Trojan.Encoder.41089

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKCU\SOFTWARE\MicROsoft\WINDOWS\CurrentVersion\RUN] 'aroinics_svc' = '<SYSTEM32>\CMD.EXE /C START %WINDIR%\apjvfduscbqg.exe'

Modifies file system

Creates the following files

%WINDIR%\apjvfduscbqg.exe
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\stationery\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\source engine\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\source engine\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\source engine\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\smart tag\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\smart tag\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\smart tag\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\smart tag\1033\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\proof\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\proof\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\proof\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\stationery\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\msinfo\en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\msclientdatamgr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\msinfo\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\msinfo\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\uk-ua\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\tr-tr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\zh-cn\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\msinfo\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\office14\cultures\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\office14\1033\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\stationery\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\level\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\layers\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\journal\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\network\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\indust\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\ice\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\expeditn\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\iris\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\ripple\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\refined\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\radial\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\quad\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\profile\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\pixel\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\papyrus\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\blends\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\axis\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\th-th\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\arctic\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\textconv\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\textconv\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\textconv\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\textconv\en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\zh-tw\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\breeze\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\boldstri\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\eclipse\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\echo\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\deepblue\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\concrete\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\compass\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\cascade\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\capsules\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\themes14\canyon\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\edge\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\sv-se\_recovery_+nxmpm.png
C:\msocache\_recovery_+nxmpm.png
C:\perflogs\_recovery_+nxmpm.txt
C:\perflogs\_recovery_+nxmpm.png
C:\perflogs\admin\_recovery_+nxmpm.html
C:\perflogs\admin\_recovery_+nxmpm.txt
C:\perflogs\admin\_recovery_+nxmpm.png
<Current directory>\_recovery_+nxmpm.html
<Current directory>\_recovery_+nxmpm.txt
<Current directory>\_recovery_+nxmpm.png
C:\msocache\_recovery_+nxmpm.html
C:\msocache\_recovery_+nxmpm.txt
%CommonProgramFiles%\designer\_recovery_+nxmpm.html
%CommonProgramFiles%\designer\_recovery_+nxmpm.png
%CommonProgramFiles%\designer\_recovery_+nxmpm.txt
C:\msocache\all users\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\dw\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\ar-sa\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\help\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\help\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\help\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\grphflt\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\grphflt\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\grphflt\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\filters\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\filters\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\filters\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\euro\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\euro\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\euro\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\equation\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\equation\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\equation\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\equation\1033\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\dw\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\dw\_recovery_+nxmpm.txt
C:\msocache\all users\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\kms\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\kms\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\kms\_recovery_+nxmpm.png
C:\documents and settings\_recovery_+nxmpm.html
C:\documents and settings\_recovery_+nxmpm.txt
C:\documents and settings\_recovery_+nxmpm.png
C:\$recycle.bin\_recovery_+nxmpm.html
C:\$recycle.bin\_recovery_+nxmpm.txt
C:\$recycle.bin\_recovery_+nxmpm.png
C:\$recycle.bin\s-1-5-21-3691498038-2086406363-2140527554-1000\_recovery_+nxmpm.html
C:\$recycle.bin\s-1-5-21-3691498038-2086406363-2140527554-1000\_recovery_+nxmpm.txt
C:\$recycle.bin\s-1-5-21-3691498038-2086406363-2140527554-1000\_recovery_+nxmpm.png
%HOMEPATH%\documents\recover_file_ujkfqmvqq.txt
%CommonProgramFiles%\microsoft shared\ink\bg-bg\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+nxmpm.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_recovery_+nxmpm.png
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.html
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\lv-lv\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\lt-lt\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\ko-kr\_recovery_+nxmpm.png
C:\perflogs\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\it-it\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\hu-hu\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\nb-no\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\sl-si\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\sk-sk\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\ru-ru\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\ro-ro\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\pt-pt\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\pt-br\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\pl-pl\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\nl-nl\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\hr-hr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\ja-jp\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fr-fr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fi-fi\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\et-ee\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\es-es\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\el-gr\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\de-de\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\da-dk\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\cs-cz\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\he-il\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\_recovery_+nxmpm.png
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\_recovery_+nxmpm.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\_recovery_+nxmpm.html
%CommonProgramFiles%\microsoft shared\themes14\satin\_recovery_+nxmpm.html

Sets the 'hidden' attribute to the following files

%WINDIR%\apjvfduscbqg.exe

Moves the following files

from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme29.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme28.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme27.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme26.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme25.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme24.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme23.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme22.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme21.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme20.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme19.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme18.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme17.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme15.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme13.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme12.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme11.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme09.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme10.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme31.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme51.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme50.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme49.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme47.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme45.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme44.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme43.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme41.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme40.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme39.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme38.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme37.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme36.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme35.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme34.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme33.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme08.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme07.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme06.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\maroon.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lightspirit.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\greentea.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\earthy.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\discussion.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\casual.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\beige.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\adobe.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+newsqlserverconnection.odc.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\premium.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\olivegreen.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slateblue.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme05.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme04.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme03.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme02.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme01.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\prottpln.doc to %ProgramFiles%\microsoft office\office14\1033\prottpln.doc.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\velvetrose.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\texturedblue.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\teal.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme42.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme52.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_response.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_person.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_generic.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions_doc.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\gradient.png.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\arrow.png.mp3
from %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slateblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\validation.js.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme55.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\olivegreen.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\maroon.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\greentea.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\earthy.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\country.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\country.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\casual.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagestyle.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagescript.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\premium.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\utilityfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\submit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\publicfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form_edit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\form.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\view.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\validation.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\submit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form_edit.js.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme53.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\velvetrose.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\texturedblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\teal.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slateblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slateblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\validation.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\utilityfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\adobe.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagestyle.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formshomepagescript.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewselectionchanged.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewselectionchanged.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewdblclick.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewdblclick.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\validation.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\validation.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\submit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\submit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menus.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\menus.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\casual.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\casual.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\country.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\country.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\publicfunctions.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\earthy.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\earthy.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form_edit.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\form_edit.js.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\velvetrose.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\velvetrose.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\texturedblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\texturedblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\teal.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\teal.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen.css.mp3
from %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc to %ProgramFiles%\microsoft office\office14\1033\dataservices\+connect to new data source.odc.mp3
from %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css to %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme54.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\premium.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\premium.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\olivegreen.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\olivegreen.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\maroon.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\maroon.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lightspirit.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lightspirit.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\greentea.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\greentea.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue.css to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue.css.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\publicfunctions.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\publicfunctions.js.mp3
from %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.mp3
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.mp3
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.mp3
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.mp3
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.mp3
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.mp3
from %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png to %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.mp3
from %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.mp3
from %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg to %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.mp3
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg to %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.mp3
from %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.js to %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\hierarchy.js.mp3

Modifies the following files

%CommonProgramFiles%\microsoft shared\grphflt\ms.eps
%CommonProgramFiles%\microsoft shared\themes14\layers\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\journal\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\iris\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\indust\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\ice\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\expeditn\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\edge\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\eclipse\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\echo\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\deepblue\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\concrete\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\compass\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\cascade\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\capsules\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\canyon\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\breeze\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\boldstri\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\blends\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\axis\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\arctic\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\thmbnail.png
%CommonProgramFiles%\microsoft shared\smart tag\metconv.txt
%CommonProgramFiles%\microsoft shared\grphflt\ms.png
%CommonProgramFiles%\microsoft shared\grphflt\ms.jpg
%CommonProgramFiles%\microsoft shared\themes14\level\thmbnail.png
%CommonProgramFiles%\microsoft shared\themes14\network\thmbnail.png

Modifies multiple files.

Deletes itself.

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'te####hannel.com':80
'sh###ngfeng.cn':80
'co######reaknetworks.com':80

TCP

HTTP POST requests

http://te####hannel.com/wp-admin/maint/wcspng.php
http://sh###ngfeng.cn/images/lurd/wcspng.php
http://co######reaknetworks.com/dev/wp-content/uploads/2015/07/wcspng.php

UDP

DNS ASK te####hannel.com
DNS ASK mu####randphone.com
DNS ASK vt###shop.net
DNS ASK sa####raining.com
DNS ASK sh###ngfeng.cn
DNS ASK co######reaknetworks.com

Miscellaneous

Creates and executes the following

'%WINDIR%\apjvfduscbqg.exe'

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c DEL <Full path to file>
'<SYSTEM32>\wbem\wmic.exe' shadowcopy delete /nointeractive
'%WINDIR%\syswow64\cmd.exe' /c DEL <Full path to file>' (with hidden window)
'<SYSTEM32>\wbem\wmic.exe' shadowcopy delete /nointeractive' (with hidden window)

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial