Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RWipeD' = '%ProgramFiles%\R-Wipe&Clean\RWipeD.exe'
- '<Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe'
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKLM>\Software\Ghisler\Total Commander]
- [<HKLM>\SOFTWARE\Microsoft\Windows Mail]
- [<HKLM>\SOFTWARE\Microsoft\Windows Live Mail]
- [<HKLM>\SOFTWARE\CyberLink\PowerDVD]
- [<HKLM>\SOFTWARE\Microsoft\MSNMessenger]
- [<HKLM>\SOFTWARE\FileZilla Client]
- [<HKLM>\SOFTWARE\FileZilla]
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\192.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\191.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\194.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\193.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\190.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\187.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\186.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\189.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\188.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\195.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\202.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\201.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\204.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\203.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\200.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\197.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\196.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\199.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\198.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\185.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\172.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\171.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\174.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\173.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\170.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\167.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\166.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\169.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\168.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\175.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\182.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\181.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\184.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\183.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\180.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\177.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\176.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\179.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\178.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\205.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\232.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\231.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\234.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\233.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\230.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\227.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\226.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\229.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\228.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\235.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\242.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\241.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\244.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\243.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\240.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\237.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\236.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\239.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\238.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\225.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\212.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\211.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\214.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\213.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\210.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\207.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\206.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\209.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\208.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\215.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\222.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\221.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\224.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\223.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\220.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\217.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\216.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\219.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\218.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\165.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\112.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\111.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\114.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\113.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\110.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\107.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\106.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\109.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\108.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\115.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\122.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\121.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\124.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\123.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\120.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\117.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\116.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\119.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\118.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\105.bmp
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh64.dll_0x7daae33e91cb668e345451ff9a26971d.2.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh32.dll_0x5232fe4fc9c6815e3fdd2029ee86e272.2.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipeRun.exe_0xc63beeaa82a6cba1a0c35ff6c446b341.1.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipe.dll_0xebff245d093976099c0cfa0510d76d5e.2.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub64.dll_0xd6c66b635df02c1d5ba5d441bac889e4.2.manifest.__tmp__
- <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe.__tmp__
- <Current directory>\R-Wipe&Clean\xsandbox.bin.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub32.dll_0xeb17464cf8fbdfac11e84e2e0fc4463c.2.manifest.__tmp__
- <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\R-TT.R-WipeAndClean.R-Wipe.manifest.__tmp__
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\102.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\101.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\104.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\103.bmp
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\x86_RWipeRun@1.0.0.0.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\R-TT.R-WipeAndClean.RWipeSh.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\RWipeRun.manifest.__tmp__
- %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0.manifest.__tmp__
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\125.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\152.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\151.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\154.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\153.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\150.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\147.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\146.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\149.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\148.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\155.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\162.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\161.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\164.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\163.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\160.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\157.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\156.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\159.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\158.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\145.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\132.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\131.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\134.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\133.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\130.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\127.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\126.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\129.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\128.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\135.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\142.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\141.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\144.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\143.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\140.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\137.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\136.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\139.bmp
- <Current directory>\R-Wipe&Clean\roaming\modified\@APPDATA@\R-Wipe&Clean\icons\138.bmp
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\R-TT.R-WipeAndClean.R-Wipe.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.R-Wipe@1.0.0.0\R-TT.R-WipeAndClean.R-Wipe.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipeRun.exe_0xc63beeaa82a6cba1a0c35ff6c446b341.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipeRun.exe_0xc63beeaa82a6cba1a0c35ff6c446b341.1.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\R-TT.R-WipeAndClean.RWipeSh.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\R-TT.R-WipeAndClean.RWipeSh.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\x86_RWipeRun@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\x86_RWipeRun@1.0.0.0.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\RWipeRun.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\x86_RWipeRun@1.0.0.0\RWipeRun.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0\X86_R-TT.R-WipeAndClean.RWipeSh@1.0.0.0.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipe.dll_0xebff245d093976099c0cfa0510d76d5e.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RWipe.dll_0xebff245d093976099c0cfa0510d76d5e.2.manifest
- from <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe.manifest.__tmp__ to <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe.manifest
- from <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe.__tmp__ to <Current directory>\R-Wipe&Clean\local\stubexe\0x68B8740289246610\RWipeRun.exe
- from <Current directory>\R-Wipe&Clean\xsandbox.bin.__tmp__ to <Current directory>\R-Wipe&Clean\xsandbox.bin
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub32.dll_0xeb17464cf8fbdfac11e84e2e0fc4463c.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub32.dll_0xeb17464cf8fbdfac11e84e2e0fc4463c.2.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh64.dll_0x7daae33e91cb668e345451ff9a26971d.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh64.dll_0x7daae33e91cb668e345451ff9a26971d.2.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh32.dll_0x5232fe4fc9c6815e3fdd2029ee86e272.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcSh32.dll_0x5232fe4fc9c6815e3fdd2029ee86e272.2.manifest
- from %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub64.dll_0xd6c66b635df02c1d5ba5d441bac889e4.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xD3BC0E6DC1A38408\sxs\Manifests\RwcPub64.dll_0xd6c66b635df02c1d5ba5d441bac889e4.2.manifest
- 'st###.spoon.net':443
- DNS ASK st###.spoon.net
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'CRWipeCleanMainFrame' WindowName: 'R-Wipe&Clean - EVALUATION VERSION'
- ClassName: 'RWipeDaemonWndClass' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '#32770' WindowName: 'Deleting and wiping...'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'CRWipeCleanMainFrame' WindowName: 'R-Wipe&Clean'
- ClassName: '#32770' WindowName: 'Wiping...'