Trojan.Encoder.33058

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'PhoenixTechnology' = '%ALLUSERSPROFILE%\XINOF.exe'
[<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PhoenixTechnology' = '%ALLUSERSPROFILE%\XINOF.exe'
[<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'PhoenixTechnology' = '%ALLUSERSPROFILE%\XINOF.exe'
[<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'PhoenixTechnology' = '%ALLUSERSPROFILE%\XINOF.exe'

Creates or modifies the following files

<SYSTEM32>\tasks\fonix

Creates the following files on removable media

<Drive name for removable media>:\how to decrypt files.hta
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\hypothyroidism_slides.pptx
<Drive name for removable media>:\proposaltemplates.ppt
<Drive name for removable media>:\ksearch_esa_talk.ppt
<Drive name for removable media>:\accountsreceivable.ppt
<Drive name for removable media>:\writingcompletesarnarrative_1103.ppt
<Drive name for removable media>:\sim_gametheory_to_finance.ppt
<Drive name for removable media>:\metac.ppt
<Drive name for removable media>:\ppswamp.ppt
<Drive name for removable media>:\ff_ot_user_guide.pdf
<Drive name for removable media>:\background.png
<Drive name for removable media>:\cbz.png
<Drive name for removable media>:\cleanlyrics.png
<Drive name for removable media>:\block.png
<Drive name for removable media>:\systisoft.pem
<Drive name for removable media>:\irgeek.pem
<Drive name for removable media>:\hhhlcert.pem
<Drive name for removable media>:\ck_ugo.pem
<Drive name for removable media>:\investmentbankca_ca8.pem
<Drive name for removable media>:\ck.pem
<Drive name for removable media>:\delongcacert.pem
<Drive name for removable media>:\asm.png
<Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf
<Drive name for removable media>:\middaugh_keynote.pptx
<Drive name for removable media>:\babyboymaintoscenesbackground.wmv
<Drive name for removable media>:\removedtitles_records.zip
<Drive name for removable media>:\national_autism_preparation_programs.xlsx
<Drive name for removable media>:\suspendedcompanies.xlsx
<Drive name for removable media>:\highly_cited_2001.xlsx
<Drive name for removable media>:\trtf_matrix2012_oct.xlsx
<Drive name for removable media>:\disclosuredetails.xlsx
<Drive name for removable media>:\applicant.xlsx
<Drive name for removable media>:\al.xlsx
<Drive name for removable media>:\2013_smccc_competition_points_jul2013.xlsx
<Drive name for removable media>:\productos.xls
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\flower_trans_matte.wmv
<Drive name for removable media>:\fungalnameauthors.rtf
<Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
<Drive name for removable media>:\military_callsigns_0311.rtf
<Drive name for removable media>:\waterlandhealthkano.rtf
<Drive name for removable media>:\static_electricity_easy_and_quick_activities.rtf
<Drive name for removable media>:\taxus_baccata.rdf
<Drive name for removable media>:\skos.rdf
<Drive name for removable media>:\schema.rdf
<Drive name for removable media>:\elvisimp.rdf
<Drive name for removable media>:\excel_example.xls
<Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf
<Drive name for removable media>:\bc01.pdf
<Drive name for removable media>:\7790_preview.pdf
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\sdszfo.docx
<Drive name for removable media>:\issi2013_template_for_posters.docx
<Drive name for removable media>:\nwfieldnotes1966.docx
<Drive name for removable media>:\thlps_keeper_mayer_1965.docx
<Drive name for removable media>:\508softwareandos.doc
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\cpriv.key
<Drive name for removable media>:\help.txt
<Drive name for removable media>:\fi51.doc
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\tcm851ax32.exe
<Drive name for removable media>:\garden.htm
<Drive name for removable media>:\spib_pima.pdf
<Drive name for removable media>:\210252809.jpeg
<Drive name for removable media>:\dualectls.pdf
<Drive name for removable media>:\d0068197bb5a41fea16a220c45390606.mp4
<Drive name for removable media>:\video_1.mp4
<Drive name for removable media>:\dag2_panel1_320_ref.mov
<Drive name for removable media>:\pushkin.jpg
<Drive name for removable media>:\2.jpg
<Drive name for removable media>:\210252809.jpg
<Drive name for removable media>:\region-north-karelia.jpg
<Drive name for removable media>:\1189.jpeg
<Drive name for removable media>:\2.jpeg
<Drive name for removable media>:\parnas_01.jpeg
<Drive name for removable media>:\alert.htm
<Drive name for removable media>:\api-hashmap.html
<Drive name for removable media>:\tree_view.html
<Drive name for removable media>:\browse.html
<Drive name for removable media>:\howto-index.html
<Drive name for removable media>:\about.html
<Drive name for removable media>:\ituneshelpunavailable.htm
<Drive name for removable media>:\iisstart.htm
<Drive name for removable media>:\trivial-merge.htm
<Drive name for removable media>:\tree_view.htm
<Drive name for removable media>:\advice_process.htm
<Drive name for removable media>:\calculatorworksheet.zip
<Drive name for removable media>:\productos.zip

Malicious functions

To complicate detection of its presence in the operating system,

blocks execution of the following system utilities:

Windows Task Manager (Taskmgr)

modifies the following system settings:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoClose' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'StartMenuLogOff' = '00000001'

Modifies file system

Creates the following files

<Current directory>\cpriv.key
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\help.txt
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web server extensions\14\cpriv.key
%CommonProgramFiles%\microsoft shared\web server extensions\14\help.txt
%CommonProgramFiles%\microsoft shared\web server extensions\14\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web server extensions\cpriv.key
%CommonProgramFiles%\microsoft shared\web server extensions\help.txt
%CommonProgramFiles%\microsoft shared\web server extensions\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web folders\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\web folders\1033\help.txt
%CommonProgramFiles%\microsoft shared\web folders\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web folders\cpriv.key
%CommonProgramFiles%\microsoft shared\web folders\help.txt
%CommonProgramFiles%\microsoft shared\web folders\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\help.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vsto\10.0\cpriv.key
%CommonProgramFiles%\microsoft shared\vsto\10.0\help.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vsto\cpriv.key
%CommonProgramFiles%\system\en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\vsto\help.txt
%CommonProgramFiles%\microsoft shared\vsto\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\cpriv.key
%CommonProgramFiles%\system\en-us\help.txt
%CommonProgramFiles%\system\en-us\how to decrypt files.hta
%CommonProgramFiles%\system\ado\en-us\cpriv.key
%CommonProgramFiles%\system\ado\en-us\help.txt
%CommonProgramFiles%\system\ado\en-us\how to decrypt files.hta
%CommonProgramFiles%\system\ado\cpriv.key
%CommonProgramFiles%\system\ado\help.txt
%CommonProgramFiles%\system\ado\how to decrypt files.hta
%CommonProgramFiles%\system\cpriv.key
%CommonProgramFiles%\system\help.txt
%CommonProgramFiles%\system\how to decrypt files.hta
%CommonProgramFiles%\speechengines\microsoft\cpriv.key
%CommonProgramFiles%\speechengines\microsoft\help.txt
%CommonProgramFiles%\speechengines\microsoft\how to decrypt files.hta
%CommonProgramFiles%\speechengines\cpriv.key
%CommonProgramFiles%\speechengines\help.txt
%CommonProgramFiles%\speechengines\how to decrypt files.hta
%CommonProgramFiles%\services\cpriv.key
%CommonProgramFiles%\services\help.txt
%CommonProgramFiles%\services\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\help.txt
%CommonProgramFiles%\system\msadc\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\frar\help.txt
%CommonProgramFiles%\microsoft shared\translat\esen\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\esen\help.txt
%CommonProgramFiles%\microsoft shared\translat\esen\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\enfr\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\enfr\help.txt
%CommonProgramFiles%\microsoft shared\translat\enfr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\enes\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\enes\help.txt
%CommonProgramFiles%\microsoft shared\translat\enes\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\arfr\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\arfr\help.txt
%CommonProgramFiles%\microsoft shared\translat\arfr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\help.txt
%CommonProgramFiles%\microsoft shared\translat\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\watermar\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\watermar\help.txt
%CommonProgramFiles%\microsoft shared\themes14\watermar\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\water\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\water\help.txt
%CommonProgramFiles%\microsoft shared\themes14\water\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vgx\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vgx\cpriv.key
%CommonProgramFiles%\microsoft shared\vgx\help.txt
%CommonProgramFiles%\microsoft shared\translat\fren\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\frar\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vc\cpriv.key
%CommonProgramFiles%\microsoft shared\vc\help.txt
%CommonProgramFiles%\microsoft shared\vc\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\help.txt
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vba\vba7\cpriv.key
%CommonProgramFiles%\microsoft shared\vba\vba7\help.txt
%CommonProgramFiles%\microsoft shared\vba\vba7\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\vba\cpriv.key
%CommonProgramFiles%\microsoft shared\vba\help.txt
%CommonProgramFiles%\microsoft shared\vba\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\triedit\en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\triedit\en-us\help.txt
%CommonProgramFiles%\microsoft shared\triedit\en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\triedit\cpriv.key
%CommonProgramFiles%\microsoft shared\triedit\help.txt
%CommonProgramFiles%\microsoft shared\triedit\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\translat\fren\cpriv.key
%CommonProgramFiles%\microsoft shared\translat\fren\help.txt
%CommonProgramFiles%\microsoft shared\translat\frar\cpriv.key
%CommonProgramFiles%\system\msadc\help.txt
%CommonProgramFiles%\system\msadc\cpriv.key
%ProgramFiles%\cpd\how to decrypt files.hta
%ProgramFiles%\defwatch\cpriv.key
%ProgramFiles%\drvctl\how to decrypt files.hta
%ProgramFiles%\dpatrolq\cpriv.key
%ProgramFiles%\dpatrolq\help.txt
%ProgramFiles%\dpatrolq\how to decrypt files.hta
%ProgramFiles%\dnf\cpriv.key
%ProgramFiles%\dnf\help.txt
%ProgramFiles%\dnf\how to decrypt files.hta
%ProgramFiles%\dislite\cpriv.key
%ProgramFiles%\dislite\help.txt
%ProgramFiles%\dislite\how to decrypt files.hta
%ProgramFiles%\directftp\cpriv.key
%ProgramFiles%\directftp\help.txt
%ProgramFiles%\directftp\how to decrypt files.hta
%ProgramFiles%\digsby-app\cpriv.key
%ProgramFiles%\digsby-app\help.txt
%ProgramFiles%\digsby-app\how to decrypt files.hta
%ProgramFiles%\digsby\cpriv.key
%ProgramFiles%\digsby\help.txt
%ProgramFiles%\digsby\how to decrypt files.hta
%ProgramFiles%\dekaron\cpriv.key
%ProgramFiles%\drvctl\help.txt
%ProgramFiles%\dekaron\help.txt
%ProgramFiles%\drvirus\how to decrypt files.hta
%ProgramFiles%\drvirus\help.txt
%ProgramFiles%\drweb\cpriv.key
%ProgramFiles%\drwebupw\how to decrypt files.hta
%ProgramFiles%\drwebscd\cpriv.key
%ProgramFiles%\drwebscd\help.txt
%ProgramFiles%\drwebscd\how to decrypt files.hta
%ProgramFiles%\drweb386\cpriv.key
%ProgramFiles%\drweb386\help.txt
%ProgramFiles%\drweb386\how to decrypt files.hta
%ProgramFiles%\drweb32w\cpriv.key
%ProgramFiles%\drweb32w\help.txt
%ProgramFiles%\drweb32w\how to decrypt files.hta
%ProgramFiles%\drweb\help.txt
%ProgramFiles%\drwebupw\help.txt
%ProgramFiles%\drweb\how to decrypt files.hta
%ProgramFiles%\drwadins\cpriv.key
%ProgramFiles%\drwadins\help.txt
%ProgramFiles%\drwadins\how to decrypt files.hta
%ProgramFiles%\drvmap\cpriv.key
%ProgramFiles%\drvmap\help.txt
%ProgramFiles%\drvmap\how to decrypt files.hta
%ProgramFiles%\drvirus\cpriv.key
%ProgramFiles%\drvctl\cpriv.key
%ProgramFiles%\dekaron\how to decrypt files.hta
%ProgramFiles%\defwatch\help.txt
%ProgramFiles%\defwatch\how to decrypt files.hta
%ProgramFiles%\cpd\help.txt
%ProgramFiles%\courier\help.txt
%ProgramFiles%\courier\how to decrypt files.hta
%ProgramFiles%\copyx64\cpriv.key
%ProgramFiles%\copyx64\help.txt
%ProgramFiles%\copyx64\how to decrypt files.hta
%CommonProgramFiles%\system\ole db\en-us\cpriv.key
%CommonProgramFiles%\system\ole db\en-us\help.txt
%CommonProgramFiles%\system\ole db\en-us\how to decrypt files.hta
%CommonProgramFiles%\system\ole db\cpriv.key
%CommonProgramFiles%\system\ole db\help.txt
%CommonProgramFiles%\system\ole db\how to decrypt files.hta
%CommonProgramFiles%\system\msmapi\1033\cpriv.key
%CommonProgramFiles%\system\msmapi\1033\help.txt
%CommonProgramFiles%\system\msmapi\1033\how to decrypt files.hta
%CommonProgramFiles%\system\msmapi\cpriv.key
%CommonProgramFiles%\system\msmapi\help.txt
%CommonProgramFiles%\system\msmapi\how to decrypt files.hta
%CommonProgramFiles%\system\msadc\en-us\cpriv.key
%CommonProgramFiles%\system\msadc\en-us\help.txt
%CommonProgramFiles%\system\msadc\en-us\how to decrypt files.hta
%ProgramFiles%\courier\cpriv.key
%ProgramFiles%\cpd\cpriv.key
%ProgramFiles%\defensewall\help.txt
%ProgramFiles%\csendto\help.txt
%ProgramFiles%\defensewall\cpriv.key
%ProgramFiles%\csendto\how to decrypt files.hta
%ProgramFiles%\defensewall\how to decrypt files.hta
%ProgramFiles%\dbtool\cpriv.key
%ProgramFiles%\dbtool\help.txt
%ProgramFiles%\dbtool\how to decrypt files.hta
%ProgramFiles%\dbconvert\cpriv.key
%ProgramFiles%\dbconvert\help.txt
%ProgramFiles%\dbconvert\how to decrypt files.hta
%ProgramFiles%\cuteftp\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\cpriv.key
%ProgramFiles%\cuteftp\help.txt
%ProgramFiles%\cuteftp\how to decrypt files.hta
%ProgramFiles%\custsetup\help.txt
%ProgramFiles%\custsetup\how to decrypt files.hta
%ProgramFiles%\custinstall\cpriv.key
%ProgramFiles%\custinstall\help.txt
%ProgramFiles%\custinstall\how to decrypt files.hta
%ProgramFiles%\cssexc\cpriv.key
%ProgramFiles%\cssexc\help.txt
%ProgramFiles%\cssexc\how to decrypt files.hta
%ProgramFiles%\csendto\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\help.txt
%ProgramFiles%\custsetup\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\indust\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\help.txt
%CommonProgramFiles%\microsoft shared\themes14\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\textconv\en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\textconv\en-us\help.txt
%CommonProgramFiles%\microsoft shared\textconv\en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\textconv\cpriv.key
%CommonProgramFiles%\microsoft shared\textconv\help.txt
%CommonProgramFiles%\microsoft shared\textconv\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\stationery\cpriv.key
%CommonProgramFiles%\microsoft shared\stationery\help.txt
%CommonProgramFiles%\microsoft shared\stationery\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\source engine\cpriv.key
%CommonProgramFiles%\microsoft shared\source engine\help.txt
%CommonProgramFiles%\microsoft shared\source engine\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\help.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\smart tag\lists\cpriv.key
%CommonProgramFiles%\microsoft shared\smart tag\lists\help.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\smart tag\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\breeze\cpriv.key
%CommonProgramFiles%\microsoft shared\smart tag\1033\help.txt
%CommonProgramFiles%\microsoft shared\smart tag\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\breeze\help.txt
%CommonProgramFiles%\microsoft shared\themes14\breeze\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\boldstri\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\boldstri\help.txt
%CommonProgramFiles%\microsoft shared\themes14\boldstri\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\help.txt
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\help.txt
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\blends\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\blends\help.txt
%CommonProgramFiles%\microsoft shared\themes14\blends\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\axis\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\axis\help.txt
%CommonProgramFiles%\microsoft shared\themes14\axis\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\arctic\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\arctic\help.txt
%CommonProgramFiles%\microsoft shared\themes14\arctic\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\help.txt
%CommonProgramFiles%\microsoft shared\themes14\canyon\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\smart tag\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\smart tag\cpriv.key
%CommonProgramFiles%\microsoft shared\smart tag\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\proof\cpriv.key
%CommonProgramFiles%\microsoft shared\proof\help.txt
%CommonProgramFiles%\microsoft shared\proof\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\cpriv.key
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\help.txt
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\canyon\help.txt
%CommonProgramFiles%\microsoft shared\themes14\canyon\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\edge\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\network\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\ripple\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\help.txt
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\refined\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\refined\help.txt
%CommonProgramFiles%\microsoft shared\themes14\refined\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\radial\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\radial\help.txt
%CommonProgramFiles%\microsoft shared\themes14\radial\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\quad\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\quad\help.txt
%CommonProgramFiles%\microsoft shared\themes14\quad\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\profile\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\profile\help.txt
%CommonProgramFiles%\microsoft shared\themes14\profile\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\pixel\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\pixel\help.txt
%CommonProgramFiles%\microsoft shared\themes14\pixel\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\papyrus\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\ripple\help.txt
%CommonProgramFiles%\microsoft shared\themes14\papyrus\help.txt
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\help.txt
%CommonProgramFiles%\microsoft shared\themes14\slate\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\studio\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\strtedge\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\strtedge\help.txt
%CommonProgramFiles%\microsoft shared\themes14\strtedge\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\spring\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\spring\help.txt
%CommonProgramFiles%\microsoft shared\themes14\spring\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\sonora\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\sonora\help.txt
%CommonProgramFiles%\microsoft shared\themes14\sonora\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\slate\help.txt
%CommonProgramFiles%\microsoft shared\themes14\studio\help.txt
%CommonProgramFiles%\microsoft shared\themes14\slate\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\sky\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\sky\help.txt
%CommonProgramFiles%\microsoft shared\themes14\sky\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\satin\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\satin\help.txt
%CommonProgramFiles%\microsoft shared\themes14\satin\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\ripple\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\papyrus\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\network\help.txt
%CommonProgramFiles%\microsoft shared\themes14\network\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\edge\help.txt
%CommonProgramFiles%\microsoft shared\themes14\eclipse\help.txt
%CommonProgramFiles%\microsoft shared\themes14\eclipse\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\echo\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\echo\help.txt
%CommonProgramFiles%\microsoft shared\themes14\echo\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\deepblue\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\deepblue\help.txt
%CommonProgramFiles%\microsoft shared\themes14\deepblue\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\concrete\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\concrete\help.txt
%CommonProgramFiles%\microsoft shared\themes14\concrete\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\compass\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\compass\help.txt
%CommonProgramFiles%\microsoft shared\themes14\compass\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\cascade\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\cascade\help.txt
%CommonProgramFiles%\microsoft shared\themes14\cascade\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\capsules\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\capsules\help.txt
%CommonProgramFiles%\microsoft shared\themes14\capsules\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\eclipse\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\edge\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\level\help.txt
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\help.txt
%CommonProgramFiles%\microsoft shared\themes14\level\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\level\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\layers\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\layers\help.txt
%CommonProgramFiles%\microsoft shared\themes14\layers\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\journal\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\journal\help.txt
%CommonProgramFiles%\microsoft shared\themes14\journal\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\iris\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\iris\help.txt
%CommonProgramFiles%\microsoft shared\themes14\iris\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\indust\help.txt
%CommonProgramFiles%\microsoft shared\themes14\indust\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\ice\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\ice\help.txt
%CommonProgramFiles%\microsoft shared\themes14\ice\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\expeditn\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\expeditn\help.txt
%CommonProgramFiles%\microsoft shared\themes14\expeditn\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\cpriv.key
%CommonProgramFiles%\microsoft shared\themes14\studio\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\cpriv.key
%ProgramFiles%\drwebupw\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\cookie\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\cookie\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\autoconfig\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\autoconfig\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\autoconfig\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\alerts\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\alerts\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\alerts\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser_region\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser_region\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser_region\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\sidebar\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\sidebar\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\sidebar\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\safebrowsing\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\safebrowsing\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\safebrowsing\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\preferences\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\preferences\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\preferences\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\cookie\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xpinstall\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xpinstall\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xml\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xml\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xml\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\svg\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\svg\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\svg\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\security\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\security\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\search\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xslt\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\search\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\search\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\layout\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\layout\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\layout\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\dom\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\dom\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\dom\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\security\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xpinstall\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\places\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\places\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabview\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabbrowser\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabbrowser\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabbrowser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabbrowser\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabview\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\places\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\communicator\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\communicator\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\communicator\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\migration\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\migration\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\feeds\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\feeds\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\feeds\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\downloads\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\downloads\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\downloads\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\browser\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\branding\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\branding\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\branding\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\help.txt
%ProgramFiles%\firefox\chrome\en_us\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\browser\migration\cpriv.key
%ProgramFiles%\cavsubmit\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xslt\help.txt
%ProgramFiles%\firefox\chrome\pippki\content\pippki\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pipnss\cpriv.key
%ProgramFiles%\firefox\chrome\pippki\content\pippki\help.txt
%ProgramFiles%\firefox\chrome\pippki\content\pippki\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\pippki\content\cpriv.key
%ProgramFiles%\firefox\chrome\pippki\content\help.txt
%ProgramFiles%\firefox\chrome\pippki\content\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\pippki\cpriv.key
%ProgramFiles%\firefox\chrome\pippki\help.txt
%ProgramFiles%\firefox\chrome\pippki\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\feedback\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\feedback\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\feedback\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\services\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\services\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\services\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\places\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\places\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\places\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pippki\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pippki\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pippki\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\help.txt
%ProgramFiles%\firefox\chrome\toolkit\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pipnss\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\svg\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\svg\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\svg\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\global\cpow\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\cpow\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\cpow\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\global\bindings\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\bindings\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\bindings\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\global\alerts\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\alerts\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xslt\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\cookie\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\cookie\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\cookie\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\toolkit\content\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\help.txt
%ProgramFiles%\firefox\chrome\toolkit\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\xml\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pipnss\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\passwordmgr\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\downloads\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\downloads\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_region\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_region\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_region\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\win\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\win\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\win\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\unix\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\unix\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\unix\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\mac\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\mac\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\mac\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\extensions\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\extensions\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\extensions\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\downloads\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\handling\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\passwordmgr\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\passwordmgr\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\necko\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\necko\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\necko\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\xpinstall\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\xpinstall\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\xpinstall\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\update\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\update\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabbrowser\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabview\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\update\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\profile\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\preferences\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\preferences\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\preferences\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\plugins\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\plugins\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\plugins\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\handling\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\handling\help.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\profile\cpriv.key
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\profile\help.txt
%ProgramFiles%\drwebwcl\help.txt
%ProgramFiles%\drwebwcl\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\help.txt
%ProgramFiles%\eudora\how to decrypt files.hta
%ProgramFiles%\etherd\cpriv.key
%ProgramFiles%\etherd\help.txt
%ProgramFiles%\etherd\how to decrypt files.hta
%ProgramFiles%\elementclient\cpriv.key
%ProgramFiles%\elementclient\help.txt
%ProgramFiles%\elementclient\how to decrypt files.hta
%ProgramFiles%\ekrn\cpriv.key
%ProgramFiles%\ekrn\help.txt
%ProgramFiles%\ekrn\how to decrypt files.hta
%ProgramFiles%\ehsniffer\cpriv.key
%ProgramFiles%\ehsniffer\help.txt
%ProgramFiles%\ehsniffer\how to decrypt files.hta
%ProgramFiles%\egni\cpriv.key
%ProgramFiles%\egni\help.txt
%ProgramFiles%\egni\how to decrypt files.hta
%ProgramFiles%\ecmd\cpriv.key
%ProgramFiles%\ecmd\help.txt
%ProgramFiles%\ecmd\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\cpriv.key
%ProgramFiles%\eudora\help.txt
%ProgramFiles%\ewidoctrl\help.txt
%ProgramFiles%\eudora\cpriv.key
%ProgramFiles%\ewidoctrl\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\push\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\cpriv.key
%ProgramFiles%\dvd maker\shared\help.txt
%ProgramFiles%\dvd maker\shared\how to decrypt files.hta
%ProgramFiles%\dvd maker\en-us\cpriv.key
%ProgramFiles%\dvd maker\en-us\help.txt
%ProgramFiles%\dvd maker\en-us\how to decrypt files.hta
%ProgramFiles%\dvd maker\cpriv.key
%ProgramFiles%\dvd maker\help.txt
%ProgramFiles%\dvd maker\how to decrypt files.hta
%ProgramFiles%\drwreg\cpriv.key
%ProgramFiles%\drwreg\help.txt
%ProgramFiles%\drwreg\how to decrypt files.hta
%ProgramFiles%\drwebwcl\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\full\cpriv.key
%ProgramFiles%\dvd maker\shared\dvdstyles\full\help.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\cpriv.key
%ProgramFiles%\ewidoctrl\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cpriv.key
%ProgramFiles%\fdmwi\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\preferences\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\preferences\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\places\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\places\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\places\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\migration\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\migration\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\migration\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\history\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\history\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\history\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\feeds\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\feeds\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\feeds\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\certerror\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\certerror\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\search\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\certerror\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\how to decrypt files.hta
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\classic\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\cpriv.key
%ProgramFiles%\firefox\chrome\browser\skin\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\search\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\search\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\help.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\cpriv.key
%ProgramFiles%\fdmwi\cpriv.key
%ProgramFiles%\fdm\how to decrypt files.hta
%ProgramFiles%\fch32\cpriv.key
%ProgramFiles%\fch32\help.txt
%ProgramFiles%\fch32\how to decrypt files.hta
%ProgramFiles%\far\cpriv.key
%ProgramFiles%\far\help.txt
%ProgramFiles%\far\how to decrypt files.hta
%ProgramFiles%\fameh32\cpriv.key
%ProgramFiles%\fameh32\help.txt
%ProgramFiles%\fameh32\how to decrypt files.hta
%ProgramFiles%\f-sched\cpriv.key
%ProgramFiles%\f-sched\help.txt
%ProgramFiles%\f-sched\how to decrypt files.hta
%ProgramFiles%\ezantivirusregistrationcheck\cpriv.key
%ProgramFiles%\ezantivirusregistrationcheck\help.txt
%ProgramFiles%\ezantivirusregistrationcheck\how to decrypt files.hta
%ProgramFiles%\exit_av\cpriv.key
%ProgramFiles%\exit_av\help.txt
%ProgramFiles%\exit_av\how to decrypt files.hta
%ProgramFiles%\fdmwi\how to decrypt files.hta
%ProgramFiles%\fdm\help.txt
%ProgramFiles%\filezilla\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\browser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\cpriv.key
%ProgramFiles%\fdm\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\browser\help.txt
%ProgramFiles%\firefox\chrome\browser\content\branding\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\branding\help.txt
%ProgramFiles%\firefox\chrome\browser\content\branding\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\content\cpriv.key
%ProgramFiles%\firefox\chrome\browser\content\help.txt
%ProgramFiles%\firefox\chrome\browser\content\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\cpriv.key
%ProgramFiles%\firefox\chrome\browser\help.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabbrowser\how to decrypt files.hta
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\cpriv.key
%ProgramFiles%\firefox\chrome\help.txt
%ProgramFiles%\firefox\chrome\how to decrypt files.hta
%ProgramFiles%\firefox\cpriv.key
%ProgramFiles%\firefox\help.txt
%ProgramFiles%\firefox\how to decrypt files.hta
%ProgramFiles%\firebird\cpriv.key
%ProgramFiles%\firebird\help.txt
%ProgramFiles%\firebird\how to decrypt files.hta
%ProgramFiles%\filezilla\cpriv.key
%ProgramFiles%\filezilla\help.txt
%ProgramFiles%\firefox\chrome\browser\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\help.txt
%ProgramFiles%\antivirus\help.txt
%ProgramFiles%\antivirus\how to decrypt files.hta
%ProgramFiles%\anti-trojan\cpriv.key
%ProgramFiles%\anti-trojan\help.txt
%ProgramFiles%\anti-trojan\how to decrypt files.hta
%ProgramFiles%\amsn\cpriv.key
%ProgramFiles%\amsn\help.txt
%ProgramFiles%\amsn\how to decrypt files.hta
%ProgramFiles%\amon\cpriv.key
%ProgramFiles%\amon\help.txt
%ProgramFiles%\amon\how to decrypt files.hta
%ProgramFiles%\alsvc\cpriv.key
%ProgramFiles%\alsvc\help.txt
%ProgramFiles%\alsvc\how to decrypt files.hta
%ProgramFiles%\almon\cpriv.key
%ProgramFiles%\almon\help.txt
%ProgramFiles%\almon\how to decrypt files.hta
%ProgramFiles%\airdefense\cpriv.key
%ProgramFiles%\airdefense\help.txt
%ProgramFiles%\airdefense\how to decrypt files.hta
%ProgramFiles%\aoltbserver\how to decrypt files.hta
%ProgramFiles%\aimpro\cpriv.key
%ProgramFiles%\ashdug\help.txt
%ProgramFiles%\aimpro\help.txt
%ProgramFiles%\ashdug\how to decrypt files.hta
%ProgramFiles%\ashdisp\cpriv.key
%ProgramFiles%\ashdisp\help.txt
%ProgramFiles%\ashdisp\how to decrypt files.hta
%ProgramFiles%\ashchest\cpriv.key
%ProgramFiles%\ashchest\help.txt
%ProgramFiles%\ashchest\how to decrypt files.hta
%ProgramFiles%\ashavsrv\cpriv.key
%ProgramFiles%\ashavsrv\help.txt
%ProgramFiles%\ashavsrv\how to decrypt files.hta
%ProgramFiles%\ashavast\cpriv.key
%ProgramFiles%\ashavast\help.txt
%ProgramFiles%\ashavast\how to decrypt files.hta
%ProgramFiles%\ash\cpriv.key
%ProgramFiles%\ash\help.txt
%ProgramFiles%\ash\how to decrypt files.hta
%ProgramFiles%\armorsurf\cpriv.key
%ProgramFiles%\armorsurf\help.txt
%ProgramFiles%\armorsurf\how to decrypt files.hta
%ProgramFiles%\armor2net\cpriv.key
%ProgramFiles%\armor2net\help.txt
%ProgramFiles%\aoltbserver\cpriv.key
%ProgramFiles%\aoltbserver\help.txt
%ProgramFiles%\armor2net\how to decrypt files.hta
%ProgramFiles%\aim6\cpriv.key
%ProgramFiles%\aavshield\help.txt
%ProgramFiles%\a2upd\cpriv.key
%ProgramFiles%\a2upd\help.txt
%ProgramFiles%\a2upd\how to decrypt files.hta
%ProgramFiles%\a2start\cpriv.key
%ProgramFiles%\a2start\help.txt
%ProgramFiles%\a2start\how to decrypt files.hta
%ProgramFiles%\a2service\cpriv.key
%ProgramFiles%\a2service\help.txt
%ProgramFiles%\a2service\how to decrypt files.hta
%ProgramFiles%\a2scan\cpriv.key
%ProgramFiles%\a2scan\help.txt
%ProgramFiles%\a2scan\how to decrypt files.hta
%ProgramFiles%\a2hijackfree\cpriv.key
%ProgramFiles%\a2hijackfree\help.txt
%ProgramFiles%\a2hijackfree\how to decrypt files.hta
%ProgramFiles%\a2guard\cpriv.key
%ProgramFiles%\a2guard\help.txt
%ProgramFiles%\a2guard\how to decrypt files.hta
%ProgramFiles%\a2cmd\cpriv.key
%ProgramFiles%\a2cmd\help.txt
%ProgramFiles%\a2wizard\help.txt
%ProgramFiles%\aimpro\how to decrypt files.hta
%ProgramFiles%\ashdug\cpriv.key
%ProgramFiles%\a2wizard\how to decrypt files.hta
%ProgramFiles%\aim6\help.txt
%ProgramFiles%\aim6\how to decrypt files.hta
%ProgramFiles%\ahnsd\cpriv.key
%ProgramFiles%\ahnsd\help.txt
%ProgramFiles%\ahnsd\how to decrypt files.hta
%ProgramFiles%\ageofconan\cpriv.key
%ProgramFiles%\ageofconan\help.txt
%ProgramFiles%\ageofconan\how to decrypt files.hta
%ProgramFiles%\agb5\cpriv.key
%ProgramFiles%\agb5\help.txt
%ProgramFiles%\agb5\how to decrypt files.hta
%ProgramFiles%\admunch\cpriv.key
%ProgramFiles%\admunch\help.txt
%ProgramFiles%\admunch\how to decrypt files.hta
%ProgramFiles%\ackwin32\cpriv.key
%ProgramFiles%\ackwin32\help.txt
%ProgramFiles%\ackwin32\how to decrypt files.hta
%ProgramFiles%\about\cpriv.key
%ProgramFiles%\about\help.txt
%ProgramFiles%\about\how to decrypt files.hta
%ProgramFiles%\aavshield\cpriv.key
%ProgramFiles%\aavshield\how to decrypt files.hta
%ProgramFiles%\a2wizard\cpriv.key
%ProgramFiles%\ashenhcd\how to decrypt files.hta
%ProgramFiles%\ashenhcd\help.txt
%ProgramFiles%\avgamsvr\help.txt
%ProgramFiles%\autotrace\help.txt
%ProgramFiles%\avgamsvr\how to decrypt files.hta
%ProgramFiles%\avconsol\cpriv.key
%ProgramFiles%\avconsol\help.txt
%ProgramFiles%\avconsol\how to decrypt files.hta
%ProgramFiles%\avconfig\cpriv.key
%ProgramFiles%\avconfig\help.txt
%ProgramFiles%\avconfig\how to decrypt files.hta
%ProgramFiles%\avcmd\cpriv.key
%ProgramFiles%\avcmd\help.txt
%ProgramFiles%\avcmd\how to decrypt files.hta
%ProgramFiles%\avciman\cpriv.key
%ProgramFiles%\avciman\help.txt
%ProgramFiles%\avciman\how to decrypt files.hta
%ProgramFiles%\avcenter\cpriv.key
%ProgramFiles%\avcenter\help.txt
%ProgramFiles%\avcenter\how to decrypt files.hta
%ProgramFiles%\avadmin\cpriv.key
%ProgramFiles%\avadmin\help.txt
%ProgramFiles%\avadmin\how to decrypt files.hta
%ProgramFiles%\autotrace\cpriv.key
%ProgramFiles%\avgcc\how to decrypt files.hta
%ProgramFiles%\avgamsvr\cpriv.key
%ProgramFiles%\avgcc\cpriv.key
%ProgramFiles%\autotrace\how to decrypt files.hta
%ProgramFiles%\avgrssvc\help.txt
%ProgramFiles%\avgrssvc\how to decrypt files.hta
%ProgramFiles%\avgnpsvc\cpriv.key
%ProgramFiles%\avgnpsvc\help.txt
%ProgramFiles%\avgnpsvc\how to decrypt files.hta
%ProgramFiles%\avgnpdln\cpriv.key
%ProgramFiles%\avgnpdln\help.txt
%ProgramFiles%\avgnpdln\how to decrypt files.hta
%ProgramFiles%\avginet\cpriv.key
%ProgramFiles%\avginet\help.txt
%ProgramFiles%\avgfwsrv\cpriv.key
%ProgramFiles%\360tray\cpriv.key
%ProgramFiles%\avgfwsrv\help.txt
%ProgramFiles%\avgfwsrv\how to decrypt files.hta
%ProgramFiles%\avgemc\cpriv.key
%ProgramFiles%\avgemc\help.txt
%ProgramFiles%\avgemc\how to decrypt files.hta
%ProgramFiles%\avgdiag\cpriv.key
%ProgramFiles%\avgdiag\help.txt
%ProgramFiles%\avgdiag\how to decrypt files.hta
%ProgramFiles%\avgcc\help.txt
%ProgramFiles%\avgrssvc\cpriv.key
%ProgramFiles%\autostartexplorer\cpriv.key
%ProgramFiles%\autostartexplorer\help.txt
%ProgramFiles%\ashsimpl\help.txt
%ProgramFiles%\ashsimp2\cpriv.key
%ProgramFiles%\ashsimp2\help.txt
%ProgramFiles%\ashsimp2\how to decrypt files.hta
%ProgramFiles%\ashserv\cpriv.key
%ProgramFiles%\ashserv\help.txt
%ProgramFiles%\ashserv\how to decrypt files.hta
%ProgramFiles%\ashquick\cpriv.key
%ProgramFiles%\ashquick\help.txt
%ProgramFiles%\ashquick\how to decrypt files.hta
%ProgramFiles%\ashpopwz\cpriv.key
%ProgramFiles%\ashpopwz\help.txt
%ProgramFiles%\ashpopwz\how to decrypt files.hta
%ProgramFiles%\ashmaisv\cpriv.key
%ProgramFiles%\ashmaisv\help.txt
%ProgramFiles%\ashmaisv\how to decrypt files.hta
%ProgramFiles%\ashlogv\cpriv.key
%ProgramFiles%\ashlogv\help.txt
%ProgramFiles%\ashlogv\how to decrypt files.hta
%ProgramFiles%\ashenhcd\cpriv.key
%ProgramFiles%\ashsimpl\cpriv.key
%ProgramFiles%\ashskpcc\how to decrypt files.hta
%ProgramFiles%\ashskpcc\help.txt
%ProgramFiles%\ashsimpl\how to decrypt files.hta
%ProgramFiles%\ashskpcc\cpriv.key
%ProgramFiles%\autodown\cpriv.key
%ProgramFiles%\autostartexplorer\how to decrypt files.hta
%ProgramFiles%\autodown\help.txt
%ProgramFiles%\autodown\how to decrypt files.hta
%ProgramFiles%\aswupdsv\cpriv.key
%ProgramFiles%\aswupdsv\help.txt
%ProgramFiles%\aswupdsv\how to decrypt files.hta
%ProgramFiles%\aswregsvr\cpriv.key
%ProgramFiles%\aswregsvr\help.txt
%ProgramFiles%\aswregsvr\how to decrypt files.hta
%ProgramFiles%\a2cmd\how to decrypt files.hta
%ProgramFiles%\avgscan\how to decrypt files.hta
%ProgramFiles%\ash_updatemediator\cpriv.key
%ProgramFiles%\ashwebsv\cpriv.key
%ProgramFiles%\ashwebsv\help.txt
%ProgramFiles%\ashwebsv\how to decrypt files.hta
%ProgramFiles%\ashupd\cpriv.key
%ProgramFiles%\ashupd\help.txt
%ProgramFiles%\ashupd\how to decrypt files.hta
%ProgramFiles%\ashskpck\cpriv.key
%ProgramFiles%\ashskpck\help.txt
%ProgramFiles%\ashskpck\how to decrypt files.hta
%ProgramFiles%\ash_updatemediator\help.txt
%ProgramFiles%\ash_updatemediator\how to decrypt files.hta
%ProgramFiles%\avginet\how to decrypt files.hta
%ProgramFiles%\360tray\how to decrypt files.hta
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\cpriv.key
C:\far2\plugins\arclite\how to decrypt files.hta
C:\far2\plugins\align\cpriv.key
C:\far2\plugins\align\help.txt
C:\far2\plugins\align\how to decrypt files.hta
C:\far2\plugins\cpriv.key
C:\far2\plugins\help.txt
C:\far2\plugins\how to decrypt files.hta
C:\far2\fexcept\cpriv.key
C:\far2\fexcept\help.txt
C:\far2\fexcept\how to decrypt files.hta
C:\far2\encyclopedia\tap\cpriv.key
C:\far2\encyclopedia\tap\help.txt
C:\far2\encyclopedia\tap\how to decrypt files.hta
C:\far2\encyclopedia\cpriv.key
C:\far2\encyclopedia\help.txt
C:\far2\encyclopedia\how to decrypt files.hta
C:\far2\documentation\rus\cpriv.key
C:\far2\documentation\rus\help.txt
C:\far2\documentation\rus\how to decrypt files.hta
C:\far2\documentation\eng\cpriv.key
C:\far2\plugins\arclite\cpriv.key
C:\far2\documentation\eng\help.txt
C:\far2\plugins\ftp\how to decrypt files.hta
C:\far2\documentation\eng\how to decrypt files.hta
C:\far2\plugins\filecase\cpriv.key
C:\far2\plugins\filecase\help.txt
C:\far2\plugins\filecase\how to decrypt files.hta
C:\far2\plugins\farcmds\cpriv.key
C:\far2\plugins\farcmds\help.txt
C:\far2\plugins\farcmds\how to decrypt files.hta
C:\far2\plugins\emenu\cpriv.key
C:\far2\plugins\emenu\help.txt
C:\far2\plugins\emenu\how to decrypt files.hta
C:\far2\plugins\editcase\cpriv.key
C:\far2\plugins\editcase\help.txt
C:\far2\plugins\editcase\how to decrypt files.hta
C:\far2\plugins\drawline\cpriv.key
C:\far2\plugins\drawline\help.txt
C:\far2\plugins\drawline\how to decrypt files.hta
C:\far2\plugins\compare\cpriv.key
C:\far2\plugins\compare\help.txt
C:\far2\plugins\compare\how to decrypt files.hta
C:\far2\plugins\brackets\cpriv.key
C:\far2\plugins\brackets\help.txt
C:\far2\plugins\brackets\how to decrypt files.hta
C:\far2\plugins\autowrap\help.txt
C:\far2\plugins\autowrap\how to decrypt files.hta
C:\far2\plugins\autowrap\cpriv.key
C:\far2\documentation\help.txt
C:\far2\addons\colors\custom_highlighting\how to decrypt files.hta
C:\far2\addons\help.txt
C:\far2\addons\how to decrypt files.hta
C:\far2\cpriv.key
C:\far2\help.txt
C:\far2\how to decrypt files.hta
C:\cpriv.key
C:\help.txt
C:\how to decrypt files.hta
D:\cpriv.key
D:\help.txt
D:\how to decrypt files.hta
%ALLUSERSPROFILE%\hello michaele gllips
%ALLUSERSPROFILE%\help.txt
%ALLUSERSPROFILE%\how to decrypt files.hta
%ALLUSERSPROFILE%\systemid
<Current directory>\systemid
%ALLUSERSPROFILE%\crptsrvcflg
%ALLUSERSPROFILE%\cpriv.key
%ALLUSERSPROFILE%\cpub.key
<Current directory>\cpub.key
C:\far2\addons\colors\how to decrypt files.hta
C:\far2\documentation\cpriv.key
C:\far2\plugins\ftp\help.txt
C:\far2\addons\cpriv.key
C:\far2\documentation\how to decrypt files.hta
C:\far2\addons\xlat\russian\cpriv.key
C:\far2\addons\xlat\russian\help.txt
C:\far2\addons\xlat\russian\how to decrypt files.hta
C:\far2\addons\xlat\cpriv.key
C:\far2\addons\xlat\help.txt
C:\far2\addons\xlat\how to decrypt files.hta
C:\far2\addons\shell\cpriv.key
C:\far2\addons\shell\help.txt
C:\far2\addons\shell\how to decrypt files.hta
C:\far2\addons\setup\cpriv.key
C:\far2\addons\setup\help.txt
C:\far2\addons\setup\how to decrypt files.hta
C:\far2\addons\macros\cpriv.key
C:\far2\addons\macros\help.txt
C:\far2\addons\macros\how to decrypt files.hta
C:\far2\addons\colors\default_highlighting\cpriv.key
C:\far2\addons\colors\default_highlighting\help.txt
C:\far2\addons\colors\default_highlighting\how to decrypt files.hta
C:\far2\addons\colors\custom_highlighting\cpriv.key
C:\far2\addons\colors\custom_highlighting\help.txt
C:\far2\addons\colors\cpriv.key
C:\far2\addons\colors\help.txt
C:\far2\plugins\ftp\cpriv.key
C:\far2\plugins\ftp\lib\how to decrypt files.hta
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\cpriv.key
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\help.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\how to decrypt files.hta
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\cpriv.key
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\help.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\how to decrypt files.hta
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\cpriv.key
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\help.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\how to decrypt files.hta
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\cpriv.key
%ProgramFiles%\help.txt
%ProgramFiles%\how to decrypt files.hta
C:\perflogs\admin\cpriv.key
C:\perflogs\admin\help.txt
C:\perflogs\admin\how to decrypt files.hta
C:\perflogs\cpriv.key
C:\perflogs\help.txt
C:\perflogs\how to decrypt files.hta
<Current directory>\help.txt
<Current directory>\how to decrypt files.hta
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\help.txt
C:\far2\plugins\arclite\help.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\how to decrypt files.hta
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\cpriv.key
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\help.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\how to decrypt files.hta
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
%ProgramFiles%\cpriv.key
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\far2\pluginsdk\headers.c\how to decrypt files.hta
C:\far2\pluginsdk\help.txt
C:\far2\pluginsdk\how to decrypt files.hta
C:\far2\plugins\tmppanel\cpriv.key
C:\far2\plugins\tmppanel\help.txt
C:\far2\plugins\tmppanel\how to decrypt files.hta
C:\far2\plugins\proclist\cpriv.key
C:\far2\plugins\proclist\help.txt
C:\far2\plugins\proclist\how to decrypt files.hta
C:\far2\plugins\network\cpriv.key
C:\far2\plugins\network\help.txt
C:\far2\plugins\network\how to decrypt files.hta
C:\far2\plugins\macroview\cpriv.key
C:\far2\plugins\macroview\help.txt
C:\far2\plugins\macroview\how to decrypt files.hta
C:\far2\plugins\hlfviewer\cpriv.key
C:\far2\plugins\hlfviewer\help.txt
C:\far2\plugins\hlfviewer\how to decrypt files.hta
C:\far2\plugins\ftp\lib\cpriv.key
C:\far2\plugins\ftp\lib\help.txt
C:\far2\pluginsdk\headers.c\help.txt
C:\far2\pluginsdk\headers.c\cpriv.key
C:\far2\pluginsdk\headers.pas\how to decrypt files.hta
C:\far2\pluginsdk\cpriv.key
C:\far2\pluginsdk\headers.pas\help.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\cpriv.key
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\cpriv.key
%ProgramFiles%\360tray\help.txt
%ProgramFiles%\avgscan\help.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\help.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\cpriv.key
C:\msocache\all users\help.txt
C:\msocache\all users\how to decrypt files.hta
C:\msocache\cpriv.key
C:\msocache\help.txt
C:\msocache\how to decrypt files.hta
C:\far2\pluginsdk\headers.pas\cpriv.key
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\how to decrypt files.hta
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\cpriv.key
%ProgramFiles%\antivirus\cpriv.key
%ProgramFiles%\avgscan\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fr-fr\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fr-fr\help.txt
%CommonProgramFiles%\microsoft shared\ink\fr-fr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fi-fi\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fi-fi\help.txt
%CommonProgramFiles%\microsoft shared\ink\fi-fi\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\et-ee\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\et-ee\help.txt
%CommonProgramFiles%\microsoft shared\ink\et-ee\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\es-es\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\es-es\help.txt
%CommonProgramFiles%\microsoft shared\ink\es-es\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\en-us\help.txt
%CommonProgramFiles%\microsoft shared\ink\el-gr\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\help.txt
%CommonProgramFiles%\microsoft shared\ink\he-il\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\help.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\he-il\help.txt
%CommonProgramFiles%\microsoft shared\ink\hr-hr\help.txt
%CommonProgramFiles%\microsoft shared\ink\he-il\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\hr-hr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\el-gr\help.txt
%CommonProgramFiles%\microsoft shared\filters\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\euro\cpriv.key
%CommonProgramFiles%\microsoft shared\euro\help.txt
%CommonProgramFiles%\microsoft shared\euro\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\equation\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\equation\1033\help.txt
%CommonProgramFiles%\microsoft shared\equation\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\equation\cpriv.key
%CommonProgramFiles%\microsoft shared\equation\help.txt
%CommonProgramFiles%\microsoft shared\equation\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\dw\cpriv.key
%CommonProgramFiles%\microsoft shared\dw\help.txt
%CommonProgramFiles%\microsoft shared\dw\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\cpriv.key
%CommonProgramFiles%\microsoft shared\help.txt
%CommonProgramFiles%\microsoft shared\how to decrypt files.hta
%CommonProgramFiles%\designer\cpriv.key
%CommonProgramFiles%\designer\help.txt
%CommonProgramFiles%\designer\how to decrypt files.hta
%CommonProgramFiles%\cpriv.key
%CommonProgramFiles%\microsoft shared\filters\help.txt
%CommonProgramFiles%\microsoft shared\ink\el-gr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\grphflt\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\grphflt\help.txt
%CommonProgramFiles%\microsoft shared\grphflt\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\de-de\help.txt
%CommonProgramFiles%\microsoft shared\ink\de-de\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\da-dk\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\da-dk\help.txt
%CommonProgramFiles%\microsoft shared\ink\da-dk\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\cs-cz\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\cs-cz\help.txt
%CommonProgramFiles%\microsoft shared\ink\cs-cz\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\bg-bg\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\bg-bg\help.txt
%CommonProgramFiles%\microsoft shared\ink\bg-bg\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\ar-sa\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\ar-sa\help.txt
%CommonProgramFiles%\microsoft shared\ink\ar-sa\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\help.txt
%CommonProgramFiles%\microsoft shared\ink\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\help\cpriv.key
%CommonProgramFiles%\microsoft shared\help\help.txt
%CommonProgramFiles%\microsoft shared\help\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\de-de\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\hr-hr\cpriv.key
%CommonProgramFiles%\microsoft shared\msclientdatamgr\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\nb-no\help.txt
%CommonProgramFiles%\microsoft shared\msinfo\help.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\cpriv.key
%CommonProgramFiles%\microsoft shared\msclientdatamgr\help.txt
%CommonProgramFiles%\microsoft shared\msclientdatamgr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\zh-tw\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\zh-tw\help.txt
%CommonProgramFiles%\microsoft shared\ink\zh-tw\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\zh-cn\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\zh-cn\help.txt
%CommonProgramFiles%\microsoft shared\ink\zh-cn\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\uk-ua\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\uk-ua\help.txt
%CommonProgramFiles%\microsoft shared\ink\uk-ua\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\tr-tr\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\tr-tr\help.txt
%CommonProgramFiles%\microsoft shared\ink\tr-tr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\th-th\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\th-th\help.txt
%CommonProgramFiles%\microsoft shared\ink\th-th\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\sv-se\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\sv-se\help.txt
%CommonProgramFiles%\microsoft shared\msinfo\en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\sv-se\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\msinfo\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\cultures\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\office setup controller\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\office setup controller\help.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\cultures\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\cultures\how to decrypt files.hta
%ProgramFiles%\cmgrdian\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\1033\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\1033\help.txt
%CommonProgramFiles%\microsoft shared\office14\1033\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\office14\cpriv.key
%CommonProgramFiles%\microsoft shared\office14\help.txt
%CommonProgramFiles%\microsoft shared\office14\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\msinfo\en-us\cpriv.key
%CommonProgramFiles%\microsoft shared\msinfo\en-us\help.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\help.txt
%CommonProgramFiles%\microsoft shared\msinfo\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\sl-si\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\nb-no\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\lv-lv\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\lt-lt\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\lt-lt\help.txt
%CommonProgramFiles%\microsoft shared\ink\lt-lt\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\ko-kr\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\ko-kr\help.txt
%CommonProgramFiles%\microsoft shared\ink\ko-kr\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\ja-jp\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\ja-jp\help.txt
%CommonProgramFiles%\microsoft shared\ink\ja-jp\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\it-it\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\it-it\help.txt
%CommonProgramFiles%\microsoft shared\ink\it-it\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\help.txt
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\hu-hu\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\hu-hu\help.txt
%CommonProgramFiles%\microsoft shared\ink\hu-hu\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\nb-no\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\lv-lv\help.txt
%CommonProgramFiles%\microsoft shared\ink\nl-nl\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\sl-si\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\pt-pt\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\lv-lv\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\sl-si\help.txt
%CommonProgramFiles%\microsoft shared\ink\sk-sk\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\sk-sk\help.txt
%CommonProgramFiles%\microsoft shared\ink\sk-sk\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\ru-ru\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\ru-ru\help.txt
%CommonProgramFiles%\microsoft shared\ink\ru-ru\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\ro-ro\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\ro-ro\help.txt
%CommonProgramFiles%\microsoft shared\filters\cpriv.key
%CommonProgramFiles%\help.txt
%CommonProgramFiles%\microsoft shared\ink\pt-pt\help.txt
%CommonProgramFiles%\microsoft shared\ink\pt-pt\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\pt-br\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\pt-br\help.txt
%CommonProgramFiles%\microsoft shared\ink\pt-br\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\pl-pl\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\pl-pl\help.txt
%CommonProgramFiles%\microsoft shared\ink\pl-pl\how to decrypt files.hta
%CommonProgramFiles%\microsoft shared\ink\nl-nl\cpriv.key
%CommonProgramFiles%\microsoft shared\ink\nl-nl\help.txt
%CommonProgramFiles%\microsoft shared\ink\ro-ro\how to decrypt files.hta
%CommonProgramFiles%\how to decrypt files.hta
%ProgramFiles%\cmgrdian\help.txt
%ProgramFiles%\avgupden\how to decrypt files.hta
%ProgramFiles%\bdmcon\how to decrypt files.hta
%ProgramFiles%\bdsurvey\cpriv.key
%ProgramFiles%\bdsurvey\help.txt
%ProgramFiles%\bdsurvey\how to decrypt files.hta
%ProgramFiles%\bdsubmitwiz\cpriv.key
%ProgramFiles%\bdsubmitwiz\help.txt
%ProgramFiles%\bdsubmitwiz\how to decrypt files.hta
%ProgramFiles%\bdsubmit\cpriv.key
%ProgramFiles%\bdsubmit\help.txt
%ProgramFiles%\bdsubmit\how to decrypt files.hta
%ProgramFiles%\bdss\cpriv.key
%ProgramFiles%\bdss\help.txt
%ProgramFiles%\bdss\how to decrypt files.hta
%ProgramFiles%\bdoesrv\cpriv.key
%ProgramFiles%\bdoesrv\help.txt
%ProgramFiles%\bdoesrv\how to decrypt files.hta
%ProgramFiles%\bdnews\cpriv.key
%ProgramFiles%\bdnews\help.txt
%ProgramFiles%\bdnews\how to decrypt files.hta
%ProgramFiles%\bdmcon\cpriv.key
%ProgramFiles%\bdmcon\help.txt
%ProgramFiles%\bdagent\help.txt
%ProgramFiles%\bdswitch\help.txt
%ProgramFiles%\bdswitch\cpriv.key
%ProgramFiles%\bdwizreg\how to decrypt files.hta
%ProgramFiles%\bdwizreg\help.txt
%ProgramFiles%\cafix\how to decrypt files.hta
%ProgramFiles%\cabalmain\cpriv.key
%ProgramFiles%\cabalmain\help.txt
%ProgramFiles%\cabalmain\how to decrypt files.hta
%ProgramFiles%\btinint\cpriv.key
%ProgramFiles%\btinint\help.txt
%ProgramFiles%\btinint\how to decrypt files.hta
%ProgramFiles%\btini\cpriv.key
%ProgramFiles%\btini\help.txt
%ProgramFiles%\btini\how to decrypt files.hta
%ProgramFiles%\blindman\cpriv.key
%ProgramFiles%\blindman\help.txt
%ProgramFiles%\blindman\how to decrypt files.hta
%ProgramFiles%\blackice\cpriv.key
%ProgramFiles%\blackice\help.txt
%ProgramFiles%\blackice\how to decrypt files.hta
%ProgramFiles%\blackd\cpriv.key
%ProgramFiles%\blackd\help.txt
%ProgramFiles%\blackd\how to decrypt files.hta
%ProgramFiles%\bdwizreg\cpriv.key
%ProgramFiles%\cafix\help.txt
%ProgramFiles%\bdagent\cpriv.key
%ProgramFiles%\bdagent\how to decrypt files.hta
%ProgramFiles%\avscan\how to decrypt files.hta
%ProgramFiles%\avkserv\cpriv.key
%ProgramFiles%\avkserv\help.txt
%ProgramFiles%\avkserv\how to decrypt files.hta
%ProgramFiles%\avinitnt\cpriv.key
%ProgramFiles%\avinitnt\help.txt
%ProgramFiles%\avinitnt\how to decrypt files.hta
%ProgramFiles%\avgwizfw\cpriv.key
%ProgramFiles%\avgwizfw\help.txt
%ProgramFiles%\avgwizfw\how to decrypt files.hta
%ProgramFiles%\avgw\cpriv.key
%ProgramFiles%\avgw\help.txt
%ProgramFiles%\avgw\how to decrypt files.hta
%ProgramFiles%\avgvv\cpriv.key
%ProgramFiles%\avgvv\help.txt
%ProgramFiles%\avgvv\how to decrypt files.hta
%ProgramFiles%\avgupsvc\cpriv.key
%ProgramFiles%\avgupsvc\help.txt
%ProgramFiles%\avgupsvc\how to decrypt files.hta
%ProgramFiles%\avgupden\cpriv.key
%ProgramFiles%\avgupden\help.txt
%ProgramFiles%\avkservice\help.txt
%ProgramFiles%\avkservice\cpriv.key
%ProgramFiles%\avkservice\how to decrypt files.hta
%ProgramFiles%\avkwctl\how to decrypt files.hta
%ProgramFiles%\backweb-4476822\cpriv.key
%ProgramFiles%\avkwctl\help.txt
%ProgramFiles%\backweb-4476822\help.txt
%ProgramFiles%\backweb-4476822\how to decrypt files.hta
%ProgramFiles%\b2\cpriv.key
%ProgramFiles%\b2\help.txt
%ProgramFiles%\b2\how to decrypt files.hta
%ProgramFiles%\avsynmgr\cpriv.key
%ProgramFiles%\avsynmgr\help.txt
%ProgramFiles%\avsynmgr\how to decrypt files.hta
%ProgramFiles%\avscan\cpriv.key
%ProgramFiles%\firefox\chrome\toolkit\content\global\xml\help.txt
%ProgramFiles%\cafix\cpriv.key
%ProgramFiles%\avpm\cpriv.key
%ProgramFiles%\avpm\help.txt
%ProgramFiles%\avpm\how to decrypt files.hta
%ProgramFiles%\avpcc\cpriv.key
%ProgramFiles%\avpcc\help.txt
%ProgramFiles%\avpcc\how to decrypt files.hta
%ProgramFiles%\avnotify\cpriv.key
%ProgramFiles%\avnotify\help.txt
%ProgramFiles%\avnotify\how to decrypt files.hta
%ProgramFiles%\avkwctl\cpriv.key
%ProgramFiles%\avscan\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\alerts\help.txt
%ProgramFiles%\cavapp\how to decrypt files.hta
%ProgramFiles%\cavscons\how to decrypt files.hta
%ProgramFiles%\ccevtmgr\cpriv.key
%ProgramFiles%\clamwin\how to decrypt files.hta
%ProgramFiles%\clamtray\cpriv.key
%ProgramFiles%\clamtray\help.txt
%ProgramFiles%\clamtray\how to decrypt files.hta
%ProgramFiles%\clamscan\cpriv.key
%ProgramFiles%\clamscan\help.txt
%ProgramFiles%\clamscan\how to decrypt files.hta
%ProgramFiles%\chrome\cpriv.key
%ProgramFiles%\chrome\help.txt
%ProgramFiles%\chrome\how to decrypt files.hta
%ProgramFiles%\cemrep\cpriv.key
%ProgramFiles%\cemrep\help.txt
%ProgramFiles%\cemrep\how to decrypt files.hta
%ProgramFiles%\ccsetmgr\cpriv.key
%ProgramFiles%\ccsetmgr\help.txt
%ProgramFiles%\ccsetmgr\how to decrypt files.hta
%ProgramFiles%\ccproxy\cpriv.key
%ProgramFiles%\ccproxy\help.txt
%ProgramFiles%\ccproxy\how to decrypt files.hta
%ProgramFiles%\ccleaner\cpriv.key
%ProgramFiles%\clamwin\help.txt
%ProgramFiles%\ccleaner\help.txt
%ProgramFiles%\claw95\how to decrypt files.hta
%ProgramFiles%\claw95\help.txt
%ProgramFiles%\cleaner3\cpriv.key
%ProgramFiles%\cmgrdian\how to decrypt files.hta
%ProgramFiles%\cmain\cpriv.key
%ProgramFiles%\cmain\help.txt
%ProgramFiles%\cmain\how to decrypt files.hta
%ProgramFiles%\clrcche\cpriv.key
%ProgramFiles%\clrcche\help.txt
%ProgramFiles%\clrcche\how to decrypt files.hta
%ProgramFiles%\clisvc\cpriv.key
%ProgramFiles%\clisvc\help.txt
%ProgramFiles%\clisvc\how to decrypt files.hta
%ProgramFiles%\cleaner3\help.txt
%ProgramFiles%\bdswitch\how to decrypt files.hta
%ProgramFiles%\cleaner3\how to decrypt files.hta
%ProgramFiles%\cleaner\cpriv.key
%ProgramFiles%\cleaner\help.txt
%ProgramFiles%\cleaner\how to decrypt files.hta
%ProgramFiles%\claw95cf\cpriv.key
%ProgramFiles%\claw95cf\help.txt
%ProgramFiles%\claw95cf\how to decrypt files.hta
%ProgramFiles%\claw95\cpriv.key
%ProgramFiles%\clamwin\cpriv.key
%ProgramFiles%\ccleaner\how to decrypt files.hta
%ProgramFiles%\ccevtmgr\help.txt
%ProgramFiles%\ccevtmgr\how to decrypt files.hta
%ProgramFiles%\cavscons\help.txt
%ProgramFiles%\cavq\help.txt
%ProgramFiles%\cavq\how to decrypt files.hta
%ProgramFiles%\cavoar\cpriv.key
%ProgramFiles%\cavoar\help.txt
%ProgramFiles%\cavoar\how to decrypt files.hta
%ProgramFiles%\cavmud\cpriv.key
%ProgramFiles%\cavmud\help.txt
%ProgramFiles%\cavmud\how to decrypt files.hta
%ProgramFiles%\cavmr\cpriv.key
%ProgramFiles%\cavmr\help.txt
%ProgramFiles%\cavmr\how to decrypt files.hta
%ProgramFiles%\cavemsrv\cpriv.key
%ProgramFiles%\cavemsrv\help.txt
%ProgramFiles%\cavemsrv\how to decrypt files.hta
%ProgramFiles%\cavaud\cpriv.key
%ProgramFiles%\cavaud\help.txt
%ProgramFiles%\cavaud\how to decrypt files.hta
%ProgramFiles%\cavasm\cpriv.key
%ProgramFiles%\cavasm\help.txt
%ProgramFiles%\cavasm\how to decrypt files.hta
%ProgramFiles%\cavq\cpriv.key
%ProgramFiles%\cavscons\cpriv.key
%ProgramFiles%\ccapp\help.txt
%ProgramFiles%\cavse\help.txt
%ProgramFiles%\ccapp\cpriv.key
%ProgramFiles%\cavse\how to decrypt files.hta
%ProgramFiles%\ccapp\how to decrypt files.hta
%ProgramFiles%\cavvl\cpriv.key
%ProgramFiles%\cavvl\help.txt
%ProgramFiles%\cavvl\how to decrypt files.hta
%ProgramFiles%\cavuserupd\cpriv.key
%ProgramFiles%\cavuserupd\help.txt
%ProgramFiles%\cavuserupd\how to decrypt files.hta
%ProgramFiles%\cavumas\cpriv.key
%ProgramFiles%\cavapp\cpriv.key
%ProgramFiles%\cavumas\help.txt
%ProgramFiles%\cavumas\how to decrypt files.hta
%ProgramFiles%\cavsubmit\help.txt
%ProgramFiles%\cavsubmit\how to decrypt files.hta
%ProgramFiles%\cavsub\cpriv.key
%ProgramFiles%\cavsub\help.txt
%ProgramFiles%\cavsub\how to decrypt files.hta
%ProgramFiles%\cavsn\cpriv.key
%ProgramFiles%\cavsn\help.txt
%ProgramFiles%\cavsn\how to decrypt files.hta
%ProgramFiles%\cavse\cpriv.key
%ProgramFiles%\cavapp\help.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\xml\cpriv.key

Moves the following files

from %ProgramFiles%\360tray\360tray.exe to %ProgramFiles%\360tray\360tray.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavvl\cavvl.exe to %ProgramFiles%\cavvl\cavvl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ccapp\ccapp.exe to %ProgramFiles%\ccapp\ccapp.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ccevtmgr\ccevtmgr.exe to %ProgramFiles%\ccevtmgr\ccevtmgr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ccleaner\ccleaner.exe to %ProgramFiles%\ccleaner\ccleaner.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ccproxy\ccproxy.exe to %ProgramFiles%\ccproxy\ccproxy.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ccsetmgr\ccsetmgr.exe to %ProgramFiles%\ccsetmgr\ccsetmgr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cemrep\cemrep.exe to %ProgramFiles%\cemrep\cemrep.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\chrome\chrome.exe to %ProgramFiles%\chrome\chrome.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\clamscan\clamscan.exe to %ProgramFiles%\clamscan\clamscan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\clamtray\clamtray.exe to %ProgramFiles%\clamtray\clamtray.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\clamwin\clamwin.exe to %ProgramFiles%\clamwin\clamwin.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\claw95\claw95.exe to %ProgramFiles%\claw95\claw95.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\claw95cf\claw95cf.exe to %ProgramFiles%\claw95cf\claw95cf.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cleaner\cleaner.exe to %ProgramFiles%\cleaner\cleaner.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cleaner3\cleaner3.exe to %ProgramFiles%\cleaner3\cleaner3.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\clisvc\clisvc.exe to %ProgramFiles%\clisvc\clisvc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\clrcche\clrcche.exe to %ProgramFiles%\clrcche\clrcche.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cmain\cmain.exe to %ProgramFiles%\cmain\cmain.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cmgrdian\cmgrdian.exe to %ProgramFiles%\cmgrdian\cmgrdian.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavuserupd\cavuserupd.exe to %ProgramFiles%\cavuserupd\cavuserupd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\copyx64\copyx64.exe to %ProgramFiles%\copyx64\copyx64.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavumas\cavumas.exe to %ProgramFiles%\cavumas\cavumas.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavsub\cavsub.exe to %ProgramFiles%\cavsub\cavsub.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdwizreg\bdwizreg.exe to %ProgramFiles%\bdwizreg\bdwizreg.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\blackd\blackd.exe to %ProgramFiles%\blackd\blackd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\blackice\blackice.exe to %ProgramFiles%\blackice\blackice.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\blindman\blindman.exe to %ProgramFiles%\blindman\blindman.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\btini\btini.exe to %ProgramFiles%\btini\btini.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\btinint\btinint.exe to %ProgramFiles%\btinint\btinint.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cabalmain\cabalmain.exe to %ProgramFiles%\cabalmain\cabalmain.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cafix\cafix.exe to %ProgramFiles%\cafix\cafix.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavapp\cavapp.exe to %ProgramFiles%\cavapp\cavapp.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavasm\cavasm.exe to %ProgramFiles%\cavasm\cavasm.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavaud\cavaud.exe to %ProgramFiles%\cavaud\cavaud.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavemsrv\cavemsrv.exe to %ProgramFiles%\cavemsrv\cavemsrv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavmr\cavmr.exe to %ProgramFiles%\cavmr\cavmr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavmud\cavmud.exe to %ProgramFiles%\cavmud\cavmud.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavoar\cavoar.exe to %ProgramFiles%\cavoar\cavoar.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavq\cavq.exe to %ProgramFiles%\cavq\cavq.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavscons\cavscons.exe to %ProgramFiles%\cavscons\cavscons.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavse\cavse.exe to %ProgramFiles%\cavse\cavse.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavsn\cavsn.exe to %ProgramFiles%\cavsn\cavsn.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cavsubmit\cavsubmit.exe to %ProgramFiles%\cavsubmit\cavsubmit.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drweb32w\drweb32w.exe to %ProgramFiles%\drweb32w\drweb32w.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\filezilla\filezilla.exe to %ProgramFiles%\filezilla\filezilla.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\csendto\csendto.exe to %ProgramFiles%\csendto\csendto.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drwebupw\drwebupw.exe to %ProgramFiles%\drwebupw\drwebupw.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drwebwcl\drwebwcl.exe to %ProgramFiles%\drwebwcl\drwebwcl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drwreg\drwreg.exe to %ProgramFiles%\drwreg\drwreg.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ecmd\ecmd.exe to %ProgramFiles%\ecmd\ecmd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\egni\egni.exe to %ProgramFiles%\egni\egni.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ehsniffer\ehsniffer.exe to %ProgramFiles%\ehsniffer\ehsniffer.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ekrn\ekrn.exe to %ProgramFiles%\ekrn\ekrn.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\elementclient\elementclient.exe to %ProgramFiles%\elementclient\elementclient.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\etherd\etherd.exe to %ProgramFiles%\etherd\etherd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\eudora\eudora.exe to %ProgramFiles%\eudora\eudora.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ewidoctrl\ewidoctrl.exe to %ProgramFiles%\ewidoctrl\ewidoctrl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\exit_av\exit_av.exe to %ProgramFiles%\exit_av\exit_av.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe to %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\f-sched\f-sched.exe to %ProgramFiles%\f-sched\f-sched.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\fameh32\fameh32.exe to %ProgramFiles%\fameh32\fameh32.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\far\far.exe to %ProgramFiles%\far\far.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\fch32\fch32.exe to %ProgramFiles%\fch32\fch32.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\fdm\fdm.exe to %ProgramFiles%\fdm\fdm.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\fdmwi\fdmwi.exe to %ProgramFiles%\fdmwi\fdmwi.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drwebscd\drwebscd.exe to %ProgramFiles%\drwebscd\drwebscd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdswitch\bdswitch.exe to %ProgramFiles%\bdswitch\bdswitch.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drweb386\drweb386.exe to %ProgramFiles%\drweb386\drweb386.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drweb\drweb.exe to %ProgramFiles%\drweb\drweb.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cssexc\cssexc.exe to %ProgramFiles%\cssexc\cssexc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\custinstall\custinstall.exe to %ProgramFiles%\custinstall\custinstall.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\custsetup\custsetup.exe to %ProgramFiles%\custsetup\custsetup.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cuteftp\cuteftp.exe to %ProgramFiles%\cuteftp\cuteftp.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dbconvert\dbconvert.exe to %ProgramFiles%\dbconvert\dbconvert.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dbtool\dbtool.exe to %ProgramFiles%\dbtool\dbtool.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\defensewall\defensewall.exe to %ProgramFiles%\defensewall\defensewall.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\defwatch\defwatch.exe to %ProgramFiles%\defwatch\defwatch.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dekaron\dekaron.exe to %ProgramFiles%\dekaron\dekaron.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\digsby\digsby.exe to %ProgramFiles%\digsby\digsby.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\digsby-app\digsby-app.exe to %ProgramFiles%\digsby-app\digsby-app.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\directftp\directftp.exe to %ProgramFiles%\directftp\directftp.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dislite\dislite.exe to %ProgramFiles%\dislite\dislite.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dnf\dnf.exe to %ProgramFiles%\dnf\dnf.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\dpatrolq\dpatrolq.exe to %ProgramFiles%\dpatrolq\dpatrolq.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drvctl\drvctl.exe to %ProgramFiles%\drvctl\drvctl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drvirus\drvirus.exe to %ProgramFiles%\drvirus\drvirus.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drvmap\drvmap.exe to %ProgramFiles%\drvmap\drvmap.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\drwadins\drwadins.exe to %ProgramFiles%\drwadins\drwadins.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\courier\courier.exe to %ProgramFiles%\courier\courier.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\cpd\cpd.exe to %ProgramFiles%\cpd\cpd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdsurvey\bdsurvey.exe to %ProgramFiles%\bdsurvey\bdsurvey.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashwebsv\ashwebsv.exe to %ProgramFiles%\ashwebsv\ashwebsv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\antivirus\antivirus.exe to %ProgramFiles%\antivirus\antivirus.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aoltbserver\aoltbserver.exe to %ProgramFiles%\aoltbserver\aoltbserver.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\armor2net\armor2net.exe to %ProgramFiles%\armor2net\armor2net.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\armorsurf\armorsurf.exe to %ProgramFiles%\armorsurf\armorsurf.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ash\ash.exe to %ProgramFiles%\ash\ash.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashavast\ashavast.exe to %ProgramFiles%\ashavast\ashavast.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashavsrv\ashavsrv.exe to %ProgramFiles%\ashavsrv\ashavsrv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashchest\ashchest.exe to %ProgramFiles%\ashchest\ashchest.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashdisp\ashdisp.exe to %ProgramFiles%\ashdisp\ashdisp.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashdug\ashdug.exe to %ProgramFiles%\ashdug\ashdug.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashenhcd\ashenhcd.exe to %ProgramFiles%\ashenhcd\ashenhcd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashlogv\ashlogv.exe to %ProgramFiles%\ashlogv\ashlogv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashmaisv\ashmaisv.exe to %ProgramFiles%\ashmaisv\ashmaisv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashpopwz\ashpopwz.exe to %ProgramFiles%\ashpopwz\ashpopwz.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashquick\ashquick.exe to %ProgramFiles%\ashquick\ashquick.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashserv\ashserv.exe to %ProgramFiles%\ashserv\ashserv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashsimp2\ashsimp2.exe to %ProgramFiles%\ashsimp2\ashsimp2.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashsimpl\ashsimpl.exe to %ProgramFiles%\ashsimpl\ashsimpl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashskpcc\ashskpcc.exe to %ProgramFiles%\ashskpcc\ashskpcc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\anti-trojan\anti-trojan.exe to %ProgramFiles%\anti-trojan\anti-trojan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashskpck\ashskpck.exe to %ProgramFiles%\ashskpck\ashskpck.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\amsn\amsn.exe to %ProgramFiles%\amsn\amsn.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\alsvc\alsvc.exe to %ProgramFiles%\alsvc\alsvc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2cmd\a2cmd.exe to %ProgramFiles%\a2cmd\a2cmd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2guard\a2guard.exe to %ProgramFiles%\a2guard\a2guard.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2hijackfree\a2hijackfree.exe to %ProgramFiles%\a2hijackfree\a2hijackfree.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2scan\a2scan.exe to %ProgramFiles%\a2scan\a2scan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2service\a2service.exe to %ProgramFiles%\a2service\a2service.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2start\a2start.exe to %ProgramFiles%\a2start\a2start.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2upd\a2upd.exe to %ProgramFiles%\a2upd\a2upd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\a2wizard\a2wizard.exe to %ProgramFiles%\a2wizard\a2wizard.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aavshield\aavshield.exe to %ProgramFiles%\aavshield\aavshield.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\about\about.exe to %ProgramFiles%\about\about.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ackwin32\ackwin32.exe to %ProgramFiles%\ackwin32\ackwin32.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\admunch\admunch.exe to %ProgramFiles%\admunch\admunch.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\agb5\agb5.exe to %ProgramFiles%\agb5\agb5.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ageofconan\ageofconan.exe to %ProgramFiles%\ageofconan\ageofconan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ahnsd\ahnsd.exe to %ProgramFiles%\ahnsd\ahnsd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aim6\aim6.exe to %ProgramFiles%\aim6\aim6.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aimpro\aimpro.exe to %ProgramFiles%\aimpro\aimpro.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\airdefense\airdefense.exe to %ProgramFiles%\airdefense\airdefense.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\almon\almon.exe to %ProgramFiles%\almon\almon.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\amon\amon.exe to %ProgramFiles%\amon\amon.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgscan\avgscan.exe to %ProgramFiles%\avgscan\avgscan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdsubmit\bdsubmit.exe to %ProgramFiles%\bdsubmit\bdsubmit.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe to %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgvv\avgvv.exe to %ProgramFiles%\avgvv\avgvv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgw\avgw.exe to %ProgramFiles%\avgw\avgw.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgwizfw\avgwizfw.exe to %ProgramFiles%\avgwizfw\avgwizfw.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avinitnt\avinitnt.exe to %ProgramFiles%\avinitnt\avinitnt.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avkserv\avkserv.exe to %ProgramFiles%\avkserv\avkserv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avkservice\avkservice.exe to %ProgramFiles%\avkservice\avkservice.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avkwctl\avkwctl.exe to %ProgramFiles%\avkwctl\avkwctl.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avnotify\avnotify.exe to %ProgramFiles%\avnotify\avnotify.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avpcc\avpcc.exe to %ProgramFiles%\avpcc\avpcc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avpm\avpm.exe to %ProgramFiles%\avpm\avpm.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avscan\avscan.exe to %ProgramFiles%\avscan\avscan.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avsynmgr\avsynmgr.exe to %ProgramFiles%\avsynmgr\avsynmgr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\b2\b2.exe to %ProgramFiles%\b2\b2.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\backweb-4476822\backweb-4476822.exe to %ProgramFiles%\backweb-4476822\backweb-4476822.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdagent\bdagent.exe to %ProgramFiles%\bdagent\bdagent.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdmcon\bdmcon.exe to %ProgramFiles%\bdmcon\bdmcon.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdnews\bdnews.exe to %ProgramFiles%\bdnews\bdnews.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdoesrv\bdoesrv.exe to %ProgramFiles%\bdoesrv\bdoesrv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdss\bdss.exe to %ProgramFiles%\bdss\bdss.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgupsvc\avgupsvc.exe to %ProgramFiles%\avgupsvc\avgupsvc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe to %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgupden\avgupden.exe to %ProgramFiles%\avgupden\avgupden.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgrssvc\avgrssvc.exe to %ProgramFiles%\avgrssvc\avgrssvc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aswregsvr\aswregsvr.exe to %ProgramFiles%\aswregsvr\aswregsvr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\aswupdsv\aswupdsv.exe to %ProgramFiles%\aswupdsv\aswupdsv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\autodown\autodown.exe to %ProgramFiles%\autodown\autodown.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\autostartexplorer\autostartexplorer.exe to %ProgramFiles%\autostartexplorer\autostartexplorer.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\autotrace\autotrace.exe to %ProgramFiles%\autotrace\autotrace.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avadmin\avadmin.exe to %ProgramFiles%\avadmin\avadmin.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avcenter\avcenter.exe to %ProgramFiles%\avcenter\avcenter.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avciman\avciman.exe to %ProgramFiles%\avciman\avciman.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avcmd\avcmd.exe to %ProgramFiles%\avcmd\avcmd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avconfig\avconfig.exe to %ProgramFiles%\avconfig\avconfig.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avconsol\avconsol.exe to %ProgramFiles%\avconsol\avconsol.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgamsvr\avgamsvr.exe to %ProgramFiles%\avgamsvr\avgamsvr.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgcc\avgcc.exe to %ProgramFiles%\avgcc\avgcc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgdiag\avgdiag.exe to %ProgramFiles%\avgdiag\avgdiag.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgemc\avgemc.exe to %ProgramFiles%\avgemc\avgemc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgfwsrv\avgfwsrv.exe to %ProgramFiles%\avgfwsrv\avgfwsrv.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avginet\avginet.exe to %ProgramFiles%\avginet\avginet.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgnpdln\avgnpdln.exe to %ProgramFiles%\avgnpdln\avgnpdln.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\avgnpsvc\avgnpsvc.exe to %ProgramFiles%\avgnpsvc\avgnpsvc.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\ashupd\ashupd.exe to %ProgramFiles%\ashupd\ashupd.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof
from %ProgramFiles%\firebird\firebird.exe to %ProgramFiles%\firebird\firebird.exe.email=[maschinengewehr@fonix.email]id=[59230cdf].xinof

Creates ransom message files (Trojan.Encoder).

Modifies user data files (Trojan.Encoder).

Miscellaneous

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c schtasks /CREATE /SC ONLOGON /TN fonix /TR %ALLUSERSPROFILE%\XINOF.exe /RU SYSTEM /RL HIGHEST /F
'%WINDIR%\syswow64\cmd.exe' /c reg delete HKEY_CURRENT_USER\System\CurrentControlSet\Control\SafeBoot /va /F
'%WINDIR%\syswow64\reg.exe' delete HKEY_CURRENT_USER\System\CurrentControlSet\Control\SafeBoot /va /F
'%WINDIR%\syswow64\cmd.exe' /c reg delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot /va /F
'%WINDIR%\syswow64\reg.exe' delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot /va /F
'%WINDIR%\syswow64\cmd.exe' /c start cmd.exe /c icacls * /grant Everyone:(OI)(CI)F /T /C /Q
'%WINDIR%\syswow64\cmd.exe' /c icacls * /grant Everyone:(OI)(CI)F /T /C /Q
'%WINDIR%\syswow64\cmd.exe' /c Copy Cpub.key %ALLUSERSPROFILE%\Cpub.key
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v StartMenuLogOff /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\cmd.exe' /c Copy SystemID %ALLUSERSPROFILE%\SystemID
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System /v AllowBlockingAppsAtShutdown /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\icacls.exe' * /grant Everyone:(OI)(CI)F /T /C /Q
'%WINDIR%\syswow64\reg.exe' add HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System /v AllowBlockingAppsAtShutdown /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\reg.exe' add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\reg.exe' add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\cmd.exe' /c Copy Cpriv.key %ALLUSERSPROFILE%\Cpriv.key
'%WINDIR%\syswow64\cmd.exe' /c reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\schtasks.exe' /CREATE /SC ONLOGON /TN fonix /TR %ALLUSERSPROFILE%\XINOF.exe /RU SYSTEM /RL HIGHEST /F
'%WINDIR%\syswow64\cmd.exe' /c copy XINOF.exe %appdata%\Microsoft\Windows\Start Menu\Programs\Startup\XINOF.exe
'%WINDIR%\syswow64\cmd.exe' /c attrib +h +s %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\XINOF.exe
'%WINDIR%\syswow64\attrib.exe' +h +s %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\XINOF.exe
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\reg.exe' add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\reg.exe' add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\reg.exe' add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\reg.exe' add HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ /v "PhoenixTechnology" /t REG_SZ /d %ALLUSERSPROFILE%\XINOF.exe /f
'%WINDIR%\syswow64\cmd.exe' /c reg add HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\reg.exe' add HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\reg.exe' add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
'%WINDIR%\syswow64\reg.exe' add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v StartMenuLogOff /t REG_DWORD /d 1 /f

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial