Trojan.Encoder.43155

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%ProgramFiles(x86)%\microsoft office\office16\startup\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\xlstart\how to restore your files.txt

Creates the following files on removable media

<Drive name for removable media>:\how to restore your files.txt
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\chromesetup.exe
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\skypesetup.exe
<Drive name for removable media>:\tcm851ax32.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\dotnetfx45_full_setup.exe

Malicious functions

Terminates or attempts to terminate

the following user processes:

firefox.exe

Modifies file system

Creates the following files

C:\how to restore your files.txt
C:\kms\how to restore your files.txt
C:\msocache\how to restore your files.txt
C:\perflogs\how to restore your files.txt
%ProgramFiles%\how to restore your files.txt
%ProgramFiles(x86)%\how to restore your files.txt
%ALLUSERSPROFILE%\how to restore your files.txt
C:\recovery\how to restore your files.txt
<Current directory>\how to restore your files.txt
C:\users\how to restore your files.txt
C:\msocache\all users\how to restore your files.txt
D:\how to restore your files.txt
%CommonProgramFiles%\how to restore your files.txt
%ProgramFiles%\internet explorer\how to restore your files.txt
%ProgramFiles%\java\how to restore your files.txt
%ProgramFiles%\microsoft office\how to restore your files.txt
%ProgramFiles%\mozilla firefox\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\how to restore your files.txt
%ProgramFiles%\uninstall information\how to restore your files.txt
%ProgramFiles%\winrar\how to restore your files.txt
%ProgramFiles(x86)%\adobe\how to restore your files.txt
%CommonProgramFiles(x86)%\how to restore your files.txt
%ProgramFiles(x86)%\internet explorer\how to restore your files.txt
%ProgramFiles(x86)%\microsoft\how to restore your files.txt
%ProgramFiles(x86)%\microsoft analysis services\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\how to restore your files.txt
%ProgramFiles(x86)%\microsoft sql server\how to restore your files.txt
%ProgramFiles(x86)%\microsoft.net\how to restore your files.txt
%ProgramFiles(x86)%\mozilla firefox\how to restore your files.txt
%ProgramFiles(x86)%\opera\how to restore your files.txt
%ProgramFiles(x86)%\steam\how to restore your files.txt
%ALLUSERSPROFILE%\adobe\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft help\how to restore your files.txt
%ALLUSERSPROFILE%\mozilla\how to restore your files.txt
%ALLUSERSPROFILE%\oracle\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\how to restore your files.txt
%ALLUSERSPROFILE%\packages\how to restore your files.txt
%ALLUSERSPROFILE%\regid.1991-06.com.microsoft\how to restore your files.txt
%ALLUSERSPROFILE%\softwaredistribution\how to restore your files.txt
%ALLUSERSPROFILE%\ssh\how to restore your files.txt
%ALLUSERSPROFILE%\usoshared\how to restore your files.txt
C:\users\default\how to restore your files.txt
C:\users\public\how to restore your files.txt
%HOMEPATH%\how to restore your files.txt
C:\msocache\all users\{90160000-0011-0000-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0016-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0018-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0019-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-001a-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-001b-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0044-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0090-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-00a1-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-00ba-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-00e1-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-00e2-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0115-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0116-0409-1000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\how to restore your files.txt
C:\msocache\all users\{90160000-012b-0409-0000-0000000ff1ce}-c\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\how to restore your files.txt
%CommonProgramFiles%\services\how to restore your files.txt
%CommonProgramFiles%\system\how to restore your files.txt
%ProgramFiles%\internet explorer\en-us\how to restore your files.txt
%ProgramFiles%\internet explorer\images\how to restore your files.txt
%ProgramFiles%\internet explorer\signup\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\how to restore your files.txt
%ProgramFiles%\microsoft office\office16\how to restore your files.txt
%ProgramFiles%\mozilla firefox\browser\how to restore your files.txt
%ProgramFiles%\mozilla firefox\defaults\how to restore your files.txt
%ProgramFiles%\mozilla firefox\distibution\how to restore your files.txt
%ProgramFiles%\mozilla firefox\fonts\how to restore your files.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\how to restore your files.txt
%ProgramFiles%\mozilla firefox\uninstall\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\chrome\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\defaults\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\features\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\fonts\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\isp\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\uninstall\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\visualelements\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\how to restore your files.txt
%CommonProgramFiles(x86)%\designer\how to restore your files.txt
%CommonProgramFiles(x86)%\java\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\how to restore your files.txt
%CommonProgramFiles(x86)%\services\how to restore your files.txt
%CommonProgramFiles(x86)%\steam\how to restore your files.txt
%CommonProgramFiles(x86)%\system\how to restore your files.txt
%ProgramFiles(x86)%\internet explorer\en-us\how to restore your files.txt
%ProgramFiles(x86)%\internet explorer\images\how to restore your files.txt
%ProgramFiles(x86)%\internet explorer\signup\how to restore your files.txt
%ProgramFiles(x86)%\microsoft\edge\how to restore your files.txt
%ProgramFiles(x86)%\microsoft analysis services\as oledb\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\clipart\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\document themes 16\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\stationery\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\templates\how to restore your files.txt
%ProgramFiles(x86)%\microsoft sql server\110\how to restore your files.txt
%ProgramFiles(x86)%\microsoft.net\adomd.net\how to restore your files.txt
%ProgramFiles(x86)%\microsoft.net\primary interop assemblies\how to restore your files.txt
%ProgramFiles(x86)%\microsoft.net\redistlist\how to restore your files.txt
%ProgramFiles(x86)%\mozilla firefox\plugins\how to restore your files.txt
%ProgramFiles(x86)%\opera\36.0.2130.46\how to restore your files.txt
%ProgramFiles(x86)%\opera\assets\how to restore your files.txt
%ProgramFiles(x86)%\steam\bin\how to restore your files.txt
%ProgramFiles(x86)%\steam\logs\how to restore your files.txt
%ProgramFiles(x86)%\steam\public\how to restore your files.txt
%ALLUSERSPROFILE%\adobe\setup\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\appv\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\device stage\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\devicesync\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosticlogcsp\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\drm\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\identitycrl\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\mapdata\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\mf\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\netframework\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\network\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\office\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\provisioning\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\search\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\settings\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\smsrouter\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\spectrum\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\speech_onecore\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\storage health\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\uev\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\user account pictures\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\vault\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\wdf\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\winmsipc\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\wpd\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\wwansvc\how to restore your files.txt
%ALLUSERSPROFILE%\mozilla\updates\how to restore your files.txt
%ALLUSERSPROFILE%\oracle\java\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.549981c3f5f10_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.desktopappinstaller_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.getstarted_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.microsoft3dviewer_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.mixedreality.portal_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.office.onenote_8wekyb3d8bbwe\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.skypeapp_kzf8qxf38zg5c\how to restore your files.txt
%ALLUSERSPROFILE%\usoshared\logs\how to restore your files.txt
C:\users\default\appdata\how to restore your files.txt
C:\users\default\desktop\how to restore your files.txt
C:\users\default\documents\how to restore your files.txt
C:\users\default\downloads\how to restore your files.txt
C:\users\default\favorites\how to restore your files.txt
C:\users\default\links\how to restore your files.txt
C:\users\default\music\how to restore your files.txt
C:\users\default\pictures\how to restore your files.txt
C:\users\default\saved games\how to restore your files.txt
C:\users\default\videos\how to restore your files.txt
C:\users\public\accountpictures\how to restore your files.txt
C:\users\public\desktop\how to restore your files.txt
C:\users\public\documents\how to restore your files.txt
C:\users\public\downloads\how to restore your files.txt
C:\users\public\libraries\how to restore your files.txt
C:\users\public\music\how to restore your files.txt
C:\users\public\pictures\how to restore your files.txt
C:\users\public\videos\how to restore your files.txt
%HOMEPATH%\.oracle_jre_usage\how to restore your files.txt
%HOMEPATH%\3d objects\how to restore your files.txt
%HOMEPATH%\appdata\how to restore your files.txt
%HOMEPATH%\contacts\how to restore your files.txt
%HOMEPATH%\desktop\how to restore your files.txt
%HOMEPATH%\documents\how to restore your files.txt
%HOMEPATH%\downloads\how to restore your files.txt
%HOMEPATH%\favorites\how to restore your files.txt
%HOMEPATH%\links\how to restore your files.txt
%HOMEPATH%\music\how to restore your files.txt
%HOMEPATH%\pictures\how to restore your files.txt
%HOMEPATH%\saved games\how to restore your files.txt
%HOMEPATH%\searches\how to restore your files.txt
%HOMEPATH%\videos\how to restore your files.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.en\how to restore your files.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.es\how to restore your files.txt
C:\msocache\all users\{90160000-002c-0409-0000-0000000ff1ce}-c\proof.fr\how to restore your files.txt
C:\msocache\all users\{90160000-0117-0409-0000-0000000ff1ce}-c\access.en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\filters\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\msinfo\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\office16\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\stationery\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\textconv\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\triedit\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\vc\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\vgx\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\vsto\how to restore your files.txt
%CommonProgramFiles%\system\ado\how to restore your files.txt
%CommonProgramFiles%\system\en-us\how to restore your files.txt
%CommonProgramFiles%\system\msadc\how to restore your files.txt
%CommonProgramFiles%\system\ole db\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\bin\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\how to restore your files.txt
%ProgramFiles%\microsoft office\office16\1033\how to restore your files.txt
%ProgramFiles%\microsoft office\office16\onenote\how to restore your files.txt
%ProgramFiles%\mozilla firefox\browser\features\how to restore your files.txt
%ProgramFiles%\mozilla firefox\browser\visualelements\how to restore your files.txt
%ProgramFiles%\mozilla firefox\defaults\pref\how to restore your files.txt
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\chrome\icons\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\defaults\messenger\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\defaults\pref\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\esl\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\setup files\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\acrobat\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\arm\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\helpcfg\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\reader\how to restore your files.txt
%CommonProgramFiles(x86)%\java\java update\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\dao\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\dw\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\equation\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\euro\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\filters\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\grphflt\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\ink\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\msclientdatamgr\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\msenv\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\msinfo\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\officesoftwareprotectionplatform\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\portal\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\proof\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\smart tag\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\source engine\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\stationery\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\textconv\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\translat\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\triedit\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\vba\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\vc\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\vgx\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\vsto\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\web server extensions\how to restore your files.txt
%CommonProgramFiles(x86)%\system\ado\how to restore your files.txt
%CommonProgramFiles(x86)%\system\en-us\how to restore your files.txt
%CommonProgramFiles(x86)%\system\msadc\how to restore your files.txt
%CommonProgramFiles(x86)%\system\msmapi\how to restore your files.txt
%CommonProgramFiles(x86)%\system\ole db\how to restore your files.txt
%ProgramFiles(x86)%\microsoft\edge\application\how to restore your files.txt
%ProgramFiles(x86)%\microsoft analysis services\as oledb\110\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\clipart\pub60cor\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\clipart\publisher\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\document themes 16\theme colors\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\document themes 16\theme effects\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\document themes 16\theme fonts\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\1033\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\1036\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\3082\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\accessweb\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\accwiz\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\addins\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\bibliography\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\borders\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\configuration\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\convert\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\dcf\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\document parts\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\forms\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\library\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\logoimages\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\media\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\msipc\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\outlookautodiscover\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\pagesize\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\proof\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\pubba\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\pubwiz\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\queries\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\office16\samples\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\stationery\1033\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\templates\1033\how to restore your files.txt
%ProgramFiles(x86)%\microsoft office\templates\presentation designs\how to restore your files.txt
%ProgramFiles(x86)%\microsoft sql server\110\shared\how to restore your files.txt
%ProgramFiles(x86)%\microsoft.net\adomd.net\110\how to restore your files.txt
%ProgramFiles(x86)%\opera\36.0.2130.46\localization\how to restore your files.txt
%ProgramFiles(x86)%\opera\36.0.2130.46\resources\how to restore your files.txt
%ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\appv\setup\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\dss\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\keys\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\pcpksp\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\rsa\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\crypto\systemkeys\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\device stage\device\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\customtraceprofiles\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\downloadedscenarios\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\downloadedsettings\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\etllogs\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\eventtranscript\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\feedbackhub\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\localtracestore\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\scenariossqlstore\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\sideload\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\siufloc\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\softlanding\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\softlandingstage\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\temp\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\tenantstorage\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosis\timetraveldebuggingstorage\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosticlogcsp\channels\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosticlogcsp\collectors\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\diagnosticlogcsp\devicestatedata\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\drm\server\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\identitycrl\int\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\identitycrl\production\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\netframework\breadcrumbstore\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\network\connections\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\network\downloader\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\office\heartbeat\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\provisioning\assetcache\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\search\data\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\settings\accounts\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\smsrouter\messagestore\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\uev\inboxtemplates\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\uev\scripts\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\uev\templates\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\vault\ac658cb4-9126-49bd-b877-31eedab3f204\how to restore your files.txt
%ALLUSERSPROFILE%\microsoft\winmsipc\server\how to restore your files.txt
%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\how to restore your files.txt
%ALLUSERSPROFILE%\mozilla\updates\d78bf5dd33499ec2\how to restore your files.txt
%ALLUSERSPROFILE%\oracle\java\installcache_x64\how to restore your files.txt
%ALLUSERSPROFILE%\oracle\java\javapath\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\how to restore your files.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.549981c3f5f10_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.desktopappinstaller_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.getstarted_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.microsoft3dviewer_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.microsoftofficehub_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.mixedreality.portal_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.office.onenote_8wekyb3d8bbwe\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\packages\microsoft.skypeapp_kzf8qxf38zg5c\s-1-5-21-4226853953-3309226944-3078887307-1000\how to restore your files.txt
%ALLUSERSPROFILE%\usoshared\logs\user\how to restore your files.txt
C:\users\default\appdata\local\how to restore your files.txt
C:\users\default\appdata\roaming\how to restore your files.txt
%LOCALAPPDATA%\how to restore your files.txt
%LOCALAPPDATA%low\how to restore your files.txt
%APPDATA%\how to restore your files.txt
%HOMEPATH%\favorites\links\how to restore your files.txt
%HOMEPATH%\pictures\camera roll\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\ar-sa\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\bg-bg\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\cs-cz\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\da-dk\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\de-de\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\el-gr\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\en-gb\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\es-es\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\es-mx\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\et-ee\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\fi-fi\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\fr-ca\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\fr-fr\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\he-il\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\hr-hr\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\hu-hu\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\hwrcustomization\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\it-it\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\ja-jp\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\ko-kr\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\languagemodel\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\lt-lt\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\lv-lv\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\nb-no\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\nl-nl\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\pl-pl\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\pt-br\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\pt-pt\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\ro-ro\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\ru-ru\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\sk-sk\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\sl-si\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\sr-latn-rs\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\sv-se\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\th-th\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\tr-tr\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\uk-ua\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\zh-cn\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\ink\zh-tw\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\msinfo\en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\office16\cultures\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\office16\en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\textconv\en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\triedit\en-us\how to restore your files.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\how to restore your files.txt
%CommonProgramFiles%\system\ado\en-us\how to restore your files.txt
%CommonProgramFiles%\system\msadc\en-us\how to restore your files.txt
%CommonProgramFiles%\system\ole db\en-us\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\bin\dtplugin\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\bin\plugin2\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\bin\server\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\amd64\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\applet\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\cmm\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\deploy\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\ext\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\fonts\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\images\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\jfr\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\management\how to restore your files.txt
%ProgramFiles%\java\jre1.8.0_77\lib\security\how to restore your files.txt
%ProgramFiles%\mozilla thunderbird\chrome\icons\default\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\air\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\browser\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\font\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\saslprep\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\how to restore your files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\setup files\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\arm\1.0\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\helpcfg\en_us\how to restore your files.txt
%CommonProgramFiles(x86)%\adobe\reader\dc\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\equation\1033\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1028\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1031\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1033\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1036\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1040\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1041\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1042\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1046\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\1049\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\2052\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\help\3082\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\ink\en-us\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\ink\hwrcustomization\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\msenv\publicassemblies\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\msinfo\en-us\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\1033\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\cultures\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\datamodel\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\en-us\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\office16\office setup controller\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\portal\1033\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\smart tag\1033\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\smart tag\lists\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\textconv\en-us\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\aftrnoon\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\arctic\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\axis\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\blends\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\bluecalm\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\blueprnt\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\boldstri\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\breeze\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\canyon\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\capsules\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\cascade\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\compass\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\concrete\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\deepblue\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\echo\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\eclipse\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\edge\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\evrgreen\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\expeditn\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\ice\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\indust\how to restore your files.txt
%CommonProgramFiles(x86)%\microsoft shared\themes16\iris\how to restore your files.txt

Moves the following files

from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini.bitco1n
from %ProgramFiles(x86)%\desktop.ini to %ProgramFiles(x86)%\desktop.ini.bitco1n
from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.bitco1n
from %ProgramFiles%\mozilla firefox\accessiblemarshal.dll to %ProgramFiles%\mozilla firefox\accessiblemarshal.dll.bitco1n
from %ProgramFiles%\mozilla firefox\accessiblehandler.dll to %ProgramFiles%\mozilla firefox\accessiblehandler.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\application.ini to %ProgramFiles%\mozilla firefox\application.ini.bitco1n
from %ProgramFiles%\mozilla firefox\crashreporter.ini to %ProgramFiles%\mozilla firefox\crashreporter.ini.bitco1n
from %ProgramFiles%\mozilla firefox\crashreporter.exe to %ProgramFiles%\mozilla firefox\crashreporter.exe.bitco1n
from %ProgramFiles%\mozilla firefox\d3dcompiler_47.dll to %ProgramFiles%\mozilla firefox\d3dcompiler_47.dll.bitco1n
from %ProgramFiles%\mozilla firefox\default-browser-agent.exe to %ProgramFiles%\mozilla firefox\default-browser-agent.exe.bitco1n
from %ProgramFiles%\mozilla firefox\defaultagent.ini to %ProgramFiles%\mozilla firefox\defaultagent.ini.bitco1n
from %ProgramFiles%\mozilla firefox\defaultagent_localized.ini to %ProgramFiles%\mozilla firefox\defaultagent_localized.ini.bitco1n
from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.bitco1n
from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.bitco1n
from %ProgramFiles%\mozilla firefox\ia2marshal.dll to %ProgramFiles%\mozilla firefox\ia2marshal.dll.bitco1n
from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.bitco1n
from %ProgramFiles%\mozilla firefox\lgpllibs.dll to %ProgramFiles%\mozilla firefox\lgpllibs.dll.bitco1n
from %ProgramFiles%\mozilla firefox\installation_telemetry.json to %ProgramFiles%\mozilla firefox\installation_telemetry.json.bitco1n
from %ProgramFiles%\mozilla firefox\libegl.dll to %ProgramFiles%\mozilla firefox\libegl.dll.bitco1n
from %ProgramFiles%\mozilla firefox\locale.ini to %ProgramFiles%\mozilla firefox\locale.ini.bitco1n
from %ProgramFiles%\mozilla firefox\maintenanceservice.exe to %ProgramFiles%\mozilla firefox\maintenanceservice.exe.bitco1n
from %ProgramFiles%\mozilla firefox\libglesv2.dll to %ProgramFiles%\mozilla firefox\libglesv2.dll.bitco1n
from %ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe to %ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe.bitco1n
from %ProgramFiles%\mozilla firefox\minidump-analyzer.exe to %ProgramFiles%\mozilla firefox\minidump-analyzer.exe.bitco1n
from %ProgramFiles%\mozilla firefox\mozavcodec.dll to %ProgramFiles%\mozilla firefox\mozavcodec.dll.bitco1n
from %ProgramFiles%\mozilla firefox\mozavutil.dll to %ProgramFiles%\mozilla firefox\mozavutil.dll.bitco1n
from %ProgramFiles%\mozilla firefox\mozglue.dll to %ProgramFiles%\mozilla firefox\mozglue.dll.bitco1n
from %ProgramFiles%\mozilla firefox\mozwer.dll to %ProgramFiles%\mozilla firefox\mozwer.dll.bitco1n
from %ProgramFiles%\mozilla firefox\msvcp140.dll to %ProgramFiles%\mozilla firefox\msvcp140.dll.bitco1n
from %ProgramFiles%\mozilla firefox\nss3.dll to %ProgramFiles%\mozilla firefox\nss3.dll.bitco1n
from %ProgramFiles%\mozilla firefox\nssckbi.dll to %ProgramFiles%\mozilla firefox\nssckbi.dll.bitco1n
from %ProgramFiles%\mozilla firefox\osclientcerts.dll to %ProgramFiles%\mozilla firefox\osclientcerts.dll.bitco1n
from %ProgramFiles%\mozilla firefox\pingsender.exe to %ProgramFiles%\mozilla firefox\pingsender.exe.bitco1n
from %ProgramFiles%\mozilla firefox\platform.ini to %ProgramFiles%\mozilla firefox\platform.ini.bitco1n
from %ProgramFiles%\mozilla firefox\plugin-container.exe to %ProgramFiles%\mozilla firefox\plugin-container.exe.bitco1n
from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.bitco1n
from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.bitco1n
from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.bitco1n
from %ProgramFiles%\mozilla firefox\qipcap64.dll to %ProgramFiles%\mozilla firefox\qipcap64.dll.bitco1n
from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.bitco1n
from %ProgramFiles%\mozilla firefox\softokn3.dll to %ProgramFiles%\mozilla firefox\softokn3.dll.bitco1n
from %ProgramFiles%\mozilla firefox\ucrtbase.dll to %ProgramFiles%\mozilla firefox\ucrtbase.dll.bitco1n
from %ProgramFiles%\mozilla firefox\updater.exe to %ProgramFiles%\mozilla firefox\updater.exe.bitco1n
from %ProgramFiles%\mozilla firefox\update-settings.ini to %ProgramFiles%\mozilla firefox\update-settings.ini.bitco1n
from %ProgramFiles%\mozilla firefox\updater.ini to %ProgramFiles%\mozilla firefox\updater.ini.bitco1n
from %ProgramFiles%\mozilla firefox\vcruntime140.dll to %ProgramFiles%\mozilla firefox\vcruntime140.dll.bitco1n
from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.bitco1n
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.bitco1n
from %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll to %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll to %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla firefox\xul.dll to %ProgramFiles%\mozilla firefox\xul.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\application.ini to %ProgramFiles%\mozilla thunderbird\application.ini.bitco1n
from %ProgramFiles%\mozilla thunderbird\crashreporter.ini to %ProgramFiles%\mozilla thunderbird\crashreporter.ini.bitco1n
from %ProgramFiles%\mozilla thunderbird\crashreporter.exe to %ProgramFiles%\mozilla thunderbird\crashreporter.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll to %ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\dependentlibs.list to %ProgramFiles%\mozilla thunderbird\dependentlibs.list.bitco1n
from %ProgramFiles%\mozilla thunderbird\freebl3.dll to %ProgramFiles%\mozilla thunderbird\freebl3.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\ia2marshal.dll to %ProgramFiles%\mozilla thunderbird\ia2marshal.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\ldap60.dll to %ProgramFiles%\mozilla thunderbird\ldap60.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\ldif60.dll to %ProgramFiles%\mozilla thunderbird\ldif60.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\lgpllibs.dll to %ProgramFiles%\mozilla thunderbird\lgpllibs.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\install.log to %ProgramFiles%\mozilla thunderbird\install.log.bitco1n
from %ProgramFiles%\mozilla thunderbird\libegl.dll to %ProgramFiles%\mozilla thunderbird\libegl.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\libglesv2.dll to %ProgramFiles%\mozilla thunderbird\libglesv2.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll to %ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\libotr-5.dll to %ProgramFiles%\mozilla thunderbird\libotr-5.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll to %ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\libssp-0.dll to %ProgramFiles%\mozilla thunderbird\libssp-0.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\maintenanceservice.exe to %ProgramFiles%\mozilla thunderbird\maintenanceservice.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe to %ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\mapiproxy.dll to %ProgramFiles%\mozilla thunderbird\mapiproxy.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll to %ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe to %ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\mozglue.dll to %ProgramFiles%\mozilla thunderbird\mozglue.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll to %ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\mozmapi32.dll to %ProgramFiles%\mozilla thunderbird\mozmapi32.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\nss3.dll to %ProgramFiles%\mozilla thunderbird\nss3.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\msvcp140.dll to %ProgramFiles%\mozilla thunderbird\msvcp140.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\nssckbi.dll to %ProgramFiles%\mozilla thunderbird\nssckbi.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\osclientcerts.dll to %ProgramFiles%\mozilla thunderbird\osclientcerts.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\pingsender.exe to %ProgramFiles%\mozilla thunderbird\pingsender.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\platform.ini to %ProgramFiles%\mozilla thunderbird\platform.ini.bitco1n
from %ProgramFiles%\mozilla thunderbird\plugin-container.exe to %ProgramFiles%\mozilla thunderbird\plugin-container.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe to %ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\precomplete to %ProgramFiles%\mozilla thunderbird\precomplete.bitco1n
from %ProgramFiles%\mozilla thunderbird\prldap60.dll to %ProgramFiles%\mozilla thunderbird\prldap60.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\qipcap64.dll to %ProgramFiles%\mozilla thunderbird\qipcap64.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\removed-files to %ProgramFiles%\mozilla thunderbird\removed-files.bitco1n
from %ProgramFiles%\mozilla thunderbird\rnp.dll to %ProgramFiles%\mozilla thunderbird\rnp.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\omni.ja to %ProgramFiles%\mozilla thunderbird\omni.ja.bitco1n
from %ProgramFiles%\mozilla thunderbird\softokn3.dll to %ProgramFiles%\mozilla thunderbird\softokn3.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\thunderbird.exe to %ProgramFiles%\mozilla thunderbird\thunderbird.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\ucrtbase.dll to %ProgramFiles%\mozilla thunderbird\ucrtbase.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\updater.exe to %ProgramFiles%\mozilla thunderbird\updater.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\updater.ini to %ProgramFiles%\mozilla thunderbird\updater.ini.bitco1n
from %ProgramFiles%\mozilla thunderbird\vcruntime140.dll to %ProgramFiles%\mozilla thunderbird\vcruntime140.dll.bitco1n
from %ProgramFiles%\mozilla thunderbird\update-settings.ini to %ProgramFiles%\mozilla thunderbird\update-settings.ini.bitco1n
from %ProgramFiles%\mozilla thunderbird\wsenable.exe to %ProgramFiles%\mozilla thunderbird\wsenable.exe.bitco1n
from %ProgramFiles%\winrar\7zxa.dll to %ProgramFiles%\winrar\7zxa.dll.bitco1n
from %ProgramFiles%\winrar\ace32loader.exe to %ProgramFiles%\winrar\ace32loader.exe.bitco1n
from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.bitco1n
from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.bitco1n
from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.bitco1n
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.bitco1n
from %ProgramFiles%\winrar\rar.exe to %ProgramFiles%\winrar\rar.exe.bitco1n
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.bitco1n
from %ProgramFiles%\winrar\rarext.dll to %ProgramFiles%\winrar\rarext.dll.bitco1n
from %ProgramFiles%\winrar\rarext32.dll to %ProgramFiles%\winrar\rarext32.dll.bitco1n
from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.bitco1n
from %ProgramFiles%\winrar\readme.txt to %ProgramFiles%\winrar\readme.txt.bitco1n
from %ProgramFiles%\winrar\unacev2.dll to %ProgramFiles%\winrar\unacev2.dll.bitco1n
from %ProgramFiles%\winrar\uninstall.exe to %ProgramFiles%\winrar\uninstall.exe.bitco1n
from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.bitco1n
from %ProgramFiles%\winrar\unrar.exe to %ProgramFiles%\winrar\unrar.exe.bitco1n
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.bitco1n
from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.bitco1n
from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.bitco1n
from %ProgramFiles%\mozilla thunderbird\xul.dll to %ProgramFiles%\mozilla thunderbird\xul.dll.bitco1n
from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.bitco1n
from %ProgramFiles%\winrar\winrar.exe to %ProgramFiles%\winrar\winrar.exe.bitco1n
from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.bitco1n
from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.bitco1n
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\installer_prefs.json.bitco1n
from %ProgramFiles(x86)%\opera\launcher.exe to %ProgramFiles(x86)%\opera\launcher.exe.bitco1n
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\resources.pri.bitco1n
from %ProgramFiles(x86)%\steam\steam.cfg to %ProgramFiles(x86)%\steam\steam.cfg.bitco1n
from %ProgramFiles(x86)%\steam\steam.exe to %ProgramFiles(x86)%\steam\steam.exe.bitco1n
from %ProgramFiles(x86)%\steam\uninstall.exe to %ProgramFiles(x86)%\steam\uninstall.exe.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\copyright to %ProgramFiles%\java\jre1.8.0_77\copyright.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\license to %ProgramFiles%\java\jre1.8.0_77\license.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\readme.txt to %ProgramFiles%\java\jre1.8.0_77\readme.txt.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\release to %ProgramFiles%\java\jre1.8.0_77\release.bitco1n
from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme-javafx.txt.bitco1n
from %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_77\thirdpartylicensereadme.txt.bitco1n
from %ProgramFiles%\microsoft office\office16\appsharingchromehook64.dll to %ProgramFiles%\microsoft office\office16\appsharingchromehook64.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\appsharinghookcontroller64.exe to %ProgramFiles%\microsoft office\office16\appsharinghookcontroller64.exe.bitco1n
from %ProgramFiles%\microsoft office\office16\custom.propdesc to %ProgramFiles%\microsoft office\office16\custom.propdesc.bitco1n
from %ProgramFiles%\microsoft office\office16\ieawsdc.dll to %ProgramFiles%\microsoft office\office16\ieawsdc.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\mapishell.dll to %ProgramFiles%\microsoft office\office16\mapishell.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\meetingjoinaxoc.dll to %ProgramFiles%\microsoft office\office16\meetingjoinaxoc.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\msohev.dll to %ProgramFiles%\microsoft office\office16\msohev.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\msohevi.dll to %ProgramFiles%\microsoft office\office16\msohevi.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\msohtmed.exe to %ProgramFiles%\microsoft office\office16\msohtmed.exe.bitco1n
from %ProgramFiles%\microsoft office\office16\msoia.exe to %ProgramFiles%\microsoft office\office16\msoia.exe.bitco1n
from %ProgramFiles%\microsoft office\office16\msoianetutil.dll to %ProgramFiles%\microsoft office\office16\msoianetutil.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\nameext.dll to %ProgramFiles%\microsoft office\office16\nameext.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\ochelper.dll to %ProgramFiles%\microsoft office\office16\ochelper.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\olkfstub.dll to %ProgramFiles%\microsoft office\office16\olkfstub.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\onbttnie.dll to %ProgramFiles%\microsoft office\office16\onbttnie.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\onbttnielinkednotes.dll to %ProgramFiles%\microsoft office\office16\onbttnielinkednotes.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\onfilter.dll to %ProgramFiles%\microsoft office\office16\onfilter.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\onlntcomlib.dll to %ProgramFiles%\microsoft office\office16\onlntcomlib.dll.bitco1n
from %ProgramFiles%\microsoft office\office16\mso example setup file a.txt to %ProgramFiles%\microsoft office\office16\mso example setup file a.txt.bitco1n
from %ProgramFiles%\microsoft office\office16\visiocustom.propdesc to %ProgramFiles%\microsoft office\office16\visiocustom.propdesc.bitco1n
from %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini to %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.bitco1n
from %ProgramFiles%\microsoft office\office16\visshe.dll to %ProgramFiles%\microsoft office\office16\visshe.dll.bitco1n
from %ProgramFiles%\mozilla firefox\browser\override.ini to %ProgramFiles%\mozilla firefox\browser\override.ini.bitco1n
from %ProgramFiles%\mozilla firefox\distibution\policies.json to %ProgramFiles%\mozilla firefox\distibution\policies.json.bitco1n
from %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.bitco1n
from %ProgramFiles%\mozilla firefox\uninstall\helper.exe to %ProgramFiles%\mozilla firefox\uninstall\helper.exe.bitco1n
from %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.bitco1n
from %ProgramFiles%\mozilla firefox\browser\omni.ja to %ProgramFiles%\mozilla firefox\browser\omni.ja.bitco1n
from %ProgramFiles%\mozilla firefox\uninstall\uninstall.log to %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.bitco1n
from %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi to %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.bitco1n
from %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf to %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.bitco1n
from %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd to %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.bitco1n
from %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd to %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.bitco1n
from %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd to %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.bitco1n
from %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd to %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.bitco1n
from %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd to %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.bitco1n
from %ProgramFiles%\mozilla thunderbird\uninstall\helper.exe to %ProgramFiles%\mozilla thunderbird\uninstall\helper.exe.bitco1n
from %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log to %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.bitco1n
from %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini to %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.bitco1n
from %ProgramFiles(x86)%\microsoft\edge\edge.dat.log1 to %ProgramFiles(x86)%\microsoft\edge\edge.dat.log1.bitco1n
from %ProgramFiles(x86)%\internet explorer\signup\install.ins to %ProgramFiles(x86)%\internet explorer\signup\install.ins.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\facet.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\facet.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\integral.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\integral.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\ion boardroom.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\ion boardroom.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\office theme.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\office theme.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\ion.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\ion.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\retrospect.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\retrospect.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\organic.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\organic.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\slice.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\slice.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\accicons.exe to %ProgramFiles(x86)%\microsoft office\office16\accicons.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\document themes 16\wisp.thmx to %ProgramFiles(x86)%\microsoft office\document themes 16\wisp.thmx.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\accwiz.dll to %ProgramFiles(x86)%\microsoft office\office16\accwiz.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\acedao.dll to %ProgramFiles(x86)%\microsoft office\office16\acedao.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ademodule.dll to %ProgramFiles(x86)%\microsoft office\office16\ademodule.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appshapi.dll to %ProgramFiles(x86)%\microsoft office\office16\appshapi.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appsharingchromehook.dll to %ProgramFiles(x86)%\microsoft office\office16\appsharingchromehook.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appsharinghookcontroller.exe to %ProgramFiles(x86)%\microsoft office\office16\appsharinghookcontroller.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appsharingmediaprovider.dll to %ProgramFiles(x86)%\microsoft office\office16\appsharingmediaprovider.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appshcom.dll to %ProgramFiles(x86)%\microsoft office\office16\appshcom.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\audiosearchlts.dll to %ProgramFiles(x86)%\microsoft office\office16\audiosearchlts.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\audiosearchmain.dll to %ProgramFiles(x86)%\microsoft office\office16\audiosearchmain.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\audiosearchsapife.dll to %ProgramFiles(x86)%\microsoft office\office16\audiosearchsapife.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\appshvw.dll to %ProgramFiles(x86)%\microsoft office\office16\appshvw.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\bdcmetadata.xsd to %ProgramFiles(x86)%\microsoft office\office16\bdcmetadata.xsd.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\bdcmetadataresource.xsd to %ProgramFiles(x86)%\microsoft office\office16\bdcmetadataresource.xsd.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\autohelper.dll to %ProgramFiles(x86)%\microsoft office\office16\autohelper.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\clview.exe to %ProgramFiles(x86)%\microsoft office\office16\clview.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\cnfnot32.exe to %ProgramFiles(x86)%\microsoft office\office16\cnfnot32.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\chart.dll to %ProgramFiles(x86)%\microsoft office\office16\chart.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\contab32.dll to %ProgramFiles(x86)%\microsoft office\office16\contab32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\communicatorcontentbinapp.xap to %ProgramFiles(x86)%\microsoft office\office16\communicatorcontentbinapp.xap.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\contactpicker.dll to %ProgramFiles(x86)%\microsoft office\office16\contactpicker.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\cpprest140_2_6.dll to %ProgramFiles(x86)%\microsoft office\office16\cpprest140_2_6.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\csiresources.dll to %ProgramFiles(x86)%\microsoft office\office16\csiresources.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\css7data0009.dll to %ProgramFiles(x86)%\microsoft office\office16\css7data0009.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\css7data000a.dll to %ProgramFiles(x86)%\microsoft office\office16\css7data000a.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\css7data000c.dll to %ProgramFiles(x86)%\microsoft office\office16\css7data000c.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\custom.propdesc to %ProgramFiles(x86)%\microsoft office\office16\custom.propdesc.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\dlgsetp.dll to %ProgramFiles(x86)%\microsoft office\office16\dlgsetp.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\dbghelp.dll to %ProgramFiles(x86)%\microsoft office\office16\dbghelp.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\emablt32.dll to %ProgramFiles(x86)%\microsoft office\office16\emablt32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\entitydatahandler.dll to %ProgramFiles(x86)%\microsoft office\office16\entitydatahandler.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\emsmdb32.dll to %ProgramFiles(x86)%\microsoft office\office16\emsmdb32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\envelope.dll to %ProgramFiles(x86)%\microsoft office\office16\envelope.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\entitypicker.dll to %ProgramFiles(x86)%\microsoft office\office16\entitypicker.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\excel.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\excel.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\excel.exe to %ProgramFiles(x86)%\microsoft office\office16\excel.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\excelcnv.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\excelcnv.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\excelcnvpxy.dll to %ProgramFiles(x86)%\microsoft office\office16\excelcnvpxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\exsec32.dll to %ProgramFiles(x86)%\microsoft office\office16\exsec32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\excelcnv.exe to %ProgramFiles(x86)%\microsoft office\office16\excelcnv.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\extensibleapp.xap to %ProgramFiles(x86)%\microsoft office\office16\extensibleapp.xap.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\filtermodule.dll to %ProgramFiles(x86)%\microsoft office\office16\filtermodule.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\firstrun.exe to %ProgramFiles(x86)%\microsoft office\office16\firstrun.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\gkexcel.dll to %ProgramFiles(x86)%\microsoft office\office16\gkexcel.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\gkpowerpoint.dll to %ProgramFiles(x86)%\microsoft office\office16\gkpowerpoint.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\gkword.dll to %ProgramFiles(x86)%\microsoft office\office16\gkword.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\graph.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\graph.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\graph.exe to %ProgramFiles(x86)%\microsoft office\office16\graph.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\graph.ico to %ProgramFiles(x86)%\microsoft office\office16\graph.ico.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\iecontentservice.exe to %ProgramFiles(x86)%\microsoft office\office16\iecontentservice.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ieawsdc.dll to %ProgramFiles(x86)%\microsoft office\office16\ieawsdc.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\intldate.dll to %ProgramFiles(x86)%\microsoft office\office16\intldate.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\igx.dll to %ProgramFiles(x86)%\microsoft office\office16\igx.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lync.exe to %ProgramFiles(x86)%\microsoft office\office16\lync.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lync.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\lync.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lync2013_third_party_notices.txt to %ProgramFiles(x86)%\microsoft office\office16\lync2013_third_party_notices.txt.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lync99.exe to %ProgramFiles(x86)%\microsoft office\office16\lync99.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lync.ico to %ProgramFiles(x86)%\microsoft office\office16\lync.ico.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lyncdesktopviewmodel.dll to %ProgramFiles(x86)%\microsoft office\office16\lyncdesktopviewmodel.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lyncdesktopsmartbitmapresources.dll to %ProgramFiles(x86)%\microsoft office\office16\lyncdesktopsmartbitmapresources.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lynchtmlconvpxy.dll to %ProgramFiles(x86)%\microsoft office\office16\lynchtmlconvpxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lynchtmlconv.exe to %ProgramFiles(x86)%\microsoft office\office16\lynchtmlconv.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mapiph.dll to %ProgramFiles(x86)%\microsoft office\office16\mapiph.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\lyncmodelproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\lyncmodelproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mapishell.dll to %ProgramFiles(x86)%\microsoft office\office16\mapishell.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mce.dll to %ProgramFiles(x86)%\microsoft office\office16\mce.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mceperfctr.man to %ProgramFiles(x86)%\microsoft office\office16\mceperfctr.man.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\meetingjoinaxoc.dll to %ProgramFiles(x86)%\microsoft office\office16\meetingjoinaxoc.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.interop.visio.workflowauthoring.dll to %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.interop.visio.workflowauthoring.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.policytips.dll to %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.policytips.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.workflow.actions.proxy.dll to %ProgramFiles(x86)%\microsoft office\office16\microsoft.office.workflow.actions.proxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mimedir.dll to %ProgramFiles(x86)%\microsoft office\office16\mimedir.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\microsoft.sharepoint.workflowactions.proxy.dll to %ProgramFiles(x86)%\microsoft office\office16\microsoft.sharepoint.workflowactions.proxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\minsbproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\minsbproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\minsbroamingproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\minsbroamingproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mlcfg32.cpl to %ProgramFiles(x86)%\microsoft office\office16\mlcfg32.cpl.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\misc.exe to %ProgramFiles(x86)%\microsoft office\office16\misc.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mml2omml.xsl to %ProgramFiles(x86)%\microsoft office\office16\mml2omml.xsl.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\morph9.dll to %ProgramFiles(x86)%\microsoft office\office16\morph9.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msacc.olb to %ProgramFiles(x86)%\microsoft office\office16\msacc.olb.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msaccess.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\msaccess.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msaexp30.dll to %ProgramFiles(x86)%\microsoft office\office16\msaexp30.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msbarcode.dll to %ProgramFiles(x86)%\microsoft office\office16\msbarcode.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_en.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_en.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_es.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_es.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_fr.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7cm_fr.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7en.dll to %ProgramFiles(x86)%\microsoft office\office16\mscss7en.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7es.dll to %ProgramFiles(x86)%\microsoft office\office16\mscss7es.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msaccess.exe to %ProgramFiles(x86)%\microsoft office\office16\msaccess.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7fr.dll to %ProgramFiles(x86)%\microsoft office\office16\mscss7fr.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_es.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_es.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_fr.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_fr.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_en.dub to %ProgramFiles(x86)%\microsoft office\office16\mscss7wre_en.dub.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7.dll to %ProgramFiles(x86)%\microsoft office\office16\mset7.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7db.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7db.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7en.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7en.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7es.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7es.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7fr.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7fr.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7ge.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7ge.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7tk.dll to %ProgramFiles(x86)%\microsoft office\office16\mset7tk.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7jp.kic to %ProgramFiles(x86)%\microsoft office\office16\mset7jp.kic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mset7tkjp.dll to %ProgramFiles(x86)%\microsoft office\office16\mset7tkjp.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msfad.dll to %ProgramFiles(x86)%\microsoft office\office16\msfad.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msocf.dll to %ProgramFiles(x86)%\microsoft office\office16\msocf.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msocfuiutilitiesdll.dll to %ProgramFiles(x86)%\microsoft office\office16\msocfuiutilitiesdll.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mso0127.acl to %ProgramFiles(x86)%\microsoft office\office16\mso0127.acl.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msocr.dll to %ProgramFiles(x86)%\microsoft office\office16\msocr.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msoetwres.dll to %ProgramFiles(x86)%\microsoft office\office16\msoetwres.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msoev.exe to %ProgramFiles(x86)%\microsoft office\office16\msoev.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msohev.dll to %ProgramFiles(x86)%\microsoft office\office16\msohev.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msohevi.dll to %ProgramFiles(x86)%\microsoft office\office16\msohevi.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msohtmed.exe to %ProgramFiles(x86)%\microsoft office\office16\msohtmed.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msocrres.orp to %ProgramFiles(x86)%\microsoft office\office16\msocrres.orp.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msosb.dll to %ProgramFiles(x86)%\microsoft office\office16\msosb.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msosrec.exe to %ProgramFiles(x86)%\microsoft office\office16\msosrec.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msostyle.dll to %ProgramFiles(x86)%\microsoft office\office16\msostyle.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msosync.exe to %ProgramFiles(x86)%\microsoft office\office16\msosync.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msotd.exe to %ProgramFiles(x86)%\microsoft office\office16\msotd.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msotelemetry.dll to %ProgramFiles(x86)%\microsoft office\office16\msotelemetry.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msotdaddin.dll to %ProgramFiles(x86)%\microsoft office\office16\msotdaddin.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msoutilstat.etw.man to %ProgramFiles(x86)%\microsoft office\office16\msoutilstat.etw.man.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msouc.exe to %ProgramFiles(x86)%\microsoft office\office16\msouc.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msoutl.olb to %ProgramFiles(x86)%\microsoft office\office16\msoutl.olb.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msproof7.dll to %ProgramFiles(x86)%\microsoft office\office16\msproof7.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msppt.olb to %ProgramFiles(x86)%\microsoft office\office16\msppt.olb.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mspst32.dll to %ProgramFiles(x86)%\microsoft office\office16\mspst32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mspub.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\mspub.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mspub.tlb to %ProgramFiles(x86)%\microsoft office\office16\mspub.tlb.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mspub.exe to %ProgramFiles(x86)%\microsoft office\office16\mspub.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msqry32.exe to %ProgramFiles(x86)%\microsoft office\office16\msqry32.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msrtedit.dll to %ProgramFiles(x86)%\microsoft office\office16\msrtedit.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msword.olb to %ProgramFiles(x86)%\microsoft office\office16\msword.olb.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\msyubin7.dll to %ProgramFiles(x86)%\microsoft office\office16\msyubin7.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\muauth.cab to %ProgramFiles(x86)%\microsoft office\office16\muauth.cab.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mysl.ico to %ProgramFiles(x86)%\microsoft office\office16\mysl.ico.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\mszip.dic to %ProgramFiles(x86)%\microsoft office\office16\mszip.dic.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\name.dll to %ProgramFiles(x86)%\microsoft office\office16\name.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\namecontrolproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\namecontrolproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\namecontrolserver.exe to %ProgramFiles(x86)%\microsoft office\office16\namecontrolserver.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nativehostpollapp.xap to %ProgramFiles(x86)%\microsoft office\office16\nativehostpollapp.xap.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nativehostannotationapp.xap to %ProgramFiles(x86)%\microsoft office\office16\nativehostannotationapp.xap.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7lexicons0011.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7lexicons0011.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7data0011.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7data0011.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7models0009.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7models0009.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7models000a.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7models000a.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7models000c.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7models000c.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\npspwrap.dll to %ProgramFiles(x86)%\microsoft office\office16\npspwrap.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\nl7models0011.dll to %ProgramFiles(x86)%\microsoft office\office16\nl7models0011.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\oartodf.dll to %ProgramFiles(x86)%\microsoft office\office16\oartodf.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\oart.dll to %ProgramFiles(x86)%\microsoft office\office16\oart.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ochelper.dll to %ProgramFiles(x86)%\microsoft office\office16\ochelper.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocimport.dll to %ProgramFiles(x86)%\microsoft office\office16\ocimport.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocintldate.dll to %ProgramFiles(x86)%\microsoft office\office16\ocintldate.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocmsptls.dll to %ProgramFiles(x86)%\microsoft office\office16\ocmsptls.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocoffice.dll to %ProgramFiles(x86)%\microsoft office\office16\ocoffice.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocogl.dll to %ProgramFiles(x86)%\microsoft office\office16\ocogl.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocppvwintl.dll to %ProgramFiles(x86)%\microsoft office\office16\ocppvwintl.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocpubmgr.exe to %ProgramFiles(x86)%\microsoft office\office16\ocpubmgr.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocrec.dll to %ProgramFiles(x86)%\microsoft office\office16\ocrec.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocsaext.dll to %ProgramFiles(x86)%\microsoft office\office16\ocsaext.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\offrhd.dll to %ProgramFiles(x86)%\microsoft office\office16\offrhd.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ocpptview.dll to %ProgramFiles(x86)%\microsoft office\office16\ocpptview.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\olkfstub.dll to %ProgramFiles(x86)%\microsoft office\office16\olkfstub.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\oimg.dll to %ProgramFiles(x86)%\microsoft office\office16\oimg.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\olmapi32.dll to %ProgramFiles(x86)%\microsoft office\office16\olmapi32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\omml2mml.xsl to %ProgramFiles(x86)%\microsoft office\office16\omml2mml.xsl.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\omsmain.dll to %ProgramFiles(x86)%\microsoft office\office16\omsmain.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\omsxp32.dll to %ProgramFiles(x86)%\microsoft office\office16\omsxp32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onbttnielinkednotes.dll to %ProgramFiles(x86)%\microsoft office\office16\onbttnielinkednotes.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onbttnol.dll to %ProgramFiles(x86)%\microsoft office\office16\onbttnol.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onbttnppt.dll to %ProgramFiles(x86)%\microsoft office\office16\onbttnppt.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onbttnwd.dll to %ProgramFiles(x86)%\microsoft office\office16\onbttnwd.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onenote.exe to %ProgramFiles(x86)%\microsoft office\office16\onenote.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onenotem.exe to %ProgramFiles(x86)%\microsoft office\office16\onenotem.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onfilter.dll to %ProgramFiles(x86)%\microsoft office\office16\onfilter.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onlntcomlib.dll to %ProgramFiles(x86)%\microsoft office\office16\onlntcomlib.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onmain.dll to %ProgramFiles(x86)%\microsoft office\office16\onmain.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onpptaddin.dll to %ProgramFiles(x86)%\microsoft office\office16\onpptaddin.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onres.dll to %ProgramFiles(x86)%\microsoft office\office16\onres.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onbttnie.dll to %ProgramFiles(x86)%\microsoft office\office16\onbttnie.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\onwordaddin.dll to %ProgramFiles(x86)%\microsoft office\office16\onwordaddin.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\osf.dll to %ProgramFiles(x86)%\microsoft office\office16\osf.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\osfproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\osfproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\osfroamingproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\osfroamingproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\osfui.dll to %ProgramFiles(x86)%\microsoft office\office16\osfui.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\osfshared.dll to %ProgramFiles(x86)%\microsoft office\office16\osfshared.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ospp.vbs to %ProgramFiles(x86)%\microsoft office\office16\ospp.vbs.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ospprearm.exe to %ProgramFiles(x86)%\microsoft office\office16\ospprearm.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlctl.dll to %ProgramFiles(x86)%\microsoft office\office16\outlctl.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlfltr.dll to %ProgramFiles(x86)%\microsoft office\office16\outlfltr.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlmime.dll to %ProgramFiles(x86)%\microsoft office\office16\outlmime.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlook.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\outlook.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlph.dll to %ProgramFiles(x86)%\microsoft office\office16\outlph.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlrpc.dll to %ProgramFiles(x86)%\microsoft office\office16\outlrpc.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlvbs.dll to %ProgramFiles(x86)%\microsoft office\office16\outlvbs.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\outlook.exe to %ProgramFiles(x86)%\microsoft office\office16\outlook.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\owsclt.dll to %ProgramFiles(x86)%\microsoft office\office16\owsclt.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\pdfreflow.exe to %ProgramFiles(x86)%\microsoft office\office16\pdfreflow.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\peopledatahandler.dll to %ProgramFiles(x86)%\microsoft office\office16\peopledatahandler.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\owssupp.dll to %ProgramFiles(x86)%\microsoft office\office16\owssupp.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\powerpnt.exe.manifest to %ProgramFiles(x86)%\microsoft office\office16\powerpnt.exe.manifest.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\powerpnt.exe to %ProgramFiles(x86)%\microsoft office\office16\powerpnt.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ppresources.dll to %ProgramFiles(x86)%\microsoft office\office16\ppresources.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ppslax.dll to %ProgramFiles(x86)%\microsoft office\office16\ppslax.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ppcore.dll to %ProgramFiles(x86)%\microsoft office\office16\ppcore.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\pptico.exe to %ProgramFiles(x86)%\microsoft office\office16\pptico.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\propertymodelproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\propertymodelproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\propertymodel.dll to %ProgramFiles(x86)%\microsoft office\office16\propertymodel.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\prtf9.dll to %ProgramFiles(x86)%\microsoft office\office16\prtf9.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\psom.dll to %ProgramFiles(x86)%\microsoft office\office16\psom.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\protocolhandler.exe to %ProgramFiles(x86)%\microsoft office\office16\protocolhandler.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ptxt9.dll to %ProgramFiles(x86)%\microsoft office\office16\ptxt9.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\pstprx32.dll to %ProgramFiles(x86)%\microsoft office\office16\pstprx32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\pubconv.dll to %ProgramFiles(x86)%\microsoft office\office16\pubconv.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rdpqoemetrics.dll to %ProgramFiles(x86)%\microsoft office\office16\rdpqoemetrics.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\pubtrap.dll to %ProgramFiles(x86)%\microsoft office\office16\pubtrap.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\recall.dll to %ProgramFiles(x86)%\microsoft office\office16\recall.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\refedit.dll to %ProgramFiles(x86)%\microsoft office\office16\refedit.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\reminder.wav to %ProgramFiles(x86)%\microsoft office\office16\reminder.wav.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\resources.pri to %ProgramFiles(x86)%\microsoft office\office16\resources.pri.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmcodecs.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmcodecs.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rswop.icm to %ProgramFiles(x86)%\microsoft office\office16\rswop.icm.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmmvras.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmmvras.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmmediamanager.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmmediamanager.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmmvrcs.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmmvrcs.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmmvrhw.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmmvrhw.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmmvrsplitter.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmmvrsplitter.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmpal.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmpal.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmvc1decmft.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmvc1decmft.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\saext.dll to %ProgramFiles(x86)%\microsoft office\office16\saext.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\rtmpltfm.dll to %ProgramFiles(x86)%\microsoft office\office16\rtmpltfm.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\scdec.dll to %ProgramFiles(x86)%\microsoft office\office16\scdec.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\scanpst.exe to %ProgramFiles(x86)%\microsoft office\office16\scanpst.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\scnpst32.dll to %ProgramFiles(x86)%\microsoft office\office16\scnpst32.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\scnpst64.dll to %ProgramFiles(x86)%\microsoft office\office16\scnpst64.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\scnpst64c.dll to %ProgramFiles(x86)%\microsoft office\office16\scnpst64c.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\selfcert.exe to %ProgramFiles(x86)%\microsoft office\office16\selfcert.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\sendto.dll to %ProgramFiles(x86)%\microsoft office\office16\sendto.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\setlang.exe to %ProgramFiles(x86)%\microsoft office\office16\setlang.exe.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\sharepointprovider.dll to %ProgramFiles(x86)%\microsoft office\office16\sharepointprovider.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\signalrclient.dll to %ProgramFiles(x86)%\microsoft office\office16\signalrclient.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\seqchk10.dll to %ProgramFiles(x86)%\microsoft office\office16\seqchk10.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\soa.dll to %ProgramFiles(x86)%\microsoft office\office16\soa.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\socialprovider.dll to %ProgramFiles(x86)%\microsoft office\office16\socialprovider.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\socialconnector.dll to %ProgramFiles(x86)%\microsoft office\office16\socialconnector.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ssscreenvvs.dll to %ProgramFiles(x86)%\microsoft office\office16\ssscreenvvs.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\stslist.dll to %ProgramFiles(x86)%\microsoft office\office16\stslist.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\stscopy.dll to %ProgramFiles(x86)%\microsoft office\office16\stscopy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\stsupld.dll to %ProgramFiles(x86)%\microsoft office\office16\stsupld.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\tec.dll to %ProgramFiles(x86)%\microsoft office\office16\tec.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\tecproxy.dll to %ProgramFiles(x86)%\microsoft office\office16\tecproxy.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\tellmeruntime.dll to %ProgramFiles(x86)%\microsoft office\office16\tellmeruntime.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\taxonomycontrol.dll to %ProgramFiles(x86)%\microsoft office\office16\taxonomycontrol.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\tmpod.dll to %ProgramFiles(x86)%\microsoft office\office16\tmpod.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\textconversionmodule.dll to %ProgramFiles(x86)%\microsoft office\office16\textconversionmodule.dll.bitco1n
from %ProgramFiles(x86)%\microsoft office\office16\ucaddin.dll to %ProgramFiles(x86)%\microsoft office\office16\ucaddin.dll.bitco1n

Modifies the following files

%ProgramFiles%\desktop.ini
%ProgramFiles(x86)%\desktop.ini
C:\users\desktop.ini
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\dashborder_192.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\sdksampleprivdeveloper.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\february_catalogue__2015.doc
%ProgramFiles%\mozilla firefox\accessible.tlb
%ProgramFiles%\mozilla firefox\application.ini
%ProgramFiles%\mozilla firefox\crashreporter.ini
%ProgramFiles%\mozilla firefox\defaultagent.ini
%ProgramFiles%\mozilla firefox\defaultagent_localized.ini
%ProgramFiles%\mozilla firefox\dependentlibs.list
%ProgramFiles%\mozilla firefox\firefox.exe.sig
%ProgramFiles%\mozilla firefox\install.log
%ProgramFiles%\mozilla firefox\installation_telemetry.json
%ProgramFiles%\mozilla firefox\locale.ini
%ProgramFiles%\mozilla firefox\omni.ja
%ProgramFiles%\mozilla firefox\platform.ini
%ProgramFiles%\mozilla firefox\precomplete
%ProgramFiles%\mozilla firefox\plugin-container.exe.sig
%ProgramFiles%\mozilla firefox\removed-files

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'<LOCALNET>..48.0':445
'<LOCALNET>..48.1':445
'<LOCALNET>..48.2':445
'<LOCALNET>..48.3':445
'<LOCALNET>..48.4':445
'<LOCALNET>..48.5':445
'<LOCALNET>..48.6':445
'<LOCALNET>..48.7':445
'<LOCALNET>..48.8':445
'<LOCALNET>..48.9':445
'<LOCALNET>..48.10':445
'<LOCALNET>..48.11':445
'<LOCALNET>..48.12':445
'<LOCALNET>..48.13':445
'<LOCALNET>..48.14':445
'<LOCALNET>..48.15':445
'<LOCALNET>..48.16':445
'<LOCALNET>..48.17':445
'<LOCALNET>..48.18':445
'<LOCALNET>..48.19':445
'<LOCALNET>..48.20':445
'<LOCALNET>..48.21':445
'<LOCALNET>..48.22':445
'<LOCALNET>..48.23':445
'<LOCALNET>..48.24':445
'<LOCALNET>..48.25':445
'<LOCALNET>..48.26':445
'<LOCALNET>..48.27':445
'<LOCALNET>..48.28':445
'<LOCALNET>..48.29':445
'<LOCALNET>..48.30':445
'<LOCALNET>..48.31':445
'<LOCALNET>..48.32':445
'<LOCALNET>..48.33':445
'<LOCALNET>..48.34':445
'<LOCALNET>..48.35':445
'<LOCALNET>..48.36':445
'<LOCALNET>..48.37':445
'<LOCALNET>..48.38':445
'<LOCALNET>..48.39':445
'<LOCALNET>..48.40':445
'<LOCALNET>..48.41':445
'<LOCALNET>..48.42':445
'<LOCALNET>..48.43':445
'<LOCALNET>..48.44':445
'<LOCALNET>..48.45':445
'<LOCALNET>..48.46':445
'<LOCALNET>..48.47':445
'<LOCALNET>..48.48':445
'<LOCALNET>..48.49':445
'<LOCALNET>..48.50':445
'<LOCALNET>..48.51':445
'<LOCALNET>..48.52':445
'<LOCALNET>..48.53':445
'<LOCALNET>..48.54':445
'<LOCALNET>..48.55':445
'<LOCALNET>..48.56':445
'<LOCALNET>..48.57':445
'<LOCALNET>..48.58':445
'<LOCALNET>..48.59':445
'<LOCALNET>..48.60':445
'<LOCALNET>..48.61':445
'<LOCALNET>..48.62':445
'<LOCALNET>..48.63':445
'<LOCALNET>..48.64':445
'<LOCALNET>..48.65':445
'<LOCALNET>..48.66':445
'<LOCALNET>..48.67':445
'<LOCALNET>..48.68':445
'<LOCALNET>..48.69':445
'<LOCALNET>..48.70':445
'<LOCALNET>..48.71':445
'<LOCALNET>..48.72':445
'<LOCALNET>..48.73':445
'<LOCALNET>..48.74':445
'<LOCALNET>..48.75':445
'<LOCALNET>..48.76':445
'<LOCALNET>..48.77':445
'<LOCALNET>..48.78':445
'<LOCALNET>..48.79':445
'<LOCALNET>..48.80':445
'<LOCALNET>..48.81':445
'<LOCALNET>..48.82':445
'<LOCALNET>..48.83':445
'<LOCALNET>..48.84':445
'<LOCALNET>..48.85':445
'<LOCALNET>..48.86':445
'<LOCALNET>..48.87':445
'<LOCALNET>..48.88':445
'<LOCALNET>..48.89':445
'<LOCALNET>..48.90':445
'<LOCALNET>..48.91':445
'<LOCALNET>..48.92':445
'<LOCALNET>..48.93':445
'<LOCALNET>..48.94':445
'<LOCALNET>..48.95':445
'<LOCALNET>..48.96':445
'<LOCALNET>..48.97':445
'<LOCALNET>..48.98':445
'<LOCALNET>..48.99':445
'<LOCALNET>..48.100':445
'<LOCALNET>..48.101':445
'<LOCALNET>..48.102':445
'<LOCALNET>..48.103':445
'<LOCALNET>..48.104':445
'<LOCALNET>..48.105':445
'<LOCALNET>..48.106':445
'<LOCALNET>..48.107':445
'<LOCALNET>..48.108':445
'<LOCALNET>..48.109':445
'<LOCALNET>..48.110':445
'<LOCALNET>..48.111':445
'<LOCALNET>..48.112':445
'<LOCALNET>..48.113':445
'<LOCALNET>..48.114':445
'<LOCALNET>..48.115':445
'<LOCALNET>..48.116':445
'<LOCALNET>..48.117':445
'<LOCALNET>..48.118':445
'<LOCALNET>..48.119':445
'<LOCALNET>..48.120':445
'<LOCALNET>..48.121':445
'<LOCALNET>..48.122':445
'<LOCALNET>..48.123':445
'<LOCALNET>..48.124':445
'<LOCALNET>..48.125':445
'<LOCALNET>..48.126':445
'<LOCALNET>..48.127':445
'<LOCALNET>..48.128':445
'<LOCALNET>..48.129':445
'<LOCALNET>..48.130':445
'<LOCALNET>..48.131':445
'<LOCALNET>..48.132':445
'<LOCALNET>..48.133':445
'<LOCALNET>..48.134':445
'<LOCALNET>..48.135':445
'<LOCALNET>..48.136':445
'<LOCALNET>..48.137':445
'<LOCALNET>..48.138':445
'<LOCALNET>..48.139':445
'<LOCALNET>..48.140':445
'<LOCALNET>..48.141':445
'<LOCALNET>..48.142':445
'<LOCALNET>..48.143':445
'<LOCALNET>..48.144':445
'<LOCALNET>..48.145':445
'<LOCALNET>..48.146':445
'<LOCALNET>..48.147':445
'<LOCALNET>..48.148':445
'<LOCALNET>..48.149':445
'<LOCALNET>..48.150':445
'<LOCALNET>..48.151':445
'<LOCALNET>..48.152':445
'<LOCALNET>..48.153':445
'<LOCALNET>..48.154':445
'<LOCALNET>..48.155':445
'<LOCALNET>..48.156':445
'<LOCALNET>..48.157':445
'<LOCALNET>..48.158':445
'<LOCALNET>..48.159':445
'<LOCALNET>..48.160':445
'<LOCALNET>..48.161':445
'<LOCALNET>..48.162':445
'<LOCALNET>..48.163':445
'<LOCALNET>..48.164':445
'<LOCALNET>..48.165':445
'<LOCALNET>..48.166':445
'<LOCALNET>..48.167':445
'<LOCALNET>..48.168':445
'<LOCALNET>..48.169':445
'<LOCALNET>..48.170':445
'<LOCALNET>..48.171':445
'<LOCALNET>..48.172':445
'<LOCALNET>..48.173':445
'<LOCALNET>..48.174':445
'<LOCALNET>..48.175':445
'<LOCALNET>..48.176':445
'<LOCALNET>..48.177':445
'<LOCALNET>..48.178':445
'<LOCALNET>..48.179':445
'<LOCALNET>..48.180':445
'<LOCALNET>..48.181':445
'<LOCALNET>..48.182':445
'<LOCALNET>..48.183':445
'<LOCALNET>..48.184':445
'<LOCALNET>..48.185':445
'<LOCALNET>..48.186':445
'<LOCALNET>..48.187':445
'<LOCALNET>..48.188':445
'<LOCALNET>..48.189':445
'<LOCALNET>..48.190':445
'<LOCALNET>..48.191':445
'<LOCALNET>..48.192':445
'<LOCALNET>..48.193':445
'<LOCALNET>..48.194':445
'<LOCALNET>..48.195':445
'<LOCALNET>..48.196':445
'<LOCALNET>..48.197':445
'<LOCALNET>..48.198':445
'<LOCALNET>..48.199':445
'<LOCALNET>..48.200':445
'<LOCALNET>..48.201':445
'<LOCALNET>..48.202':445
'<LOCALNET>..48.203':445
'<LOCALNET>..48.204':445
'<LOCALNET>..48.205':445
'<LOCALNET>..48.206':445
'<LOCALNET>..48.207':445
'<LOCALNET>..48.208':445
'<LOCALNET>..48.209':445
'<LOCALNET>..48.210':445
'<LOCALNET>..48.211':445
'<LOCALNET>..48.212':445
'<LOCALNET>..48.213':445
'<LOCALNET>..48.214':445
'<LOCALNET>..48.215':445
'<LOCALNET>..48.216':445
'<LOCALNET>..48.217':445
'<LOCALNET>..48.218':445
'<LOCALNET>..48.219':445
'<LOCALNET>..48.220':445
'<LOCALNET>..48.221':445
'<LOCALNET>..48.222':445
'<LOCALNET>..48.223':445
'<LOCALNET>..48.224':445
'<LOCALNET>..48.225':445
'<LOCALNET>..48.226':445
'<LOCALNET>..48.227':445
'<LOCALNET>..48.228':445
'<LOCALNET>..48.229':445
'<LOCALNET>..48.230':445
'<LOCALNET>..48.231':445
'<LOCALNET>..48.232':445
'<LOCALNET>..48.233':445
'<LOCALNET>..48.234':445
'<LOCALNET>..48.235':445
'<LOCALNET>..48.236':445
'<LOCALNET>..48.237':445
'<LOCALNET>..48.238':445
'<LOCALNET>..48.239':445
'<LOCALNET>..48.240':445
'<LOCALNET>..48.241':445
'<LOCALNET>..48.242':445
'<LOCALNET>..48.243':445
'<LOCALNET>..48.244':445
'<LOCALNET>..48.245':445
'<LOCALNET>..48.246':445
'<LOCALNET>..48.247':445
'<LOCALNET>..48.248':445
'<LOCALNET>..48.249':445
'<LOCALNET>..48.250':445
'<LOCALNET>..48.251':445
'<LOCALNET>..48.252':445
'<LOCALNET>..48.253':445
'<LOCALNET>..48.254':445

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial