Trojan.Encoder.43014

Technical Information

Modifies file system

Creates the following files

C:\decryption instructions.txt
C:\$recycle.bin\decryption instructions.txt
C:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\decryption instructions.txt
C:\msocache\decryption instructions.txt
C:\msocache\all users\decryption instructions.txt
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\decryption instructions.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\decryption instructions.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\decryption instructions.txt
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\decryption instructions.txt
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\decryption instructions.txt
C:\perflogs\decryption instructions.txt
%ProgramFiles%\decryption instructions.txt
%CommonProgramFiles%\decryption instructions.txt
%CommonProgramFiles%\services\decryption instructions.txt
%CommonProgramFiles%\system\decryption instructions.txt
%CommonProgramFiles%\system\ole db\decryption instructions.txt
%CommonProgramFiles%\system\ole db\en-us\decryption instructions.txt
%CommonProgramFiles%\system\ado\decryption instructions.txt
%CommonProgramFiles%\system\ado\en-us\decryption instructions.txt
%CommonProgramFiles%\system\en-us\decryption instructions.txt
%CommonProgramFiles%\system\msadc\decryption instructions.txt
%CommonProgramFiles%\system\msadc\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\filters\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\msinfo\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\msinfo\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\office16\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\office16\cultures\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\office16\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\stationery\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\textconv\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\textconv\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\triedit\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\triedit\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\vc\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\vgx\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\vsto\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\1033\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\languagemodel\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\ar-sa\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\bg-bg\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\cs-cz\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\da-dk\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\de-de\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\el-gr\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\en-gb\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\es-es\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\es-mx\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\et-ee\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fi-fi\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fr-ca\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fr-fr\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\insert\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskclearui\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknav\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\he-il\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\hr-hr\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\hu-hu\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\it-it\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\ja-jp\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\ko-kr\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\lt-lt\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\lv-lv\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\nb-no\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\nl-nl\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\pl-pl\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\pt-br\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\pt-pt\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\ro-ro\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\ru-ru\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\sk-sk\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\sl-si\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-rs\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\sv-se\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\th-th\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\tr-tr\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\uk-ua\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\zh-cn\decryption instructions.txt
%CommonProgramFiles%\microsoft shared\ink\zh-tw\decryption instructions.txt
%ProgramFiles%\internet explorer\decryption instructions.txt
%ProgramFiles%\internet explorer\signup\decryption instructions.txt
%ProgramFiles%\internet explorer\en-us\decryption instructions.txt
%ProgramFiles%\internet explorer\images\decryption instructions.txt
%ProgramFiles%\java\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\bin\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\bin\server\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\amd64\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\applet\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\ext\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\images\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\management\decryption instructions.txt
%ProgramFiles%\java\jre1.8.0_77\lib\security\decryption instructions.txt
%ProgramFiles%\microsoft office\decryption instructions.txt
%ProgramFiles%\microsoft office\office16\decryption instructions.txt
%ProgramFiles%\microsoft office\office16\1033\decryption instructions.txt
%ProgramFiles%\microsoft office\office16\onenote\decryption instructions.txt
%ProgramFiles%\mozilla firefox\decryption instructions.txt
%ProgramFiles%\mozilla firefox\browser\decryption instructions.txt
%ProgramFiles%\mozilla firefox\browser\visualelements\decryption instructions.txt
%ProgramFiles%\mozilla firefox\browser\features\decryption instructions.txt
%ProgramFiles%\mozilla firefox\defaults\decryption instructions.txt
%ProgramFiles%\mozilla firefox\defaults\pref\decryption instructions.txt
%ProgramFiles%\mozilla firefox\distibution\decryption instructions.txt
%ProgramFiles%\mozilla firefox\fonts\decryption instructions.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\decryption instructions.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\decryption instructions.txt

Moves the following files

from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\copyright to %ProgramFiles%\java\jre1.8.0_77\copyright.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\license to %ProgramFiles%\java\jre1.8.0_77\license.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\readme.txt to %ProgramFiles%\java\jre1.8.0_77\readme.txt.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\welcome.html to %ProgramFiles%\java\jre1.8.0_77\welcome.html.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_77\bin\javacpl.cpl.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_77\bin\server\xusage.txt.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_77\bin\server\classes.jsa.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_77\lib\accessibility.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_77\lib\amd64\jvm.cfg.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_77\lib\cmm\ciexyz.pf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_77\lib\cmm\gray.pf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\currency.data to %ProgramFiles%\java\jre1.8.0_77\lib\currency.data.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_77\lib\cmm\linear_rgb.pf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_77\lib\cmm\srgb.pf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ja.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_77\lib\content-types.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\ffjcext.zip.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\classlist to %ProgramFiles%\java\jre1.8.0_77\lib\classlist.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_de.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_77\lib\calendars.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_77\lib\cmm\pycc.pf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_ko.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_it.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11-lic.gif to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11-lic.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_fr.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_pt_br.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_hk.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11@2x-lic.gif to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash_11@2x-lic.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_77\lib\ext\meta-index.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_77\lib\charsets.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\splash@2x.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunjce_provider.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\zipfs.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_es.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_cn.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_zh_tw.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunec.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_77\lib\deploy\messages_sv.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\jaccess.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\dnsns.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunpkcs11.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\sunmscapi.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_77\lib\flavormap.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\access-bridge-64.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.bfc.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_77\lib\fontconfig.properties.src.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\nashorn.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterbold.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightregular.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemiitalic.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_77\lib\hijrah-config-umalqura.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightdemibold.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\localedata.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansdemibold.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidasansregular.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidabrightitalic.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_77\lib\fonts\lucidatypewriterregular.ttf.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_77\lib\deploy.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copydrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_copynodrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\invalid32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linknodrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movenodrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_77\lib\javafx.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\cursors.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_77\lib\jfr\default.jfc.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_77\lib\javaws.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_77\lib\jce.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_77\lib\jfr\profile.jfc.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_77\lib\jfr.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_77\lib\jsse.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_linkdrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_77\lib\jvm.hprof.txt.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_77\lib\management\snmp.acl.template.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.access.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_77\lib\logging.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\cldrdata.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_77\lib\images\cursors\win32_movedrop32x32.gif.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_77\lib\psfont.properties.ja.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_77\lib\management\management.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\meta-index to %ProgramFiles%\java\jre1.8.0_77\lib\meta-index.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_77\lib\jfxswt.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\net.properties to %ProgramFiles%\java\jre1.8.0_77\lib\net.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_77\lib\management\jmxremote.password.template.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_77\lib\management-agent.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_77\lib\psfontj2d.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_77\lib\resources.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_77\lib\security\javaws.policy.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\trusted.libraries to %ProgramFiles%\java\jre1.8.0_77\lib\security\trusted.libraries.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_77\lib\security\java.security.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_77\lib\security\blacklisted.certs.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_77\lib\tzmappings.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_77\lib\security\cacerts.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_77\lib\plugin.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_77\lib\security\java.policy.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_77\lib\security\us_export_policy.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_77\lib\security\local_policy.jar.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_77\lib\sound.properties.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\release to %ProgramFiles%\java\jre1.8.0_77\release.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_77\lib\security\blacklist.hunteddb
from %ProgramFiles%\microsoft office\office16\custom.propdesc to %ProgramFiles%\microsoft office\office16\custom.propdesc.hunteddb
from %ProgramFiles%\microsoft office\office16\mso example setup file a.txt to %ProgramFiles%\microsoft office\office16\mso example setup file a.txt.hunteddb
from %ProgramFiles%\microsoft office\office16\1033\mso example intl setup file a.txt to %ProgramFiles%\microsoft office\office16\1033\mso example intl setup file a.txt.hunteddb
from %ProgramFiles%\microsoft office\office16\1033\mso example intl setup file b.txt to %ProgramFiles%\microsoft office\office16\1033\mso example intl setup file b.txt.hunteddb
from %ProgramFiles%\microsoft office\office16\onenote\sendtoonenotenames.gpd to %ProgramFiles%\microsoft office\office16\onenote\sendtoonenotenames.gpd.hunteddb
from %ProgramFiles%\microsoft office\office16\visiocustom.propdesc to %ProgramFiles%\microsoft office\office16\visiocustom.propdesc.hunteddb
from %ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.gpd to %ProgramFiles%\microsoft office\office16\onenote\sendtoonenote.gpd.hunteddb
from %ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote.cat to %ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote.cat.hunteddb
from %ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.cat to %ProgramFiles%\microsoft office\office16\onenote\prnsendtoonenote_win7.cat.hunteddb
from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\formautofill@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\pictureinpicture@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\pictureinpicture@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\doh-rollout@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat-reporter@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\screenshots@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi to %ProgramFiles%\mozilla firefox\browser\features\webcompat@mozilla.org.xpi.hunteddb
from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.hunteddb
from %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js to %ProgramFiles%\mozilla firefox\defaults\pref\channel-prefs.js.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_77\lib\ext\jfxrt.jar.hunteddb
from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.hunteddb
from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.hunteddb
from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\manifest.json.hunteddb
from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.hunteddb
from %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig to %ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\clearkey.dll.sig.hunteddb
from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.hunteddb
from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.hunteddb
from %ProgramFiles%\mozilla firefox\installation_telemetry.json to %ProgramFiles%\mozilla firefox\installation_telemetry.json.hunteddb
from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.hunteddb
from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.hunteddb
from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.hunteddb
from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.hunteddb
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\msgcomposewindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\msgcomposewindow.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\abcardwindow.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-summary-dialog.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-summary-dialog.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-dialog.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-dialog.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-alarm-dialog.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-alarm-dialog.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-summary-dialog.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-task-summary-dialog.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\messengerwindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\messengerwindow.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\addressbookwindow.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\dependentlibs.list to %ProgramFiles%\mozilla thunderbird\dependentlibs.list.hunteddb
from %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-dialog.ico to %ProgramFiles%\mozilla thunderbird\chrome\icons\default\calendar-event-dialog.ico.hunteddb
from %ProgramFiles%\mozilla thunderbird\defaults\pref\channel-prefs.js to %ProgramFiles%\mozilla thunderbird\defaults\pref\channel-prefs.js.hunteddb
from %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi to %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.hunteddb
from %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd to %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.hunteddb
from %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd to %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.hunteddb
from %ProgramFiles%\mozilla thunderbird\install.log to %ProgramFiles%\mozilla thunderbird\install.log.hunteddb
from %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd to %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.hunteddb
from %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd to %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.hunteddb
from %ProgramFiles%\mozilla thunderbird\precomplete to %ProgramFiles%\mozilla thunderbird\precomplete.hunteddb
from %ProgramFiles%\mozilla thunderbird\removed-files to %ProgramFiles%\mozilla thunderbird\removed-files.hunteddb
from %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd to %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.hunteddb
from %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.hunteddb
from %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log to %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.hunteddb
from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.hunteddb
from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.hunteddb
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.hunteddb
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.hunteddb
from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.hunteddb
from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.hunteddb
from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.hunteddb
from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.hunteddb
from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.hunteddb
from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.hunteddb
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.hunteddb
from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.hunteddb
from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.hunteddb
from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.hunteddb
from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.hunteddb
from %ProgramFiles%\java\jre1.8.0_77\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_77\lib\rt.jar.hunteddb
from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.hunteddb
from %ProgramFiles%\mozilla thunderbird\omni.ja to %ProgramFiles%\mozilla thunderbird\omni.ja.hunteddb

Modifies the following files

C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\office64ww.xml
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\proplusww.xml
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww.cab
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\owow64ww.cab
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\propsww2.cab
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excelmui.xml
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\excellr.cab
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.xml
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\pptlr.cab
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publr.cab
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\publishermui.xml
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlklr.cab
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\outlookmui.xml
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordmui.xml
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\wordlr.cab
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.xml
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.cab
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proofing.xml
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.xml
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.cab
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\setup.xml
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.xml
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.cab

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial