd10523d3a5c9a2dd3.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt to %ProgramFiles(x86)%\steam\servers\27b40990a9dace2390995821.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\tenfoot.uifont to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\97b2908d734f49.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\images\betabutton4.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\cd7f30f24f3b86f.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\images\bg_gradient_mask.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\30084f4b5a01405b3e0e.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\broadcast_firsttime.layout to %ProgramFiles(x86)%\steam\resource\layout\60f7a684bfad1d1085ef4ce10d.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\broadcast_livebanner.layout to %ProgramFiles(x86)%\steam\resource\layout\392f60e1a87efb98e3741a6eedd.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\2400\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\2400\bc5fbe366d078.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\chattitlepanel.layout to %ProgramFiles(x86)%\steam\resource\layout\79b62e983cfff216c8beb.380713
  • from %ProgramFiles(x86)%\steam\friends\addfriendenterdetailssubpanel.res to %ProgramFiles(x86)%\steam\friends\8938dc93d51f7c8a374e21e95dba0dd14.380713
  • from %ProgramFiles(x86)%\steam\public\ssa\eula_french_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\af1f57be2aeebc780b80a907c6e.380713
  • from %ProgramFiles(x86)%\steam\public\refreshlogindialog.res to %ProgramFiles(x86)%\steam\public\c4e03f05f4a23850e58602.380713
  • from %ProgramFiles(x86)%\steam\package\tenfoot_fonts_all.zip.505590f6014431a95a9750073e466372f3e98d88 to %ProgramFiles(x86)%\steam\package\3f653faaef17a171ac62aa8c3b842b36525b67dd265da3e018d2b5213f565a.380713
  • from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel.res to %ProgramFiles(x86)%\steam\friends\8424b288953c8444f18caae1a8a.380713
  • from %ProgramFiles(x86)%\steam\package\strings_all.zip.53f00b54cffc710742dd4bd3e60f27417582fee5 to %ProgramFiles(x86)%\steam\package\35fa639e241955b48b0eaa86a62ccab1a8bb86dc951a6f9b9f5a8cc8.380713
  • from %ProgramFiles(x86)%\steam\public\ssa\eula_german_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\7577aff5f86ce34369442913dfc.380713
  • from %ProgramFiles(x86)%\steam\package\strings_en_all.zip.cb080e501f60c33549dc909fc83e724c03bb3b87 to %ProgramFiles(x86)%\steam\package\eb2fee1220f2eb61bc8590e1d9613e7a2a631c8405ec6b2546cd4511bd6.380713
  • from %ProgramFiles(x86)%\steam\resource\layout\choosepurchaseorauthorization.layout to %ProgramFiles(x86)%\steam\resource\layout\914eeb27f675d0b204a40a0cf584487a67fc.380713
  • from %ProgramFiles(x86)%\steam\servers\dialoggameinfo.res to %ProgramFiles(x86)%\steam\servers\c52715453603084545.380713
  • from %ProgramFiles(x86)%\steam\servers\icon_bots.tga to %ProgramFiles(x86)%\steam\servers\684a3cbf5d865.380713
  • from %ProgramFiles(x86)%\steam\servers\dialogserverbrowser.res to %ProgramFiles(x86)%\steam\servers\4ebdf42d2b86e631bde5af1.380713
  • from %ProgramFiles(x86)%\steam\servers\icon_bots_column.tga to %ProgramFiles(x86)%\steam\servers\38191f5288554e608303.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt to %ProgramFiles(x86)%\steam\servers\57167eacfc8e0a6fc384c7300f.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt to %ProgramFiles(x86)%\steam\servers\5f058932b8b5499385a21c4.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt to %ProgramFiles(x86)%\steam\servers\5ab73611c9d4c282d16d481.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt to %ProgramFiles(x86)%\steam\servers\3aef6ef6a9c9f5314981bbf0cc.380713
  • from %ProgramFiles(x86)%\steam\servers\game_ready.wav to %ProgramFiles(x86)%\steam\servers\0123790f374331.380713
  • from %ProgramFiles(x86)%\steam\package\tenfoot_images_all.zip.3f5109256d433f180d0ea066398bbad9804ba276 to %ProgramFiles(x86)%\steam\package\3ab9d54d07f58efd3e8f8bf96aabbe9ae4eab06825d292fe9f0fce9e726575e.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt to %ProgramFiles(x86)%\steam\servers\65c9574273bda570e7161b9dd5.380713
  • from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel_failure.res to %ProgramFiles(x86)%\steam\friends\c6b0fde1fa0513ac0f35954f02a346e4212.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\images\abutton.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\3e034f13db6.380713
  • from %ProgramFiles(x86)%\steam\graphics\btndefbottom.tga to %ProgramFiles(x86)%\steam\graphics\c5daf450fb205bd2.380713
  • from %ProgramFiles(x86)%\steam\graphics\bigpicturebg.tga to %ProgramFiles(x86)%\steam\graphics\bd33f880f5389a9f.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_warning_yellow.tga to %ProgramFiles(x86)%\steam\resource\49288e69704790ba36c8114.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_warning.tga to %ProgramFiles(x86)%\steam\resource\93f28fa55146b92e.380713
  • from %ProgramFiles(x86)%\pidgin\plugins\.dll to %ProgramFiles(x86)%\pidgin\plugins\c651.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\aol_member_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\046030a5494fdf6de.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\baltimore_cybertrust_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\ced006f59ccfe9812010b82429568.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\cacert_class3.pem to %ProgramFiles(x86)%\pidgin\ca-certs\4b35536de11e25e23.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\cacert_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\fe78a1dd449e1d0.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\digicerthighassuranceca-3.pem to %ProgramFiles(x86)%\pidgin\ca-certs\f850899bb630630174117f90539c5.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\digicerthighassuranceevrootca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\99e97850ec634f5f5e3a713e29d05ba1b.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\deutsche_telekom_root_ca_2.pem to %ProgramFiles(x86)%\pidgin\ca-certs\d7ac51d14999f5f1250ae487a91e96.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\entrust.net_secure_server_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\16663da29f8dae038f996a6e3addfff6.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\verisign_international_server_class_3_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\1c12e4ec6f8d54f34ad9e2fe5b6e0a5dd3c62ad4ce7e.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\valicert_class_2_va.pem to %ProgramFiles(x86)%\pidgin\ca-certs\d7f62f68539031dfb874cfe.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\america_online_root_certification_authority_1.pem to %ProgramFiles(x86)%\pidgin\ca-certs\b86f08bee42380cc44e13d131b977fbfec33f45a71bdd4b17.380713
  • from %ProgramFiles(x86)%\steam\bin\icudtl.dat to %ProgramFiles(x86)%\steam\bin\3368f03d00.380713
  • from %ProgramFiles(x86)%\steam\bin\debug.log to %ProgramFiles(x86)%\steam\bin\53a730dcb.380713
  • from %ProgramFiles(x86)%\steam\bin\devtools_resources.pak to %ProgramFiles(x86)%\steam\bin\19a7ef30e3d4c0499566d6.380713
  • from %ProgramFiles(x86)%\steam\bin\cef.pak to %ProgramFiles(x86)%\steam\bin\86615bf.380713
  • from %ProgramFiles(x86)%\steam\bin\mssmp3.asi to %ProgramFiles(x86)%\steam\bin\4e498b9154.380713
  • from %ProgramFiles(x86)%\steam\bin\natives_blob.bin to %ProgramFiles(x86)%\steam\bin\2a8d00fbdb3ed44c.380713
  • from %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt to %ProgramFiles(x86)%\steam\74404bd6e20f0a84c4e322d.380713
  • from %ProgramFiles(x86)%\pidgin\sounds\purple\send.wav to %ProgramFiles(x86)%\pidgin\sounds\purple\c2902b4f.380713
  • from %ProgramFiles(x86)%\steam\controller_base\bigpicture.vdf to %ProgramFiles(x86)%\steam\controller_base\8207ddc3113897.380713
  • from %ProgramFiles(x86)%\steam\controller_base\streamingclient.vdf to %ProgramFiles(x86)%\steam\controller_base\a0e69cc6ba6090326e3.380713
  • from %ProgramFiles(x86)%\steam\controller_base\streamingclient_bigpicture.vdf to %ProgramFiles(x86)%\steam\controller_base\dd0946a234f8eb991ec2b4d775c49b.380713
  • from %ProgramFiles(x86)%\steam\graphics\achievementbg.tga to %ProgramFiles(x86)%\steam\graphics\f5808dbb96686bbc0.380713
  • from %ProgramFiles(x86)%\steam\graphics\achievementbg_recent.tga to %ProgramFiles(x86)%\steam\graphics\e237cf1be8826d5c3bb8c49c.380713
  • from %ProgramFiles(x86)%\opera\installation_status.xml to %ProgramFiles(x86)%\opera\5d75c0c92c8de50ba1e6723.380713
  • from %ProgramFiles(x86)%\mirc\mirc.chm to %ProgramFiles(x86)%\mirc\632315bd.380713
  • from %ProgramFiles(x86)%\pidgin\gtk\contents to %ProgramFiles(x86)%\pidgin\gtk\8815c17b.380713
  • from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\27e0d81c393ebe2a4f24.380713
  • from %ProgramFiles(x86)%\mirc\readme.txt to %ProgramFiles(x86)%\mirc\3796d48158.380713
  • from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\f1a4ed50f7cee.380713
  • from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\8ebf6d67fbac64b537d02b4162d3a01c4.380713
  • from %ProgramFiles(x86)%\opera\server_tracking_data to %ProgramFiles(x86)%\opera\dda208b8a8ef0738a559.380713
  • from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\700238a9e67aa.380713
  • from %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml to %ProgramFiles(x86)%\opera\c232581939b50100d9626b294b3c8bdc625.380713
  • from %ProgramFiles(x86)%\qip 2012\unins000.msg to %ProgramFiles(x86)%\qip 2012\579a88a7fc21.380713
  • from %ProgramFiles(x86)%\qip 2012\unins000.dat to %ProgramFiles(x86)%\qip 2012\224798932fef.380713
  • from %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5 to %ProgramFiles(x86)%\steam\b4356f98f28cd273b0351.380713
  • from %ProgramFiles(x86)%\steam\libx264-142.dll.md5 to %ProgramFiles(x86)%\steam\e4b8354dc0ab6795a1d.380713
  • from %ProgramFiles(x86)%\winamp\pconfig.dcf to %ProgramFiles(x86)%\winamp\c0cb52754ff.380713
  • from %ProgramFiles(x86)%\winamp\paths.ini to %ProgramFiles(x86)%\winamp\382fc2c3e.380713
  • from %ProgramFiles(x86)%\winamp\install.ini to %ProgramFiles(x86)%\winamp\35e27d19af6.380713
  • from %ProgramFiles(x86)%\winamp\whatsnew.txt to %ProgramFiles(x86)%\winamp\857fe9d034bc.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatarbordergolden.tga to %ProgramFiles(x86)%\steam\graphics\5df88a89c7cdf12b8b29d6.380713
  • from %ProgramFiles(x86)%\winamp\system\auth.w5s to %ProgramFiles(x86)%\winamp\system\2ca04ca8.380713
  • from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\58dddcfc1a7e519.380713
  • from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\a754d6732e8.380713
  • from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\95af7bc6f137edda68.380713
  • from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\af5bc02394ed6aeced894ae02e.380713
  • from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\9c09fb88269b7f6.380713
  • from %ProgramFiles%\firefox\platform.ini to %ProgramFiles%\firefox\2b0f7fd8e6dd.380713
  • from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\ad660e863f.380713
  • from %ProgramFiles%\firefox\softokn3.chk to %ProgramFiles%\firefox\701c96575504.380713
  • from %ProgramFiles%\firefox\updater.ini to %ProgramFiles%\firefox\37554e7a7a8.380713
  • from %ProgramFiles(x86)%\microsoft office\office10\thdic.lex to %ProgramFiles(x86)%\microsoft office\office10\88aa17ba1.380713
  • from %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\758bc17210859181f3.380713
  • from %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\61aefc12848f9430ab.380713
  • from %ProgramFiles(x86)%\mirc\versions.txt to %ProgramFiles(x86)%\mirc\64934cb7da06.380713
  • from %ProgramFiles(x86)%\mirc\ircintro.chm to %ProgramFiles(x86)%\mirc\f5c7eb8ef5a3.380713
  • from %ProgramFiles%\firefox\nssdbm3.chk to %ProgramFiles%\firefox\07934ccb1d4.380713
  • from %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt to %ProgramFiles(x86)%\steam\servers\3dc472f9958b30ea0dda51.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatarborderingame.tga to %ProgramFiles(x86)%\steam\graphics\17cda3a1008b623db8fd30.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatarborderonline.tga to %ProgramFiles(x86)%\steam\graphics\39c19674c356d1ee2dfc5e.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_password.tga to %ProgramFiles(x86)%\steam\resource\ea413c80a154c55f5.380713
  • from %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt to %ProgramFiles(x86)%\steam\public\195f5194081b8681fc4df43cf7b.380713
  • from %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt to %ProgramFiles(x86)%\steam\public\3aa15733992d2644ae36ffbf0e6f.380713
  • from %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt to %ProgramFiles(x86)%\steam\public\9dc9eb4fa121803bff54b5023456.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\220\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\220\d07cc4e59ee48.380713
  • from %ProgramFiles(x86)%\steam\package\bins_cef_win32.zip.4447a3d2f9ac1e2fbc533033cf235404866a27a7 to %ProgramFiles(x86)%\steam\package\93db71d48b3689803b298b45de6f448f4d0b25fcbb73086262328713685.380713
  • from %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt to %ProgramFiles(x86)%\steam\public\59bc099bb5f41f2fc2924587fd2.380713
  • from %ProgramFiles(x86)%\steam\package\bins_codecs_win32.zip.4d5d0cec7d7c337abfbd8be9d020c06e6928b1c2 to %ProgramFiles(x86)%\steam\package\e5902cedf87144c3f2700212ab1fba9d03831f620d2bbc96fea619247f4e5f.380713
  • from %ProgramFiles(x86)%\steam\package\bins_misc_win32.zip.1db89a4dcad9b10b32243aa6a9de7c4d71d7fce7 to %ProgramFiles(x86)%\steam\package\2342ff3a0458d087af66f5a598e8df0c3b1189900ca65df7227499ac1448.380713
  • from %ProgramFiles(x86)%\steam\package\bins_win32.zip.c3ecb4b509fab15dec05a4686a38071da3f5b32a to %ProgramFiles(x86)%\steam\package\fc2aae4a067d5fda978536bb7132b886345f80a7142fb1392835bbb.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\220\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\220\7ab789b26dade5b54f.380713
  • from %ProgramFiles(x86)%\pidgin\ca-certs\addtrust_external_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\63f66e9b0ee525167659c794f6.380713
  • from %ProgramFiles(x86)%\steam\package\gamesforwindows_win32.zip.2cbf7a087f4452016065bb75c9b025dbc6885e32 to %ProgramFiles(x86)%\steam\package\ac9944c7f7ec3b2ba7d323cd7624185a63c919bc88e67da5bd18b56514142e460c.380713
  • from %ProgramFiles(x86)%\steam\package\remoteui_all.zip.ba22fb168ed139d9979cdd1cefbd911e3ed3529c to %ProgramFiles(x86)%\steam\package\9977e3110da20fa720cedd5bf026a1eeb8c66be66c7563dca08b6cc1f.380713
  • from %ProgramFiles(x86)%\steam\package\resources_all.zip.e13bd8e3ea04b9ccbdd9cdb20ffa3a3ed0c55841 to %ProgramFiles(x86)%\steam\package\23d69beeb1ac169bb5e555a10b9cac27838c319c01bc02fc68dfea6cc0.380713
  • from %ProgramFiles(x86)%\steam\package\resources_misc_all.zip.6b98785251045457e56ce493e4974efc336c1912 to %ProgramFiles(x86)%\steam\package\0c21b6c56f78cf31ca76bbf619c6bc6663a41f09bea10f101f060070879703f.380713
  • from %ProgramFiles(x86)%\steam\package\ssa_noarch.zip.7cb02fff8f34cc739f6b7098cf1a36494a94653e to %ProgramFiles(x86)%\steam\package\223d71c1ba9515e4ae25a48b7862000a7084f88fa2421695667c884.380713
  • from %ProgramFiles(x86)%\steam\package\ssa_win32.zip.adc4b0a71d32370b39174c74c7ff563113b1116f to %ProgramFiles(x86)%\steam\package\1a2c973d34f56c47a2aa6b215c2a67cf54a050a48ee443aedab809.380713
  • from %ProgramFiles(x86)%\steam\steam\drivercheck\240\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\240\af5c027c38b00.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_steam.tga to %ProgramFiles(x86)%\steam\resource\e0c3966da112f7.380713
  • from %ProgramFiles(x86)%\steam\package\steam_client_win32.installed to %ProgramFiles(x86)%\steam\package\84bd04fcf14f147baa389d98de9c.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_steam_disabled.tga to %ProgramFiles(x86)%\steam\resource\11fecd23726e4c45685ddcb.380713
  • from %ProgramFiles(x86)%\steam\package\steam_client_win32.manifest to %ProgramFiles(x86)%\steam\package\4bdb0185394781897f1422e4e3b.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_trade_request.tga to %ProgramFiles(x86)%\steam\resource\61eb7075a93f67caa93929.380713
  • from %ProgramFiles(x86)%\steam\package\steam_win32.zip.08396f3b6b20aee64f6e22dd2eff32b5be16b930 to %ProgramFiles(x86)%\steam\package\993bdc3d1b45124c4ae82294d1754aee577ebf98f0c6c09ba3e30799.380713
  • from %ProgramFiles(x86)%\steam\graphics\bg_security_wizard.tga to %ProgramFiles(x86)%\steam\graphics\589a2bbd68758b0f3177e4.380713
  • from %ProgramFiles(x86)%\steam\package\public_all.zip.cead2b93e0927b8f764d31fa410ac5f1e8c39233 to %ProgramFiles(x86)%\steam\package\f2f77f8d072710f589b0280a003795364c162a76a75d852949a3188.380713
  • from %ProgramFiles(x86)%\steam\tenfoot\resource\browser\webkit.css to %ProgramFiles(x86)%\steam\tenfoot\resource\browser\44996f6c01.380713
  • from %ProgramFiles(x86)%\winamp\skins\big bento\about\about.maki to %ProgramFiles(x86)%\winamp\skins\big bento\about\afae9c86c5.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_newfolder.tga to %ProgramFiles(x86)%\steam\resource\2a6d23f0caea829bef.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_info.tga to %ProgramFiles(x86)%\steam\resource\f983346c45d38.380713
  • from %ProgramFiles(x86)%\steam\resource\battery_dim.tga to %ProgramFiles(x86)%\steam\resource\a1e58da34015a16.380713
  • from %ProgramFiles(x86)%\steam\resource\camera1.wav to %ProgramFiles(x86)%\steam\resource\b661c7f3007.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatar_184blank.tga to %ProgramFiles(x86)%\steam\graphics\69431aabaa35e7e87c6.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatar_32blank.tga to %ProgramFiles(x86)%\steam\graphics\a0f3fcd7a4b719677f.380713
  • from %ProgramFiles(x86)%\steam\resource\chatty.tga to %ProgramFiles(x86)%\steam\resource\626094c7fb.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatar_64blank.tga to %ProgramFiles(x86)%\steam\graphics\77605f7cd6daa98daf.380713
  • from %ProgramFiles(x86)%\steam\resource\createtokendialog.res to %ProgramFiles(x86)%\steam\resource\7e4562646c1bfebf5b3d8.380713
  • from %ProgramFiles(x86)%\steam\graphics\beta.tga to %ProgramFiles(x86)%\steam\graphics\b7f9be09.380713
  • from %ProgramFiles(x86)%\steam\graphics\beta_hover.tga to %ProgramFiles(x86)%\steam\graphics\f61af4b794b0df.380713
  • from %ProgramFiles(x86)%\steam\resource\easynotification.res to %ProgramFiles(x86)%\steam\resource\3da69d6c76db693c6f22.380713
  • from %ProgramFiles(x86)%\steam\resource\edittokendialog.res to %ProgramFiles(x86)%\steam\resource\3562aa25e355b635fef.380713
  • from %ProgramFiles(x86)%\steam\resource\battery_border.tga to %ProgramFiles(x86)%\steam\resource\8ba3c969ab49b27e68.380713
  • from %ProgramFiles(x86)%\steam\graphics\bg_security_code_entry.tga to %ProgramFiles(x86)%\steam\graphics\aa8a8f7542965d7f62b25f6f6c.380713
  • from %ProgramFiles(x86)%\steam\graphics\avatarborderoffline.tga to %ProgramFiles(x86)%\steam\graphics\03782f84b22969326d732b3.380713
  • from %ProgramFiles(x86)%\steam\resource\filecopyoverwriteprompt.res to %ProgramFiles(x86)%\steam\resource\4643d345c8e8abd950a44dab10a.380713
  • from %ProgramFiles(x86)%\steam\resource\fonts\marlett.ttf to %ProgramFiles(x86)%\steam\resource\fonts\01a35351382.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_blank.tga to %ProgramFiles(x86)%\steam\resource\33cd8374e4e4ce.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_clear_field.tga to %ProgramFiles(x86)%\steam\resource\9f094dde78348db48bba.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_community_preview.tga to %ProgramFiles(x86)%\steam\resource\28e1e569b846f2697132f1cca5.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_error_red.tga to %ProgramFiles(x86)%\steam\resource\fadd5adafefee4ab06.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_file.tga to %ProgramFiles(x86)%\steam\resource\7837e75800f65.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_folder.tga to %ProgramFiles(x86)%\steam\resource\bbda3b7fdf2f819.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_folderup.tga to %ProgramFiles(x86)%\steam\resource\0b02d72a581e79caa.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_folder_selected.tga to %ProgramFiles(x86)%\steam\resource\4129604b30085e83025ee150.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_gift.tga to %ProgramFiles(x86)%\steam\resource\065b312f88791.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_hlicon1.tga to %ProgramFiles(x86)%\steam\resource\2bf79b88e6bc6712.380713
  • from %ProgramFiles(x86)%\steam\resource\battery_bright.tga to %ProgramFiles(x86)%\steam\resource\0fb4e201792e4480a8.380713
  • from %ProgramFiles(x86)%\steam\resource\icon_hlicon2.tga to %ProgramFiles(x86)%\steam\resource\0d98180520a348c6.380713
  • from %ProgramFiles(x86)%\steam\resource\fileopendialog.res to %ProgramFiles(x86)%\steam\resource\0eb0c6da8fc8fbd05c.380713
  • from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\titlebar.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\38f407d3c6.380713
Modifies user data files (Trojan.Encoder).
Changes user data files extensions (Trojan.Encoder).
Miscellaneous
Creates and executes the following
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\n7myqu1b.cmdline"' (with hidden window)
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE33E.tmp" "%TEMP%\CSCE32D.tmp"' (with hidden window)
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\br54pdon.cmdline"' (with hidden window)
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE83D.tmp" "%TEMP%\CSCE82C.tmp"' (with hidden window)
Executes the following
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\n7myqu1b.cmdline"
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE33E.tmp" "%TEMP%\CSCE32D.tmp"
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\br54pdon.cmdline"
  • '%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE83D.tmp" "%TEMP%\CSCE82C.tmp"

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android