Trojan.Encoder.36319

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsMpEng' = '"%LOCALAPPDATA%\{74983A24-E04C-621F-6F97-90345BDB570E}\MsMpEng.exe" '
[HKLM\Software\Classes\exefile\shell\open\command] '' = '"%1" %*'
[HKCU\Software\Classes\exefile\shell\open\command] '' = '"%1" %*'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SearchIndexer.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SearchProtocolHost.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SearchApp.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wsqmcons.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tasklist.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskkill.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\perfmon.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logoff.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shutdown.exe] 'Debugger' = '<SYSTEM32>\Systray.exe'
[HKLM\Software\Classes\mimicfile\shell\open\command] '' = 'notepad.exe "%LOCALAPPDATA%\How-to-decrypt.txt"'

Infects the following executable files

%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.giapk33vw
%ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.giapk33vw

Malicious functions

To complicate detection of its presence in the operating system,

blocks execution of the following system utilities:

Windows Defender

blocks the following features:

User Account Control (UAC)

modifies the following system settings:

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoClose' = '00000001'
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'StartMenuLogOff' = '00000001'

Modifies file system

Creates the following files

%TEMP%\7zipsfx.000\7za.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything32.dll
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything64.dll
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\sdel.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\sdel64.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\session.tmp
C:\temp\session.tmp
%TEMP%\7zipsfx.000\recoveryhelpingonionmailorg.ex_.exe
%TEMP%\autcbc7.tmp
%TEMP%\ksibhov
<SYSTEM32>\grouppolicy\machine\registry.pol
<SYSTEM32>\grouppolicy\gpt.ini
%ALLUSERSPROFILE%\ntuser.pol
%HOMEPATH%\ntuser.pol
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything2.ini
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything.ini
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\dc.ini
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\dc.exe
%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\7za.exe
%TEMP%\7zipsfx.000\session.tmp
%TEMP%\7zipsfx.000\sdel64.exe
%TEMP%\7zipsfx.000\sdel.exe
C:\how-to-decrypt.txt
%TEMP%\7zipsfx.000\dc.exe
%TEMP%\7zipsfx.000\everything2.ini
%TEMP%\7zipsfx.000\everything.ini
%TEMP%\7zipsfx.000\dc.ini
%TEMP%\7zipsfx.000\everything64.dll
%TEMP%\7zipsfx.000\everything32.dll
%TEMP%\7zipsfx.000\everything.exe
%TEMP%\7zsfx000.cmd
%LOCALAPPDATA%\how-to-decrypt.txt

Sets the 'hidden' attribute to the following files

%ALLUSERSPROFILE%\tempntuser.pol

Deletes the following files

%TEMP%\autcbc7.tmp
%TEMP%\ksibhov
%ALLUSERSPROFILE%\tempntuser.pol
%TEMP%\7zipsfx.000\7za.exe
%TEMP%\7zipsfx.000\dc.exe
%TEMP%\7zipsfx.000\dc.ini
%TEMP%\7zipsfx.000\everything.exe
%TEMP%\7zipsfx.000\everything.ini
%TEMP%\7zipsfx.000\everything2.ini
%TEMP%\7zipsfx.000\everything32.dll
%TEMP%\7zipsfx.000\everything64.dll
%TEMP%\7zipsfx.000\recoveryhelpingonionmailorg.ex_.exe
%TEMP%\7zipsfx.000\sdel.exe
%TEMP%\7zipsfx.000\sdel64.exe
%TEMP%\7zipsfx.000\session.tmp
%TEMP%\7zsfx000.cmd

Moves the following files

from %ALLUSERSPROFILE%\ntuser.pol to %ALLUSERSPROFILE%\tempntuser.pol
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\adjacencyresume.dotx to %ProgramFiles%\microsoft office\templates\1033\adjacencyresume.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\adjacencyreport.dotx to %ProgramFiles%\microsoft office\templates\1033\adjacencyreport.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\adjacencymergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\adjacencymergeletter.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\adjacencyletter.dotx to %ProgramFiles%\microsoft office\templates\1033\adjacencyletter.dotx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx to %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\adjacency.eftx.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adelrcp.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adelrcp.exe.giapk33vw
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\datatype\address.accft to %ProgramFiles%\microsoft office\templates\1033\access\datatype\address.accft.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addonstartup.json.lz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addonstartup.json.lz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addonstartup.json.lz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addonstartup.json.lz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addonstartup.json.lz4.giapk33vw
from %ProgramFiles%\microsoft office\office14\forms\1033\activity.cfg to %ProgramFiles%\microsoft office\office14\forms\1033\activity.cfg.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addons.json to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\addons.json.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addons.json to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\addons.json.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\add_reviewer.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\add_reviewer.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\add.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\add.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\add.gif to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\add.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\ad98.poc to %ProgramFiles%\microsoft office\office14\pubwiz\ad98.poc.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\ad2fd2bd-0727-4af7-8917-aaed8627ed47.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\ad2fd2bd-0727-4af7-8917-aaed8627ed47.ico.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\ad.dpv to %ProgramFiles%\microsoft office\office14\pubwiz\ad.dpv.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzusr12.accdu.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwztool.accde.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzmain.accde.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde to %ProgramFiles%\microsoft office\office14\accwiz\acwzlib.accde.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu to %ProgramFiles%\microsoft office\office14\accwiz\acwzdat12.accdu.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addons.json to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\addons.json.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\acwizrc.dll to %ProgramFiles%\microsoft office\office14\1033\acwizrc.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css.giapk33vw
from %ProgramFiles%\microsoft office\office14\advzip.dic to %ProgramFiles%\microsoft office\office14\advzip.dic.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobe.reader.dependencies.manifest.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css.giapk33vw
from %ProgramFiles%\microsoft office\office14\advtel.dic to %ProgramFiles%\microsoft office\office14\advtel.dic.giapk33vw
from %ProgramFiles%\microsoft office\office14\advcmp.dic to %ProgramFiles%\microsoft office\office14\advcmp.dic.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\adrespel.poc to %ProgramFiles%\microsoft office\office14\pubwiz\adrespel.poc.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobexmp.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobexmp.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adoberfp.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adoberfp.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf to %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\adobepistd.otf.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\adobepdf417.pmp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\adobepdf417.pmp.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\adobepdf.xdc to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\adobepdf.xdc.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobelinguistic.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobelinguistic.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobecollabsync.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobecollabsync.exe.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adobe_spinner_mini.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adobe_spinner_mini.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adobe_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\adobe_spinner.gif.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak to %ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\actip10.hlp to %ProgramFiles%\microsoft office\office14\1033\actip10.hlp.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_sign_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_sign_white@1x.png.giapk33vw
from %ProgramFiles%\microsoft office\office14\accddslm.dll to %ProgramFiles%\microsoft office\office14\accddslm.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\accddsf.dll to %ProgramFiles%\microsoft office\office14\accddsf.dll.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one to %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one.giapk33vw
from %ProgramFiles%\microsoft office\office14\accdds.dll to %ProgramFiles%\microsoft office\office14\accdds.dll.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\abook.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\abook.sqlite.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\a3dutils.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_typetextfields_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_typetextfields_white@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_int_2x.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_int_2x.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_int.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_int.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_2x.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner_2x.gif.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner.gif to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\a12_spinner.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\accddsui.dll to %ProgramFiles%\microsoft office\office14\1033\accddsui.dll.giapk33vw
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.giapk33vw
from %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activitl.ico.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_filleddot_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_filleddot_white@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_delete@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_delete@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_crossmark_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_crossmark_white@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_checkmark_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_checkmark_white@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_addblue@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_addblue@1x.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\on-boarding\images\a12-pdf.svg.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\9.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\9.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\9.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\9.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\9.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\9.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\9.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\9.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\8d754f20-8bf5-11e2-9e96-0800200c9a66.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\8d754f20-8bf5-11e2-9e96-0800200c9a66.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\8.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\8.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_line_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_line_white@1x.png.giapk33vw
from %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico to %ProgramFiles%\microsoft office\office14\forms\1033\activits.ico.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\access12.acc to %ProgramFiles%\microsoft office\office14\1033\access12.acc.giapk33vw
from %ProgramFiles%\microsoft office\office14\accwiz.dll to %ProgramFiles%\microsoft office\office14\accwiz.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\convert\act3.sam to %ProgramFiles%\microsoft office\office14\convert\act3.sam.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrotextextractor.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrotextextractor.exe.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrosup64.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrosup64.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32res.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32res.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32info.exe.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.exe.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrofx32.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform.api.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrobroker.exe.giapk33vw
from %ProgramFiles%\microsoft office\office14\acedao.dll to %ProgramFiles%\microsoft office\office14\acedao.dll.giapk33vw
from %ProgramFiles%\winrar\ace32loader.exe to %ProgramFiles%\winrar\ace32loader.exe.giapk33vw
from %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam to %ProgramFiles%\microsoft office\office14\convert\1033\act3r.sam.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\accessibility.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\accessibility.api.giapk33vw
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.giapk33vw
from %ProgramFiles%\microsoft office\office14\accvdt.dll to %ProgramFiles%\microsoft office\office14\accvdt.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\acctbox.poc to %ProgramFiles%\microsoft office\office14\pubwiz\acctbox.poc.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\accsbar.poc to %ProgramFiles%\microsoft office\office14\pubwiz\accsbar.poc.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\accolki.dll to %ProgramFiles%\microsoft office\office14\1033\accolki.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\addins\accolk.dll to %ProgramFiles%\microsoft office\office14\addins\accolk.dll.giapk33vw
from %ProgramFiles%\microsoft office\office14\accicons.exe to %ProgramFiles%\microsoft office\office14\accicons.exe.giapk33vw
from %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll to %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\accessiblemarshal.dll to %ProgramFiles%\mozilla firefox\accessiblemarshal.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll to %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\accessiblehandler.dll to %ProgramFiles%\mozilla firefox\accessiblehandler.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.giapk33vw
from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\accvdtui.dll to %ProgramFiles%\microsoft office\office14\1033\accvdtui.dll.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\1cf37043-6733-479c-9086-7b21a2292dda.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\1cf37043-6733-479c-9086-7b21a2292dda.ico.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\apex.thmx to %ProgramFiles%\microsoft office\document themes 14\apex.thmx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apex.eftx.giapk33vw
from %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apasixtheditionofficeonline.xsl.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annots.api to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annots.api.giapk33vw
from %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl to %ProgramFiles%\microsoft office\office14\bibliography\style\apa.xsl.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\angles.thmx to %ProgramFiles%\microsoft office\document themes 14\angles.thmx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\angles.eftx.giapk33vw
from %ProgramFiles%\microsoft office\office14\library\analysis\analys32.xll to %ProgramFiles%\microsoft office\office14\library\analysis\analys32.xll.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\apothecaryresume.dotx to %ProgramFiles%\microsoft office\templates\1033\apothecaryresume.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\apothecarynewsletter.dotx to %ProgramFiles%\microsoft office\templates\1033\apothecarynewsletter.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\apothecarymergeletter.dotx to %ProgramFiles%\microsoft office\templates\1033\apothecarymergeletter.dotx.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\apothecaryletter.dotx to %ProgramFiles%\microsoft office\templates\1033\apothecaryletter.dotx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx to %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.giapk33vw
from %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx to %ProgramFiles%\microsoft office\document themes 14\theme effects\apothecary.eftx.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app-api\dev\app-api.js to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app-api\dev\app-api.js.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll.giapk33vw
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\toolicons\alert.ico to %ProgramFiles%\microsoft office\office14\groove\toolicons\alert.ico.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav to %ProgramFiles%\microsoft office\office14\groove\sounds\places\alarm.wav.giapk33vw
from %ProgramFiles%\microsoft office\office14\pubwiz\air98.poc to %ProgramFiles%\microsoft office\office14\pubwiz\air98.poc.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\esl\aiodlite.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\esl\aiodlite.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ahclient.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ahclient.dll.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agmgpuoptin.ini.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agm.dll to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agm.dll.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\8.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\8.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_roundrect_white@1x.png to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\fss\img\tools\@1x\a12_roundrect_white@1x.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\8.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\8.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\8.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\8.png.giapk33vw
from %ProgramFiles%\winrar\7zxa.dll to %ProgramFiles%\winrar\7zxa.dll.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180_contrast-white.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\16.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\16.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\16.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\16.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\rssfeeds.gadget\images\16-on-black.gif to %ProgramFiles(x86)%\windows sidebar\gadgets\rssfeeds.gadget\images\16-on-black.gif.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\rssfeeds.gadget\images\16-on-black.gif to %ProgramFiles%\windows sidebar\gadgets\rssfeeds.gadget\images\16-on-black.gif.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\15x15dot.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\15x15dot.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\15x15dot.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\15x15dot.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\15x15dot.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\full\15x15dot.png to %ProgramFiles%\dvd maker\shared\dvdstyles\full\15x15dot.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-80.png.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\wss\1100.accdt to %ProgramFiles%\microsoft office\templates\1033\access\wss\1100.accdt.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\12.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\12.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-100.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\15.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\15.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\15.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\15.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\14.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\14.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\14.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\14.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\13.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\13.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\13.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\13.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140_contrast-white.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-140_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180.png to %ProgramFiles(x86)%\opera\assets\150x150logo.scale-180.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759476.fbcd22a2-e53a-4131-9ef1-1935f505d9ca.event.jsonlz4.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-highlight.png to %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-highlight.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-highlight.png to %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-highlight.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\18.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\18.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\18.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\18.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\17.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\17.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\17.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\17.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_videoinset.png to %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_videoinset.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_selectionsubpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_selectionsubpicture.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_buttongraphic.png to %ProgramFiles%\dvd maker\shared\dvdstyles\16to9squareframe_buttongraphic.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-overlay.png to %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-overlay.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-image-mask.png to %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-image-mask.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-image-mask.png to %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-image-mask.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-image-inset.png to %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-image-inset.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-highlight.png to %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-highlight.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\19.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\19.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759331.f9af9616-8535-4ace-8050-4454f33ad475.new-profile.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759331.f9af9616-8535-4ace-8050-4454f33ad475.new-profile.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759547.bef7f9cf-b0b1-42d8-a037-8d586d4d1e42.main.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759547.bef7f9cf-b0b1-42d8-a037-8d586d4d1e42.main.jsonlz4.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-background.png to %ProgramFiles%\dvd maker\shared\dvdstyles\memories\16_9-frame-background.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-background.png to %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\16_9-frame-background.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160264.0186ea91-e835-4919-9366-c7e15b92110b.first-shutdown.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160262.1f6a84f6-29b5-43da-aa85-b8cf32dd80d0.main.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160262.1f6a84f6-29b5-43da-aa85-b8cf32dd80d0.main.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160236.a847dc89-db3d-4896-9bef-b610ec76e43d.health.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160236.a847dc89-db3d-4896-9bef-b610ec76e43d.health.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160174.0bfb99e9-0e75-47d0-b739-94e23d793342.event.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160174.0bfb99e9-0e75-47d0-b739-94e23d793342.event.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160111.ee43e28f-610b-4229-a7d7-171f6ed032bd.health.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160111.ee43e28f-610b-4229-a7d7-171f6ed032bd.health.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160101.d9d62ad7-4327-4aa9-97e7-aeb5486c45ee.new-profile.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\datareporting\archived\2023-05\1685574160101.d9d62ad7-4327-4aa9-97e7-aeb5486c45ee.new-profile.jsonlz4.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764036.a6077284-6dcc-4781-9fb7-7f9d7b5132bf.first-shutdown.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764036.a6077284-6dcc-4781-9fb7-7f9d7b5132bf.first-shutdown.jsonlz4.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764034.d092fa80-6cc0-49cc-9da4-f67b3d6cdc55.main.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411764034.d092fa80-6cc0-49cc-9da4-f67b3d6cdc55.main.jsonlz4.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411763506.e60182f3-3480-48d0-bc12-b3b897042a6b.new-profile.jsonlz4 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\datareporting\archived\2022-09\1664411763506.e60182f3-3480-48d0-bc12-b3b897042a6b.new-profile.jsonlz4.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759551.dc5a4164-f290-4a08-a5ec-0fe7810acbc6.first-shutdown.jsonlz4 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\datareporting\archived\2022-09\1664411759551.dc5a4164-f290-4a08-a5ec-0fe7810acbc6.first-shutdown.jsonlz4.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-background.png to %ProgramFiles%\dvd maker\shared\dvdstyles\travel\16_9-frame-background.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\12.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\12.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\11.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\11.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\19.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\19.png.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\.metadata-v2.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2 to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png.giapk33vw
from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\013e742b-287b-4228-a0b9-bd617e4e02a4.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\013e742b-287b-4228-a0b9-bd617e4e02a4.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\07593226-c5c5-438b-86be-3f6361cd5b10.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\07593226-c5c5-438b-86be-3f6361cd5b10.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\11.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\11.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\full\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\full\1047x576black.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\11.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\11.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\11.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\11.png.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\wss\107.accdt to %ProgramFiles%\microsoft office\templates\1033\access\wss\107.accdt.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\push\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\push\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\oldage\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\1047x576black.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\1047x576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\1047x576black.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\0cd5f3a0-8bf6-11e2-9e96-0800200c9a66.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\0cd5f3a0-8bf6-11e2-9e96-0800200c9a66.ico.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\1047x576_91n92.png to %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\1047x576_91n92.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\1047x576_91n92.png to %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\1047x576_91n92.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\push\1047_576black.png to %ProgramFiles%\dvd maker\shared\dvdstyles\push\1047_576black.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\10.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\10.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\10.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\10.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\10.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\10.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\10.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\10.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\1.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\1.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\1.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\1.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\1.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\1.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\1.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\1.png.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\part\1 top.accdt to %ProgramFiles%\microsoft office\templates\1033\access\part\1 top.accdt.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\part\1 right.accdt to %ProgramFiles%\microsoft office\templates\1033\access\part\1 right.accdt.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\appcenter_r.aapp to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\appcenter_r.aapp.giapk33vw
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\1af2cdd0-8bf3-11e2-9e96-0800200c9a66.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\1af2cdd0-8bf3-11e2-9e96-0800200c9a66.ico.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\203x8subpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\203x8subpicture.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_buttongraphic.png to %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_buttongraphic.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\4c95adc1-5fd9-449d-bc75-77ca217403ae.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\4c95adc1-5fd9-449d-bc75-77ca217403ae.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\47.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\47.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\47.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\47.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\46.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\46.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\46.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\46.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\45.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\45.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\45.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\45.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\44.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\44.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\44.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\44.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\43.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\43.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\43.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\43.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_selectionsubpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_selectionsubpicture.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\42.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\42.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\41.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\41.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\41.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\41.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\40.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\40.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\40.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\40.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\4.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\4.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\4.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\4.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\4.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\4.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\4.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\4.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\3difr.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\3difr.x3d.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\3bfdfa54-5dd6-4dff-8b6c-c1715f306d6b.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\3bfdfa54-5dd6-4dff-8b6c-c1715f306d6b.ico.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\3b6191a0-8bf3-11e2-9e96-0800200c9a66.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\3b6191a0-8bf3-11e2-9e96-0800200c9a66.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\39.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\39.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\39.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\39.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\42.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\42.png.giapk33vw
from %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\5.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\5.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\5.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\5.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\76c397a8-9e8e-4706-8203-bd2878e9c618.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\76c397a8-9e8e-4706-8203-bd2878e9c618.ico.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\720x480icongraphic.png to %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\720x480icongraphic.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\720x480icongraphic.png to %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\720x480icongraphic.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\performance\720x480blacksquare.png to %ProgramFiles%\dvd maker\shared\dvdstyles\performance\720x480blacksquare.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\720_480shadow.png to %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\720_480shadow.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-80_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-80_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-80.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-80.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-180.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140_contrast-white.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-140.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100_contrast-white.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100_contrast-white.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\7.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\7.png.giapk33vw
from %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100.png to %ProgramFiles(x86)%\opera\assets\70x70logo.scale-100.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\7.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\7.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\7.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\7.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\7.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\7.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\6d3582e1-6013-429f-bb34-c75b90cdd1f8.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\6d3582e1-6013-429f-bb34-c75b90cdd1f8.ico.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\pi_brokers\64bitmapibroker.exe to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\pi_brokers\64bitmapibroker.exe.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\66dd4bb6-a3ba-4b11-af7a-f4bf23e073b2.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\66dd4bb6-a3ba-4b11-af7a-f4bf23e073b2.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\6.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\6.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\6.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\6.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\6.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\6.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\6.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\6.png.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\5bbbdd5b-edc7-4168-9f5d-290af826e716.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\5bbbdd5b-edc7-4168-9f5d-290af826e716.ico.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\5.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\5.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\5.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\5.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_videoinset.png to %ProgramFiles%\dvd maker\shared\dvdstyles\4to3squareframe_videoinset.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\38.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\38.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\38.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\38.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\21.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\21.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\27.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\27.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\26.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\26.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\26.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\26.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\25.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\25.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\25.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\25.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\24.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\24.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\24.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\24.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\23.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\23.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\23.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\23.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\22.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\22.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\22.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\22.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\21.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\21.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\27.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\27.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\28.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\28.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\28.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\28.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\203x8subpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\203x8subpicture.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\203x8subpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\203x8subpicture.png.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\203x8subpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\203x8subpicture.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\20.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\20.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\20.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\20.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\2.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\2.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\2.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\2.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\2.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\2.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\2.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\2.png.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\part\2 top.accdt to %ProgramFiles%\microsoft office\templates\1033\access\part\2 top.accdt.giapk33vw
from %ProgramFiles%\microsoft office\templates\1033\access\part\2 right.accdt to %ProgramFiles%\microsoft office\templates\1033\access\part\2 right.accdt.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\1px.gif to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\1px.gif.giapk33vw
from %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\203x8subpicture.png to %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\203x8subpicture.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\37.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\37.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\29.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\29.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\37.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\37.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\32.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\32.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s... to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.s...
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql... to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql...
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\36.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\36.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\36.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\36.png.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\35.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\35.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\35.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\35.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\34.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\34.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\34.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\34.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\33.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\33.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\33.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\33.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\32.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\32.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\31.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\31.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\29.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\29.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\31.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\31.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\30.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\30.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\30.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\30.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\3.png to %ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\3.png.giapk33vw
from %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\3.png to %ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\3.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\3.png to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\3.png.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\3.png to %ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\3.png.giapk33vw
from %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\2d.x3d to %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\2d.x3d.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\2f8f0e41-f521-45a4-9691-f664afafe67f.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\2f8f0e41-f521-45a4-9691-f664afafe67f.ico.giapk33vw
from %ProgramFiles(x86)%\opera\29.0.1795.47\resources\2a3f5c20-8bf5-11e2-9e96-0800200c9a66.ico to %ProgramFiles(x86)%\opera\29.0.1795.47\resources\2a3f5c20-8bf5-11e2-9e96-0800200c9a66.ico.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\idb\2918063365piupsah.sqlite.giapk33vw
from %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite to %APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite.giapk33vw
from %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\1px.gif to %ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\1px.gif.giapk33vw
from %ProgramFiles%\microsoft office\office14\media\applause.wav to %ProgramFiles%\microsoft office\office14\media\applause.wav.giapk33vw

Modifies the following files

%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png.giapk33vw
%APPDATA%\thunderbird\profiles\npsdfqy3.default-release\storage\permanent\chrome\.metadata-v2.giapk33vw
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\permanent\chrome\.metadata-v2.giapk33vw
%APPDATA%\mozilla\firefox\profiles\yfwt7ezn.default-release-1\storage\default\moz-extension+++d39c0de0-06d0-4e01-844c-98b240b2f278^usercontextid=4294967295\.metadata-v2.giapk33vw
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\.metadata-v2.giapk33vw
%APPDATA%\mozilla\firefox\profiles\0j9e9tku.default-release\storage\default\moz-extension+++db487e04-ae57-4773-9556-37dac4cedf3c^usercontextid=4294967295\.metadata-v2.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png.giapk33vw
%ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.giapk33vw
%ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)redstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)notconnectedstateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)greenstateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)graystateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\144dpi\(144dpi)alerticon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)redstateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)notconnectedstateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)greenstateicon.png.giapk33vw
%ProgramFiles%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)graystateicon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\weather.gadget\images\120dpi\(120dpi)alerticon.png.giapk33vw
%ProgramFiles(x86)%\windows sidebar\gadgets\picturepuzzle.gadget\images\0.png.giapk33vw
%HOMEPATH%\desktop\000814251_video_01.avi.giapk33vw

Modifies multiple files.

Substitutes the following executable files

%ProgramFiles%\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll
%ProgramFiles%\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll

Substitutes the following files

%ALLUSERSPROFILE%\ntuser.pol

Deletes itself.

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'<LOCALNET>.26.0':445
'<LOCALNET>.26.161':445
'<LOCALNET>.26.162':445
'<LOCALNET>.26.163':445
'<LOCALNET>.26.164':445
'<LOCALNET>.26.165':445
'<LOCALNET>.26.166':445
'<LOCALNET>.26.167':445
'<LOCALNET>.26.168':445
'<LOCALNET>.26.169':445
'<LOCALNET>.26.170':445
'<LOCALNET>.26.171':445
'<LOCALNET>.26.172':445
'<LOCALNET>.26.173':445
'<LOCALNET>.26.175':445
'<LOCALNET>.26.189':445
'<LOCALNET>.26.176':445
'<LOCALNET>.26.177':445
'<LOCALNET>.26.178':445
'<LOCALNET>.26.179':445
'<LOCALNET>.26.180':445
'<LOCALNET>.26.181':445
'<LOCALNET>.26.182':445
'<LOCALNET>.26.183':445
'<LOCALNET>.26.184':445
'<LOCALNET>.26.185':445
'<LOCALNET>.26.186':445
'<LOCALNET>.26.187':445
'<LOCALNET>.26.188':445
'<LOCALNET>.26.160':445
'<LOCALNET>.26.174':445
'<LOCALNET>.26.159':445
'<LOCALNET>.26.142':445
'<LOCALNET>.26.129':445
'<LOCALNET>.26.130':445
'<LOCALNET>.26.131':445
'<LOCALNET>.26.132':445
'<LOCALNET>.26.133':445
'<LOCALNET>.26.134':445
'<LOCALNET>.26.135':445
'<LOCALNET>.26.136':445
'<LOCALNET>.26.137':445
'<LOCALNET>.26.138':445
'<LOCALNET>.26.139':445
'<LOCALNET>.26.140':445
'<LOCALNET>.26.141':445
'<LOCALNET>.26.143':445
'<LOCALNET>.26.157':445
'<LOCALNET>.26.144':445
'<LOCALNET>.26.145':445
'<LOCALNET>.26.146':445
'<LOCALNET>.26.147':445
'<LOCALNET>.26.148':445
'<LOCALNET>.26.149':445
'<LOCALNET>.26.150':445
'<LOCALNET>.26.151':445
'<LOCALNET>.26.152':445
'<LOCALNET>.26.153':445
'<LOCALNET>.26.154':445
'<LOCALNET>.26.155':445
'<LOCALNET>.26.156':445
'<LOCALNET>.26.158':445
'<LOCALNET>.26.207':445
'<LOCALNET>.26.253':445
'<LOCALNET>.26.192':445
'<LOCALNET>.26.225':445
'<LOCALNET>.26.226':445
'<LOCALNET>.26.227':445
'<LOCALNET>.26.228':445
'<LOCALNET>.26.229':445
'<LOCALNET>.26.230':445
'<LOCALNET>.26.231':445
'<LOCALNET>.26.232':445
'<LOCALNET>.26.233':445
'<LOCALNET>.26.234':445
'<LOCALNET>.26.235':445
'<LOCALNET>.26.236':445
'<LOCALNET>.26.237':445
'<LOCALNET>.26.239':445
'<LOCALNET>.26.191':445
'<LOCALNET>.26.240':445
'<LOCALNET>.26.241':445
'<LOCALNET>.26.242':445
'<LOCALNET>.26.243':445
'<LOCALNET>.26.244':445
'<LOCALNET>.26.245':445
'<LOCALNET>.26.246':445
'<LOCALNET>.26.247':445
'<LOCALNET>.26.248':445
'<LOCALNET>.26.249':445
'<LOCALNET>.26.250':445
'<LOCALNET>.26.251':445
'<LOCALNET>.26.252':445
'<LOCALNET>.26.224':445
'<LOCALNET>.26.128':445
'<LOCALNET>.26.223':445
'<LOCALNET>.26.206':445
'<LOCALNET>.26.193':445
'<LOCALNET>.26.194':445
'<LOCALNET>.26.195':445
'<LOCALNET>.26.196':445
'<LOCALNET>.26.197':445
'<LOCALNET>.26.198':445
'<LOCALNET>.26.199':445
'<LOCALNET>.26.200':445
'<LOCALNET>.26.201':445
'<LOCALNET>.26.202':445
'<LOCALNET>.26.203':445
'<LOCALNET>.26.204':445
'<LOCALNET>.26.205':445
'<LOCALNET>.26.190':445
'<LOCALNET>.26.221':445
'<LOCALNET>.26.208':445
'<LOCALNET>.26.209':445
'<LOCALNET>.26.210':445
'<LOCALNET>.26.211':445
'<LOCALNET>.26.212':445
'<LOCALNET>.26.213':445
'<LOCALNET>.26.214':445
'<LOCALNET>.26.215':445
'<LOCALNET>.26.216':445
'<LOCALNET>.26.217':445
'<LOCALNET>.26.218':445
'<LOCALNET>.26.219':445
'<LOCALNET>.26.220':445
'<LOCALNET>.26.222':445
'<LOCALNET>.26.238':445
'<LOCALNET>.26.127':445
'<LOCALNET>.26.110':445
'<LOCALNET>.26.33':445
'<LOCALNET>.26.34':445
'<LOCALNET>.26.35':445
'<LOCALNET>.26.36':445
'<LOCALNET>.26.37':445
'<LOCALNET>.26.38':445
'<LOCALNET>.26.39':445
'<LOCALNET>.26.40':445
'<LOCALNET>.26.41':445
'<LOCALNET>.26.42':445
'<LOCALNET>.26.43':445
'<LOCALNET>.26.44':445
'<LOCALNET>.26.45':445
'<LOCALNET>.26.47':445
'<LOCALNET>.26.61':445
'<LOCALNET>.26.48':445
'<LOCALNET>.26.49':445
'<LOCALNET>.26.50':445
'<LOCALNET>.26.51':445
'<LOCALNET>.26.52':445
'<LOCALNET>.26.53':445
'<LOCALNET>.26.54':445
'<LOCALNET>.26.55':445
'<LOCALNET>.26.56':445
'<LOCALNET>.26.57':445
'<LOCALNET>.26.58':445
'<LOCALNET>.26.59':445
'<LOCALNET>.26.60':445
'<LOCALNET>.26.32':445
'<LOCALNET>.26.46':445
'<LOCALNET>.26.31':445
'<LOCALNET>.26.14':445
'<LOCALNET>.26.1':445
'<LOCALNET>.26.2':445
'<LOCALNET>.26.3':445
'<LOCALNET>.26.4':445
'<LOCALNET>.26.5':445
'<LOCALNET>.26.6':445
'<LOCALNET>.26.7':445
'<LOCALNET>.26.8':445
'<LOCALNET>.26.9':445
'<LOCALNET>.26.10':445
'<LOCALNET>.26.11':445
'<LOCALNET>.26.12':445
'<LOCALNET>.26.13':445
'<LOCALNET>.26.15':445
'<LOCALNET>.26.29':445
'<LOCALNET>.26.16':445
'<LOCALNET>.26.17':445
'<LOCALNET>.26.18':445
'<LOCALNET>.26.19':445
'<LOCALNET>.26.20':445
'<LOCALNET>.26.21':445
'<LOCALNET>.26.22':445
'<LOCALNET>.26.23':445
'<LOCALNET>.26.24':445
'<LOCALNET>.26.25':445
'<LOCALNET>.26.26':445
'<LOCALNET>.26.27':445
'<LOCALNET>.26.28':445
'<LOCALNET>.26.30':445
'<LOCALNET>.26.79':445
'<LOCALNET>.26.125':445
'<LOCALNET>.26.64':445
'<LOCALNET>.26.97':445
'<LOCALNET>.26.98':445
'<LOCALNET>.26.99':445
'<LOCALNET>.26.100':445
'<LOCALNET>.26.101':445
'<LOCALNET>.26.102':445
'<LOCALNET>.26.103':445
'<LOCALNET>.26.104':445
'<LOCALNET>.26.105':445
'<LOCALNET>.26.106':445
'<LOCALNET>.26.107':445
'<LOCALNET>.26.108':445
'<LOCALNET>.26.109':445
'<LOCALNET>.26.111':445
'<LOCALNET>.26.63':445
'<LOCALNET>.26.112':445
'<LOCALNET>.26.113':445
'<LOCALNET>.26.114':445
'<LOCALNET>.26.115':445
'<LOCALNET>.26.116':445
'<LOCALNET>.26.117':445
'<LOCALNET>.26.118':445
'<LOCALNET>.26.119':445
'<LOCALNET>.26.120':445
'<LOCALNET>.26.121':445
'<LOCALNET>.26.122':445
'<LOCALNET>.26.123':445
'<LOCALNET>.26.124':445
'<LOCALNET>.26.96':445
'<LOCALNET>.26.126':445
'<LOCALNET>.26.95':445
'<LOCALNET>.26.78':445
'<LOCALNET>.26.65':445
'<LOCALNET>.26.66':445
'<LOCALNET>.26.67':445
'<LOCALNET>.26.68':445
'<LOCALNET>.26.69':445
'<LOCALNET>.26.70':445
'<LOCALNET>.26.71':445
'<LOCALNET>.26.72':445
'<LOCALNET>.26.73':445
'<LOCALNET>.26.74':445
'<LOCALNET>.26.75':445
'<LOCALNET>.26.76':445
'<LOCALNET>.26.77':445
'<LOCALNET>.26.62':445
'<LOCALNET>.26.93':445
'<LOCALNET>.26.80':445
'<LOCALNET>.26.81':445
'<LOCALNET>.26.82':445
'<LOCALNET>.26.83':445
'<LOCALNET>.26.84':445
'<LOCALNET>.26.85':445
'<LOCALNET>.26.86':445
'<LOCALNET>.26.87':445
'<LOCALNET>.26.88':445
'<LOCALNET>.26.89':445
'<LOCALNET>.26.90':445
'<LOCALNET>.26.91':445
'<LOCALNET>.26.92':445
'<LOCALNET>.26.94':445
'<LOCALNET>.26.254':445

Miscellaneous

Searches for the following windows

ClassName: 'EVERYTHING_TASKBAR_NOTIFICATION' WindowName: ''

Creates and executes the following

'%TEMP%\7zipsfx.000\7za.exe' i
'%TEMP%\7zipsfx.000\7za.exe' x -y -p2529795312823611362 Everything64.dll
'%TEMP%\7zipsfx.000\recoveryhelpingonionmailorg.ex_.exe'
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe'
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything.exe' -startup
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\dc.exe' /D
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e watch -pid 580 -!
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e ul1
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e ul2
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-VM | Stop-VM"' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -S 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0' (with hidden window)
'<SYSTEM32>\powercfg.exe' -S e9a42b02-d5df-448d-aa00-03f14749eb61' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0' (with hidden window)
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e watch -pid 580 -!' (with hidden window)
'%TEMP%\7zipsfx.000\7za.exe' i' (with hidden window)
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0' (with hidden window)
'%TEMP%\7zipsfx.000\recoveryhelpingonionmailorg.ex_.exe' ' (with hidden window)
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' ' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /c DC.exe /D' (with hidden window)
'%TEMP%\7zipsfx.000\7za.exe' x -y -p2529795312823611362 Everything64.dll' (with hidden window)
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e ul1' (with hidden window)
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\msmpeng.exe' -e ul2' (with hidden window)
'%LOCALAPPDATA%\{74983a24-e04c-621f-6f97-90345bdb570e}\everything.exe' -startup' (with hidden window)
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-VM | Select-Object vmid | Get-VHD | %{Get-DiskImage -ImagePath $_.Path; Get-DiskImage -ImagePath $_.ParentPath} | Dismount-DiskImage"' (with hidden window)
'<SYSTEM32>\powercfg.exe' -H off' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZSfx000.cmd" "' (with hidden window)
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-Volume | Get-DiskImage | Dismount-DiskImage"' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c DC.exe /D
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-VM | Stop-VM"
'<SYSTEM32>\powercfg.exe' -S e9a42b02-d5df-448d-aa00-03f14749eb61
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
'<SYSTEM32>\powercfg.exe' -S 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX e9a42b02-d5df-448d-aa00-03f14749eb61 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-VM | Select-Object vmid | Get-VHD | %{Get-DiskImage -ImagePath $_.Path; Get-DiskImage -ImagePath $_.ParentPath} | Dismount-DiskImage"
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 0
'<SYSTEM32>\powercfg.exe' -SETACVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 7648efa3-dd9c-4e3e-b566-50f929386280 0
'<SYSTEM32>\powercfg.exe' -H off
'<SYSTEM32>\raserver.exe' /offerraupdate
'%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZSfx000.cmd" "
'<SYSTEM32>\svchost.exe' -k secsvcs
'<SYSTEM32>\gpscript.exe' /RefreshSystemParam
'<SYSTEM32>\powercfg.exe' -SETDCVALUEINDEX 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c 4f971e89-eebd-4455-a8de-9e59040e7347 96996bc0-ad50-47ec-923b-6f41874dd9eb 0
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass "Get-Volume | Get-DiskImage | Dismount-DiskImage"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial