La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Exploit.Siggen2.9421

Aggiunto al database dei virus Dr.Web: 2020-07-22

La descrizione è stata aggiunta:

Technical Information

Malicious functions
Executes the following (exploit)
  • '%WINDIR%\regedit.exe' /s %WINDIR%\winword.reg
Modifies file system
Creates the following files
  • %WINDIR%\winword.reg
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_korean.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_italian.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_greek.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_german.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_french.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_english.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_danish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_polish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\skins\skins_readme.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_czech.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_italian.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_italian_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_hungarian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_german_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_french_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_finnish_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_english_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_dutch_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_danish_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_brazilian_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_thai.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_russian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_french.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_english.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_danish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_czech.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_thai.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_greek.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_russian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_polish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_korean.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_italian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_greek.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_norwegian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\steam\cached\steamui_postlogon_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_korean.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_german.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_thai.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_russian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_polish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\resource\vgui_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_russian.txt.doc
  • %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu2.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_default.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[3].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@scorecardresearch[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@onlinestores.metaservices.microsoft[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@msn[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@msn[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@mozilla[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@demdex[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@c.msn[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@c.msn[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@c.bing[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@c.bing[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@bing[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@www.bing[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@sportiv[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@adobe[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@adnxs[1].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@246059135.log.optimizely[1].txt.doc
  • %APPDATA%\mail.ru\agent\mra\smiles\skin.txt.doc
  • %APPDATA%\icqm\icq\smiles\skin.txt.doc
  • %APPDATA%\icq-profile\update\ver.txt.doc
  • %TEMP%\webinstaller\qnzuposrqouvfisa\data.txt.doc
  • %TEMP%\microsoft .net framework 4.5.2 setup_20151216_212237215-msi_netfx_full_gdr_x64.msi.txt.doc
  • %TEMP%\fxsapidebuglogfile.txt.doc
  • %TEMP%\dd_wcf_ca_smci_20151217_052908_497.txt.doc
  • %TEMP%\dd_wcf_ca_smci_20151217_052858_840.txt.doc
  • %TEMP%\dd_setuputility.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@bing[1].txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_default.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@www.msn[2].txt.doc
  • %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu1.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\68ab67ca7da73301b744caf070e41400\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109f100c0400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109f100a0c00100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109f10090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109e60090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109b10090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109ab0090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109a10090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109810090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109610090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109510090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109340090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109340000000100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\000041091a0090400100000000f01fec\cachesize.txt.doc
  • %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\cachesize.txt.doc
  • %WINDIR%\ehome\en-us\playready_eula_oem.txt.doc
  • %WINDIR%\ehome\en-us\playready_eula.txt.doc
  • %WINDIR%\ehome\en-us\epgtos.txt.doc
  • %WINDIR%\ntbtlog.txt.doc
  • %APPDATA%\telegram desktop\log.txt.doc
  • %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.doc
  • %APPDATA%\mra\update\ver.txt.doc
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt.doc
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@yandex[2].txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@yandex[1].txt.doc
  • %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@adobe[3].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\f[3].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\f[2].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\f[1].txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_danish.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_korean.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_italian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_greek.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_german.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_french.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_english.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_czech.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_ukrainian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_turkish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_swedish_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_spanish_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_russian_default.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_romanian_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_portuguese_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\keyboards\layout_polish_dualtouch.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_german.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_polish.txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\c4-5ab719-91cdfbc1[1].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bzjx5bke\connect[1].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\0u8lpyu9\f[2].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\0u8lpyu9\f[1].txt.doc
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\0u8lpyu9\connect[1].txt.doc
  • %LOCALAPPDATA%\microsoft\internet explorer\brndlog.txt.doc
  • %LOCALAPPDATA%\google\chrome\user data\chrome_shutdown_ms.txt.doc
  • C:\users\all users\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt.doc
  • C:\totalcmd\size!.txt.doc
  • C:\totalcmd\keyboard.txt.doc
  • C:\totalcmd\history.txt.doc
  • %PROGRAMDATA%\microsoft\windows\wer\reportqueue\appcrash_autokms.exe_efd62e343880604c4145a2e4462f8c532327bc70_cab_0841821b\wer5c82.tmp.appcompat.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextserviceyi.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicedayi.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicearray.txt.doc
  • %ProgramFiles(x86)%\windows nt\tabletextservice\tabletextserviceamharic.txt.doc
  • %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.txt.doc
  • %ProgramFiles(x86)%\winamp\whatsnew.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_thai.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\tenfoot\resource\localization\tenfoot_schinese.txt.doc
  • %APPDATA%\microsoft\windows\cookies\user@www.msn[3].txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_french.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_dutch.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_us\excluded.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_us\added.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_gb\excluded.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_gb\added.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_ca\excluded.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_ca\added.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_us\readme_en_us.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\wordnet_license.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\readme_en_gb.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\readme.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\license.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\changelog.txt.doc
  • %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt.doc
  • %CommonProgramFiles(x86)%\microsoft shared\office10\ctryinfo.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_ca\readme_en_ca.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_us\list.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_gb\list.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_ca\list.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\adobe\products.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_us_posix.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_us.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_gb_euro.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_gb.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_ca.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\affdescription.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.doc
  • %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_russian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_polish.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_korean.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_italian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_greek.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_german.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_french.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_english.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_danish.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_czech.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_brazilian.txt.doc
  • %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright.txt.doc
  • %ProgramFiles(x86)%\qip 2012\smilies\qip smilies\copyright(eng).txt.doc
  • %ProgramFiles(x86)%\opera\29.0.1795.47\resources\license.txt.doc
  • %ProgramFiles(x86)%\mirc\versions.txt.doc
  • %ProgramFiles(x86)%\mirc\readme.txt.doc
  • %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\redist.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt.doc
  • %CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_ca\readme_th_en_ca_v2.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt.doc
  • C:\far2\plugins\ftp\ftpcmds.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceamharic.txt.doc
  • %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.doc
  • %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.doc
  • %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.doc
  • %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.doc
  • %ProgramFiles%\java\jre1.8.0_45\readme.txt.doc
  • %ProgramFiles%\firefox\readme.txt.doc
  • %CommonProgramFiles%\microsoft shared\smart tag\metconv.txt.doc
  • C:\far2\plugins\ftp\notes_rus.txt.doc
  • C:\far2\plugins\ftp\notes.txt.doc
  • C:\far2\plugins\ftp\ftpcmds_rus.txt.doc
  • C:\far2\documentation\rus\techinfo.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.doc
  • C:\far2\documentation\rus\plugins_review.txt.doc
  • C:\far2\documentation\rus\plugins_install.txt.doc
  • C:\far2\documentation\rus\far_faq.txt.doc
  • C:\far2\documentation\rus\bug_report.txt.doc
  • C:\far2\documentation\rus\arc_support.txt.doc
  • C:\far2\documentation\eng\techinfo.txt.doc
  • C:\far2\documentation\eng\plugins_review.txt.doc
  • C:\far2\documentation\eng\plugins_install.txt.doc
  • C:\far2\documentation\eng\far_faq.txt.doc
  • C:\far2\documentation\eng\bug_report.txt.doc
  • C:\far2\documentation\eng\arc_support.txt.doc
  • C:\far2\addons\readme.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_spanish.txt.doc
  • %ProgramFiles(x86)%\microsoft.net\sdk\v1.1\license.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.doc
  • %ProgramFiles%\winrar\license.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\enutxt.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\signhere.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\dynamic.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\defaultid.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\adobeid.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.doc
  • %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.doc
  • %ProgramFiles%\winrar\whatsnew.txt.doc
  • %ProgramFiles%\winrar\readme.txt.doc
  • %ProgramFiles%\winrar\rar.txt.doc
  • %ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_english.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_thai.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\remoteui\static\libs\license.txt.doc
  • %ProgramFiles(x86)%\steam\public\url_list.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_thai.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_russian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_czech.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_polish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_korean.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_italian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_greek.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_german.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_french.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_english.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_postlogon_greek.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_danish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_danish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_czech.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_thai.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_russian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_polish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_korean.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_italian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_greek.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_german.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_french.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\resource\overlay_english.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_danish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_czech.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_bulgarian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\logs\content_log.txt.doc
  • %ProgramFiles(x86)%\steam\logs\connection_log.txt.doc
  • %ProgramFiles(x86)%\steam\logs\configstore_log.txt.doc
  • %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\friends\trackerui_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\resource\platform_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamui_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_ukrainian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_turkish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_thai.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_tchinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_swedish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_spanish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_schinese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_russian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_romanian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_portuguese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_polish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_norwegian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_korean.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_japanese.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_italian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_hungarian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_greek.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_german.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_french.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_finnish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_english.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_dutch.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_danish.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_czech.txt.doc
  • %ProgramFiles(x86)%\steam\public\steamclean_brazilian.txt.doc
  • %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.doc
  • %WINDIR%\microsoft.net\framework\v4.0.30319\thirdpartynotices.txt.doc
Deletes the following files
  • %WINDIR%\ntbtlog.txt
  • %WINDIR%\microsoft.net\framework\v4.0.30319\thirdpartynotices.txt
  • %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu2.txt
  • %WINDIR%\microsoft.net\framework\v1.1.4322\1033\setupenu1.txt
  • %WINDIR%\installer\$patchcache$\managed\68ab67ca7da73301b744caf070e41400\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109f100c0400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109f100a0c00100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109f10090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109e60090400100000000f01fec\cachesize.txt
  • %WINDIR%\microsoft.net\framework64\v4.0.30319\thirdpartynotices.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109b10090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109a10090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109810090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109610090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109510090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109340090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109340000000100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\000041091a0090400100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\cachesize.txt
  • %WINDIR%\installer\$patchcache$\managed\00004109ab0090400100000000f01fec\cachesize.txt
  • <SYSTEM32>\catroot2\dberr.txt
Miscellaneous
Searches for the following windows
  • ClassName: 'RegEdit_RegEdit' WindowName: ''
Creates and executes the following
  • '%WINDIR%\regedit.exe' /s %WINDIR%\winword.reg' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android